last executing test programs: 4m28.523631222s ago: executing program 4 (id=2646): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001180)={[{@delalloc}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@abort}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000080)='./bus\x00', 0x14927e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x4002011, r0, 0x3000) fallocate(r0, 0x0, 0x0, 0x1000f4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000005000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 4m28.228410908s ago: executing program 4 (id=2657): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000001080)=[@in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x27}, 0x3}]}, &(0x7f0000000140)=0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) cachestat(r3, &(0x7f0000000040)={0x10, 0xfffffffffffffffa}, &(0x7f0000000080), 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 4m28.10902301s ago: executing program 4 (id=2659): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000008000000000000000000077e4ffffc50700008700000095"], &(0x7f0000000400)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setreuid(0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000340)=""/131) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000ab3dc9350000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x8811) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x7, 0x8, 0x1) geteuid() set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='selinux_audited\x00', r5}, 0x18) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f00000006c0)=0xc) syz_open_procfs(r6, &(0x7f0000000700)='net/fib_trie\x00') listxattr(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 4m28.043826631s ago: executing program 4 (id=2660): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000080000850000001b000000b700000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c20000002059249b379086dd601081140008110000000069305da7872ec6d00000000000ff02000000000000000000000000000100000e2246089078"], 0x0) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket(0x14, 0x6, 0xa8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file1\x00', 0x18000, &(0x7f0000002480)=ANY=[@ANYRES32=0x0, @ANYRES8=r6, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES64, @ANYRES64, @ANYRESOCT=r3], 0x1, 0x2eb, &(0x7f00000004c0)="$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") r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7030000e2000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x58, 0x5}, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x20000000, 0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000200)="2be9e8440a0570ff127b807be8c5ec539398fa2247d3c7d4e477e6f0") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000020000020000000500000000300200", @ANYRES32=r9, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="0500000003000000010000ba7d808ee3474043d42e17e65493ab0009"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r10}, &(0x7f0000000a00), &(0x7f0000000a40)=r9}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r10}, &(0x7f0000000880), &(0x7f00000008c0)=r9}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 4m27.927875254s ago: executing program 4 (id=2665): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r0, 0x0, 0x0) 4m27.739523907s ago: executing program 4 (id=2673): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001180)={[{@delalloc}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@abort}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000080)='./bus\x00', 0x14927e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x4002011, r0, 0x3000) fallocate(r0, 0x0, 0x0, 0x1000f4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 4m27.720596738s ago: executing program 32 (id=2673): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001180)={[{@delalloc}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@abort}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000080)='./bus\x00', 0x14927e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x4002011, r0, 0x3000) fallocate(r0, 0x0, 0x0, 0x1000f4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 4m25.128032317s ago: executing program 1 (id=2719): socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="af", 0x1, 0x840, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4m25.072132049s ago: executing program 1 (id=2720): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) gettid() futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 4m24.940156931s ago: executing program 1 (id=2721): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES8=r0, @ANYRES8=r1, @ANYRESDEC=r1, @ANYRES16=r0, @ANYRES8, @ANYRESHEX=r2, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000000)={0x0, 0x3f, "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"}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r6, 0x4008941a, &(0x7f0000000000)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) 4m24.904539921s ago: executing program 1 (id=2723): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0xd) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x31, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = creat(&(0x7f00000001c0)='./bus\x00', 0x40) io_setup(0x9, &(0x7f0000000300)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) io_submit(r7, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r6, &(0x7f0000000000), 0x100000}]) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) 4m24.552051348s ago: executing program 1 (id=2727): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ptrace$getsig(0x4202, r0, 0xc, &(0x7f0000000440)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x2, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x21d, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x400c8b4) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x10) 4m24.056222008s ago: executing program 1 (id=2731): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021181500001e0a0501000000000000000007"], 0x159c}}, 0x0) 4m24.056053928s ago: executing program 33 (id=2731): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021181500001e0a0501000000000000000007"], 0x159c}}, 0x0) 4m7.581316302s ago: executing program 3 (id=3084): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000010000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e000100636f6e6e6c696d6974"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 4m7.499777514s ago: executing program 3 (id=3089): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000008000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "4c0a6efd7ae00600", "a7bc718139d4d39075842336519636be270e3edb9e947147d8fb2e42c17447b9", "0000008a", "3aaa2195bb4a6ec5"}, 0x38) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) close_range(r0, r1, 0x0) 4m7.478193104s ago: executing program 3 (id=3091): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file1\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000005100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200000}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8a}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xb, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES64=r2, @ANYRES32=r2, @ANYRESHEX=r2, @ANYRESDEC=r5, @ANYRES8=r3, @ANYRESDEC=r5, @ANYRES8], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "4c0a6efd7ae00600", "a7bc718139d4d39075842336519636be270e3edb9e947147d8fb2e42c17447b9", "0000008a", "3aaa2195bb4a6ec5"}, 0x38) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) close_range(r0, r1, 0x0) 4m7.462173045s ago: executing program 3 (id=3092): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000680)={0x8, 0x120, 0xfa00, {0x3, {0xfffffffb, 0xd572def, "a5ab4734e3989c4f5bea215d3aba32fc21874041f4f893479cb6889224f8619b0a6a92156345840a835681b46f0c20aa5c53577510cbb4287a82380c9acadf55c3eaac711ec36d87b21fb323814fbec61ab85cfd0b8060cf43f1c41b11a1af1f6c1d3119c6d7890442e3c270d0075741400fdc9d8e82cf164fa80d04e8584a6113808b244dc91dd152111c7df4d6a6123d4613109d6525548741cd4d4bb4c8e74493a8bc70d0fca9b3ab6aecf0a84e89ee185e9f8242e71b8182d5d73613fe0cb5dbe61fbb0c7a9a27621bd97d443c81bc5ec4bcb9cfa7ce29bf07ee9062882563d6067cfa931292c81126b1d2128dd4444e08d20a0ce2b4c3d6fed45d1a0629", 0x9, 0x81, 0x7, 0x8, 0xa, 0x8, 0x1, 0x1}, r3}}, 0x128) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r2}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4, 0x0, 0x6}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4ee, &(0x7f0000000880)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r5 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r5, &(0x7f0000000040)=[{0x4, 0x7, 0x0, 0x0, @tick=0xf64b, {0x0, 0xb8}, {0x4, 0x6}, @control={0x2, 0x7f, 0x2}}, {0x0, 0x3, 0x0, 0x4, @time={0x83, 0xa77f}, {0x2, 0x4}, {0x0, 0x2}, @control={0x8, 0x4, 0x4c8}}], 0x38) 4m7.350758767s ago: executing program 3 (id=3093): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) tkill(0x0, 0x12) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x3}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000140)=0x1e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 4m7.131863641s ago: executing program 3 (id=3101): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = openat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x2000, 0x0, 0x4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) pipe(&(0x7f0000000380)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x2f, 0x10, 0x2c, 0x5, 0x40, @private1, @loopback, 0x40, 0x10, 0x0, 0xffffff8b}}) r11 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000940)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f0000000b40)={0x88, r1, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}]}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}]}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x88}, 0x1, 0x0, 0x0, 0x4048051}, 0x2004010) write$tun(r11, &(0x7f0000000600)=ANY=[@ANYBLOB="7f7215b6d68e34d5"], 0x32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x21, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000008000000000000000100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf910070e1674a0959320000060000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', r10, 0x0, r11, 0x8, &(0x7f0000000700)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0xd, 0x81, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780), 0x0, 0x10, 0xf915}, 0x94) sendmsg$AUDIT_USER_TTY(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x464, 0x20, 0x1070bd28, 0x25dfdbfd, "be5f366e093af6b785b51df0df6441872d4c187b8d158bf81094dd1be429dfec255ecc5175d97fc3ece74029", ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000003880)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000980)={0x2c, r3, 0x99006fdb418a4dd5, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c040}, 0x40000) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd700000dcdf2509000000050008000300000008000300", @ANYRES32=r12, @ANYBLOB="0500070000000000497c465949eedd43e835af6cbcd470e8e3fcbd3ace99fa16058f786a1a47d8e54c40940361182e9864cc042045e179cf4ea44200708eb5850127896f944a2bf9be0fd949bdba6842397673fd526803f251b75b096fc9e6075be9b7128f58087c384fdd3335592b9de6bff4590a63e1ab12dbf86040ec718e4b3b80581d47ddc044018f5ed734576975725f112cdb88b402746fee71e45739a02e57c37bac9ffe2ca2ce4dff8fc69fd9227d7e28880eebbf8a283e5566d91dc35ba7720b26"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x64000) write(r9, &(0x7f0000000a40)="a4c3bffad98c256964d32a3a8f6a827c5da144050fa14cc4d098368b65f1cdea1aba12f5f324111e86bbce10a17080d51cf86e0d76a280d208cc0d5721f8c52c65cceaf7a5b25a50b7c52ac2dcf09b1c088e1b84f2f3b34ab1320458fc71bdf25de3de9623e60be3629e21f59503a317bc4b9d57301786964753f1cc611857d768f9b0209f162e53f5cfc5b5e8085753794efce0759b121051d24fce7974a1eb3c6c3aa39ac349d23305cf0d827f1ebcd055bf0ea7d40b88d53d87c858d41a6d3f1a4f6cca8406a28ff6f0443019aba5af2df2ea7c78bf93c983efe3d427d805823cf42c0b1dacc904776cf2047172198b", 0xf1) 4m7.131689121s ago: executing program 34 (id=3101): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = openat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x2000, 0x0, 0x4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) pipe(&(0x7f0000000380)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x2f, 0x10, 0x2c, 0x5, 0x40, @private1, @loopback, 0x40, 0x10, 0x0, 0xffffff8b}}) r11 