last executing test programs: 9m25.962568004s ago: executing program 0 (id=1026): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff, @void, @value}, 0x94) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) setrlimit(0x40000000000008, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x7fffffff}) 9m25.718527028s ago: executing program 0 (id=1027): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x6}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) 9m25.465333091s ago: executing program 0 (id=1028): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) r0 = memfd_secret(0x0) cachestat(r0, &(0x7f0000000000)={0x2, 0x7fff}, &(0x7f0000000040), 0x0) 9m25.362018893s ago: executing program 0 (id=1030): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0xfffffffe, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socket(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, @perf_bp={0x0, 0xc}, 0x115428, 0x0, 0x0, 0x7, 0x5f4b, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5a023a172225019b}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800) socket$pppl2tp(0x18, 0x1, 0x1) ptrace$getregset(0x4204, r4, 0x200, 0x0) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 9m24.761633902s ago: executing program 0 (id=1036): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32, @ANYBLOB="487000001872070008000a000e0a"], 0x28}}, 0x400c110) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x40, 0xe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_bp={&(0x7f0000000000), 0x3}, 0x1100, 0x9, 0x3a65, 0x9, 0x0, 0x8, 0xe, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x8) unshare(0x20060400) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="ea4ccdd7", 0x4}], 0x1, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x48e0) ioctl$sock_inet6_tcp_SIOCOUTQ(r5, 0x5411, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x8}, 0x18) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r8, 0xffffffffffffffff, 0x200000000000000) 9m23.54648829s ago: executing program 0 (id=1047): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0xfffffffe, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socket(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, @perf_bp={0x0, 0xc}, 0x115428, 0x0, 0x0, 0x7, 0x5f4b, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5a023a172225019b}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800) 9m23.54618007s ago: executing program 32 (id=1047): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0xfffffffe, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socket(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, @perf_bp={0x0, 0xc}, 0x115428, 0x0, 0x0, 0x7, 0x5f4b, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5a023a172225019b}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800) 8m31.107527302s ago: executing program 3 (id=1113): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001a00000a8500000007000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) 8m31.055368613s ago: executing program 3 (id=1115): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) socket$inet6(0xa, 0x817, 0x80000001) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="000000000000003299b8f276dc75584a8d87d907005858367d61f49e1639a48f614a54a8192c2876b7f843cd3a3c07288fa0f1e28983b5cdc2e29b6e", 0x3c, 0xffffffffffffffff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000400)={0x0, 0xa, 0x8001}) syz_emit_ethernet(0x1162, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xfffffffc, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x5, 0x3, &(0x7f00000014c0)=ANY=[@ANYRESHEX], &(0x7f0000001480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac020000060a0b040000000000000000020000003c020480380201800a0001006d6174636800000028020280080002400000000114020300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbad362baa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c8d5ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f08000100627066000900010073797a30000000000900020073797a3200000000440005800800024000000002080001"], 0x2d4}, 0x1, 0x0, 0x0, 0x40800}, 0x4048010) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) 8m30.927110725s ago: executing program 3 (id=1118): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 8m29.27974007s ago: executing program 3 (id=1123): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0xfffffffe, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r4 = socket(0x10, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, @perf_bp={0x0, 0xc}, 0x115428, 0x0, 0x0, 0x7, 0x5f4b, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5a023a172225019b}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800) socket$pppl2tp(0x18, 0x1, 0x1) ptrace$getregset(0x4204, r6, 0x200, 0x0) r9 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r9, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) write$binfmt_script(r5, &(0x7f0000000500)={'#! ', './file0'}, 0xb) close_range(r4, r5, 0x0) 8m28.420012333s ago: executing program 3 (id=1131): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xf6c447fee59251f4}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) close(r1) 8m24.969875565s ago: executing program 3 (id=1166): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32, @ANYBLOB="487000001872070008000a000e0a"], 0x28}}, 0x400c110) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x8, 0xfe, 0x3, 0xe3}]}) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 8m24.968972525s ago: executing program 33 (id=1166): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32, @ANYBLOB="487000001872070008000a000e0a"], 0x28}}, 0x400c110) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x8, 0xfe, 0x3, 0xe3}]}) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 8m13.726274395s ago: executing program 5 (id=1348): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) socket$inet6(0xa, 0x817, 0x80000001) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="000000000000003299b8f276dc75584a8d87d907005858367d61f49e1639a48f614a54a8192c2876b7f843cd3a3c07288fa0f1e28983b5cdc2e29b6e", 0x3c, 0xffffffffffffffff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000400)={0x0, 0xa, 0x8001}) syz_emit_ethernet(0x1162, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xfffffffc, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x5, 0x3, &(0x7f00000014c0)=ANY=[@ANYRESHEX], &(0x7f0000001480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}, 0x1, 0x0, 0x0, 0x40800}, 0x4048010) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) 8m13.696776805s ago: executing program 5 (id=1349): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x113a0, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x13, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setlease(r2, 0x400, 0x300000000000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a001811000040000000000000005679aece1fd17f0721ed61f9290000000000a3c201a922f7f85d00", @ANYRES32=r1, @ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$tipc(r7, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) unshare(0x22020600) ioperm(0x3ff, 0x1, 0x2) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000007dc0), 0x40, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r9, r8}, 0xc) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r11}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 8m13.549385997s ago: executing program 5 (id=1352): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x5, 0xe7, 0x1, 0xd, 0x0, 0x48c, 0x8000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0xe}, 0x2105, 0x1, 0x4b37, 0x5, 0x4, 0x2e, 0x0, 0x0, 0x4, 0x0, 0xc929}, r0, 0x4, 0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x6}, 0x18) lsm_get_self_attr(0x67, &(0x7f0000000380)={0x0, 0x0, 0x99, 0x79, ""/121}, &(0x7f0000000080)=0x99, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000340)={@rand_addr, @remote, 0x0}, &(0x7f0000000a80)=0xc) sendmsg$nl_route(r5, &(0x7f0000000b40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=@RTM_GETMDB={0x18, 0x56, 0x2, 0x70bd25, 0x25dfdbfd, {0x7, r6}, ["", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x200080d4}, 0x4008001) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x10, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x7, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80003, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000300)=ANY=[@ANYBLOB]) ioperm(0x2b, 0xa9, 0x3) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') r11 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r11, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r11, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x511, &(0x7f0000000540)="$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") rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000000100)='./file0/file0\x00') close_range(r10, 0xffffffffffffffff, 0x0) 8m13.3758162s ago: executing program 5 (id=1356): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0xa, 0x65ef, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x80, 0x700, 0x0, 0x5}}) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x4140045e}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MASK={0x8, 0x6, 0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0xbc4b}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0xc010) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='mm_page_alloc\x00', r6}, 0x18) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e000100776972656775617264"], 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000340)=ANY=[], 0x1, 0x2a8, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mount(&(0x7f0000000040)=@sg0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='ramfs\x00', 0x200c04, &(0x7f0000000200)='\\!]-.!]\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000001100)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 8m13.105088374s ago: executing program 5 (id=1362): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd231, @void, @value}, 0x94) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) finit_module(0xffffffffffffffff, 0x0, 0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {0x0}], 0x2}, 0x9e}], 0x2, 0x40000030, 0x0) 8m12.784266149s ago: executing program 5 (id=1368): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x100000000000}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000000), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) lsm_get_self_attr(0x69, &(0x7f0000000340)={0x0, 0x0, 0xdd, 0xbd, ""/189}, &(0x7f00000004c0)=0xdd, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0001}]}) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r6, @ANYRES32=0x0, @ANYBLOB="000000000000000000f48943090b0000000800000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r8, 0x289e0cb5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r2}, 0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) 8m12.749528059s ago: executing program 34 (id=1368): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x100000000000}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000000), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) lsm_get_self_attr(0x69, &(0x7f0000000340)={0x0, 0x0, 0xdd, 0xbd, ""/189}, &(0x7f00000004c0)=0xdd, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0001}]}) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r6, @ANYRES32=0x0, @ANYBLOB="000000000000000000f48943090b0000000800000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r8, 0x289e0cb5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r2}, 0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) 7m44.948082429s ago: executing program 2 (id=1841): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000006403000000000000000000ffffffffff45"], 0x48) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xe1002) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 7m44.89388801s ago: executing program 2 (id=1843): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) keyctl$setperm(0x5, 0x0, 0x400) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) fcntl$dupfd(r0, 0x406, r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x8}, 0x2, 0xffffffff, 0x6, 0x2, 0x4, 0x5, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff00004485"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911087000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x802, @void, @value}, 0x94) 7m44.850635951s ago: executing program 2 (id=1848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) 7m44.728865993s ago: executing program 2 (id=1851): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0xa, 0x65ef, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x80, 0x700, 0x0, 0x5}}) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x4140045e}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MASK={0x8, 0x6, 0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0xbc4b}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0xc010) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='mm_page_alloc\x00', r6}, 0x18) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e000100776972656775617264"], 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000340)=ANY=[], 0x1, 0x2a8, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mount(&(0x7f0000000040)=@sg0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='ramfs\x00', 0x200c04, &(0x7f0000000200)='\\!]-.!]\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000001100)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 7m44.548716615s ago: executing program 2 (id=1855): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000cedb00000000005e0000f451657d3b9d32f9af768e1e169d9d53ede41d210b6a3bc7addc72493196300557042590b00fe9f897bccbed83c34a3227725b063c8e19bef59f47ef42a670a98c2e346fb54b5703fa70404a39d9a1896f1b2afa7b83e9c3916c8ca8a19bc10e976b28e6659d53b9be137655eed901401b9c019123dcd25c9639cb583f6630f9e823f7f270e81b6913035cd2d3b19b7abb37a10e1a2d"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000200000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbf8, 0x2000}, 0xc) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f909000000210002"], 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x9d, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r7, 0x0, 0x80000}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRES64=r1], 0x24}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB], 0x1c}}, 0x4000054) getpid() r11 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000", 0x3, r11) 7m43.834033506s ago: executing program 1 (id=1859): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc8101339d8526c63}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006272696467650000180002800a0014"], 0x48}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) 7m43.647068189s ago: executing program 1 (id=1861): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f00000006c0), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f0000000200)="dc", 0x1, r2) 7m43.630006499s ago: executing program 1 (id=1862): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/rt_cache\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000b4114b123db3c1133777908e00"/36], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000000080)=""/98, 0x62) 7m43.477135501s ago: executing program 2 (id=1865): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRES16=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280), &(0x7f00000004c0), 0x81, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$netlink(0x10, 0x3, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) gettid() sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 7m43.440177942s ago: executing program 35 (id=1865): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRES16=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280), &(0x7f00000004c0), 0x81, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$netlink(0x10, 0x3, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) gettid() sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 7m43.359492663s ago: executing program 1 (id=1871): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0xa, 0x65ef, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x80, 0x700, 0x0, 0x5}}) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x4140045e}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MASK={0x8, 0x6, 0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0xbc4b}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0xc010) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='mm_page_alloc\x00', r6}, 0x18) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e000100776972656775617264"], 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000340)=ANY=[], 0x1, 0x2a8, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mount(&(0x7f0000000040)=@sg0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='ramfs\x00', 0x200c04, &(0x7f0000000200)='\\!]-.!]\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000001100)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 7m43.226898005s ago: executing program 1 (id=1873): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) 7m43.037134758s ago: executing program 1 (id=1878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000000000185"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) 7m43.027173548s ago: executing program 36 (id=1878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000000000185"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) 3.335899086s ago: executing program 6 (id=13858): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) 2.438613518s ago: executing program 6 (id=13867): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0x0, 0x4}, 0xff}, 0x18, 0x0, 0x1, 0x0, 0x0, 0x40845}, 0x804) 2.438166518s ago: executing program 6 (id=13868): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1) 2.336118069s ago: executing program 4 (id=13873): sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20008880) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002dbd7000fddbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="05008a0000003d1c0c27060008021100000100000a000600080211000001004d4b"], 0x48}, 0x1, 0x0, 0x0, 0x2000050}, 0x40) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88bd9edace00000000000000002100000002ff02000000000000000000000000000104"], 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x45, &(0x7f0000000280), 0x45}, 0x0) 2.135212691s ago: executing program 9 (id=13881): close(0x3) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000002c00128009"], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a0000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 2.104806562s ago: executing program 9 (id=13883): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000280), &(0x7f0000000080)=r3}, 0x20) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) 1.609904578s ago: executing program 6 (id=13884): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x1}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="1000000000000000"], 0x20}}], 0x2, 0x4000000) 1.595853189s ago: executing program 6 (id=13885): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf250000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000004fe0000000000f00700038510000006"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) fadvise64(r5, 0xfffffffffffffff0, 0x81, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0xb, &(0x7f00000001c0)=ANY=[@ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0xefffffff}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x5, 0x401, 0x101, 0x10000, r2, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0x1, @void, @value, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r7, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r7}, &(0x7f0000000980), &(0x7f0000000b40)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r8}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c000100636f756e746572"], 0x118}}, 0x0) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000240)=ANY=[@ANYBLOB="1d0000000400000002000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) r10 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r10) 1.49064028s ago: executing program 8 (id=13888): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) write(r0, &(0x7f00000002c0)="03f7887d5b21672135", 0x9) sendmsg$can_j1939(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40845}, 0x804) 1.4902826s ago: executing program 8 (id=13889): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x7fffffff}) 1.48978606s ago: executing program 8 (id=13890): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x48005) readv(r0, &(0x7f0000000000), 0x2a) 1.48822318s ago: executing program 4 (id=13891): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd231, @void, @value}, 0x94) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) finit_module(0xffffffffffffffff, 0x0, 0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {0x0}], 0x2}, 0x9e}], 0x2, 0x40000030, 0x0) 1.313310122s ago: executing program 7 (id=13893): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0xa, 0x65ef, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x80, 0x700, 0x0, 0x5}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000006000000180100006020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000035000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000800)='./file0\x00', 0x223e461, &(0x7f0000000b40)=ANY=[], 0x1, 0x6ab, &(0x7f0000000840)="$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") syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000340)=ANY=[], 0x1, 0x2a8, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x123400, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ff0f00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70400000800000084ea0000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000001100)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.248253083s ago: executing program 7 (id=13894): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.219243174s ago: executing program 7 (id=13895): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) dup3(r2, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.141900535s ago: executing program 9 (id=13896): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.141405225s ago: executing program 9 (id=13897): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0xa, 0x65ef, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x80, 0x700, 0x0, 0x5}}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000006000000180100006020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000350000008500000070000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000800)='./file0\x00', 0x223e461, &(0x7f0000000b40)=ANY=[], 0x1, 0x6ab, &(0x7f0000000840)="$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") syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000340)=ANY=[], 0x1, 0x2a8, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x123400, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ff0f00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70400000800000084ea0000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000001100)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.121834065s ago: executing program 9 (id=13898): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='sched_switch\x00', r0, 0x0, 0xcb4}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0xfff2}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 1.051760086s ago: executing program 9 (id=13899): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x1320, 0x4, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x2, 0x7f, 0x9, 0x0, 0x0, 0xffff, 0x0, 0xffffffff, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='!~u>20\t&&') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x10, &(0x7f0000002e00), 0x0, 0x0, 0xa0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="e7fa3857d873f762f22a00000000800000000000000000000000000000000000000cb31974", @ANYRESDEC=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r5, 0x0, 0x0}, 0x10) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r11}, 0x10) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0x10001, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0xd408, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1400, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0xc, 0x5, 0x0, 0x0, 0x0, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x3, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}, 0x0, 0x8}}]}}]}, 0x468}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18) r12 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r12, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 874.817829ms ago: executing program 7 (id=13900): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) write(r0, &(0x7f00000002c0)="03f7887d5b21672135", 0x9) sendmsg$can_j1939(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40845}, 0x804) 814.653649ms ago: executing program 7 (id=13901): sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20008880) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002dbd7000fddbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="05008a0000003d1c0c27060008021100000100000a000600080211000001004d4b"], 0x48}, 0x1, 0x0, 0x0, 0x2000050}, 0x40) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88bd9edace00000000000000002100000002ff02000000000000000000000000000104"], 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x45, &(0x7f0000000280), 0x45}, 0x0) 718.27168ms ago: executing program 6 (id=13902): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) 597.313352ms ago: executing program 8 (id=13903): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL6={0x14, 0x8, @mcast1}]}}}]}, 0x44}}, 0x0) 541.338973ms ago: executing program 4 (id=13904): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='sched_switch\x00', r0, 0x0, 0xcb4}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0xfff2}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 454.124824ms ago: executing program 8 (id=13905): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 383.755245ms ago: executing program 4 (id=13906): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = dup3(r2, r1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r3) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 350.288076ms ago: executing program 4 (id=13907): close(0x3) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000002c00128009"], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a0000000000000000070000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 334.732796ms ago: executing program 4 (id=13908): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000280), &(0x7f0000000080)=r3}, 0x20) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x4, 0x2, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$eJzs3T1sG2UfAPD/neO3X3nf9JXeVwLUoQKkIlV1kn5AYWpXRKVKHZBYIHLcqIoTV7EDTZQh3StEBwSoS9lgYAQxMCAWRlYWEDNSRSOQmg5g5K80TZzglDouud9POvuee87+P8+d/499pzs5gMw62nhII56OiItJxMi6uqFoVx5trbe6slS8v7JUTKJev/RLEklE3FtZKnbWT9rPhyJiOSKeiohv8hHH081xqwuL0xPlcmmuXR6tzVwdrS4snrgyMzFVmirNnnrp5TNnT58ZPzm+/mX36+tL+Z319caPN9+98d2rt29++tmR5eL7E0mci+F23fp+PE6tbZKPcxuWn+5HsAFKBt0AHkmuneeNVPp/jESunfXd1Ed2tWlAn9X3RdSBjErkP2RU53dA4/i3M+3m748751sHII24q+2pVTPUOjcR+5vHJgd/TR46Mmkcbx7ezYayJy1fj4ixoaHNn/+k/fl7dGOPo4H01dfnWztq8/5P18af6DL+DHfOnf5NnfFvddP49yB+bovx72KPMX5/46ePtox/PeKZrvGTtfhJl/hpRLzVY/xbr395dqu6+scRx6J7/I5k+/PDo5evlEtjrceuMb46duSV7fp/cIv4rXO2+5tfM922f5fT2l198e3nzy5vE/+F57bf/922/4GIeK/H+P+998lrW9XduZ7cbfwK2On+TyIft3uM/+K5oz/0uCoAAAAAAAAAALADafNatiQtrM2naaHQuof3f3EwLVeqteOXK/Ozk61r3g5HPu1caTXSKieN8nj7etxO+eSG8qlcO2DuQLNcKFbKkwPuOwAAAAAAAAAAAAAAAAAAADwpDm24//+3XPP+/41/Vw3sVVv/5Tew18l/yK6H8z8ZWDuA3ef7HzKrLv8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/AAAAAAAAAAAAAAAAAAAAAAAAAADoi4sXLjSm+v2VpWKjPDm0MD9defvEZKk6XZiZLxaKlbmrhalKZapcKhQrM3/1fkmlcnUsZuevjdZK1dpodWHxzZnK/GznP0VL+b73CAAAAAAAAAAAAAAAAAAAAP55hptTkhYiIm3Op2mhEPHviDicRHL5Srk0FhH/iYjvc/l9jfL4oBsNAAAAAAAAAAAAAAAAAAAAe0x1YXF6olwuzWVkZmgnK0fE8uNtRuMdd/yqfHtfPSnb0EwWZgY8MAEAAAAAAAAAAAAAAAAAQAY9uOm311f80d8GAQAAAAAAAAAAAAAAAAAAQCalPycR0ZiOjTw/vLH2X8lqrvkcEe/cuvTBtYlabW68sfzu2vLah+3lJwfRfqBXnTzt5DEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQHVhcXqiXC7N9XFm0H0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBR/BgAA///eANcP") 311.892746ms ago: executing program 8 (id=13909): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00m\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r5}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x1, 0x20}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffb}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20008000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000001000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvmsg$unix(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000002c0)=""/14, 0xe}, {&(0x7f0000000740)=""/232, 0xe8}, {&(0x7f0000000400)=""/131, 0x83}, {&(0x7f0000000840)=""/145, 0x91}, {&(0x7f0000000900)=""/136, 0x88}, {&(0x7f0000000640)=""/117, 0x75}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/45, 0x2d}, {&(0x7f0000000bc0)=""/203, 0xcb}], 0x9, &(0x7f0000000d80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}, 0x892b4618e8d4452e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) readahead(0xffffffffffffffff, 0xfffffffffffffff8, 0x9) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000004002daae558b17974f696", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000e00)=ANY=[@ANYBLOB="0d00000000000000000000800000000018110000a45a57ddd9f7b7356d3576ce128f1bf8eba6bf60e02d7c2774ebcef8fd64ae40679dae0259621a3cd8bed97f85ac44e6d22ba62deffef03248386986", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r10}, 0x10) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80400, 0x0) mkdirat(r11, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x408) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) syz_usb_connect$cdc_ecm(0x4, 0xf2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0xe, 0x9, 0x0, 0xff, 0x3}, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0f050000"]}) modify_ldt$write(0x1, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 7 (id=13910): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}], 0x7) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000200)) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) kernel console output (not intermixed with test programs): lesystem being mounted at /517/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 627.288358][ T4546] loop6: detected capacity change from 0 to 164 [ 627.297525][ T4546] loop6: detected capacity change from 0 to 128 [ 627.304338][ T4546] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 627.333419][ T4956] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 627.353618][ T4548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64013 sclass=netlink_route_socket pid=4548 comm=syz.6.12925 [ 627.648113][ T4557] loop6: detected capacity change from 0 to 512 [ 627.655014][ T4557] EXT4-fs: Ignoring removed oldalloc option [ 627.661436][ T4557] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 627.672832][ T4557] EXT4-fs (loop6): orphan cleanup on readonly fs [ 627.679739][ T4557] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.12929: Failed to acquire dquot type 1 [ 627.692588][ T4557] EXT4-fs (loop6): 1 truncate cleaned up [ 627.700505][ T4557] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 627.794883][T29912] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.963024][ T4575] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12937'. [ 627.994603][ T4512] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.006916][ T4512] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.019070][ T4512] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.031341][ T4512] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.232273][ T4594] loop9: detected capacity change from 0 to 1024 [ 628.274141][ T4594] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 628.315091][ T4594] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 628.420446][T30675] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.587706][ T4608] netlink: 32 bytes leftover after parsing attributes in process `syz.6.12950'. [ 628.597856][ T4608] netlink: 32 bytes leftover after parsing attributes in process `syz.6.12950'. [ 628.702144][ T4611] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.785527][ T4611] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.825793][ T4611] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.864779][ T4611] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.902563][T30996] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.921116][ T4611] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.933455][ T4611] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.946253][ T4611] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.957689][ T4611] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.025150][ T4624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12957'. [ 629.062381][ T4631] loop7: detected capacity change from 0 to 164 [ 629.071175][ T4631] loop7: detected capacity change from 0 to 128 [ 629.078179][ T4631] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 629.078298][ T4633] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12961'. [ 629.102421][ T4634] loop9: detected capacity change from 0 to 512 [ 629.109561][ T4634] EXT4-fs: Ignoring removed oldalloc option [ 629.116755][ T4634] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 629.126993][ T4955] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 629.131576][ T4634] EXT4-fs (loop9): orphan cleanup on readonly fs [ 629.143440][ T4634] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.12958: Failed to acquire dquot type 1 [ 629.156722][ T4634] EXT4-fs (loop9): 1 truncate cleaned up [ 629.162994][ T4634] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 629.233162][ T4642] usb usb8: usbfs: process 4642 (syz.4.12963) did not claim interface 0 before use [ 629.256181][ T4642] delete_channel: no stack [ 629.734757][ T4678] loop8: detected capacity change from 0 to 1024 [ 629.755840][ T4678] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 629.822326][ T4678] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 629.889763][T30996] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.370645][ T4706] loop6: detected capacity change from 0 to 512 [ 630.407789][ T4706] EXT4-fs (loop6): 1 orphan inode deleted [ 630.426723][ T4956] __quota_error: 145 callbacks suppressed [ 630.426741][ T4956] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 630.442685][ T4956] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:23: Failed to release dquot type 1 [ 630.480080][ T4706] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.528470][ T852] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.539181][ T4715] __nla_validate_parse: 3 callbacks suppressed [ 630.539194][ T4715] netlink: 72 bytes leftover after parsing attributes in process `syz.4.12992'. [ 630.554710][ T4706] ext4 filesystem being mounted at /479/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 630.609892][T30675] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.647863][ T4723] syzkaller1: entered promiscuous mode [ 630.653454][ T4723] syzkaller1: entered allmulticast mode [ 630.672682][ T4719] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4719 comm=syz.4.12995 [ 630.729032][ T4726] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12997'. [ 630.741505][ T4726] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12997'. [ 630.752742][ T4728] netlink: 40 bytes leftover after parsing attributes in process `syz.8.12998'. [ 630.765518][ T29] audit: type=1326 audit(1749050931.726:20790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.4.12997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcece8e929 code=0x7ffc0000 [ 630.791402][ T29] audit: type=1326 audit(1749050931.756:20791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.4.12997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcece8e929 code=0x7ffc0000 [ 630.815153][ T29] audit: type=1326 audit(1749050931.756:20792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.4.12997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcece8e929 code=0x7ffc0000 [ 630.838845][ T29] audit: type=1326 audit(1749050931.756:20793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.4.12997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcece8e929 code=0x7ffc0000 [ 630.862493][ T29] audit: type=1326 audit(1749050931.756:20794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.4.12997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcece8e929 code=0x7ffc0000 [ 630.886136][ T29] audit: type=1326 audit(1749050931.756:20795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.4.12997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcece8e929 code=0x7ffc0000 [ 630.909806][ T29] audit: type=1326 audit(1749050931.756:20796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.4.12997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcece8e929 code=0x7ffc0000 [ 630.933610][ T29] audit: type=1326 audit(1749050931.756:20797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.4.12997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcece8e929 code=0x7ffc0000 [ 630.957350][ T29] audit: type=1326 audit(1749050931.756:20798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.4.12997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcece8e929 code=0x7ffc0000 [ 631.109758][ T4740] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.147552][ T4743] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13004'. [ 631.157745][ T4740] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.204766][ T4740] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.214115][ T4748] loop9: detected capacity change from 0 to 512 [ 631.235234][ T4748] EXT4-fs (loop9): 1 orphan inode deleted [ 631.243327][ T4748] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.257518][ T4740] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.268940][ T4955] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:22: Failed to release dquot type 1 [ 631.319770][ T4748] ext4 filesystem being mounted at /503/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 631.347692][ T4740] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.362866][ T4740] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.375112][ T4740] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.393558][ T4740] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.403415][T30996] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.536535][ T4769] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 631.609414][ T4773] delete_channel: no stack [ 631.636019][ T4777] wireguard0: entered promiscuous mode [ 631.641619][ T4777] wireguard0: entered allmulticast mode [ 631.733671][ T4786] netlink: 32 bytes leftover after parsing attributes in process `syz.6.13020'. [ 631.742988][ T4786] netlink: 32 bytes leftover after parsing attributes in process `syz.6.13020'. [ 631.753478][ T4788] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.824926][ T4788] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.884322][ T4797] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13024'. [ 631.895396][ T4797] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13024'. [ 631.916123][ T4788] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.928260][ T4799] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13025'. [ 631.956225][ T4804] loop8: detected capacity change from 0 to 512 [ 631.963030][ T4804] EXT4-fs: Ignoring removed orlov option [ 631.969097][ T4804] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 631.978345][ T4804] EXT4-fs (loop8): orphan cleanup on readonly fs [ 631.979389][ T4788] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.986663][ T4804] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.13026: bg 0: block 248: padding at end of block bitmap is not set [ 632.010201][ T4804] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.13026: Failed to acquire dquot type 1 [ 632.022375][ T4804] EXT4-fs (loop8): 1 truncate cleaned up [ 632.028963][ T4804] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 632.044781][ T4804] EXT4-fs: Ignoring removed orlov option [ 632.051064][ T4804] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 632.057530][ T4788] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.068629][ T4804] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 632.071427][ T4788] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.084148][ T4804] EXT4-fs error (device loop8): __ext4_remount:6736: comm syz.8.13026: Abort forced by user [ 632.089927][ T4788] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.096803][ T4804] EXT4-fs (loop8): Remounting filesystem read-only [ 632.108382][ T4788] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.111905][ T4804] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 632.130684][ T4804] ext4 filesystem being remounted at /266/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 632.157891][ T852] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.192773][ T4810] delete_channel: no stack [ 632.326647][ T4831] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.411341][ T4835] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4835 comm=syz.6.13040 [ 632.426340][ T4831] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.485064][ T4831] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.524541][ T4850] loop9: detected capacity change from 0 to 1024 [ 632.537520][ T4854] loop7: detected capacity change from 0 to 512 [ 632.544331][ T4854] EXT4-fs: Ignoring removed oldalloc option [ 632.553315][ T4854] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 632.553586][ T4831] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.577106][ T4854] EXT4-fs (loop7): orphan cleanup on readonly fs [ 632.584250][ T4854] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.13043: Failed to acquire dquot type 1 [ 632.597875][ T4854] EXT4-fs (loop7): 1 truncate cleaned up [ 632.614016][ T4854] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 632.654668][ T4849] delete_channel: no stack [ 632.663491][ T4850] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 632.676095][ T4850] ext4 filesystem being mounted at /511/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 632.681112][ T4831] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.700787][ T4831] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.713112][ T4831] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.728477][ T4831] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.781252][ T7502] IPVS: starting estimator thread 0... [ 632.871820][ T4870] usb usb8: usbfs: process 4870 (syz.8.13052) did not claim interface 0 before use [ 632.883661][ T4867] IPVS: using max 1776 ests per chain, 88800 per kthread [ 632.906115][ T4870] delete_channel: no stack [ 633.183092][ T4860] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 633.316703][T29912] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.337527][ T4891] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.461044][T30996] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.477623][ T4898] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 633.490864][ T4891] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.588099][ T4891] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.706519][ T4891] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.806158][ T4891] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.823773][ T4891] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.840739][ T4891] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.853508][ T4891] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.898117][ T4915] loop9: detected capacity change from 0 to 512 [ 633.906846][ T4915] EXT4-fs: Ignoring removed orlov option [ 633.913055][ T4915] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 633.927906][ T4915] EXT4-fs (loop9): 1 orphan inode deleted [ 633.933766][ T4915] EXT4-fs (loop9): 1 truncate cleaned up [ 633.940445][ T4915] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 633.970181][T30996] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.979380][ T4923] loop8: detected capacity change from 0 to 512 [ 634.010388][ T4923] EXT4-fs (loop8): 1 orphan inode deleted [ 634.017693][ T4923] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.030446][ T4956] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:23: Failed to release dquot type 1 [ 634.040889][ T4923] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 634.081781][ T852] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.208159][ T4952] loop8: detected capacity change from 0 to 512 [ 634.223853][ T4952] EXT4-fs: Ignoring removed orlov option [ 634.230015][ T4952] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 634.251690][ T4952] EXT4-fs (loop8): 1 orphan inode deleted [ 634.257614][ T4952] EXT4-fs (loop8): 1 truncate cleaned up [ 634.262025][ T4954] loop9: detected capacity change from 0 to 164 [ 634.273379][ T4952] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 634.288983][ T4954] loop9: detected capacity change from 0 to 128 [ 634.319164][ T4954] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 634.344075][ T852] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.374385][ T4970] loop8: detected capacity change from 0 to 512 [ 634.381414][ T4970] EXT4-fs: Ignoring removed orlov option [ 634.388800][ T4970] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 634.405141][ T4970] EXT4-fs (loop8): orphan cleanup on readonly fs [ 634.418710][ T4970] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.13089: bg 0: block 248: padding at end of block bitmap is not set [ 634.435291][ T4970] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.13089: Failed to acquire dquot type 1 [ 634.447934][ T4970] EXT4-fs (loop8): 1 truncate cleaned up [ 634.465883][ T4970] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 634.481281][ T4951] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 634.582467][ T4970] EXT4-fs: Ignoring removed orlov option [ 634.588321][ T4970] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 634.605518][ T4970] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 634.641644][ T4981] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 634.654369][ T4970] EXT4-fs error (device loop8): __ext4_remount:6736: comm syz.8.13089: Abort forced by user [ 634.685196][ T4970] EXT4-fs (loop8): Remounting filesystem read-only [ 634.691773][ T4970] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 634.736745][ T4970] ext4 filesystem being remounted at /283/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 634.854842][ T852] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.954922][ T4998] wireguard0: entered promiscuous mode [ 634.960457][ T4998] wireguard0: entered allmulticast mode [ 634.981564][ T4996] syzkaller0: entered promiscuous mode [ 634.987207][ T4996] syzkaller0: entered allmulticast mode [ 635.145607][ T5013] loop9: detected capacity change from 0 to 512 [ 635.152422][ T5013] EXT4-fs: Ignoring removed oldalloc option [ 635.159342][ T5013] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 635.169208][ T5013] EXT4-fs (loop9): orphan cleanup on readonly fs [ 635.176456][ T5013] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.13102: Failed to acquire dquot type 1 [ 635.188628][ T5013] EXT4-fs (loop9): 1 truncate cleaned up [ 635.196101][ T5013] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 635.472236][ T5028] loop6: detected capacity change from 0 to 1024 [ 635.485682][ T5028] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 635.497805][ T5028] ext4 filesystem being mounted at /503/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 635.714900][ T5036] loop7: detected capacity change from 0 to 1024 [ 635.811876][ T5037] loop8: detected capacity change from 0 to 1024 [ 635.994286][ T5036] ext4 filesystem being mounted at /545/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 636.016122][ T5037] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 636.560974][ T5064] __nla_validate_parse: 22 callbacks suppressed [ 636.560992][ T5064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13122'. [ 636.605290][ T5064] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.13122'. [ 636.651446][ T5070] wireguard0: entered promiscuous mode [ 636.657098][ T5070] wireguard0: entered allmulticast mode [ 636.678454][ T5076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13122'. [ 636.687564][ T5076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13122'. [ 636.698485][ T5076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13122'. [ 636.741766][ T5078] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5078 comm=syz.7.13127 [ 636.773988][ T5080] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13128'. [ 636.813241][ T5083] netlink: 32 bytes leftover after parsing attributes in process `syz.7.13130'. [ 636.822394][ T5083] netlink: 32 bytes leftover after parsing attributes in process `syz.7.13130'. [ 636.832593][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 636.832612][ T29] audit: type=1326 audit(1749050937.796:20979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5082 comm="syz.7.13130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8022e929 code=0x7ffc0000 [ 636.864537][ T29] audit: type=1326 audit(1749050937.796:20980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5082 comm="syz.7.13130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8022e929 code=0x7ffc0000 [ 636.888376][ T29] audit: type=1326 audit(1749050937.796:20981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5082 comm="syz.7.13130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b8022e929 code=0x7ffc0000 [ 636.911977][ T29] audit: type=1326 audit(1749050937.796:20982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5082 comm="syz.7.13130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8022e929 code=0x7ffc0000 [ 636.935742][ T29] audit: type=1326 audit(1749050937.796:20983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5082 comm="syz.7.13130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b8022e929 code=0x7ffc0000 [ 636.959385][ T29] audit: type=1326 audit(1749050937.796:20984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5082 comm="syz.7.13130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8022e929 code=0x7ffc0000 [ 636.983308][ T29] audit: type=1326 audit(1749050937.796:20985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5082 comm="syz.7.13130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b8022e929 code=0x7ffc0000 [ 637.007134][ T29] audit: type=1326 audit(1749050937.796:20986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5082 comm="syz.7.13130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8022e929 code=0x7ffc0000 [ 637.030799][ T29] audit: type=1326 audit(1749050937.796:20987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5082 comm="syz.7.13130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b8022e929 code=0x7ffc0000 [ 637.057558][ T29] audit: type=1326 audit(1749050937.836:20988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5082 comm="syz.7.13130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8022e929 code=0x7ffc0000 [ 637.355290][ T5107] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 637.718584][ T5111] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13140'. [ 637.796474][ T5117] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5117 comm=syz.7.13143 [ 637.926969][ T5136] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13152'. [ 637.936759][ T5134] netlink: 'syz.4.13151': attribute type 10 has an invalid length. [ 637.949923][ T5134] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 638.079504][ T5144] macvtap2: entered promiscuous mode [ 638.084942][ T5144] macvtap2: entered allmulticast mode [ 638.092457][ T5144] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 638.165924][ T5147] delete_channel: no stack [ 638.420186][ T5161] loop9: detected capacity change from 0 to 512 [ 638.468425][ T5161] EXT4-fs (loop9): 1 orphan inode deleted [ 638.486785][ T5161] ext4 filesystem being mounted at /538/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 638.499394][ T4959] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:26: Failed to release dquot type 1 [ 638.832755][ T5179] bond_slave_0: entered promiscuous mode [ 638.838546][ T5179] bond_slave_1: entered promiscuous mode [ 638.844446][ T5179] macvtap1: entered promiscuous mode [ 638.849742][ T5179] bond0: entered promiscuous mode [ 638.855165][ T5179] macvtap1: entered allmulticast mode [ 638.860569][ T5179] bond0: entered allmulticast mode [ 638.865916][ T5179] bond_slave_0: entered allmulticast mode [ 638.871753][ T5179] bond_slave_1: entered allmulticast mode [ 638.878545][ T5179] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 638.941778][ T5187] erspan0: entered promiscuous mode [ 638.947560][ T5187] macvtap2: entered promiscuous mode [ 638.953084][ T5187] macvtap2: entered allmulticast mode [ 638.958510][ T5187] erspan0: entered allmulticast mode [ 638.978197][ T5182] delete_channel: no stack [ 639.095449][ T5193] tipc: Enabled bearer , priority 0 [ 639.102716][ T5193] syzkaller0: entered promiscuous mode [ 639.108318][ T5193] syzkaller0: entered allmulticast mode [ 639.134299][ T5193] tipc: Resetting bearer [ 639.151221][ T5192] tipc: Resetting bearer [ 639.158533][ T5192] tipc: Disabling bearer [ 639.185702][ T5197] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.264597][ T5197] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.314745][ T5197] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.364842][ T5197] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.394457][ T5206] delete_channel: no stack [ 639.480141][ T5197] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.492398][ T5197] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.505015][ T5197] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.517640][ T5197] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.631570][ T5213] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5213 comm=syz.7.13184 [ 639.665112][ T5219] loop9: detected capacity change from 0 to 164 [ 639.673881][ T5219] loop9: detected capacity change from 0 to 128 [ 639.681807][ T5217] bond_slave_0: entered promiscuous mode [ 639.687496][ T5217] bond_slave_1: entered promiscuous mode [ 639.693265][ T5217] bridge_slave_1: entered promiscuous mode [ 639.699658][ T5219] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 639.709538][ T5217] macvtap3: entered promiscuous mode [ 639.714898][ T5217] bond0: entered promiscuous mode [ 639.720411][ T5217] macvtap3: entered allmulticast mode [ 639.725860][ T5217] bond0: entered allmulticast mode [ 639.731023][ T5217] bond_slave_0: entered allmulticast mode [ 639.736819][ T5217] bond_slave_1: entered allmulticast mode [ 639.742556][ T5217] bridge_slave_1: entered allmulticast mode [ 639.753220][ T5217] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 639.768818][ T5217] bond0: left allmulticast mode [ 639.773815][ T5217] bond_slave_0: left allmulticast mode [ 639.779393][ T5217] bond_slave_1: left allmulticast mode [ 639.784974][ T5217] bridge_slave_1: left allmulticast mode [ 639.790642][ T5217] bond0: left promiscuous mode [ 639.795853][ T5217] bond_slave_0: left promiscuous mode [ 639.801301][ T5217] bond_slave_1: left promiscuous mode [ 639.806876][ T5217] bridge_slave_1: left promiscuous mode [ 639.824525][ T5223] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 639.845408][ T5223] netlink: 'syz.6.13189': attribute type 10 has an invalid length. [ 639.857648][ T5223] bridge_slave_1: entered promiscuous mode [ 639.863800][ T5223] bridge_slave_1: entered allmulticast mode [ 639.871197][ T5223] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 639.891456][ T4951] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 639.915723][ T5233] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.956019][ T5233] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.968376][ T5229] delete_channel: no stack [ 640.005110][ T5233] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.087056][ T5233] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.172597][ T5233] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.186060][ T5233] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.199332][ T5233] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.211545][ T5233] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.301780][ T5266] delete_channel: no stack [ 640.399441][ T5270] macvtap3: entered promiscuous mode [ 640.405128][ T5270] macvtap3: entered allmulticast mode [ 640.411871][ T5270] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 640.463763][ T5275] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 641.164152][ T5307] macvtap3: entered promiscuous mode [ 641.169789][ T5307] macvtap3: entered allmulticast mode [ 641.177137][ T5307] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 641.221053][ T5312] erspan0: entered promiscuous mode [ 641.226540][ T5312] macvtap4: entered promiscuous mode [ 641.231956][ T5312] macvtap4: entered allmulticast mode [ 641.237544][ T5312] erspan0: entered allmulticast mode [ 641.246147][ T5312] erspan0: left allmulticast mode [ 641.251390][ T5312] erspan0: left promiscuous mode [ 641.318201][ T5325] loop6: detected capacity change from 0 to 164 [ 641.326600][ T5325] loop6: detected capacity change from 0 to 128 [ 641.337360][ T5325] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 641.368017][ T4948] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 641.418505][ T5332] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5332 comm=syz.6.13236 [ 641.420976][ T5330] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5330 comm=syz.8.13235 [ 641.495151][ T5341] netlink: 'syz.9.13240': attribute type 10 has an invalid length. [ 641.565514][ T5354] __nla_validate_parse: 24 callbacks suppressed [ 641.565530][ T5354] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13247'. [ 641.565941][ T5356] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13244'. [ 641.572040][ T5355] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13248'. [ 641.744862][ T5380] tipc: Enabled bearer , priority 0 [ 641.776132][ T5380] syzkaller0: entered promiscuous mode [ 641.781770][ T5380] syzkaller0: entered allmulticast mode [ 641.799480][ T5378] loop9: detected capacity change from 0 to 512 [ 641.828016][ T5378] EXT4-fs (loop9): 1 orphan inode deleted [ 641.837319][ T5393] loop6: detected capacity change from 0 to 164 [ 641.843927][ T4948] __quota_error: 138 callbacks suppressed [ 641.843940][ T4948] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 641.859471][ T4948] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:15: Failed to release dquot type 1 [ 641.890894][ T5393] loop6: detected capacity change from 0 to 128 [ 641.904069][ T5378] ext4 filesystem being mounted at /554/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 641.929828][ T5393] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 641.941126][ T5380] tipc: Resetting bearer [ 641.950790][ T5379] tipc: Resetting bearer [ 641.961615][ T5379] tipc: Disabling bearer [ 641.988223][ T29] audit: type=1326 audit(1749050942.946:21126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.6.13264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646560e929 code=0x7ffc0000 [ 642.016327][ T29] audit: type=1326 audit(1749050942.946:21127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.6.13264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f646560e929 code=0x7ffc0000 [ 642.041510][ T29] audit: type=1326 audit(1749050942.946:21128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.6.13264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646560e929 code=0x7ffc0000 [ 642.067126][ T29] audit: type=1326 audit(1749050942.946:21129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.6.13264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f646560e929 code=0x7ffc0000 [ 642.091001][ T29] audit: type=1326 audit(1749050942.976:21130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.6.13264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646560e929 code=0x7ffc0000 [ 642.114793][ T29] audit: type=1326 audit(1749050942.976:21131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.6.13264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f646560e929 code=0x7ffc0000 [ 642.138647][ T29] audit: type=1326 audit(1749050942.976:21132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.6.13264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646560e929 code=0x7ffc0000 [ 642.139248][ T4951] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 642.162283][ T29] audit: type=1326 audit(1749050942.976:21133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.6.13264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f646560e929 code=0x7ffc0000 [ 642.162318][ T29] audit: type=1326 audit(1749050942.976:21134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.6.13264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646560e929 code=0x7ffc0000 [ 642.291619][ T5415] tipc: Enabled bearer , priority 0 [ 642.307987][ T5417] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.325414][ T5415] syzkaller0: entered promiscuous mode [ 642.331126][ T5415] syzkaller0: entered allmulticast mode [ 642.357033][ T5417] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.387145][ T5415] tipc: Resetting bearer [ 642.400483][ T5413] tipc: Resetting bearer [ 642.459882][ T5413] tipc: Disabling bearer [ 642.478329][ T5417] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.514014][ T5424] loop9: detected capacity change from 0 to 1024 [ 642.534829][ T5424] ext4 filesystem being mounted at /557/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 642.540143][ T5430] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13278'. [ 642.557208][ T5417] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.591247][ T5432] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.602243][T30996] EXT4-fs unmount: 11 callbacks suppressed [ 642.602260][T30996] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.624990][ T5417] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.637163][ T5434] loop9: detected capacity change from 0 to 164 [ 642.637313][ T5417] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.645559][ T5434] loop9: detected capacity change from 0 to 128 [ 642.657416][ T5417] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.658838][ T5434] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 642.670507][ T5417] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.703635][ T4951] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 642.704664][ T5432] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.764397][ T5442] wireguard0: entered promiscuous mode [ 642.769924][ T5442] wireguard0: entered allmulticast mode [ 642.780547][ T5432] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.834311][ T5432] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.901798][ T5432] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.913529][ T5432] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.924898][ T5432] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.936127][ T5432] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.997086][ T5454] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13289'. [ 643.025873][ T5456] loop8: detected capacity change from 0 to 512 [ 643.032566][ T5456] EXT4-fs: Ignoring removed orlov option [ 643.038521][ T5456] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 643.049861][ T5456] EXT4-fs (loop8): 1 orphan inode deleted [ 643.055743][ T5456] EXT4-fs (loop8): 1 truncate cleaned up [ 643.061858][ T5456] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.088972][ T852] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.110460][ T5461] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.129066][ T5459] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5459 comm=syz.4.13291 [ 643.184693][ T5461] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.236285][ T5461] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.282108][ T5470] wireguard0: entered promiscuous mode [ 643.287794][ T5470] wireguard0: entered allmulticast mode [ 643.298014][ T5461] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.586213][ T5488] loop7: detected capacity change from 0 to 512 [ 643.593160][ T5488] EXT4-fs: Ignoring removed orlov option [ 643.599480][ T5488] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 643.609607][ T5488] EXT4-fs (loop7): orphan cleanup on readonly fs [ 643.616834][ T5488] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.13304: bg 0: block 248: padding at end of block bitmap is not set [ 643.631812][ T5488] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.13304: Failed to acquire dquot type 1 [ 643.644530][ T5488] EXT4-fs (loop7): 1 truncate cleaned up [ 643.650945][ T5488] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 643.665249][ T5488] EXT4-fs: Ignoring removed orlov option [ 643.671084][ T5488] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 643.680578][ T5488] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 643.694589][ T5488] EXT4-fs error (device loop7): __ext4_remount:6736: comm syz.7.13304: Abort forced by user [ 643.705195][ T5488] EXT4-fs (loop7): Remounting filesystem read-only [ 643.711760][ T5488] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 643.720273][ T5488] ext4 filesystem being remounted at /581/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 643.743603][T29912] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.763179][ T5505] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13312'. [ 643.772437][ T5505] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13312'. [ 643.780203][ T5502] usb usb8: usbfs: process 5502 (syz.4.13310) did not claim interface 0 before use [ 643.822786][ T5502] delete_channel: no stack [ 643.848331][ T5515] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.914543][ T5515] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.985409][ T5515] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.045583][ T5515] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.061658][ T5524] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.13320'. [ 644.099961][ T5515] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.111828][ T5515] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.123205][ T5515] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.126764][ T5526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13320'. [ 644.135137][ T5515] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.140519][ T5526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13320'. [ 644.235237][ T5530] loop6: detected capacity change from 0 to 512 [ 644.243195][ T5530] EXT4-fs: Ignoring removed orlov option [ 644.251273][ T5530] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 644.261548][ T5530] EXT4-fs (loop6): orphan cleanup on readonly fs [ 644.268618][ T5530] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.13322: bg 0: block 248: padding at end of block bitmap is not set [ 644.283631][ T5530] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.13322: Failed to acquire dquot type 1 [ 644.295902][ T5530] EXT4-fs (loop6): 1 truncate cleaned up [ 644.302475][ T5530] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 644.316565][ T5530] EXT4-fs: Ignoring removed orlov option [ 644.322583][ T5530] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 644.331181][ T5530] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 644.354336][ T5530] EXT4-fs error (device loop6): __ext4_remount:6736: comm syz.6.13322: Abort forced by user [ 644.367402][ T5530] EXT4-fs (loop6): Remounting filesystem read-only [ 644.374005][ T5530] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 644.385732][ T5530] ext4 filesystem being remounted at /537/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 644.407940][ T5534] loop9: detected capacity change from 0 to 1024 [ 644.415276][T30675] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.437517][ T5534] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 644.449900][ T5534] ext4 filesystem being mounted at /568/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 644.854614][ T5547] loop7: detected capacity change from 0 to 1024 [ 644.864897][ T5547] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 644.877203][ T5547] ext4 filesystem being mounted at /587/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 644.933370][ T5551] ip6gre1: entered allmulticast mode [ 644.940159][ T4951] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 645.066030][T30996] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.153717][ T5573] loop9: detected capacity change from 0 to 512 [ 645.160459][ T5573] EXT4-fs: Ignoring removed orlov option [ 645.167436][ T5573] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 645.177266][ T5573] EXT4-fs (loop9): orphan cleanup on readonly fs [ 645.184709][ T5573] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.13339: bg 0: block 248: padding at end of block bitmap is not set [ 645.199826][ T5573] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.13339: Failed to acquire dquot type 1 [ 645.212662][ T5573] EXT4-fs (loop9): 1 truncate cleaned up [ 645.219763][ T5573] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 645.235325][ T5573] EXT4-fs: Ignoring removed orlov option [ 645.241223][ T5573] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 645.250842][ T5573] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 645.264293][ T5573] EXT4-fs error (device loop9): __ext4_remount:6736: comm syz.9.13339: Abort forced by user [ 645.275296][ T5573] EXT4-fs (loop9): Remounting filesystem read-only [ 645.281928][ T5573] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 645.293257][ T5573] ext4 filesystem being remounted at /573/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 645.318198][T30996] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.521741][ T5607] loop6: detected capacity change from 0 to 1024 [ 645.556398][ T5607] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 645.568669][ T5607] ext4 filesystem being mounted at /539/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.599909][ T5610] tipc: Started in network mode [ 645.604886][ T5610] tipc: Node identity aa6a4e065ea8, cluster identity 4711 [ 645.612050][ T5610] tipc: Enabled bearer , priority 0 [ 645.678241][ T5613] syzkaller0: entered promiscuous mode [ 645.683990][ T5613] syzkaller0: entered allmulticast mode [ 645.699514][T29912] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.717440][ T5609] tipc: Resetting bearer [ 645.728830][ T5609] tipc: Disabling bearer [ 646.171881][T30675] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.273725][ T5629] wireguard0: entered promiscuous mode [ 646.279276][ T5629] wireguard0: entered allmulticast mode [ 646.698011][ T5642] __nla_validate_parse: 11 callbacks suppressed [ 646.698027][ T5642] netlink: 32 bytes leftover after parsing attributes in process `syz.7.13368'. [ 646.715595][ T5642] netlink: 'syz.7.13368': attribute type 1 has an invalid length. [ 646.723690][ T5642] netlink: 'syz.7.13368': attribute type 4 has an invalid length. [ 646.731672][ T5642] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.13368'. [ 646.775358][ T5646] netlink: 52 bytes leftover after parsing attributes in process `syz.7.13369'. [ 646.784743][ T5646] netlink: 52 bytes leftover after parsing attributes in process `syz.7.13369'. [ 646.905155][ T5660] wireguard1: entered promiscuous mode [ 646.910725][ T5660] wireguard1: entered allmulticast mode [ 646.932739][ T5663] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13377'. [ 646.979505][ T5461] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.992254][ T5461] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.020581][ T5461] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.032351][ T5461] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.221982][ T5683] loop6: detected capacity change from 0 to 1024 [ 647.239998][ T5683] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.257510][ T5683] ext4 filesystem being mounted at /551/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 647.391729][ T5677] chnl_net:caif_netlink_parms(): no params data found [ 647.524813][ T5677] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.531981][ T5677] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.543203][ T5677] bridge_slave_0: entered allmulticast mode [ 647.549843][ T5677] bridge_slave_0: entered promiscuous mode [ 647.557183][ T5677] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.564506][ T5677] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.573209][ T5677] bridge_slave_1: entered allmulticast mode [ 647.580129][ T5677] bridge_slave_1: entered promiscuous mode [ 647.600713][ T5677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.703512][ T5677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.761663][ T5677] team0: Port device team_slave_0 added [ 647.772705][ T5677] team0: Port device team_slave_1 added [ 647.809448][ T5677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.816502][ T5677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.842546][ T5677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.909936][ T5677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.917004][ T5677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.943075][ T5677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.989139][ T5677] hsr_slave_0: entered promiscuous mode [ 647.998190][ T5677] hsr_slave_1: entered promiscuous mode [ 648.012382][ T5677] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 648.024314][ T5713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13392'. [ 648.030270][ T5677] Cannot create hsr debugfs directory [ 648.039219][ T5713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13392'. [ 648.083564][T30675] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.138151][ T5721] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13393'. [ 648.146089][ T5723] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13396'. [ 648.195861][ T5677] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.242186][ T5729] loop8: detected capacity change from 0 to 512 [ 648.249726][ T5729] EXT4-fs: Ignoring removed orlov option [ 648.257201][ T5729] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 648.275406][ T5677] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.288138][ T5729] EXT4-fs (loop8): 1 orphan inode deleted [ 648.293986][ T5729] EXT4-fs (loop8): 1 truncate cleaned up [ 648.296946][ T5731] usb usb8: usbfs: process 5731 (syz.4.13400) did not claim interface 0 before use [ 648.301777][ T5729] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 648.321372][ T5731] delete_channel: no stack [ 648.335639][ T5677] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.356769][ T852] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.424720][ T5677] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.439580][ T5740] delete_channel: no stack [ 648.452030][ T5743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13404'. [ 648.500238][ T5677] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 648.509511][ T5677] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 648.519270][ T5677] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 648.529017][ T5677] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 648.545927][ T5677] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.553042][ T5677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.560405][ T5677] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.567696][ T5677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.587345][ T5751] loop6: detected capacity change from 0 to 1024 [ 648.605630][ T4959] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.614382][ T4959] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.643103][ T5751] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 648.672372][ T5677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.683934][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 648.711253][ T5751] ext4 filesystem being mounted at /555/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 648.720401][ T5677] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.743857][ T4951] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.750958][ T4951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.811307][ T4951] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.818416][ T4951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.983598][ T5677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.197635][ T5677] veth0_vlan: entered promiscuous mode [ 649.207257][ T5677] veth1_vlan: entered promiscuous mode [ 649.224972][ T5677] veth0_macvtap: entered promiscuous mode [ 649.233457][ T5677] veth1_macvtap: entered promiscuous mode [ 649.246491][ T5677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.257646][ T5677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.267229][ T5677] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.276083][ T5677] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.284845][ T5677] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.293575][ T5677] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.356156][T30675] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.420212][ T5798] netlink: 'syz.7.13418': attribute type 10 has an invalid length. [ 649.429622][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.437607][ T5798] bridge_slave_1: left allmulticast mode [ 649.443435][ T5798] bridge_slave_1: left promiscuous mode [ 649.449180][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.468011][ T5798] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 649.557878][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 649.557894][ T29] audit: type=1326 audit(1749050950.516:21202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.4.13423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcece8e929 code=0x7ffc0000 [ 649.593569][ T29] audit: type=1326 audit(1749050950.526:21203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.4.13423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcece8e929 code=0x7ffc0000 [ 649.617264][ T29] audit: type=1326 audit(1749050950.526:21204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.4.13423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcece8e929 code=0x7ffc0000 [ 649.640985][ T29] audit: type=1326 audit(1749050950.526:21205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.4.13423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcece8e929 code=0x7ffc0000 [ 649.668742][ T29] audit: type=1326 audit(1749050950.626:21206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.4.13423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcece8e929 code=0x7ffc0000 [ 649.692796][ T29] audit: type=1326 audit(1749050950.626:21207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.4.13423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcece8e929 code=0x7ffc0000 [ 649.720773][ T29] audit: type=1326 audit(1749050950.676:21208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.4.13423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdcece8e929 code=0x7ffc0000 [ 649.744558][ T29] audit: type=1326 audit(1749050950.676:21209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.4.13423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcece8e929 code=0x7ffc0000 [ 649.768396][ T29] audit: type=1326 audit(1749050950.676:21210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.4.13423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcece8e929 code=0x7ffc0000 [ 649.792111][ T29] audit: type=1326 audit(1749050950.676:21211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.4.13423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fdcece8e929 code=0x7ffc0000 [ 649.859074][ T5826] delete_channel: no stack [ 649.880556][ T5831] loop7: detected capacity change from 0 to 512 [ 649.895218][ T5831] EXT4-fs (loop7): 1 orphan inode deleted [ 649.901498][ T5831] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 649.914114][ T4951] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:18: Failed to release dquot type 1 [ 649.927018][ T5831] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 649.961467][ T5677] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.205296][ T5852] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 650.754388][ T5853] loop9: detected capacity change from 0 to 1024 [ 650.845792][ T5853] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 650.924838][ T5853] ext4 filesystem being mounted at /588/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 651.103787][ T5870] loop6: detected capacity change from 0 to 512 [ 651.136429][ T5870] EXT4-fs (loop6): 1 orphan inode deleted [ 651.153745][ T5870] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.154443][ T4956] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:23: Failed to release dquot type 1 [ 651.191973][ T5870] ext4 filesystem being mounted at /560/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 651.223392][ T5881] usb usb8: usbfs: process 5881 (syz.7.13450) did not claim interface 0 before use [ 651.264795][T30675] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.300633][ T5881] delete_channel: no stack [ 651.309587][T30996] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.543408][ T5905] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 651.953200][ T5912] __nla_validate_parse: 11 callbacks suppressed [ 651.953220][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13462'. [ 652.041878][ T5916] loop8: detected capacity change from 0 to 512 [ 652.056487][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13468'. [ 652.056677][ T5926] loop7: detected capacity change from 0 to 164 [ 652.070522][ T5916] EXT4-fs (loop8): 1 orphan inode deleted [ 652.076568][ T5926] loop7: detected capacity change from 0 to 128 [ 652.079910][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13468'. [ 652.087254][ T5926] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 652.097350][ T5916] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.104302][ T4984] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:51: Failed to release dquot type 1 [ 652.130924][ T5916] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 652.162862][ T4951] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 652.220422][ T5930] usb usb8: usbfs: process 5930 (syz.4.13470) did not claim interface 0 before use [ 652.232519][ T852] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.266581][ T5937] netlink: 32 bytes leftover after parsing attributes in process `syz.8.13472'. [ 652.276705][ T5930] delete_channel: no stack [ 652.281920][ T5937] netlink: 32 bytes leftover after parsing attributes in process `syz.8.13472'. [ 652.338399][ T5943] netlink: 'syz.7.13475': attribute type 11 has an invalid length. [ 652.346477][ T5943] netlink: 32 bytes leftover after parsing attributes in process `syz.7.13475'. [ 652.407333][ T5952] delete_channel: no stack [ 652.423606][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13481'. [ 652.434286][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13481'. [ 652.454703][ T5961] loop9: detected capacity change from 0 to 512 [ 652.461865][ T5961] EXT4-fs: Ignoring removed orlov option [ 652.468624][ T5961] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 652.483424][ T5961] EXT4-fs (loop9): orphan cleanup on readonly fs [ 652.491781][ T5961] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.13482: bg 0: block 248: padding at end of block bitmap is not set [ 652.519665][ T5961] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.13482: Failed to acquire dquot type 1 [ 652.529367][ T5972] ip6gre1: entered allmulticast mode [ 652.537277][ T5961] EXT4-fs (loop9): 1 truncate cleaned up [ 652.544946][ T5961] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 652.545648][ T4956] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 652.558911][ T5961] EXT4-fs: Ignoring removed orlov option [ 652.570948][ T5961] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 652.577687][ T5972] netlink: 'syz.7.13487': attribute type 12 has an invalid length. [ 652.587669][ T5961] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 652.610945][ T5974] usb usb8: usbfs: process 5974 (syz.4.13488) did not claim interface 0 before use [ 652.620784][ T5961] EXT4-fs error (device loop9): __ext4_remount:6736: comm syz.9.13482: Abort forced by user [ 652.631146][ T5961] EXT4-fs (loop9): Remounting filesystem read-only [ 652.637732][ T5961] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 652.646158][ T5961] ext4 filesystem being remounted at /594/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 652.656837][ T5974] delete_channel: no stack [ 652.672721][T30996] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.722693][ T5981] netlink: 'syz.9.13490': attribute type 11 has an invalid length. [ 652.798287][ T5991] delete_channel: no stack [ 652.836778][ T5994] loop8: detected capacity change from 0 to 164 [ 652.845757][ T5994] loop8: detected capacity change from 0 to 128 [ 652.852380][ T5994] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 652.881183][ T4956] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 652.900275][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13497'. [ 652.968404][ T6008] usb usb8: usbfs: process 6008 (syz.8.13502) did not claim interface 0 before use [ 652.991520][ T6008] delete_channel: no stack [ 653.099026][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13506'. [ 653.836586][ T6037] chnl_net:caif_netlink_parms(): no params data found [ 653.881070][ T6037] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.888409][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.897261][ T6037] bridge_slave_0: entered allmulticast mode [ 653.911067][ T6037] bridge_slave_0: entered promiscuous mode [ 653.934293][ T6037] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.941411][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.948983][ T6037] bridge_slave_1: entered allmulticast mode [ 653.956959][ T6037] bridge_slave_1: entered promiscuous mode [ 653.984292][ T6037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.997926][ T6037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.022420][ T6037] team0: Port device team_slave_0 added [ 654.029772][ T6037] team0: Port device team_slave_1 added [ 654.064390][ T6071] netlink: 'syz.4.13523': attribute type 10 has an invalid length. [ 654.079968][ T6037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.086997][ T6037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.113139][ T6037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.126055][ T6037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.133206][ T6037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.160031][ T6037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.198312][ T6037] hsr_slave_0: entered promiscuous mode [ 654.207551][ T6037] hsr_slave_1: entered promiscuous mode [ 654.213782][ T6037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 654.221575][ T6037] Cannot create hsr debugfs directory [ 654.249542][ T6077] netlink: 'syz.4.13526': attribute type 11 has an invalid length. [ 654.301993][ T6037] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.314491][ T6083] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6083 comm=syz.4.13527 [ 654.372262][ T6087] loop8: detected capacity change from 0 to 1024 [ 654.385572][ T6037] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.399472][ T6087] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 654.411689][ T6087] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 654.489714][ T6037] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.566792][ T6037] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.691560][ T6037] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 654.704947][ T6037] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 654.720436][ T6037] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 654.735323][ T6037] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 654.754538][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 654.754587][ T29] audit: type=1326 audit(1749050955.696:21398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6109 comm="syz.4.13540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcece8e929 code=0x7ffc0000 [ 654.784750][ T29] audit: type=1326 audit(1749050955.696:21399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6109 comm="syz.4.13540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcece8e929 code=0x7ffc0000 [ 654.808866][ T29] audit: type=1326 audit(1749050955.696:21400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6109 comm="syz.4.13540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcece8e929 code=0x7ffc0000 [ 654.832605][ T29] audit: type=1326 audit(1749050955.696:21401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6109 comm="syz.4.13540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcece8e929 code=0x7ffc0000 [ 654.856241][ T29] audit: type=1326 audit(1749050955.696:21402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6109 comm="syz.4.13540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcece8e929 code=0x7ffc0000 [ 654.879891][ T29] audit: type=1326 audit(1749050955.696:21403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6109 comm="syz.4.13540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcece8e929 code=0x7ffc0000 [ 654.903598][ T29] audit: type=1326 audit(1749050955.696:21404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6109 comm="syz.4.13540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcece8e929 code=0x7ffc0000 [ 654.927280][ T29] audit: type=1326 audit(1749050955.696:21405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6109 comm="syz.4.13540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcece8e929 code=0x7ffc0000 [ 654.951214][ T29] audit: type=1326 audit(1749050955.696:21406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6109 comm="syz.4.13540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcece8e929 code=0x7ffc0000 [ 654.974877][ T29] audit: type=1326 audit(1749050955.696:21407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6109 comm="syz.4.13540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcece8e929 code=0x7ffc0000 [ 655.093921][ T6037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.107980][ T6037] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.118596][ T4951] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.125864][ T4951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.140173][ T852] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.151674][ T4951] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.158783][ T4951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.184885][ T6127] bridge0: entered promiscuous mode [ 655.190459][ T6127] macvtap1: entered promiscuous mode [ 655.196010][ T6127] macvtap1: entered allmulticast mode [ 655.201424][ T6127] bridge0: entered allmulticast mode [ 655.220439][ T6127] bridge0: left allmulticast mode [ 655.225641][ T6127] bridge0: left promiscuous mode [ 655.289986][ T6135] bridge0: entered promiscuous mode [ 655.295430][ T6135] macvtap2: entered promiscuous mode [ 655.300859][ T6135] macvtap2: entered allmulticast mode [ 655.306315][ T6135] bridge0: entered allmulticast mode [ 655.321409][ T6037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.334523][ T6135] bridge0: left allmulticast mode [ 655.339775][ T6135] bridge0: left promiscuous mode [ 655.582617][ T6037] veth0_vlan: entered promiscuous mode [ 655.593296][ T6037] veth1_vlan: entered promiscuous mode [ 655.624118][ T6037] veth0_macvtap: entered promiscuous mode [ 655.646628][ T6037] veth1_macvtap: entered promiscuous mode [ 655.661429][ T6037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.680076][ T6037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.690681][ T6037] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.699531][ T6037] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.708335][ T6037] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.717324][ T6037] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.796367][ T6172] loop7: detected capacity change from 0 to 512 [ 655.804225][ T6172] EXT4-fs: Ignoring removed orlov option [ 655.810651][ T6172] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 655.822369][ T6172] EXT4-fs (loop7): 1 orphan inode deleted [ 655.828186][ T6172] EXT4-fs (loop7): 1 truncate cleaned up [ 655.836133][ T6172] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 655.865794][ T5677] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.921903][ T6181] netlink: 'syz.7.13561': attribute type 10 has an invalid length. [ 656.151202][ T6194] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.240619][ T6194] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.251094][ T6199] loop6: detected capacity change from 0 to 512 [ 656.275444][ T6199] EXT4-fs (loop6): 1 orphan inode deleted [ 656.281909][ T6199] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.295055][ T4956] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:23: Failed to release dquot type 1 [ 656.295264][ T6199] ext4 filesystem being mounted at /580/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 656.332333][T30675] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.348638][ T6194] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.362980][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 656.370595][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 656.429647][ T6194] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.502090][ T6194] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.531658][ T6194] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.556267][ T6194] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.582829][ T6194] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.843759][ T6233] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 657.348747][ T6247] __nla_validate_parse: 25 callbacks suppressed [ 657.348772][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13588'. [ 657.552550][ T6255] netlink: 'syz.9.13590': attribute type 10 has an invalid length. [ 657.670754][ T6253] wireguard0: entered promiscuous mode [ 657.679492][ T6253] wireguard0: entered allmulticast mode [ 657.723792][ T6255] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.731640][ T6255] bridge_slave_1: left allmulticast mode [ 657.737367][ T6255] bridge_slave_1: left promiscuous mode [ 657.743092][ T6255] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.754721][ T6255] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 658.036022][ T6290] ip6gre1: entered allmulticast mode [ 658.045765][ T4959] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 658.054814][ T6289] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.13606'. [ 658.065698][ T6290] netlink: 'syz.9.13604': attribute type 12 has an invalid length. [ 658.087460][ T6294] loop8: detected capacity change from 0 to 512 [ 658.106067][ T6294] EXT4-fs (loop8): 1 orphan inode deleted [ 658.112400][ T6294] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.126551][ T4948] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:15: Failed to release dquot type 1 [ 658.135033][ T6294] ext4 filesystem being mounted at /369/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 658.149783][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13606'. [ 658.158868][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13606'. [ 658.184242][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13606'. [ 658.216202][ T852] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.382217][ T6314] loop8: detected capacity change from 0 to 512 [ 658.389479][ T6314] EXT4-fs: Ignoring removed oldalloc option [ 658.449739][ T6313] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.13614'. [ 658.532031][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13614'. [ 658.541199][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13614'. [ 658.550847][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13614'. [ 658.596055][ T6314] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 658.607161][ T6314] EXT4-fs (loop8): orphan cleanup on readonly fs [ 658.614500][ T6314] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.13610: Failed to acquire dquot type 1 [ 658.638774][ T6314] EXT4-fs (loop8): 1 truncate cleaned up [ 658.646040][ T6314] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 659.522112][ T6325] loop9: detected capacity change from 0 to 512 [ 659.528823][ T6325] EXT4-fs: Ignoring removed oldalloc option [ 659.538076][ T6325] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 659.565682][ T6325] EXT4-fs (loop9): orphan cleanup on readonly fs [ 659.572723][ T6325] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.13617: Failed to acquire dquot type 1 [ 659.586581][ T6325] EXT4-fs (loop9): 1 truncate cleaned up [ 659.811571][ T6331] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.886638][ T6331] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.970410][ T6331] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.997610][ T6325] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 660.027128][ T852] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.074512][ T6331] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.129977][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13622'. [ 660.162500][ T6037] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.183862][ T6343] netlink: 'syz.9.13624': attribute type 12 has an invalid length. [ 660.449555][ T6358] usb usb8: usbfs: process 6358 (syz.8.13631) did not claim interface 0 before use [ 660.469667][ T6358] delete_channel: no stack [ 660.546724][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 660.546760][ T29] audit: type=1326 audit(1749050961.506:21436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6362 comm="syz.8.13633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3e36e929 code=0x7ffc0000 [ 660.576595][ T29] audit: type=1326 audit(1749050961.506:21437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6362 comm="syz.8.13633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3e36e929 code=0x7ffc0000 [ 660.619601][ T29] audit: type=1326 audit(1749050961.566:21438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6362 comm="syz.8.13633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb3e36e929 code=0x7ffc0000 [ 660.643322][ T29] audit: type=1326 audit(1749050961.566:21439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6362 comm="syz.8.13633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3e36e929 code=0x7ffc0000 [ 660.667011][ T29] audit: type=1326 audit(1749050961.566:21440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6362 comm="syz.8.13633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb3e36e929 code=0x7ffc0000 [ 660.690817][ T29] audit: type=1326 audit(1749050961.566:21441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6362 comm="syz.8.13633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3e36e929 code=0x7ffc0000 [ 660.715141][ T29] audit: type=1326 audit(1749050961.566:21442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6362 comm="syz.8.13633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb3e36e929 code=0x7ffc0000 [ 660.738771][ T29] audit: type=1326 audit(1749050961.566:21443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6362 comm="syz.8.13633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3e36e929 code=0x7ffc0000 [ 660.762557][ T29] audit: type=1326 audit(1749050961.566:21444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6362 comm="syz.8.13633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb3e36e929 code=0x7ffc0000 [ 660.786220][ T29] audit: type=1326 audit(1749050961.566:21445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6362 comm="syz.8.13633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3e36e929 code=0x7ffc0000 [ 660.823058][ T6361] loop6: detected capacity change from 0 to 1024 [ 660.836003][ T6368] wireguard0: entered promiscuous mode [ 660.841564][ T6368] wireguard0: entered allmulticast mode [ 660.849276][ T6361] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 660.861403][ T6361] ext4 filesystem being mounted at /597/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 660.986687][ T6386] netlink: 'syz.4.13641': attribute type 10 has an invalid length. [ 661.154018][ T6399] loop9: detected capacity change from 0 to 164 [ 661.162396][ T6399] loop9: detected capacity change from 0 to 128 [ 661.169582][ T6399] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 661.196193][ T4951] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 661.369341][ T6422] delete_channel: no stack [ 661.438379][T30675] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.692781][ T6459] loop9: detected capacity change from 0 to 512 [ 661.716424][ T6459] EXT4-fs (loop9): 1 orphan inode deleted [ 661.722990][ T6459] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.737248][ T4951] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:18: Failed to release dquot type 1 [ 661.749074][ T6459] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 661.787505][ T6037] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.800205][ T6331] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.815254][ T6468] loop8: detected capacity change from 0 to 1024 [ 661.829491][ T6331] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.843906][ T6331] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.857690][ T6331] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.935464][ T6468] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 661.978309][ T6468] ext4 filesystem being mounted at /390/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 662.047212][ T6456] chnl_net:caif_netlink_parms(): no params data found [ 662.054258][ T6481] loop9: detected capacity change from 0 to 1024 [ 662.069759][ T6481] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 662.138246][ T6481] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 662.440386][ T6456] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.447571][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 662.455352][ T6456] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.490690][ T6456] bridge_slave_0: entered allmulticast mode [ 662.497383][ T6456] bridge_slave_0: entered promiscuous mode [ 662.504590][ T6456] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.511671][ T6456] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.519090][ T6456] bridge_slave_1: entered allmulticast mode [ 662.526582][ T6456] bridge_slave_1: entered promiscuous mode [ 662.561768][ T6456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.583113][ T6456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.590004][ T6493] __nla_validate_parse: 11 callbacks suppressed [ 662.590026][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13678'. [ 662.628941][ T6456] team0: Port device team_slave_0 added [ 662.645919][ T6456] team0: Port device team_slave_1 added [ 662.715500][ T6456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.722584][ T6456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.748710][ T6456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.777325][ T6456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.784380][ T6456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.811394][ T6456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.822626][ T852] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.889046][ T6456] hsr_slave_0: entered promiscuous mode [ 662.899094][ T6456] hsr_slave_1: entered promiscuous mode [ 662.913359][ T6456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 662.939224][ T6505] loop8: detected capacity change from 0 to 512 [ 662.948494][ T6456] Cannot create hsr debugfs directory [ 662.968193][ T6507] tipc: Enabled bearer , priority 0 [ 662.977458][ T6507] tipc: Resetting bearer [ 662.988211][ T6505] EXT4-fs (loop8): 1 orphan inode deleted [ 662.993786][ T6506] tipc: Disabling bearer [ 663.000903][ T6505] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 663.016063][ T6505] ext4 filesystem being mounted at /392/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 663.027095][ T4948] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:15: Failed to release dquot type 1 [ 663.082316][ T852] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.114488][ T6037] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.124622][ T6515] netlink: 'syz.4.13688': attribute type 9 has an invalid length. [ 663.144056][ T6519] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 663.156472][ T6456] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.166957][ T6519] netlink: 'syz.8.13687': attribute type 10 has an invalid length. [ 663.179883][ T6520] loop9: detected capacity change from 0 to 512 [ 663.181563][ T6519] bridge_slave_1: entered promiscuous mode [ 663.192207][ T6519] bridge_slave_1: entered allmulticast mode [ 663.193392][ T6520] EXT4-fs: Ignoring removed orlov option [ 663.199536][ T6519] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 663.213211][ T6520] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 663.225902][ T6520] EXT4-fs (loop9): orphan cleanup on readonly fs [ 663.234773][ T6520] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.13689: bg 0: block 248: padding at end of block bitmap is not set [ 663.249628][ T6520] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.13689: Failed to acquire dquot type 1 [ 663.250455][ T6456] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.271806][ T6520] EXT4-fs (loop9): 1 truncate cleaned up [ 663.278211][ T6520] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 663.295546][ T6520] EXT4-fs: Ignoring removed orlov option [ 663.301857][ T6520] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 663.311915][ T6520] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 663.334807][ T6456] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.346482][ T6520] EXT4-fs error (device loop9): __ext4_remount:6736: comm syz.9.13689: Abort forced by user [ 663.357099][ T6520] EXT4-fs (loop9): Remounting filesystem read-only [ 663.363759][ T6520] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 663.374562][ T6520] ext4 filesystem being remounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 663.408055][ T6037] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.444579][ T6456] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.478558][ T6538] netlink: 32 bytes leftover after parsing attributes in process `syz.9.13696'. [ 663.490150][ T6538] netlink: 32 bytes leftover after parsing attributes in process `syz.9.13696'. [ 663.543379][ T6542] syzkaller0: entered promiscuous mode [ 663.549015][ T6542] syzkaller0: entered allmulticast mode [ 663.558775][ T6456] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 663.576113][ T6456] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 663.583315][ T6544] loop8: detected capacity change from 0 to 1024 [ 663.596506][ T6544] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 663.609022][ T6456] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 663.619846][ T6456] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 663.643043][ T6544] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 663.676520][ T6456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.695163][ T6456] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.701416][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13700'. [ 663.711047][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13700'. [ 663.715258][ T6456] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 663.730464][ T6456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 663.742586][ T4948] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.749839][ T4948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.762812][ T4948] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.769921][ T4948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.790410][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13700'. [ 663.879087][ T6556] wireguard0: entered promiscuous mode [ 663.886167][ T6556] wireguard0: entered allmulticast mode [ 663.947544][ T6456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.043803][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 664.051626][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 664.133147][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13704'. [ 664.298175][ T6581] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13707'. [ 664.329094][ T6456] veth0_vlan: entered promiscuous mode [ 664.346950][ T6456] veth1_vlan: entered promiscuous mode [ 664.362535][ T6581] loop9: detected capacity change from 0 to 512 [ 664.389254][ T6456] veth0_macvtap: entered promiscuous mode [ 664.404622][ T6456] veth1_macvtap: entered promiscuous mode [ 664.410893][ T6581] EXT4-fs: Ignoring removed orlov option [ 664.425789][ T6581] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 664.441050][ T6456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.454924][ T6456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.467020][ T6584] netlink: 40 bytes leftover after parsing attributes in process `syz.7.13708'. [ 664.482281][ T6456] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.490847][ T6581] EXT4-fs (loop9): orphan cleanup on readonly fs [ 664.491089][ T6456] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.499679][ T6581] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.13707: bg 0: block 248: padding at end of block bitmap is not set [ 664.506094][ T6456] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.529508][ T6456] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.549035][ T6581] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.13707: Failed to acquire dquot type 1 [ 664.573617][ T6581] EXT4-fs (loop9): 1 truncate cleaned up [ 664.579845][ T6581] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 664.597983][ T852] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.612992][ T6590] netlink: 32 bytes leftover after parsing attributes in process `syz.7.13710'. [ 664.651699][ T6581] EXT4-fs: Ignoring removed orlov option [ 664.658274][ T6581] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 664.674070][ T6581] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 664.705405][ T6581] EXT4-fs error (device loop9): __ext4_remount:6736: comm syz.9.13707: Abort forced by user [ 664.719784][ T6581] EXT4-fs (loop9): Remounting filesystem read-only [ 664.726654][ T6581] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 664.765080][ T6581] ext4 filesystem being remounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 664.800962][ T6610] loop6: detected capacity change from 0 to 512 [ 664.808995][ T6037] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.826422][ T6610] EXT4-fs (loop6): 1 orphan inode deleted [ 664.835665][ T6610] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.850161][ T4984] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:51: Failed to release dquot type 1 [ 664.851925][ T6610] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 664.888668][ T6456] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.929166][ T6619] loop9: detected capacity change from 0 to 512 [ 664.936019][ T6619] EXT4-fs: Ignoring removed oldalloc option [ 664.943083][ T6619] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 664.952400][ T6619] EXT4-fs (loop9): orphan cleanup on readonly fs [ 664.959368][ T6619] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.13719: Failed to acquire dquot type 1 [ 664.971160][ T6619] EXT4-fs (loop9): 1 truncate cleaned up [ 664.996563][ T6619] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 665.189227][ T6636] loop6: detected capacity change from 0 to 1024 [ 665.205564][ T6636] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 665.218146][ T6636] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 665.280691][ T6644] loop7: detected capacity change from 0 to 512 [ 665.305755][ T6644] EXT4-fs (loop7): 1 orphan inode deleted [ 665.319586][ T6644] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.340327][ T4984] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:51: Failed to release dquot type 1 [ 665.377424][ T6644] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 665.396231][ T6654] loop8: detected capacity change from 0 to 512 [ 665.413466][ T6654] EXT4-fs: Ignoring removed orlov option [ 665.431066][ T6654] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 665.452154][ T6657] syzkaller0: entered promiscuous mode [ 665.457872][ T6657] syzkaller0: entered allmulticast mode [ 665.475044][ T6654] EXT4-fs (loop8): 1 orphan inode deleted [ 665.480856][ T6654] EXT4-fs (loop8): 1 truncate cleaned up [ 665.599053][ T6669] 8021q: adding VLAN 0 to HW filter on device team2 [ 665.627679][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 665.627716][ T29] audit: type=1326 audit(1749050966.586:21624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.7.13740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83640ee929 code=0x7ffc0000 [ 665.670649][ T29] audit: type=1326 audit(1749050966.616:21625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.7.13740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83640ee929 code=0x7ffc0000 [ 665.694490][ T29] audit: type=1326 audit(1749050966.626:21626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.7.13740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83640ee929 code=0x7ffc0000 [ 665.718208][ T29] audit: type=1326 audit(1749050966.626:21627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.7.13740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83640ee929 code=0x7ffc0000 [ 665.722828][ T6673] usb usb8: usbfs: process 6673 (syz.8.13741) did not claim interface 0 before use [ 665.755976][ T29] audit: type=1326 audit(1749050966.706:21628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.7.13740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83640ee929 code=0x7ffc0000 [ 665.779784][ T29] audit: type=1326 audit(1749050966.706:21629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.7.13740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83640ee929 code=0x7ffc0000 [ 665.803498][ T29] audit: type=1326 audit(1749050966.706:21630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.7.13740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83640ee929 code=0x7ffc0000 [ 665.837014][ T29] audit: type=1326 audit(1749050966.786:21631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.7.13740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83640ee929 code=0x7ffc0000 [ 665.860892][ T29] audit: type=1326 audit(1749050966.786:21632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.7.13740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83640ee929 code=0x7ffc0000 [ 665.884752][ T29] audit: type=1326 audit(1749050966.786:21633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.7.13740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83640ee929 code=0x7ffc0000 [ 665.928835][ T6673] delete_channel: no stack [ 665.963870][ T6679] usb usb8: usbfs: process 6679 (syz.9.13742) did not claim interface 0 before use [ 665.991652][ T6679] delete_channel: no stack [ 666.166288][ T6689] loop8: detected capacity change from 0 to 512 [ 666.201082][ T6689] EXT4-fs: Ignoring removed orlov option [ 666.210428][ T6689] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 666.234158][ T6689] EXT4-fs (loop8): 1 orphan inode deleted [ 666.240057][ T6689] EXT4-fs (loop8): 1 truncate cleaned up [ 666.317409][ T6705] 8021q: adding VLAN 0 to HW filter on device team1 [ 666.510618][ T6711] loop8: detected capacity change from 0 to 512 [ 666.517610][ T6711] EXT4-fs: Ignoring removed oldalloc option [ 666.531806][ T6711] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 666.599397][ T6711] EXT4-fs (loop8): orphan cleanup on readonly fs [ 666.607401][ T6711] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.13754: Failed to acquire dquot type 1 [ 666.620594][ T6711] EXT4-fs (loop8): 1 truncate cleaned up [ 667.106398][ T6714] loop9: detected capacity change from 0 to 1024 [ 667.174144][ T6714] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 667.440407][ T6718] usb usb8: usbfs: process 6718 (syz.7.13756) did not claim interface 0 before use [ 667.663687][ T6716] delete_channel: no stack [ 667.872456][ T6727] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6727 comm=syz.7.13759 [ 668.196367][ T6729] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 668.227306][ T6733] __nla_validate_parse: 23 callbacks suppressed [ 668.227327][ T6733] netlink: 32 bytes leftover after parsing attributes in process `syz.8.13761'. [ 668.288002][ T6733] netlink: 32 bytes leftover after parsing attributes in process `syz.8.13761'. [ 668.368599][ T6740] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 668.549575][ T6756] SELinux: policydb version 0 does not match my version range 15-34 [ 668.569044][ T6756] SELinux: failed to load policy [ 668.614209][ T6764] loop9: detected capacity change from 0 to 512 [ 668.630199][ T6764] EXT4-fs: Ignoring removed orlov option [ 668.673457][ T6764] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 668.695509][ T6764] EXT4-fs (loop9): orphan cleanup on readonly fs [ 668.712546][ T6764] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.13775: bg 0: block 248: padding at end of block bitmap is not set [ 668.746802][ T6764] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.13775: Failed to acquire dquot type 1 [ 668.804883][ T6764] EXT4-fs (loop9): 1 truncate cleaned up [ 668.824915][ T6764] EXT4-fs: Ignoring removed orlov option [ 668.830757][ T6764] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 668.843171][ T6764] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 668.916259][ T6764] EXT4-fs error (device loop9): __ext4_remount:6736: comm syz.9.13775: Abort forced by user [ 668.966776][ T6764] EXT4-fs (loop9): Remounting filesystem read-only [ 668.973457][ T6764] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 668.992988][ T6764] ext4 filesystem being remounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 669.035285][ T6785] loop8: detected capacity change from 0 to 512 [ 669.165944][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 669.241146][ T6789] loop6: detected capacity change from 0 to 1024 [ 669.279545][ T6789] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 669.302028][ T6785] EXT4-fs (loop8): 1 orphan inode deleted [ 669.324984][ T4959] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:26: Failed to release dquot type 1 [ 669.358251][ T6785] ext4 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 669.491558][ T6803] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.564819][ T6803] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.614637][ T6803] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.676312][ T6803] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.741284][ T6803] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.757512][ T6803] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.770733][ T6803] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.782962][ T6803] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.808068][ T6807] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.13791'. [ 669.836548][ T6810] netlink: 32 bytes leftover after parsing attributes in process `syz.8.13792'. [ 669.845791][ T6810] netlink: 32 bytes leftover after parsing attributes in process `syz.8.13792'. [ 669.877814][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13791'. [ 669.887016][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13791'. [ 669.900583][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13791'. [ 670.016449][ T6814] usb usb8: usbfs: process 6814 (syz.6.13793) did not claim interface 0 before use [ 670.036128][ T6814] delete_channel: no stack [ 670.147978][ T6819] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.226933][ T6819] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.272853][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13801'. [ 670.316108][ T6819] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.467695][ T6819] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.493654][ T6845] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6845 comm=syz.8.13807 [ 670.524786][ T6819] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.537174][ T6819] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.552437][ T6819] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.566569][ T6819] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.590342][ T6849] loop8: detected capacity change from 0 to 512 [ 670.597675][ T6849] EXT4-fs: Ignoring removed oldalloc option [ 670.604640][ T6849] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 