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000940)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f0000000b40)={0x88, r1, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}]}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}]}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x88}, 0x1, 0x0, 0x0, 0x4048051}, 0x2004010) write$tun(r11, &(0x7f0000000600)=ANY=[@ANYBLOB="7f7215b6d68e34d5"], 0x32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x21, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000008000000000000000100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf910070e1674a0959320000060000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', r10, 0x0, r11, 0x8, &(0x7f0000000700)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0xd, 0x81, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780), 0x0, 0x10, 0xf915}, 0x94) sendmsg$AUDIT_USER_TTY(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x464, 0x20, 0x1070bd28, 0x25dfdbfd, "be5f366e093af6b785b51df0df6441872d4c187b8d158bf81094dd1be429dfec255ecc5175d97fc3ece74029", ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000003880)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000980)={0x2c, r3, 0x99006fdb418a4dd5, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c040}, 0x40000) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd700000dcdf2509000000050008000300000008000300", @ANYRES32=r12, @ANYBLOB="0500070000000000497c465949eedd43e835af6cbcd470e8e3fcbd3ace99fa16058f786a1a47d8e54c40940361182e9864cc042045e179cf4ea44200708eb5850127896f944a2bf9be0fd949bdba6842397673fd526803f251b75b096fc9e6075be9b7128f58087c384fdd3335592b9de6bff4590a63e1ab12dbf86040ec718e4b3b80581d47ddc044018f5ed734576975725f112cdb88b402746fee71e45739a02e57c37bac9ffe2ca2ce4dff8fc69fd9227d7e28880eebbf8a283e5566d91dc35ba7720b26"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x64000) write(r9, &(0x7f0000000a40)="a4c3bffad98c256964d32a3a8f6a827c5da144050fa14cc4d098368b65f1cdea1aba12f5f324111e86bbce10a17080d51cf86e0d76a280d208cc0d5721f8c52c65cceaf7a5b25a50b7c52ac2dcf09b1c088e1b84f2f3b34ab1320458fc71bdf25de3de9623e60be3629e21f59503a317bc4b9d57301786964753f1cc611857d768f9b0209f162e53f5cfc5b5e8085753794efce0759b121051d24fce7974a1eb3c6c3aa39ac349d23305cf0d827f1ebcd055bf0ea7d40b88d53d87c858d41a6d3f1a4f6cca8406a28ff6f0443019aba5af2df2ea7c78bf93c983efe3d427d805823cf42c0b1dacc904776cf2047172198b", 0xf1) 3m59.746194932s ago: executing program 6 (id=3236): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) 3m59.720602613s ago: executing program 6 (id=3237): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) close(r2) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1, 0x0, 0x20}, 0x10021) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 3m59.720134633s ago: executing program 6 (id=3238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@private=0xa010102, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {0xd72}, 0x0, 0x0, 0x2}, {{@in6=@mcast2, 0x0, 0x19}, 0x0, @in=@empty, 0xfffffffd}}, 0xe4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x90, 0x9, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x8, 0x1a, 'fib\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xf8}}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}]}, 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x11) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) ioctl$HCIINQUIRY(r2, 0x800448f0, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x1dc, 0x7, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x6c, 0x7, 0x1, 0x0, "ec08babdbc88289849d7a3fd1f2c894b992d57e91c6026024a6b946aa7f1e3614b4998f8123cfe842d0f88b81f0df9e170714886519ed5d66bf3f7805d503a0b193383f3ccdcbece1ce620edd853e2e5d6e894b16fc4ec36040746a8f5b5ef3df01963b6d822d564"}, @NFTA_RULE_USERDATA={0x4e, 0x7, 0x1, 0x0, "a4135b94f60ddc30191fbf80c9d512db623c6e04d483275bd69b0522606a96b63fd75a748219cfb7db3370ec988624a55207269bb07cbbc764492ca54e1dbab851de2443b4e61b1667a9"}, @NFTA_RULE_EXPRESSIONS={0xe4, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x11}]}}}, {0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3c}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x44, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x36}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x26}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x23}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_NUM={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x2100, &(0x7f0000000580)="5325154f0c73ddb267f7922c6dbb", 0xe, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="e10cb2f6344ab1e0c99e397d849e3d298a21d36c70284be9ab4af6d7f99232d752fdf04774392704aa72367198725c97106634145d43fe316726c24a4414fd23c64014e6f324a61c4c6867a0bd") sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 3m59.643442284s ago: executing program 6 (id=3239): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf25060000000800030003000000040006806c00068014000400ff020000000000000000000000000001080006000800000014000400ff0100000000000000000000000000011400040000000000000000000000ffff6401010114000400fe880000000000000000000000000001060005004e220000050002000d0000000c000680060005004e2100003000018008000300ac1414bb08000700", @ANYRES32=r0, @ANYBLOB="140004000400000001000000000000000000000008000600100000000800030002000000"], 0xd0}, 0x1, 0x0, 0x0, 0x54}, 0x20000800) syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000880)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@quota}, {@nogrpid}, {@bh}]}, 0xff, 0x523, &(0x7f0000000c00)="$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") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="9f0000000024000000240000000300000000000000060001130200000001000000000000000000644fef766057ae150000000000000061000000000000000000000000000000692dd19ff447475bc110f206e7"], 0x0, 0x3f, 0x0, 0x9}, 0x28) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181642, 0x148) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setsig(0x4203, r4, 0x80, &(0x7f00000000c0)={0xb, 0xb, 0x7}) fallocate(r1, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0xc, r1, 0x20, 0x0, 0xdac2, 0xfffefffffe000000}) 3m59.591417095s ago: executing program 6 (id=3240): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cd21d3084d94d35486dd", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) 3m59.32884614s ago: executing program 6 (id=3241): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0xc, &(0x7f0000001280)=ANY=[@ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYBLOB="1ae836844eaa780367008e5537f98d9d945f31eee48f105fb8cb139cc8749932e68aa508af64ec6a9ab6e098faf9d2e089d15e604d3f3c3b2af86c9351a8d4e7c0be02b633bc9e1945e6cd91ecef763e676fbcdcc5d1bae6a710df981d40e113bb703187fdfee0ac8a2533cc9cc8278eabe184009d58348c7d798cb2c9f608be1294afe9078a7414bb50f765eae3921aaec8fca2cf9bb53fe4b31155095eea23674509b157da55bf8accaf03470727215b67ff4fafffa4eb6111e097fe6e7ff21c6adf098be1badc53d446dc70c920112a27fbf9", @ANYBLOB="1800004aabd2d683ce1371d895e5e9d471faeb00"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x17, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000740), 0x75, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRESOCT=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r3}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61125100000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d6500000000000065070000021c0000070700004c0000001f750000000000006154000000000000070400000400f9ffad4301000000000095000000000000000500000000000020950000000000000096669e8e4da2f09183bb"], &(0x7f0000000100)='GPL\x00'}, 0x48) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60c40, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r7}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r8 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f00000009c0)=ANY=[@ANYRES32=r8], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r9 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r9, 0xffffffffffffffff, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=@newtfilter={0x864, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r12, {0x10, 0x4}, {0x0, 0x6}, {0xb}}, [@filter_kind_options=@f_route={{0xa}, {0x82c, 0x2, [@TCA_ROUTE4_POLICE={0x820, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81e, 0x7, 0x6, 0x3, 0x1, 0x0, 0x73, 0x5, 0xfff, 0x1, 0x2, 0x40, 0x7fff, 0x1, 0x5, 0x4, 0x200, 0xfffffffa, 0x5, 0x328, 0x10001, 0x9, 0x20000, 0x10000000, 0xa, 0x7, 0x80000000, 0x0, 0x9, 0xb, 0x9, 0x4000000, 0x80, 0x4, 0xfffff187, 0x9, 0x7, 0x9, 0x200, 0x6, 0xeb2f, 0x1, 0xfff, 0xfffffffe, 0x5, 0x1, 0x80, 0x7, 0x1e, 0x1000004, 0x0, 0x6, 0x80000001, 0x26, 0x1ff, 0x5, 0x5, 0x4, 0x7, 0x7, 0x6f, 0x100, 0x6, 0x6, 0x7, 0x5, 0xc, 0xf40, 0xa1, 0x2, 0x3e0, 0x8001, 0x7ff, 0xfffffff7, 0x200, 0x1a, 0x2, 0x7a6fc014, 0x49, 0x7, 0x4, 0xfffffffc, 0x21d, 0x4, 0x10, 0x0, 0xffff, 0x5, 0x7, 0x2, 0x2, 0x10000, 0x9d, 0x7fff, 0x80, 0x3ffc, 0x81, 0x5, 0x1, 0x6, 0x6fe, 0x8000, 0x4, 0x26, 0x2, 0x1, 0x4000, 0x401, 0x3, 0x5, 0xd5b, 0xffffffff, 0x8001, 0x9, 0x4, 0x5, 0x6, 0x7, 0x5, 0x6, 0x4, 0x3, 0x2, 0xe, 0x3, 0x7, 0x7, 0x5f2d, 0x80000000, 0x8afb, 0x1, 0x0, 0x4, 0xfffffffa, 0x469, 0x10, 0x100, 0x7ff, 0xffffffff, 0x7, 0x10001, 0x4, 0x4, 0x190ca0, 0x3, 0x8, 0x401, 0x1001, 0x6, 0x1, 0x3, 0x5, 0x80000001, 0x9, 0x9, 0x2, 0x1, 0x4, 0x56f8, 0x8, 0x3, 0xfff, 0xb861, 0x9b, 0xf6, 0x8001, 0xfffffff7, 0x7, 0x5, 0x1, 0xc943, 0x2, 0x7, 0x5a63e1c0, 0x7, 0x939, 0x10000, 0x7, 0x1, 0x1, 0x9, 0xc6, 0x2, 0x5, 0x0, 0xffffffff, 0x8, 0x5, 0x9, 0xf, 0x1, 0xb, 0x6, 0x80000000, 0x0, 0x3, 0x8ac, 0x6, 0x7, 0x7, 0x7f, 0x3c, 0xa2, 0x373e, 0x7ff, 0x4, 0x400, 0x2, 0x321486b9, 0x2faf, 0xffff, 0x5, 0x6c, 0x1, 0xf9, 0x101, 0x2, 0x3ff, 0x8, 0x0, 0x1, 0x1, 0x5, 0xfffffff8, 0x6, 0x6e, 0x7, 0x0, 0x103d, 0x5, 0x3d, 0x3, 0x3, 0x13354767, 0x2, 0x0, 0x45, 0x1, 0x6, 0x28000000, 0x1, 0x9, 0x2, 0x80000000, 0x3, 0x4, 0x5, 0x1, 0x10001, 0x1, 0x5, 0x2, 0x6, 0x3, 0x2d37, 0x4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x2, 0x8, 0x7, 0x8a6, 0x3, 0x8629, 0x7, 0x5, 0x0, 0x8000, 0x10001, 0x8, 0x3, 0x7, 0x81, 0x3, 0x6, 0x10, 0x0, 0x5, 0x2, 0x7, 0x7, 0x89f, 0x8, 0x7819c2fe, 0x7fff, 0x800, 0x2, 0x6, 0x963f, 0x1, 0x6, 0x80000000, 0x3, 0x1ff, 0x8, 0xc, 0x100, 0x8, 0x8000, 0x1, 0x53, 0x0, 0x3, 0x7, 0x94, 0x0, 0x280000, 0x800, 0xf, 0x81, 0x4, 0x5, 0x80, 0x5, 0xf0f, 0x3, 0x4a5, 0xffff, 0x2, 0x3, 0x1, 0x4, 0x4, 0xffffffff, 0x1, 0x9, 0x1000000, 0x7, 0x4, 0x8, 0x7, 0x1, 0x0, 0xfff, 0x9, 0x2, 0x8000, 0xb, 0x3, 0x6, 0x0, 0x5, 0x339, 0x5, 0x2, 0xb, 0xe773, 0x9, 0x4, 0x1, 0x1069, 0x80000001, 0x6, 0x6, 0x7f, 0x0, 0xd, 0x9, 0x7fff, 0x8, 0xffffffff, 0x2, 0x4, 0x0, 0xd, 0xffff, 0x1, 0x8000, 0x7, 0x7ec, 0x400, 0x0, 0x8001, 0x2, 0xfffffffa, 0x10001, 0x1, 0x8, 0x1000, 0x3, 0xffff, 0x6, 0x2, 0x2af, 0x10000, 0x155, 0xac5, 0x7fff, 0x5b, 0xd7d, 0x9, 0x800, 0x1, 0x0, 0x89a7, 0x6, 0x4, 0x0, 0x2, 0x5, 0x3, 0xec4, 0x100, 0x7fffffff, 0x51, 0x80, 0x0, 0x0, 0x2, 0x8, 0x7ff, 0x4, 0x1, 0x7, 0x3, 0xdb, 0x9, 0x80, 0xda4, 0x32, 0x7, 0x2, 0x1, 0x4130, 0x9, 0xf48c, 0x1, 0x7ff, 0xfffffff8, 0x2, 0x2, 0xbb04, 0x1ff, 0xa29c, 0x4, 0x1, 0x0, 0x0, 0x5e5, 0xab68, 0x377c, 0x9, 0x0, 0x9, 0x6, 0x5, 0x8, 0x3, 0x0, 0x0, 0x6, 0x7, 0x3, 0x5a2b, 0x0, 0x1fba, 0x8, 0x2, 0xbb4c, 0x5, 0x7, 0x0, 0xfff, 0x0, 0x9, 0x5, 0xfffffffc, 0x3, 0xf, 0x4, 0x1000, 0x2, 0x5, 0x10, 0x8, 0x81, 0x800, 0xd, 0x8, 0xfffffff8, 0x1, 0xb1, 0x7fffffff, 0xc, 0x3, 0xd, 0x5, 0xf28, 0xfffffffb, 0xffffffff, 0x1, 0x60, 0xfff, 0x7, 0xe4, 0x0, 0x7, 0x68, 0x5, 0x7, 0x81, 0x16, 0x7, 0x7ff, 0x5, 0x2, 0x3, 0x2, 0x9, 0x1, 0x746, 0x2]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x71}]}}, @TCA_CHAIN={0x8, 0xb, 0x10000}]}, 0x864}, 0x1, 0xf0ffffffffffff}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0x7800, 0x80, 0x9, 0x4, {{0x27, 0x4, 0x2, 0xa, 0x9c, 0x68, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @remote, {[@generic={0x7, 0xe, "f208d870ce500253d34d3d09"}, @rr={0x7, 0xf, 0x14, [@broadcast, @multicast2, @empty]}, @lsrr={0x83, 0x13, 0xab, [@multicast1, @local, @rand_addr=0x64010101, @broadcast]}, @lsrr={0x83, 0x23, 0x7, [@remote, @remote, @rand_addr=0x64010101, @private=0xa010100, @multicast1, @empty, @empty, @empty]}, @lsrr={0x83, 0x7, 0x2e, [@local]}, @timestamp={0x44, 0x14, 0x8e, 0x0, 0xe, [0x5, 0x60000000, 0xffff, 0x2]}, @ssrr={0x89, 0xb, 0x2b, [@remote, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0x96, 0x3, 0x1, [{@private=0xa010101, 0x6}]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r10, @ANYBLOB="00042bbd7000fddbdf250500000008000400e9000000050005000000000024000180080006000d000000060001000e00000008000700", @ANYRES32=0x0, @ANYBLOB="060005004e2100000800040001000000140001800500020002000000060001000a00000005000500000000002bed01800800070029e70e000000eb89a2ca2c74bb006387cc30fa687d9a052b635d19adea1b1160cf92d9fc8e29ba34486b6f1c90f865b8cfc001cd5e6fc6b30e954e3a5dc3e22b9f394612c1e82a48838746b48dce2238e3", @ANYRES32=r12, @ANYBLOB="080003007f00000106000100020000000800060017000000080003000000000008000400fbffffff08000400010000001400068008000700", @ANYRES32=r14, @ANYBLOB="0500020001000000"], 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 3m59.310273621s ago: executing program 35 (id=3241): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0xc, &(0x7f0000001280)=ANY=[@ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYBLOB="1ae836844eaa780367008e5537f98d9d945f31eee48f105fb8cb139cc8749932e68aa508af64ec6a9ab6e098faf9d2e089d15e604d3f3c3b2af86c9351a8d4e7c0be02b633bc9e1945e6cd91ecef763e676fbcdcc5d1bae6a710df981d40e113bb703187fdfee0ac8a2533cc9cc8278eabe184009d58348c7d798cb2c9f608be1294afe9078a7414bb50f765eae3921aaec8fca2cf9bb53fe4b31155095eea23674509b157da55bf8accaf03470727215b67ff4fafffa4eb6111e097fe6e7ff21c6adf098be1badc53d446dc70c920112a27fbf9", @ANYBLOB="1800004aabd2d683ce1371d895e5e9d471faeb00"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x17, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000740), 0x75, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRESOCT=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r3}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61125100000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d6500000000000065070000021c0000070700004c0000001f750000000000006154000000000000070400000400f9ffad4301000000000095000000000000000500000000000020950000000000000096669e8e4da2f09183bb"], &(0x7f0000000100)='GPL\x00'}, 0x48) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60c40, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r7}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r8 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f00000009c0)=ANY=[@ANYRES32=r8], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r9 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r9, 0xffffffffffffffff, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=@newtfilter={0x864, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r12, {0x10, 0x4}, {0x0, 0x6}, {0xb}}, [@filter_kind_options=@f_route={{0xa}, {0x82c, 0x2, [@TCA_ROUTE4_POLICE={0x820, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81e, 0x7, 0x6, 0x3, 0x1, 0x0, 0x73, 0x5, 0xfff, 0x1, 0x2, 0x40, 0x7fff, 0x1, 0x5, 0x4, 0x200, 0xfffffffa, 0x5, 0x328, 0x10001, 0x9, 0x20000, 0x10000000, 0xa, 0x7, 0x80000000, 0x0, 0x9, 0xb, 0x9, 0x4000000, 0x80, 0x4, 0xfffff187, 0x9, 0x7, 0x9, 0x200, 0x6, 0xeb2f, 0x1, 0xfff, 0xfffffffe, 0x5, 0x1, 0x80, 0x7, 0x1e, 0x1000004, 0x0, 0x6, 0x80000001, 0x26, 0x1ff, 0x5, 0x5, 0x4, 0x7, 0x7, 0x6f, 0x100, 0x6, 0x6, 0x7, 0x5, 0xc, 0xf40, 0xa1, 0x2, 0x3e0, 0x8001, 0x7ff, 0xfffffff7, 0x200, 0x1a, 0x2, 0x7a6fc014, 0x49, 0x7, 0x4, 0xfffffffc, 0x21d, 0x4, 0x10, 0x0, 0xffff, 0x5, 0x7, 0x2, 0x2, 0x10000, 0x9d, 0x7fff, 0x80, 0x3ffc, 0x81, 0x5, 0x1, 0x6, 0x6fe, 0x8000, 0x4, 0x26, 0x2, 0x1, 0x4000, 0x401, 0x3, 0x5, 0xd5b, 0xffffffff, 0x8001, 0x9, 0x4, 0x5, 0x6, 0x7, 0x5, 0x6, 0x4, 0x3, 0x2, 0xe, 0x3, 0x7, 0x7, 0x5f2d, 0x80000000, 0x8afb, 0x1, 0x0, 0x4, 0xfffffffa, 0x469, 0x10, 0x100, 0x7ff, 0xffffffff, 0x7, 0x10001, 0x4, 0x4, 0x190ca0, 0x3, 0x8, 0x401, 0x1001, 0x6, 0x1, 0x3, 0x5, 0x80000001, 0x9, 0x9, 0x2, 0x1, 0x4, 0x56f8, 0x8, 0x3, 0xfff, 0xb861, 0x9b, 0xf6, 0x8001, 0xfffffff7, 0x7, 0x5, 0x1, 0xc943, 0x2, 0x7, 0x5a63e1c0, 0x7, 0x939, 0x10000, 0x7, 0x1, 0x1, 0x9, 0xc6, 0x2, 0x5, 0x0, 0xffffffff, 0x8, 0x5, 0x9, 0xf, 0x1, 0xb, 0x6, 0x80000000, 0x0, 0x3, 0x8ac, 0x6, 0x7, 0x7, 0x7f, 0x3c, 0xa2, 0x373e, 0x7ff, 0x4, 0x400, 0x2, 0x321486b9, 0x2faf, 0xffff, 0x5, 0x6c, 0x1, 0xf9, 0x101, 0x2, 0x3ff, 0x8, 0x0, 0x1, 0x1, 0x5, 0xfffffff8, 0x6, 0x6e, 0x7, 0x0, 0x103d, 0x5, 0x3d, 0x3, 0x3, 0x13354767, 0x2, 0x0, 0x45, 0x1, 0x6, 0x28000000, 0x1, 0x9, 0x2, 0x80000000, 0x3, 0x4, 0x5, 0x1, 0x10001, 0x1, 0x5, 0x2, 0x6, 0x3, 0x2d37, 0x4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x2, 0x8, 0x7, 0x8a6, 0x3, 0x8629, 0x7, 0x5, 0x0, 0x8000, 0x10001, 0x8, 0x3, 0x7, 0x81, 0x3, 0x6, 0x10, 0x0, 0x5, 0x2, 0x7, 0x7, 0x89f, 0x8, 0x7819c2fe, 0x7fff, 0x800, 0x2, 0x6, 0x963f, 0x1, 0x6, 0x80000000, 0x3, 0x1ff, 0x8, 0xc, 0x100, 0x8, 0x8000, 0x1, 0x53, 0x0, 0x3, 0x7, 0x94, 0x0, 0x280000, 0x800, 0xf, 0x81, 0x4, 0x5, 0x80, 0x5, 0xf0f, 0x3, 0x4a5, 0xffff, 0x2, 0x3, 0x1, 0x4, 0x4, 0xffffffff, 0x1, 0x9, 0x1000000, 0x7, 0x4, 0x8, 0x7, 0x1, 0x0, 0xfff, 0x9, 0x2, 0x8000, 0xb, 0x3, 0x6, 0x0, 0x5, 0x339, 0x5, 0x2, 0xb, 0xe773, 0x9, 0x4, 0x1, 0x1069, 0x80000001, 0x6, 0x6, 0x7f, 0x0, 0xd, 0x9, 0x7fff, 0x8, 0xffffffff, 0x2, 0x4, 0x0, 0xd, 0xffff, 0x1, 0x8000, 0x7, 0x7ec, 0x400, 0x0, 0x8001, 0x2, 0xfffffffa, 0x10001, 0x1, 0x8, 0x1000, 0x3, 0xffff, 0x6, 0x2, 0x2af, 0x10000, 0x155, 0xac5, 0x7fff, 0x5b, 0xd7d, 0x9, 0x800, 0x1, 0x0, 0x89a7, 0x6, 0x4, 0x0, 0x2, 0x5, 0x3, 0xec4, 0x100, 0x7fffffff, 0x51, 0x80, 0x0, 0x0, 0x2, 0x8, 0x7ff, 0x4, 0x1, 0x7, 0x3, 0xdb, 0x9, 0x80, 0xda4, 0x32, 0x7, 0x2, 0x1, 0x4130, 0x9, 0xf48c, 0x1, 0x7ff, 0xfffffff8, 0x2, 0x2, 0xbb04, 0x1ff, 0xa29c, 0x4, 0x1, 0x0, 0x0, 0x5e5, 0xab68, 0x377c, 0x9, 0x0, 0x9, 0x6, 0x5, 0x8, 0x3, 0x0, 0x0, 0x6, 0x7, 0x3, 0x5a2b, 0x0, 0x1fba, 0x8, 0x2, 0xbb4c, 0x5, 0x7, 0x0, 0xfff, 0x0, 0x9, 0x5, 0xfffffffc, 0x3, 0xf, 0x4, 0x1000, 0x2, 0x5, 0x10, 0x8, 0x81, 0x800, 0xd, 0x8, 0xfffffff8, 0x1, 0xb1, 0x7fffffff, 0xc, 0x3, 0xd, 0x5, 0xf28, 0xfffffffb, 0xffffffff, 0x1, 0x60, 0xfff, 0x7, 0xe4, 0x0, 0x7, 0x68, 0x5, 0x7, 0x81, 0x16, 0x7, 0x7ff, 0x5, 0x2, 0x3, 0x2, 0x9, 0x1, 0x746, 0x2]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x71}]}}, @TCA_CHAIN={0x8, 0xb, 0x10000}]}, 0x864}, 0x1, 0xf0ffffffffffff}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0x7800, 0x80, 0x9, 0x4, {{0x27, 0x4, 0x2, 0xa, 0x9c, 0x68, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @remote, {[@generic={0x7, 0xe, "f208d870ce500253d34d3d09"}, @rr={0x7, 0xf, 0x14, [@broadcast, @multicast2, @empty]}, @lsrr={0x83, 0x13, 0xab, [@multicast1, @local, @rand_addr=0x64010101, @broadcast]}, @lsrr={0x83, 0x23, 0x7, [@remote, @remote, @rand_addr=0x64010101, @private=0xa010100, @multicast1, @empty, @empty, @empty]}, @lsrr={0x83, 0x7, 0x2e, [@local]}, @timestamp={0x44, 0x14, 0x8e, 0x0, 0xe, [0x5, 0x60000000, 0xffff, 0x2]}, @ssrr={0x89, 0xb, 0x2b, [@remote, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0x96, 0x3, 0x1, [{@private=0xa010101, 0x6}]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r10, @ANYBLOB="00042bbd7000fddbdf250500000008000400e9000000050005000000000024000180080006000d000000060001000e00000008000700", @ANYRES32=0x0, @ANYBLOB="060005004e2100000800040001000000140001800500020002000000060001000a00000005000500000000002bed01800800070029e70e000000eb89a2ca2c74bb006387cc30fa687d9a052b635d19adea1b1160cf92d9fc8e29ba34486b6f1c90f865b8cfc001cd5e6fc6b30e954e3a5dc3e22b9f394612c1e82a48838746b48dce2238e3", @ANYRES32=r12, @ANYBLOB="080003007f00000106000100020000000800060017000000080003000000000008000400fbffffff08000400010000001400068008000700", @ANYRES32=r14, @ANYBLOB="0500020001000000"], 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 3.460707223s ago: executing program 8 (id=9038): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x14d9, &(0x7f0000000480)={0x0, 0x5121, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x47ba, 0x3e00, 0x0, 0x0, 0x0) 1.52918783s ago: executing program 2 (id=9074): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000198, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000800000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1e}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @ssrr={0x89, 0x3, 0xd8}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = socket(0x18, 0x1, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGKBENT(r6, 0x4b46, &(0x7f0000000400)={0xa, 0x8, 0x77c}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x8}, 0xc) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) close_range(r3, 0xffffffffffffffff, 0x0) 1.496981871s ago: executing program 0 (id=9076): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x89901) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x5}, 0x18) r7 = syz_io_uring_setup(0x10e, &(0x7f0000000600)={0x0, 0xf07d, 0x800, 0x3ffff, 0x307}, &(0x7f0000000400)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x1, 0x8, &(0x7f0000002a40)=[{&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4099, 0x1000}, {&(0x7f0000000440)=""/107}, {&(0x7f0000000500)=""/193}, {&(0x7f00000003c0)=""/18}, {&(0x7f0000000700)=""/148}, {&(0x7f0000002840)=""/245}, {&(0x7f0000002940)=""/226}], 0x11b, 0x1d}) io_uring_enter(r7, 0x8aa, 0xeffd, 0x100000000000000, 0x0, 0x0) 1.467446262s ago: executing program 5 (id=9077): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 1.444771942s ago: executing program 2 (id=9078): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x64, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) (fail_nth: 4) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) 1.204334226s ago: executing program 5 (id=9079): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x14, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000b5faba23fae5bb1000000000000000000180100002020702500090000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000793d00b703000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x3, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x114402, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x5d13, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) connect$unix(r4, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='xen_cpu_load_idt\x00', r0}, 0x18) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0xe, 0xa7754fc1b88f8f1f) ioctl$EVIOCRMFF(r7, 0x40044581, &(0x7f0000000100)=0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xf, &(0x7f00000008c0)=ANY=[@ANYBLOB="1a00400000000000000000000000800218110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095", @ANYBLOB="87d5e9bae737fd215162e747e7c786f819c3607b6cf23de6fd9ed877f8301ce14b9c3a4fdc9e2e965c148e50d8833d8a691c059a55f6b6589f5508015140502c0aff0ed97238789ba19eaaa6405a9e6d92fba2e9b0cdf4f9ccf324f24e3c41056593aa8820329fe03bfc91376550", @ANYRES32=r2], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11, 0x0, 0x1000000000000000}, 0x18) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) 1.080167609s ago: executing program 2 (id=9080): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x11}, 0x38) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x336) openat$sndseq(0xffffffffffffff9c, 0x0, 0x400) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r6, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="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", 0x341}], 0x1, 0xa) fcntl$setpipe(r6, 0x407, 0x6) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r2}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x9, r8, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) 1.062030359s ago: executing program 2 (id=9081): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f756509e977fb1a030000000002000100000000000000020d1600003f030006000000000002004e21000000800000000000000000030005003200000002"], 0x70}, 0x1, 0x7}, 0x0) 1.04725155s ago: executing program 2 (id=9082): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000002"], 0x50) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@grpjquota}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8a}}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) setregid(0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) socket$netlink(0x10, 0x3, 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000008000000010000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x2242, 0x0) fcntl$setlease(r4, 0x400, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 956.256741ms ago: executing program 2 (id=9083): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000640)='kfree\x00', r3}, 0x18) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x2401) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x80, 0x8, 0xd, 0x8, 0x2, 0x9, &(0x7f0000000440)="0392"}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7000000f7ba000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003"], 0x58}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r11}, 0x10) r12 = getpgrp(0xffffffffffffffff) r13 