670.614410][ T6849] EXT4-fs (loop8): orphan cleanup on readonly fs [ 670.621375][ T6849] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.13808: Failed to acquire dquot type 1 [ 670.637811][ T6849] EXT4-fs (loop8): 1 truncate cleaned up [ 670.697400][ T6854] loop7: detected capacity change from 0 to 512 [ 670.704489][ T6854] EXT4-fs: Ignoring removed orlov option [ 670.711611][ T6854] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 670.726006][ T6854] EXT4-fs (loop7): orphan cleanup on readonly fs [ 670.758405][ T6856] loop6: detected capacity change from 0 to 512 [ 670.768429][ T6854] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.13810: bg 0: block 248: padding at end of block bitmap is not set [ 670.785501][ T6854] __quota_error: 125 callbacks suppressed [ 670.785515][ T6854] Quota error (device loop7): write_blk: dquota write failed [ 670.798868][ T6854] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 670.808839][ T6854] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.13810: Failed to acquire dquot type 1 [ 670.823738][ T6854] EXT4-fs (loop7): 1 truncate cleaned up [ 670.832085][ T6856] EXT4-fs (loop6): 1 orphan inode deleted [ 670.840428][ T6856] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 670.851496][ T4948] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 670.861326][ T4948] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:15: Failed to release dquot type 1 [ 670.894276][ T6854] EXT4-fs: Ignoring removed orlov option [ 670.900244][ T6854] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 670.920688][ T6854] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 670.934878][ T6854] EXT4-fs error (device loop7): __ext4_remount:6736: comm syz.7.13810: Abort forced by user [ 670.953559][ T6854] EXT4-fs (loop7): Remounting filesystem read-only [ 670.960207][ T6854] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 670.971516][ T6854] ext4 filesystem being remounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 671.011602][ T6864] netlink: 200 bytes leftover after parsing attributes in process `syz.7.13813'. [ 671.083031][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 671.090679][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 671.138968][ T6875] bridge0: entered promiscuous mode [ 671.146778][ T6875] macvtap1: entered promiscuous mode [ 671.152263][ T6875] macvtap1: entered allmulticast mode [ 671.157798][ T6875] bridge0: entered allmulticast mode [ 671.178842][ T6875] bridge0: left allmulticast mode [ 671.184149][ T6875] bridge0: left promiscuous mode [ 671.201507][ T6877] loop6: detected capacity change from 0 to 512 [ 671.211365][ T6877] EXT4-fs: Ignoring removed orlov option [ 671.226045][ T6877] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 671.238071][ T6877] EXT4-fs (loop6): 1 orphan inode deleted [ 671.243893][ T6877] EXT4-fs (loop6): 1 truncate cleaned up [ 671.401551][ T6889] loop8: detected capacity change from 0 to 164 [ 671.439815][ T6889] loop8: detected capacity change from 0 to 128 [ 671.461004][ T6889] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 671.506632][ T29] audit: type=1326 audit(1749050972.466:21752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.8.13823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3e36e929 code=0x7ffc0000 [ 671.530402][ T29] audit: type=1326 audit(1749050972.466:21753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.8.13823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb3e36e929 code=0x7ffc0000 [ 671.554708][ T29] audit: type=1326 audit(1749050972.466:21754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.8.13823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3e36e929 code=0x7ffc0000 [ 671.578531][ T29] audit: type=1326 audit(1749050972.466:21755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.8.13823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb3e36e929 code=0x7ffc0000 [ 671.602414][ T29] audit: type=1326 audit(1749050972.466:21756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.8.13823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3e36e929 code=0x7ffc0000 [ 671.626078][ T29] audit: type=1326 audit(1749050972.466:21757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.8.13823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ffb3e36e929 code=0x7ffc0000 [ 671.653181][ T29] audit: type=1326 audit(1749050972.586:21758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.8.13823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3e36e929 code=0x7ffc0000 [ 671.689502][ T4951] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 671.818862][ T6909] 8021q: adding VLAN 0 to HW filter on device team3 [ 671.829061][ T6908] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.874888][ T6908] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.905087][ T6913] usb usb8: usbfs: process 6913 (syz.4.13834) did not claim interface 0 before use [ 671.918266][ T6913] delete_channel: no stack [ 671.931813][ T6918] loop7: detected capacity change from 0 to 512 [ 671.938781][ T6918] EXT4-fs: Ignoring removed orlov option [ 671.944710][ T6918] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 671.956544][ T6918] EXT4-fs (loop7): 1 orphan inode deleted [ 671.962316][ T6918] EXT4-fs (loop7): 1 truncate cleaned up [ 671.970347][ T6908] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.002748][ T6922] loop7: detected capacity change from 0 to 512 [ 672.009535][ T6922] EXT4-fs: Ignoring removed orlov option [ 672.015740][ T6922] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 672.025043][ T6922] EXT4-fs (loop7): orphan cleanup on readonly fs [ 672.032658][ T6922] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.13837: bg 0: block 248: padding at end of block bitmap is not set [ 672.050198][ T6922] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.13837: Failed to acquire dquot type 1 [ 672.063371][ T6922] EXT4-fs (loop7): 1 truncate cleaned up [ 672.070117][ T6908] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.082785][ T6922] EXT4-fs: Ignoring removed orlov option [ 672.088862][ T6922] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 672.097737][ T6922] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 672.113368][ T6922] EXT4-fs error (device loop7): __ext4_remount:6736: comm syz.7.13837: Abort forced by user [ 672.124399][ T6922] EXT4-fs (loop7): Remounting filesystem read-only [ 672.131124][ T6922] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 672.139614][ T6922] ext4 filesystem being remounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 672.190011][ T6932] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6932 comm=syz.7.13840 [ 672.266876][ T6942] netlink: 'syz.4.13846': attribute type 32 has an invalid length. [ 672.276614][ T6938] loop9: detected capacity change from 0 to 164 [ 672.292160][ T6938] loop9: detected capacity change from 0 to 128 [ 672.300996][ T6938] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 672.312159][ T6945] loop7: detected capacity change from 0 to 512 [ 672.338341][ T6945] EXT4-fs: Ignoring removed orlov option [ 672.338385][ T4951] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 672.346066][ T6945] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 672.369985][ T6945] EXT4-fs (loop7): 1 orphan inode deleted [ 672.375919][ T6945] EXT4-fs (loop7): 1 truncate cleaned up [ 672.588646][ T6958] loop6: detected capacity change from 0 to 1024 [ 672.607462][ T6958] EXT4-fs mount: 31 callbacks suppressed [ 672.607481][ T6958] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 672.629575][ T6958] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 673.177122][ T6456] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.234946][ T6968] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6968 comm=syz.4.13854 [ 673.306653][ T6982] __nla_validate_parse: 12 callbacks suppressed [ 673.306672][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13861'. [ 673.371275][ T6989] netlink: 'syz.7.13865': attribute type 32 has an invalid length. [ 673.380805][ T6989] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.13865'. [ 673.451482][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13865'. [ 673.460637][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13865'. [ 673.474213][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13865'. [ 673.489418][ T6985] loop9: detected capacity change from 0 to 1024 [ 673.506107][ T6985] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 673.519317][ T6985] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 673.589964][ T6037] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.149054][ T6908] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.162442][ T6908] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.175409][ T6908] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.189216][ T6908] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.237003][ T7009] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7009 comm=syz.4.13870 [ 674.322068][ T7026] netlink: 16 bytes leftover after parsing attributes in process `syz.7.13878'. [ 674.331930][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13878'. [ 674.343037][ T7024] loop8: detected capacity change from 0 to 512 [ 674.355707][ T7024] EXT4-fs (loop8): 1 orphan inode deleted [ 674.362085][ T7024] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 674.374691][ T4984] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:51: Failed to release dquot type 1 [ 674.375010][ T7024] ext4 filesystem being mounted at /424/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 674.422060][ T852] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.439265][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13880'. [ 674.455666][ T7033] 8021q: adding VLAN 0 to HW filter on device team4 [ 674.471705][ T7035] netlink: 548 bytes leftover after parsing attributes in process `syz.9.13881'. [ 674.492483][ T7037] netlink: 32 bytes leftover after parsing attributes in process `syz.8.13882'. [ 675.011442][ T7045] netlink: 'syz.6.13885': attribute type 32 has an invalid length. [ 675.221927][ T7062] bridge0: entered promiscuous mode [ 675.229687][ T7062] macvtap3: entered promiscuous mode [ 675.235461][ T7062] macvtap3: entered allmulticast mode [ 675.241017][ T7062] bridge0: entered allmulticast mode [ 675.256034][ T7062] bridge0: left allmulticast mode [ 675.261309][ T7062] bridge0: left promiscuous mode [ 675.299336][ T7064] loop7: detected capacity change from 0 to 164 [ 675.308355][ T7064] loop7: detected capacity change from 0 to 128 [ 675.315211][ T7064] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 675.349575][ T5003] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 675.391857][ T7068] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.420258][ T7072] loop9: detected capacity change from 0 to 164 [ 675.428321][ T7072] loop9: detected capacity change from 0 to 128 [ 675.436139][ T7072] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 675.437064][ T7068] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.467545][ T4959] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 675.488957][ T7074] bridge0: entered promiscuous mode [ 675.494770][ T7074] macvtap2: entered promiscuous mode [ 675.500181][ T7074] macvtap2: entered allmulticast mode [ 675.505712][ T7074] bridge0: entered allmulticast mode [ 675.513598][ T7068] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.524750][ T7074] bridge0: left allmulticast mode [ 675.529933][ T7074] bridge0: left promiscuous mode [ 675.576066][ T7068] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.664653][ T7068] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.676544][ T7068] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.688436][ T7068] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.700446][ T7068] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.802430][ T7082] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 676.185674][ T7091] tipc: Enabled bearer , priority 0 [ 676.192775][ T7091] syzkaller0: entered promiscuous mode [ 676.198322][ T7091] syzkaller0: entered allmulticast mode [ 676.216124][ T7091] tipc: Resetting bearer [ 676.224783][ T7090] tipc: Resetting bearer [ 676.232474][ T7090] tipc: Disabling bearer [ 676.320819][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 676.320846][ T29] audit: type=1326 audit(1749050977.256:21843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7098 comm="syz.8.13909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3e36e929 code=0x7ffc0000 [ 676.350879][ T29] audit: type=1326 audit(1749050977.256:21844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7098 comm="syz.8.13909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3e36e929 code=0x7ffc0000 [ 676.374636][ T29] audit: type=1326 audit(1749050977.256:21845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7098 comm="syz.8.13909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb3e36e929 code=0x7ffc0000 [ 676.398772][ T29] audit: type=1326 audit(1749050977.256:21846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7098 comm="syz.8.13909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3e36e929 code=0x7ffc0000 [ 676.422451][ T29] audit: type=1326 audit(1749050977.256:21847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7098 comm="syz.8.13909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3e36e929 code=0x7ffc0000 [ 676.446186][ T29] audit: type=1326 audit(1749050977.256:21848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7098 comm="syz.8.13909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb3e36e929 code=0x7ffc0000 [ 676.470007][ T29] audit: type=1326 audit(1749050977.256:21849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7098 comm="syz.8.13909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3e36e929 code=0x7ffc0000 [ 676.493647][ T29] audit: type=1326 audit(1749050977.256:21850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7098 comm="syz.8.13909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb3e36e929 code=0x7ffc0000 [ 676.517496][ T29] audit: type=1326 audit(1749050977.256:21851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7098 comm="syz.8.13909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3e36e929 code=0x7ffc0000 [ 676.541192][ T29] audit: type=1326 audit(1749050977.256:21852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7098 comm="syz.8.13909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3e36e929 code=0x7ffc0000 [ 676.603240][ C1] ================================================================== [ 676.611349][ C1] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 676.618369][ C1] [ 676.620684][ C1] read-write to 0xffff888237c2b664 of 4 bytes by task 1040 on cpu 0: [ 676.628745][ C1] wq_worker_running+0x95/0x120 [ 676.633592][ C1] schedule_timeout+0xb7/0x170 [ 676.638363][ C1] msleep+0x50/0x90 [ 676.642260][ C1] nsim_fib_event_work+0x1ebc/0x21a0 [ 676.647555][ C1] process_scheduled_works+0x4cb/0x9d0 [ 676.653018][ C1] worker_thread+0x582/0x770 [ 676.657614][ C1] kthread+0x486/0x510 [ 676.661684][ C1] ret_from_fork+0xda/0x150 [ 676.666204][ C1] ret_from_fork_asm+0x1a/0x30 [ 676.670965][ C1] [ 676.673280][ C1] read to 0xffff888237c2b664 of 4 bytes by interrupt on cpu 1: [ 676.680813][ C1] kick_pool+0x49/0x2d0 [ 676.684975][ C1] __queue_work+0x8d6/0xb60 [ 676.689661][ C1] queue_work_on+0xd1/0x160 [ 676.694262][ C1] wg_packet_receive+0xf55/0x1390 [ 676.699647][ C1] wg_receive+0x4e/0x80 [ 676.703815][ C1] udpv6_queue_rcv_one_skb+0xb6e/0xc00 [ 676.709380][ C1] udpv6_queue_rcv_skb+0x1fe/0x2b0 [ 676.714518][ C1] udp6_unicast_rcv_skb+0x195/0x1b0 [ 676.719742][ C1] __udp6_lib_rcv+0xa01/0xb20 [ 676.724429][ C1] udpv6_rcv+0x4f/0x60 [ 676.728506][ C1] ip6_protocol_deliver_rcu+0xa7c/0x10d0 [ 676.734140][ C1] ip6_input+0xbe/0x1b0 [ 676.738295][ C1] ip6_rcv_finish+0x1f8/0x330 [ 676.742970][ C1] ipv6_rcv+0x72/0x150 [ 676.747037][ C1] __netif_receive_skb+0x9e/0x270 [ 676.752081][ C1] process_backlog+0x229/0x420 [ 676.756958][ C1] __napi_poll+0x66/0x3a0 [ 676.761384][ C1] net_rx_action+0x391/0x830 [ 676.765971][ C1] handle_softirqs+0xb7/0x290 [ 676.770651][ C1] do_softirq+0x5d/0x90 [ 676.774805][ C1] __local_bh_enable_ip+0x70/0x80 [ 676.779833][ C1] _raw_read_unlock_bh+0x1b/0x30 [ 676.784788][ C1] wg_socket_send_skb_to_peer+0x111/0x130 [ 676.790551][ C1] wg_packet_tx_worker+0x12d/0x330 [ 676.795674][ C1] process_scheduled_works+0x4cb/0x9d0 [ 676.801227][ C1] worker_thread+0x582/0x770 [ 676.805827][ C1] kthread+0x486/0x510 [ 676.809899][ C1] ret_from_fork+0xda/0x150 [ 676.814399][ C1] ret_from_fork_asm+0x1a/0x30 [ 676.819166][ C1] [ 676.821491][ C1] value changed: 0x00000000 -> 0x00000001 [ 676.827199][ C1] [ 676.829512][ C1] Reported by Kernel Concurrency Sanitizer on: [ 676.835657][ C1] CPU: 1 UID: 0 PID: 3381 Comm: kworker/1:2 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 676.847803][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 676.857858][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 676.863940][ C1] ================================================================== [ 678.763146][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 679.404014][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 679.404049][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!