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r12, r13, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r14, 0x0, r15, 0x0, 0x8000f28, 0x0) 955.594061ms ago: executing program 7 (id=9085): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000200)=[{0x200000000006, 0x3, 0x0, 0x6}, {0x6, 0xf5, 0x1, 0x9}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000ac0)=@newtclass={0x49c, 0x28, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0x9, 0x2}, {0xb, 0xe}}, [@tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_htb={{0x8}, {0x450, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0x800}, @TCA_HTB_RATE64={0xc, 0x6, 0x9}, @TCA_HTB_RTAB={0x404, 0x4, [0x1, 0x401, 0x3, 0x0, 0xff, 0x1, 0xfff, 0x100, 0xb, 0x9, 0x80, 0x0, 0x1fe0, 0x0, 0x0, 0xcc6, 0x7, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1ff, 0x239, 0x6, 0x6999, 0x1, 0x81, 0xa09, 0x5, 0xfff, 0x51, 0xfffffff9, 0x2, 0x4, 0x9, 0x5, 0x6, 0x3, 0x750, 0xedf, 0x6, 0x0, 0x3, 0x2, 0x1, 0x81, 0x5, 0x0, 0x2, 0xb8e3, 0x1dac7767, 0x6, 0xba5, 0xd, 0x9, 0x6, 0xe, 0x7, 0x4, 0x5, 0x697e5d50, 0x7, 0xfffffffa, 0x3, 0x1, 0x8f64, 0x3, 0x4, 0x9, 0x8, 0x8, 0x19bf, 0xe, 0xa, 0x21a, 0x4, 0x8, 0x2, 0x6, 0xaf, 0x9, 0x6, 0x40000000, 0x1, 0x199b, 0x8, 0x2, 0xcbc9, 0x5, 0x76, 0x4, 0x9, 0x1b, 0x4, 0x3ff8000, 0x4, 0x4, 0x7, 0x1, 0x0, 0xae2, 0xffffee20, 0xbbb, 0x4, 0xc059, 0x4, 0x20, 0x4, 0x74b0, 0x5, 0x4, 0x99e3, 0x8, 0x3, 0x8001, 0x635, 0x3, 0x1000, 0x2, 0x7, 0x0, 0x8, 0x6, 0x4, 0x7de9e4cd, 0x80000001, 0x9, 0xfffffffd, 0x8, 0xfffffff9, 0x1, 0x1, 0x3, 0x4, 0x4, 0x7, 0x7, 0xb, 0x0, 0x6, 0x0, 0x1000, 0x9, 0x9, 0x800, 0x4, 0x7, 0x9, 0x4e, 0x9, 0x7, 0x2, 0x6, 0xaf, 0x1, 0x78e7, 0x815, 0x9d2d10e, 0x1, 0x7, 0x6, 0x8, 0xffff, 0x1ddf, 0xfc, 0x4, 0x2b, 0x8, 0x135, 0x1000, 0x5, 0x1, 0x97, 0x7fffffff, 0x1, 0x5, 0x10000, 0x8, 0x2, 0x8, 0x1, 0x6, 0xffffff01, 0x62e, 0x2, 0x4, 0x3f07, 0xff, 0x6, 0xc, 0x10, 0x8, 0x80000001, 0x8, 0x7f, 0x29fcbf3, 0xd, 0xffffffff, 0x5, 0x0, 0x1000, 0x171d, 0x400, 0x9, 0x0, 0x6, 0x429, 0x3, 0x5, 0x7, 0x2, 0xa, 0x6, 0x39, 0x3, 0x9, 0xfffffffd, 0x3, 0xfffffffd, 0x7, 0x7ff, 0x3, 0x101, 0x7, 0x1, 0x1, 0x8, 0xc, 0x101, 0x8, 0xc905, 0x5, 0x7, 0x81, 0x800, 0x2, 0x80000000, 0x3, 0xff, 0x7fff, 0x8, 0x9, 0x40, 0x7, 0x2, 0xf3, 0x3, 0x2, 0x4, 0x4, 0x0, 0x91, 0x800, 0x4, 0x6]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x4, 0xc93f39781beafdc6, 0x9, 0xb1, 0x2e, 0x7}, {0xa, 0x1, 0x7, 0x7, 0x3, 0x4}, 0xd98, 0x7, 0x800, 0x5, 0xc}}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x6}}]}, 0x49c}}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x4, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) r5 = socket(0xa, 0x2, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd60f4b90600483a01fe880000000000000000000000000001ff0200000000000001020090780000000060fd9063000033000000000000000000000000000000000100000000000000000000000000000000320204010670ff00fe8000000000000000000000000000aa00000000000000"], 0x0) getsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f00000004c0)=""/212, &(0x7f0000000380)=0xd4) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x11000002) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000006c0)=""/9, 0x9}, {0x0}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x42, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x7, r9, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r11}, 0x18) r12 = open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='\x00', 0x89900) r13 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r13, 0x0, r12, 0x0, 0x46) 882.033003ms ago: executing program 7 (id=9086): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x2242, 0x0) fcntl$setlease(r3, 0x400, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) 881.622153ms ago: executing program 7 (id=9087): mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x82b) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x1a) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x6, &(0x7f0000001380)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0xfffffffffffffe8d}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='timer_start\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r4, 0x0, 0x4804}, 0x18) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_load(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000940)) r6 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x2, r6}) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) 719.126486ms ago: executing program 7 (id=9088): mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x82b) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x1a) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x6, &(0x7f0000001380)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0xfffffffffffffe8d}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='timer_start\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r4, 0x0, 0x4804}, 0x18) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_load(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000940)) r6 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x2, r6}) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) 576.777569ms ago: executing program 8 (id=9042): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x9}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 544.836999ms ago: executing program 7 (id=9089): r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xf7}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0xa) writev(r0, &(0x7f0000000940)=[{&(0x7f00000003c0)="e5", 0x1}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000c000000bca30000000000002403000020feffff620af8fff8ffffff71a4f8ff000000001f03000000000000e5000300000000002604fdffff02000014010000033800001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 523.748959ms ago: executing program 8 (id=9090): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x11}, 0x38) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x336) openat$sndseq(0xffffffffffffff9c, 0x0, 0x400) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r6, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="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", 0x341}], 0x1, 0xa) fcntl$setpipe(r6, 0x407, 0x6) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r2}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x9, r8, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) 496.17642ms ago: executing program 0 (id=9091): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f756509e977fb1a030000000002000100000000000000020d1600003f030006000000000002004e21000000800000000000000000030005003200000002"], 0x70}, 0x1, 0x7}, 0x0) 469.859941ms ago: executing program 7 (id=9092): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000198, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000800000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1e}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @ssrr={0x89, 0x3, 0xd8}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = socket(0x18, 0x1, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGKBENT(r6, 0x4b46, &(0x7f0000000400)={0xa, 0x8, 0x77c}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x8}, 0xc) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) close_range(r3, 0xffffffffffffffff, 0x0) 469.432471ms ago: executing program 8 (id=9093): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000002"], 0x50) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@grpjquota}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8a}}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) setregid(0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) socket$netlink(0x10, 0x3, 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000008000000010000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x2242, 0x0) fcntl$setlease(r4, 0x400, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 454.994261ms ago: executing program 0 (id=9094): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) preadv(r0, &(0x7f00000018c0), 0x0, 0x2, 0xffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000070100000300000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000300)='#', 0x0}, 0x20) write$UHID_CREATE2(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000008000000000000007f000000de2b741efd07cca83cebd867088ffc82cace75717b9a9b803a6876eb28eec43623860aa5fa31ce090edb524885bb69839b79e2d3ed7b3a207a9209f339fea72c12d50132f74ba60fd824ad3093c9b7ae6a0724364ebc61fdfc0c14529661c19e40631a42783331e3eb584a659e72744480165bd02014eba73d170d85732c3efc46348058"], 0x118) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) readv(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000a80)='kfree\x00', r5}, 0x36) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380100001800800010000000000040003"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 420.107552ms ago: executing program 0 (id=9095): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) close(r0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x2400e044}, 0x0) 304.650364ms ago: executing program 5 (id=9096): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x3ca9, &(0x7f0000000140)={0x0, 0xf631, 0x80, 0x2, 0xc3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc680000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000003c0003803800008008000340000000022c0007800a0001006c696d69740000001c0002800c00024000000000000000050c000140000000000000000414000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close(r3) syz_io_uring_setup(0x4d77, &(0x7f0000000080)={0x0, 0xc39a, 0x8, 0x1, 0x161, 0x0, r2}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f00000001c0)={0x1, 0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/90, 0x5a}], 0x0}, 0x20) 300.726214ms ago: executing program 0 (id=9097): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000000d32d8d3200d0ab8bfc6abe9f294ce0dba7445f27090a670e4668c46371996e2b4767f1ed941e738db7a62219ccf9b8c2cc24085ae0e696b5206465ea7005261e0d0dbbfe89e37ecdfb", @ANYRES16=0x0, @ANYBLOB="010025bd70000000000001000000040007800c00060000000000000000000c000200ff7f000000000000"], 0x30}}, 0x24000044) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000580)=ANY=[@ANYBLOB="0016000000000000040117f79d0305c0c70c0a9239de52b1ba5707b815276f6ab25f7e062bc79ac0cadbf2a45d3a77b51095bb3e11e093faad57cd6a94d23685ddbb03a106a74e40955f300e5b88ae59e00a57f8ed5941366515394236baf6caae0ceb7ec2f6252ed13dbc711452c22717a93d7e6fe06f481ad47570dac1a1eb7aa10bfce1e0e458a426d4ba496fcda41325faf00ab79cc4119bb8ae85912d11f1af73f98e2352d0ce84000100c9000000000000000000004accfb8b4f5903f40c193a301e59639c27586e769cb90b6d58080eb3cdee91f9790bf2206348f225a794276e6725c17888ce70e99dfba2b145da37eced21dbffb9db10f8fc964a236cb6e89dc3aef1cecd5f2aa3298bc18e3c64791f27e8ff61e610f35552092f91f29cd28a73d6408d38a97f87d8eb1f4733da1d2d62c5ccd9225391600091cba1"], 0xc0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, @in={0x2, 0x5d0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e21, 0x800, @remote}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0xf, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, @in6={0xa, 0x4e23, 0x4, @private0, 0x7fff}], 0x94) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) shutdown(r2, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6745208e00303a000000000000000000ff00ffff64010100ff0200000000000000000000000000010401907800000001630108f9fffb2b0000000000000000000000ffff0a010102f0ff000000"], 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x0, &(0x7f0000000080)=0x8000, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000a00)=ANY=[@ANYBLOB="482792b000e4ff0718c6abf7fda83ae1fb5ee017e1888c91ca93a0aecb9bf81a3c20579592ad1d29cebf326e6853908f2f5f30779890a2ac292e3d4e15b718882909e81f419ab8a2ef732c10b0f693deb78642a725c04d49729d1399e5624b95d95c32dfd6d947835100aceed871a7f8f7521019f4882c83f44372ae8dea91ca14ff856fcfd11f", @ANYRES16=r5, @ANYBLOB="000425bd7000fcdbdf250800000008000500030000001800018014000300e00000010000000000000000000000002400018008000900120000000800050002000000060004004e2100000800050004000000500001800800060073656400060004004e2400000800080003000000060002002100000014000300fe8000000000000000000000000000440800090041000000060004004e20000008000800640000000800060000000010"], 0xb0}, 0x1, 0x0, 0x0, 0x20040001}, 0x90) capget(&(0x7f0000000400)={0x20071026}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYRES16=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmmsg$inet(r8, &(0x7f0000001480), 0x0, 0x1c880) sendto$inet(r8, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) recvmmsg(r9, &(0x7f0000000100), 0x0, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 215.719715ms ago: executing program 8 (id=9098): mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x82b) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x1a) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x6, &(0x7f0000001380)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0xfffffffffffffe8d}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='timer_start\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r4, 0x0, 0x4804}, 0x18) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_load(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000940)) getpid() renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) 215.497105ms ago: executing program 5 (id=9099): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x23f, &(0x7f00000000c0)={0x0, 0x100c48a, 0x800, 0x5, 0x403b3}, &(0x7f0000000380)=0x0, &(0x7f0000000240)=0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x100, 0x2}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x40, 0x10, 0x40, 0x0, {{0x1b, 0x4, 0x3, 0x7, 0x6c, 0x68, 0x0, 0x8, 0x2f, 0x0, @empty, @private=0xa010102, {[@timestamp={0x44, 0x14, 0x4c, 0x0, 0x3, [0x7, 0x7, 0x9, 0x6]}, @lsrr={0x83, 0x17, 0xd7, [@multicast2, @broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @end, @timestamp_prespec={0x44, 0x14, 0xa5, 0x3, 0x2, [{@private=0xa010100, 0x4}, {@multicast1, 0x101}]}, @rr={0x7, 0x17, 0x3f, [@empty, @empty, @local, @multicast2, @loopback]}]}}}}}) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r4}, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x10001, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @empty}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) ioctl$sock_inet_SIOCADDRT(r7, 0x890c, &(0x7f0000000840)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x44, @remote}, {0x2, 0x4e2f, @broadcast}, 0x34, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='lo\x00', 0x403, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x101}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x2, 0x0, 0x0) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x4, 0x8000) 169.764746ms ago: executing program 0 (id=9100): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00'}, 0x10) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) writev(r3, &(0x7f0000000740)=[{&(0x7f0000000180)="697bd0e093a7bcb9dfb5b83ede8622f2b90be41937", 0x15}, {&(0x7f0000000580)="b922149eefdc15e0e6911da210c7f6fe9f530b651b894931cf6bcd8d0c5688a7847d0cc743e3af43e3b9fde2cc5a73453b4bb95bcac473e51c51cad628ffffea431325cef94ef6e3d4ba7d16e944f290d0ab803431180d1efd983f612bff758d1aa9470c714dbd3e0ca825e9a674959a7f76b79869cd1e22062c66439c8139e3495fcac3a588f86f35fb85a088b724a6489b563f2aff8b0772c860fdce986bf8dc34883aeee27c9dca96376929487fecc507ec180ab96f1148781d8dd76356fa8334a20c694afb37da8dd971760adac58a2b926d3dbadd4750e9b6b81171815def38e896fe2ecd27dd9e771168d4", 0xee}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcccf}, 0x94) socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x8, 0x8000000, 0x41, @remote, @loopback, 0x8, 0x40, 0x3, 0x27}}) 146.700837ms ago: executing program 5 (id=9101): mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x82b) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x1a) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x6, &(0x7f0000001380)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0xfffffffffffffe8d}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='timer_start\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r4, 0x0, 0x4804}, 0x18) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_load(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000940)) r6 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x2, r6}) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) 114.254077ms ago: executing program 8 (id=9102): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x89901) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x5}, 0x18) r7 = syz_io_uring_setup(0x10e, &(0x7f0000000600)={0x0, 0xf07d, 0x800, 0x3ffff, 0x307}, &(0x7f0000000400)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x1, 0x8, &(0x7f0000002a40)=[{&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4099, 0x1000}, {&(0x7f0000000440)=""/107}, {&(0x7f0000000500)=""/193}, {&(0x7f00000003c0)=""/18}, {&(0x7f0000000700)=""/148}, {&(0x7f0000002840)=""/245}, {&(0x7f0000002940)=""/226}], 0x11b, 0x1d}) io_uring_enter(r7, 0x8aa, 0xeffd, 0x100000000000000, 0x0, 0x0) 0s ago: executing program 5 (id=9103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x53, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20014001}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a340000001f0a0703000000000000000002000009080003400000ea090900010073797a30000000000c0006"], 0x70}}, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="28010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbfc0000000000000000000000000000002001000000000000000000000000000100"/104, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000001e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRESOCT=r1, @ANYBLOB="0000000000000000020000000000000000000000000000000000000000000000000000000000003ba500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd6b6e"], 0x128}}, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x1005, &(0x7f00000014c0)=""/4101, 0x41000, 0xd}, 0x94) (async) modify_ldt$read(0x0, &(0x7f0000000040)=""/58, 0x3a) (async) syz_open_dev$loop(&(0x7f0000000140), 0x100000000, 0x12000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) (async) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_KEY(r8, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') kernel console output (not intermixed with test programs): 22406 comm="syz.8.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 335.004062][ T29] audit: type=1326 audit(2000000066.350:90829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22406 comm="syz.8.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 335.028196][ T29] audit: type=1326 audit(2000000066.350:90830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22406 comm="syz.8.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 335.052263][ T29] audit: type=1326 audit(2000000066.350:90831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22406 comm="syz.8.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 335.075895][ T29] audit: type=1326 audit(2000000066.350:90832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22406 comm="syz.8.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 335.099521][ T29] audit: type=1326 audit(2000000066.350:90833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22406 comm="syz.8.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 335.123138][ T29] audit: type=1326 audit(2000000066.350:90834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22406 comm="syz.8.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 335.130282][T22412] __nla_validate_parse: 8 callbacks suppressed [ 335.130297][T22412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6897'. [ 335.146848][ T29] audit: type=1326 audit(2000000066.350:90835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22406 comm="syz.8.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 335.185474][ T29] audit: type=1326 audit(2000000066.350:90836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22406 comm="syz.8.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 335.209179][ T29] audit: type=1326 audit(2000000066.350:90837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22406 comm="syz.8.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 335.236257][T22415] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6898'. [ 335.248635][T22418] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 335.275217][T22421] 9pnet_fd: Insufficient options for proto=fd [ 336.421833][T22446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6909'. [ 336.735408][T22474] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6922'. [ 336.787226][T22474] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6922'. [ 336.848048][T22491] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6931'. [ 336.860825][T22491] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6931'. [ 336.873316][T22493] debugfs: Bad value for 'uid' [ 336.878124][T22493] debugfs: Bad value for 'uid' [ 336.948164][T22501] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6934'. [ 337.086052][T22522] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 337.097272][T22522] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 337.467512][T22581] loop7: detected capacity change from 0 to 1764 [ 337.668350][T22598] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6972'. [ 337.703260][T22598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6972'. [ 337.798742][T22602] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.468179][T22648] lo speed is unknown, defaulting to 1000 [ 338.906059][T22669] loop7: detected capacity change from 0 to 512 [ 338.924367][T22669] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.939480][T22669] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.161377][T22677] lo speed is unknown, defaulting to 1000 [ 339.545671][T22693] FAULT_INJECTION: forcing a failure. [ 339.545671][T22693] name failslab, interval 1, probability 0, space 0, times 0 [ 339.558331][T22693] CPU: 0 UID: 0 PID: 22693 Comm: syz.0.7009 Not tainted syzkaller #0 PREEMPT(voluntary) [ 339.558370][T22693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 339.558382][T22693] Call Trace: [ 339.558394][T22693] [ 339.558402][T22693] __dump_stack+0x1d/0x30 [ 339.558425][T22693] dump_stack_lvl+0xe8/0x140 [ 339.558447][T22693] dump_stack+0x15/0x1b [ 339.558460][T22693] should_fail_ex+0x265/0x280 [ 339.558480][T22693] should_failslab+0x8c/0xb0 [ 339.558502][T22693] __kvmalloc_node_noprof+0x123/0x4e0 [ 339.558615][T22693] ? simple_xattr_alloc+0x43/0x90 [ 339.558663][T22693] simple_xattr_alloc+0x43/0x90 [ 339.558696][T22693] shmem_initxattrs+0x18c/0x350 [ 339.558721][T22693] security_inode_init_security+0x25c/0x330 [ 339.558778][T22693] ? __pfx_shmem_initxattrs+0x10/0x10 [ 339.558804][T22693] shmem_mknod+0xad/0x180 [ 339.558831][T22693] shmem_create+0x34/0x50 [ 339.558852][T22693] ? __pfx_shmem_create+0x10/0x10 [ 339.558873][T22693] path_openat+0x1102/0x2170 [ 339.558901][T22693] do_filp_open+0x109/0x230 [ 339.559002][T22693] do_sys_openat2+0xa6/0x110 [ 339.559076][T22693] __x64_sys_open+0xe6/0x110 [ 339.559106][T22693] x64_sys_call+0x1457/0x2ff0 [ 339.559123][T22693] do_syscall_64+0xd2/0x200 [ 339.559155][T22693] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 339.559174][T22693] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 339.559198][T22693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.559277][T22693] RIP: 0033:0x7f53fb6aeec9 [ 339.559294][T22693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.559309][T22693] RSP: 002b:00007f53fa117038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 339.559326][T22693] RAX: ffffffffffffffda RBX: 00007f53fb905fa0 RCX: 00007f53fb6aeec9 [ 339.559354][T22693] RDX: 0000000000000126 RSI: 0000000000147842 RDI: 0000200000000140 [ 339.559365][T22693] RBP: 00007f53fa117090 R08: 0000000000000000 R09: 0000000000000000 [ 339.559377][T22693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 339.559388][T22693] R13: 00007f53fb906038 R14: 00007f53fb905fa0 R15: 00007ffeee7b1fb8 [ 339.559414][T22693] [ 339.829176][T21434] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.862507][T22699] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.924347][T22699] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.995232][ T29] kauditd_printk_skb: 942 callbacks suppressed [ 339.995246][ T29] audit: type=1326 audit(2000000071.340:91780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22717 comm="syz.7.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc597eec9 code=0x7ffc0000 [ 340.039767][T22699] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.056569][ T29] audit: type=1326 audit(2000000071.340:91781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22717 comm="syz.7.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc597eec9 code=0x7ffc0000 [ 340.080273][ T29] audit: type=1326 audit(2000000071.340:91782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22717 comm="syz.7.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fddc597eec9 code=0x7ffc0000 [ 340.104036][ T29] audit: type=1326 audit(2000000071.340:91783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22717 comm="syz.7.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc597eec9 code=0x7ffc0000 [ 340.128057][ T29] audit: type=1326 audit(2000000071.340:91784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22717 comm="syz.7.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc597eec9 code=0x7ffc0000 [ 340.151812][ T29] audit: type=1326 audit(2000000071.340:91785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22717 comm="syz.7.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddc597eec9 code=0x7ffc0000 [ 340.175376][ T29] audit: type=1326 audit(2000000071.340:91786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22717 comm="syz.7.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc597eec9 code=0x7ffc0000 [ 340.199201][ T29] audit: type=1326 audit(2000000071.340:91787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22717 comm="syz.7.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc597eec9 code=0x7ffc0000 [ 340.223068][ T29] audit: type=1326 audit(2000000071.340:91788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22717 comm="syz.7.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddc597eec9 code=0x7ffc0000 [ 340.247077][ T29] audit: type=1326 audit(2000000071.340:91789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22717 comm="syz.7.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc597eec9 code=0x7ffc0000 [ 340.281247][T22729] __nla_validate_parse: 11 callbacks suppressed [ 340.281264][T22729] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7022'. [ 340.312206][T22699] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.410299][T18192] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.427519][T18192] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.445573][T18192] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.466480][T18192] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.532966][T22757] netem: change failed [ 340.541283][T22759] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7040'. [ 340.672910][T22781] loop7: detected capacity change from 0 to 512 [ 340.683747][T22781] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 340.705845][T22781] EXT4-fs (loop7): 1 truncate cleaned up [ 340.711974][T22781] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.008904][T21434] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.080650][T22803] sit0: entered allmulticast mode [ 341.100876][T22803] sit0: entered promiscuous mode [ 341.179733][T22802] loop7: detected capacity change from 0 to 8192 [ 341.249547][T22805] bond0: (slave bond_slave_0): Releasing backup interface [ 341.260358][T22805] bond0: (slave bond_slave_1): Releasing backup interface [ 341.277662][T22805] team0: Port device team_slave_0 removed [ 341.296890][T22805] team0: Port device team_slave_1 removed [ 341.308916][T22805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.316456][T22805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.335582][T22805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.343147][T22805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.585331][T22835] sctp: [Deprecated]: syz.5.7068 (pid 22835) Use of int in max_burst socket option deprecated. [ 341.585331][T22835] Use struct sctp_assoc_value instead [ 341.698629][T22860] FAULT_INJECTION: forcing a failure. [ 341.698629][T22860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.711888][T22860] CPU: 0 UID: 0 PID: 22860 Comm: syz.7.7081 Not tainted syzkaller #0 PREEMPT(voluntary) [ 341.711973][T22860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 341.711986][T22860] Call Trace: [ 341.711992][T22860] [ 341.712000][T22860] __dump_stack+0x1d/0x30 [ 341.712018][T22860] dump_stack_lvl+0xe8/0x140 [ 341.712116][T22860] dump_stack+0x15/0x1b [ 341.712133][T22860] should_fail_ex+0x265/0x280 [ 341.712170][T22860] should_fail+0xb/0x20 [ 341.712187][T22860] should_fail_usercopy+0x1a/0x20 [ 341.712207][T22860] _copy_from_user+0x1c/0xb0 [ 341.712231][T22860] ___sys_sendmsg+0xc1/0x1d0 [ 341.712352][T22860] __x64_sys_sendmsg+0xd4/0x160 [ 341.712376][T22860] x64_sys_call+0x191e/0x2ff0 [ 341.712455][T22860] do_syscall_64+0xd2/0x200 [ 341.712481][T22860] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 341.712501][T22860] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 341.712556][T22860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.712575][T22860] RIP: 0033:0x7fddc597eec9 [ 341.712589][T22860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.712605][T22860] RSP: 002b:00007fddc43df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.712660][T22860] RAX: ffffffffffffffda RBX: 00007fddc5bd5fa0 RCX: 00007fddc597eec9 [ 341.712672][T22860] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000006 [ 341.712683][T22860] RBP: 00007fddc43df090 R08: 0000000000000000 R09: 0000000000000000 [ 341.712694][T22860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.712704][T22860] R13: 00007fddc5bd6038 R14: 00007fddc5bd5fa0 R15: 00007fff00fc44b8 [ 341.712757][T22860] [ 341.913176][T22869] netlink: 'syz.7.7085': attribute type 13 has an invalid length. [ 341.924660][T22869] gretap0: refused to change device tx_queue_len [ 341.932142][T22869] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 342.083759][T22884] netlink: 56 bytes leftover after parsing attributes in process `syz.8.7092'. [ 342.689725][T22908] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 342.793512][T22914] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 342.864144][T22926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7111'. [ 342.920040][T22933] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7113'. [ 342.937644][T22933] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7113'. [ 343.039272][T22946] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 343.094918][T22955] netlink: 56 bytes leftover after parsing attributes in process `syz.8.7123'. [ 343.325330][T22969] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 343.381576][T22972] lo speed is unknown, defaulting to 1000 [ 343.551741][T22982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7134'. [ 343.900239][T23005] netlink: 'syz.0.7140': attribute type 10 has an invalid length. [ 343.908284][T23005] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7140'. [ 344.015261][T23010] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7145'. [ 344.650988][T23058] loop7: detected capacity change from 0 to 512 [ 344.686575][T23058] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #15: comm syz.7.7167: corrupted in-inode xattr: invalid ea_ino [ 344.722937][T23058] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.7167: couldn't read orphan inode 15 (err -117) [ 344.753155][T23058] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.766872][T23058] EXT4-fs warning (device loop7): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 344.829304][T23078] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 345.096285][T23119] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 345.260083][ T29] kauditd_printk_skb: 2289 callbacks suppressed [ 345.260097][ T29] audit: type=1326 audit(2000000076.600:94079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23145 comm="syz.8.7205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 345.296207][ T29] audit: type=1326 audit(2000000076.600:94080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23145 comm="syz.8.7205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 345.320020][ T29] audit: type=1326 audit(2000000076.600:94081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23145 comm="syz.8.7205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 345.343957][ T29] audit: type=1326 audit(2000000076.600:94082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23145 comm="syz.8.7205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 345.367663][ T29] audit: type=1326 audit(2000000076.600:94083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23145 comm="syz.8.7205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 345.391413][ T29] audit: type=1326 audit(2000000076.600:94084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23145 comm="syz.8.7205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 345.415118][ T29] audit: type=1326 audit(2000000076.600:94085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23145 comm="syz.8.7205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 345.439405][ T29] audit: type=1326 audit(2000000076.600:94086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23145 comm="syz.8.7205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 345.462978][ T29] audit: type=1326 audit(2000000076.600:94087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23145 comm="syz.8.7205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 345.486579][ T29] audit: type=1326 audit(2000000076.610:94088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23145 comm="syz.8.7205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 345.582588][T21434] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.598443][T23156] __nla_validate_parse: 14 callbacks suppressed [ 345.598532][T23156] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7211'. [ 345.621132][T23156] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7211'. [ 345.758709][T23178] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7219'. [ 345.791887][T23182] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 345.860726][T23185] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7223'. [ 345.871476][T23187] FAULT_INJECTION: forcing a failure. [ 345.871476][T23187] name failslab, interval 1, probability 0, space 0, times 0 [ 345.884147][T23187] CPU: 0 UID: 0 PID: 23187 Comm: syz.7.7224 Not tainted syzkaller #0 PREEMPT(voluntary) [ 345.884207][T23187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 345.884220][T23187] Call Trace: [ 345.884228][T23187] [ 345.884236][T23187] __dump_stack+0x1d/0x30 [ 345.884258][T23187] dump_stack_lvl+0xe8/0x140 [ 345.884274][T23187] dump_stack+0x15/0x1b [ 345.884344][T23187] should_fail_ex+0x265/0x280 [ 345.884367][T23187] should_failslab+0x8c/0xb0 [ 345.884393][T23187] kmem_cache_alloc_noprof+0x50/0x310 [ 345.884451][T23187] ? audit_log_start+0x365/0x6c0 [ 345.884478][T23187] audit_log_start+0x365/0x6c0 [ 345.884505][T23187] audit_seccomp+0x48/0x100 [ 345.884577][T23187] ? __seccomp_filter+0x68c/0x10d0 [ 345.884597][T23187] __seccomp_filter+0x69d/0x10d0 [ 345.884619][T23187] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 345.884647][T23187] ? vfs_write+0x7e8/0x960 [ 345.884742][T23187] ? __rcu_read_unlock+0x4f/0x70 [ 345.884760][T23187] ? __fget_files+0x184/0x1c0 [ 345.884781][T23187] __secure_computing+0x82/0x150 [ 345.884802][T23187] syscall_trace_enter+0xcf/0x1e0 [ 345.884826][T23187] do_syscall_64+0xac/0x200 [ 345.884902][T23187] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 345.884990][T23187] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 345.885013][T23187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.885051][T23187] RIP: 0033:0x7fddc597eec9 [ 345.885067][T23187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.885083][T23187] RSP: 002b:00007fddc43df038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 345.885100][T23187] RAX: ffffffffffffffda RBX: 00007fddc5bd5fa0 RCX: 00007fddc597eec9 [ 345.885118][T23187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 345.885128][T23187] RBP: 00007fddc43df090 R08: 0000000000000000 R09: 0000000000000000 [ 345.885149][T23187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.885160][T23187] R13: 00007fddc5bd6038 R14: 00007fddc5bd5fa0 R15: 00007fff00fc44b8 [ 345.885174][T23187] [ 346.123884][T23189] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7223'. [ 346.142664][T23191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7225'. [ 346.245238][T23206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7241'. [ 346.355717][T23227] FAULT_INJECTION: forcing a failure. [ 346.355717][T23227] name failslab, interval 1, probability 0, space 0, times 0 [ 346.368574][T23227] CPU: 1 UID: 0 PID: 23227 Comm: syz.0.7240 Not tainted syzkaller #0 PREEMPT(voluntary) [ 346.368602][T23227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 346.368669][T23227] Call Trace: [ 346.368675][T23227] [ 346.368683][T23227] __dump_stack+0x1d/0x30 [ 346.368774][T23227] dump_stack_lvl+0xe8/0x140 [ 346.368793][T23227] dump_stack+0x15/0x1b [ 346.368810][T23227] should_fail_ex+0x265/0x280 [ 346.368842][T23227] should_failslab+0x8c/0xb0 [ 346.368865][T23227] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 346.368943][T23227] ? shmem_alloc_inode+0x34/0x50 [ 346.368962][T23227] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 346.369062][T23227] shmem_alloc_inode+0x34/0x50 [ 346.369081][T23227] alloc_inode+0x40/0x170 [ 346.369110][T23227] new_inode+0x1d/0xe0 [ 346.369130][T23227] shmem_get_inode+0x244/0x750 [ 346.369163][T23227] __shmem_file_setup+0x113/0x210 [ 346.369219][T23227] shmem_file_setup+0x3b/0x50 [ 346.369236][T23227] __se_sys_memfd_create+0x2c3/0x590 [ 346.369286][T23227] __x64_sys_memfd_create+0x31/0x40 [ 346.369304][T23227] x64_sys_call+0x2abe/0x2ff0 [ 346.369322][T23227] do_syscall_64+0xd2/0x200 [ 346.369406][T23227] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 346.369430][T23227] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 346.369456][T23227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.369477][T23227] RIP: 0033:0x7f53fb6aeec9 [ 346.369493][T23227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.369532][T23227] RSP: 002b:00007f53fa116e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 346.369551][T23227] RAX: ffffffffffffffda RBX: 0000000000000476 RCX: 00007f53fb6aeec9 [ 346.369563][T23227] RDX: 00007f53fa116ef0 RSI: 0000000000000000 RDI: 00007f53fb732960 [ 346.369575][T23227] RBP: 0000200000000540 R08: 00007f53fa116bb7 R09: 00007f53fa116e40 [ 346.369591][T23227] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 346.369604][T23227] R13: 00007f53fa116ef0 R14: 00007f53fa116eb0 R15: 0000200000000380 [ 346.369620][T23227] [ 346.624860][T23241] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7247'. [ 346.672810][T23248] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7250'. [ 347.525953][T23271] 8021q: VLANs not supported on ip6gre0 [ 347.549336][T23275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7260'. [ 348.245122][T23324] FAULT_INJECTION: forcing a failure. [ 348.245122][T23324] name failslab, interval 1, probability 0, space 0, times 0 [ 348.257837][T23324] CPU: 0 UID: 0 PID: 23324 Comm: syz.7.7281 Not tainted syzkaller #0 PREEMPT(voluntary) [ 348.257915][T23324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 348.257927][T23324] Call Trace: [ 348.257942][T23324] [ 348.257949][T23324] __dump_stack+0x1d/0x30 [ 348.257968][T23324] dump_stack_lvl+0xe8/0x140 [ 348.257985][T23324] dump_stack+0x15/0x1b [ 348.258075][T23324] should_fail_ex+0x265/0x280 [ 348.258096][T23324] should_failslab+0x8c/0xb0 [ 348.258116][T23324] kmem_cache_alloc_noprof+0x50/0x310 [ 348.258194][T23324] ? alloc_empty_file+0x76/0x200 [ 348.258299][T23324] alloc_empty_file+0x76/0x200 [ 348.258375][T23324] alloc_file_pseudo+0xc6/0x160 [ 348.258407][T23324] __shmem_file_setup+0x1de/0x210 [ 348.258492][T23324] shmem_file_setup+0x3b/0x50 [ 348.258507][T23324] __se_sys_memfd_create+0x2c3/0x590 [ 348.258526][T23324] __x64_sys_memfd_create+0x31/0x40 [ 348.258629][T23324] x64_sys_call+0x2abe/0x2ff0 [ 348.258651][T23324] do_syscall_64+0xd2/0x200 [ 348.258682][T23324] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 348.258704][T23324] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 348.258791][T23324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.258811][T23324] RIP: 0033:0x7fddc597eec9 [ 348.258824][T23324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.258837][T23324] RSP: 002b:00007fddc43dee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 348.258878][T23324] RAX: ffffffffffffffda RBX: 000000000000052b RCX: 00007fddc597eec9 [ 348.258944][T23324] RDX: 00007fddc43deef0 RSI: 0000000000000000 RDI: 00007fddc5a02960 [ 348.258957][T23324] RBP: 0000200000001140 R08: 00007fddc43debb7 R09: 00007fddc43dee40 [ 348.258968][T23324] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000880 [ 348.258979][T23324] R13: 00007fddc43deef0 R14: 00007fddc43deeb0 R15: 0000200000000080 [ 348.258994][T23324] [ 348.683038][T23365] lo speed is unknown, defaulting to 1000 [ 348.824097][T23376] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 348.832265][T23376] 0ªî{X¹¦: entered allmulticast mode [ 348.838517][T23376] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 349.575179][T23411] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 349.623350][T23414] lo speed is unknown, defaulting to 1000 [ 350.262763][ T29] kauditd_printk_skb: 1114 callbacks suppressed [ 350.262776][ T29] audit: type=1326 audit(2000000081.600:95201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23393 comm="syz.8.7304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87112caf79 code=0x7ffc0000 [ 350.292620][ T29] audit: type=1326 audit(2000000081.610:95202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23393 comm="syz.8.7304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8711325d67 code=0x7ffc0000 [ 350.325947][ T29] audit: type=1326 audit(2000000081.610:95203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23393 comm="syz.8.7304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87112caf79 code=0x7ffc0000 [ 350.349511][ T29] audit: type=1326 audit(2000000081.610:95204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23393 comm="syz.8.7304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8711325d67 code=0x7ffc0000 [ 350.373596][ T29] audit: type=1326 audit(2000000081.610:95205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23393 comm="syz.8.7304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87112caf79 code=0x7ffc0000 [ 350.397363][ T29] audit: type=1326 audit(2000000081.610:95206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23393 comm="syz.8.7304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8711325d67 code=0x7ffc0000 [ 350.420837][ T29] audit: type=1326 audit(2000000081.610:95207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23393 comm="syz.8.7304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87112caf79 code=0x7ffc0000 [ 350.444443][ T29] audit: type=1326 audit(2000000081.610:95208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23393 comm="syz.8.7304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8711325d67 code=0x7ffc0000 [ 350.467942][ T29] audit: type=1326 audit(2000000081.610:95209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23393 comm="syz.8.7304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87112caf79 code=0x7ffc0000 [ 350.491548][ T29] audit: type=1326 audit(2000000081.610:95210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23393 comm="syz.8.7304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8711325d67 code=0x7ffc0000 [ 351.103661][T23472] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 351.127224][T23474] __nla_validate_parse: 11 callbacks suppressed [ 351.127260][T23474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7337'. [ 351.431629][T23479] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7339'. [ 351.613250][ T3559] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 351.622073][ T3559] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 351.819720][T23498] lo speed is unknown, defaulting to 1000 [ 352.048072][T23502] lo speed is unknown, defaulting to 1000 [ 352.521369][T23515] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7352'. [ 352.554218][T23515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7352'. [ 352.605097][T23525] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7354'. [ 352.676944][T23530] loop7: detected capacity change from 0 to 1024 [ 352.688188][T23530] EXT4-fs: Ignoring removed orlov option [ 352.716650][T23530] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 352.731087][T23530] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.790706][T23530] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: comm syz.7.7358: lblock 0 mapped to illegal pblock 0 (length 1) [ 352.827097][T23530] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 352.839585][T23530] EXT4-fs (loop7): This should not happen!! Data will be lost [ 352.839585][T23530] [ 352.909188][T23545] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #15: comm syz.7.7358: lblock 0 mapped to illegal pblock 0 (length 1) [ 352.995454][T21434] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 353.096013][T23574] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 353.213533][T23583] loop7: detected capacity change from 0 to 1024 [ 353.220209][T23583] EXT4-fs: inline encryption not supported [ 353.238706][T23583] EXT4-fs: Ignoring removed bh option [ 353.265535][T23583] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.493507][T21434] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.632129][T23621] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 353.639241][T23623] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 353.766102][T23632] loop7: detected capacity change from 0 to 512 [ 353.781692][T23627] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7398'. [ 353.821682][T23632] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.7399: bad orphan inode 11 [ 353.831896][T23639] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 353.857098][T23632] ext4_test_bit(bit=10, block=4) = 1 [ 353.862443][T23632] is_bad_inode(inode)=0 [ 353.866702][T23632] NEXT_ORPHAN(inode)=2080374784 [ 353.871549][T23632] max_ino=32 [ 353.874783][T23632] i_nlink=0 [ 353.889832][T23632] EXT4-fs (loop7): 1 truncate cleaned up [ 353.896083][T23632] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.006158][T21434] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.386042][ T29] kauditd_printk_skb: 871 callbacks suppressed [ 355.386056][ T29] audit: type=1326 audit(2000000086.730:96082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23685 comm="syz.0.7419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fb6aeec9 code=0x7ffc0000 [ 355.456613][ T29] audit: type=1326 audit(2000000086.760:96083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23685 comm="syz.0.7419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53fb6aeec9 code=0x7ffc0000 [ 355.480223][ T29] audit: type=1326 audit(2000000086.760:96084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23685 comm="syz.0.7419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fb6aeec9 code=0x7ffc0000 [ 355.504156][ T29] audit: type=1326 audit(2000000086.760:96085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23685 comm="syz.0.7419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53fb6aeec9 code=0x7ffc0000 [ 355.527738][ T29] audit: type=1326 audit(2000000086.760:96086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23685 comm="syz.0.7419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fb6aeec9 code=0x7ffc0000 [ 355.551582][ T29] audit: type=1326 audit(2000000086.760:96087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23685 comm="syz.0.7419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f53fb6aeec9 code=0x7ffc0000 [ 355.575296][ T29] audit: type=1326 audit(2000000086.760:96088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23685 comm="syz.0.7419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fb6aeec9 code=0x7ffc0000 [ 355.598886][ T29] audit: type=1326 audit(2000000086.760:96089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23685 comm="syz.0.7419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f53fb6aeec9 code=0x7ffc0000 [ 355.622813][ T29] audit: type=1326 audit(2000000086.760:96090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23685 comm="syz.0.7419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fb6aeec9 code=0x7ffc0000 [ 355.646402][ T29] audit: type=1326 audit(2000000086.760:96091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23685 comm="syz.0.7419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53fb6aeec9 code=0x7ffc0000 [ 355.942345][T23704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7427'. [ 355.981791][T23716] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 356.061579][T23726] loop9: detected capacity change from 0 to 7 [ 356.069435][T23726] Buffer I/O error on dev loop9, logical block 0, async page read [ 356.077734][T23726] Buffer I/O error on dev loop9, logical block 0, async page read [ 356.085854][T23726] loop9: unable to read partition table [ 356.092672][T23726] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 356.092672][T23726] ) failed (rc=-5) [ 356.152981][T23726] Buffer I/O error on dev loop9, logical block 0, async page read [ 356.161051][T23726] Buffer I/O error on dev loop9, logical block 0, async page read [ 356.168983][T23726] loop9: unable to read partition table [ 356.175608][T23726] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 356.175608][T23726] ) failed (rc=-5) [ 356.238957][T23744] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 356.247159][T23745] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7444'. [ 356.314928][T23752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7448'. [ 356.381622][T23757] lo speed is unknown, defaulting to 1000 [ 357.081834][T23784] netlink: 'syz.0.7460': attribute type 13 has an invalid length. [ 357.089829][T23784] netlink: 'syz.0.7460': attribute type 17 has an invalid length. [ 357.112289][T23784] sit0: left promiscuous mode [ 357.117058][T23784] sit0: left allmulticast mode [ 357.143001][T23784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 357.265395][T23798] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7467'. [ 357.712422][T23825] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7476'. [ 357.775950][T23829] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 358.177305][T23860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7488'. [ 358.228496][T23864] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 358.408693][T23887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7500'. [ 358.496649][T23898] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7505'. [ 358.505767][T23896] lo speed is unknown, defaulting to 1000 [ 358.506292][T23898] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23898 comm=syz.2.7505 [ 358.530540][T23898] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23898 comm=syz.2.7505 [ 358.940770][T23920] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7514'. [ 358.986224][T23924] netlink: 996 bytes leftover after parsing attributes in process `syz.8.7516'. [ 358.997252][T23924] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.043916][T23924] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.094366][T23924] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.154087][T23924] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.232100][ T12] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.255406][ T12] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.278356][ T12] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.287368][ T12] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.316887][T23937] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 359.386353][T23948] loop7: detected capacity change from 0 to 8192 [ 359.531607][T23961] netlink: 996 bytes leftover after parsing attributes in process `syz.5.7532'. [ 359.543602][T23961] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.604404][T23961] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.645389][T23961] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.694068][T23961] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.726594][T23978] FAULT_INJECTION: forcing a failure. [ 359.726594][T23978] name failslab, interval 1, probability 0, space 0, times 0 [ 359.739338][T23978] CPU: 0 UID: 0 PID: 23978 Comm: syz.7.7539 Not tainted syzkaller #0 PREEMPT(voluntary) [ 359.739390][T23978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 359.739403][T23978] Call Trace: [ 359.739409][T23978] [ 359.739416][T23978] __dump_stack+0x1d/0x30 [ 359.739459][T23978] dump_stack_lvl+0xe8/0x140 [ 359.739479][T23978] dump_stack+0x15/0x1b [ 359.739494][T23978] should_fail_ex+0x265/0x280 [ 359.739567][T23978] should_failslab+0x8c/0xb0 [ 359.739589][T23978] __kmalloc_noprof+0xa5/0x3e0 [ 359.739675][T23978] ? fib6_info_alloc+0x2e/0x90 [ 359.739694][T23978] fib6_info_alloc+0x2e/0x90 [ 359.739743][T23978] ip6_route_info_create+0xe7/0x390 [ 359.739818][T23978] inet6_rtm_newroute+0x35e/0x1020 [ 359.739843][T23978] ? __memcg_slab_free_hook+0x135/0x230 [ 359.739945][T23978] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 359.740036][T23978] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 359.740055][T23978] netlink_rcv_skb+0x123/0x220 [ 359.740109][T23978] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 359.740128][T23978] rtnetlink_rcv+0x1c/0x30 [ 359.740165][T23978] netlink_unicast+0x5bd/0x690 [ 359.740182][T23978] netlink_sendmsg+0x58b/0x6b0 [ 359.740197][T23978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.740210][T23978] __sock_sendmsg+0x142/0x180 [ 359.740318][T23978] ____sys_sendmsg+0x345/0x4e0 [ 359.740343][T23978] ___sys_sendmsg+0x17b/0x1d0 [ 359.740376][T23978] __sys_sendmmsg+0x178/0x300 [ 359.740396][T23978] __x64_sys_sendmmsg+0x57/0x70 [ 359.740532][T23978] x64_sys_call+0x1c4a/0x2ff0 [ 359.740544][T23978] do_syscall_64+0xd2/0x200 [ 359.740561][T23978] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 359.740574][T23978] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 359.740601][T23978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.740675][T23978] RIP: 0033:0x7fddc597eec9 [ 359.740705][T23978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.740715][T23978] RSP: 002b:00007fddc43df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 359.740727][T23978] RAX: ffffffffffffffda RBX: 00007fddc5bd5fa0 RCX: 00007fddc597eec9 [ 359.740734][T23978] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 359.740760][T23978] RBP: 00007fddc43df090 R08: 0000000000000000 R09: 0000000000000000 [ 359.740766][T23978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.740773][T23978] R13: 00007fddc5bd6038 R14: 00007fddc5bd5fa0 R15: 00007fff00fc44b8 [ 359.740840][T23978] [ 360.000981][T10781] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.012398][T10781] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.026756][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.035112][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.057724][T23980] loop7: detected capacity change from 0 to 8192 [ 360.187203][T23997] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 360.224975][T24004] smc: net device bond0 applied user defined pnetid SYZ0 [ 360.400827][ T29] kauditd_printk_skb: 1400 callbacks suppressed [ 360.400841][ T29] audit: type=1326 audit(2000000091.740:97492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24021 comm="syz.7.7558" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fddc597eec9 code=0x0 [ 360.448176][ T29] audit: type=1326 audit(2000000091.760:97493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24028 comm="syz.0.7559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fb6aeec9 code=0x7ffc0000 [ 360.471912][ T29] audit: type=1326 audit(2000000091.760:97494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24028 comm="syz.0.7559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fb6aeec9 code=0x7ffc0000 [ 360.472690][T24036] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 360.495654][ T29] audit: type=1326 audit(2000000091.760:97495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24028 comm="syz.0.7559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f53fb6aeec9 code=0x7ffc0000 [ 360.529024][ T29] audit: type=1326 audit(2000000091.760:97496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24028 comm="syz.0.7559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fb6aeec9 code=0x7ffc0000 [ 360.552835][ T29] audit: type=1326 audit(2000000091.760:97497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24028 comm="syz.0.7559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53fb6aeec9 code=0x7ffc0000 [ 360.576548][ T29] audit: type=1326 audit(2000000091.760:97498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24028 comm="syz.0.7559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fb6aeec9 code=0x7ffc0000 [ 360.600368][ T29] audit: type=1326 audit(2000000091.760:97499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24028 comm="syz.0.7559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53fb6aeec9 code=0x7ffc0000 [ 360.624040][ T29] audit: type=1326 audit(2000000091.760:97500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24028 comm="syz.0.7559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fb6aeec9 code=0x7ffc0000 [ 360.647703][ T29] audit: type=1326 audit(2000000091.760:97501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24028 comm="syz.0.7559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53fb6aeec9 code=0x7ffc0000 [ 360.740191][T24056] lo speed is unknown, defaulting to 1000 [ 361.268245][T24091] loop7: detected capacity change from 0 to 1024 [ 361.275627][T24091] EXT4-fs: Ignoring removed orlov option [ 361.285895][T24091] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.529992][T21434] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.581623][T24118] lo speed is unknown, defaulting to 1000 [ 361.787182][T24128] __nla_validate_parse: 6 callbacks suppressed [ 361.787196][T24128] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7598'. [ 361.880853][T24140] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 361.984355][T24149] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7608'. [ 361.994401][T24149] 9pnet_fd: Insufficient options for proto=fd [ 362.044661][T24157] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7613'. [ 362.187798][T24171] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 362.255166][T24181] netlink: 996 bytes leftover after parsing attributes in process `syz.7.7625'. [ 362.279012][T24181] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.329922][T24181] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.337246][T24195] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7631'. [ 362.368056][T24197] lo speed is unknown, defaulting to 1000 [ 362.419952][T24181] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.484441][T24181] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.590014][T18192] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.612765][T18192] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.633917][T18192] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.652356][T18192] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.063599][T24229] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 363.674650][T24293] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7674'. [ 363.694472][T24296] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 363.892766][T24319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7684'. [ 363.947506][T24326] IPVS: length: 185 != 8 [ 363.957618][T24323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7686'. [ 364.288985][T24349] IPv6: NLM_F_CREATE should be specified when creating new route [ 364.297854][T24349] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7696'. [ 364.307563][T24349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7696'. [ 364.504024][T24367] 9pnet: Could not find request transport: y [ 364.544466][T24376] lo speed is unknown, defaulting to 1000 [ 364.984315][T24406] lo speed is unknown, defaulting to 1000 [ 365.077234][T24412] SELinux: Context system_u:object_r:iptables_unit_file_t:s0 is not valid (left unmapped). [ 365.697398][T24450] lo speed is unknown, defaulting to 1000 [ 365.919940][ T29] kauditd_printk_skb: 1143 callbacks suppressed [ 365.919953][ T29] audit: type=1326 audit(2000000097.260:98645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24457 comm="syz.2.7740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 365.972555][ T29] audit: type=1326 audit(2000000097.260:98646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24457 comm="syz.2.7740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 365.996218][ T29] audit: type=1326 audit(2000000097.260:98647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24457 comm="syz.2.7740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 366.019783][ T29] audit: type=1326 audit(2000000097.260:98648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24457 comm="syz.2.7740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 366.043351][ T29] audit: type=1326 audit(2000000097.260:98649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24457 comm="syz.2.7740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 366.067084][ T29] audit: type=1326 audit(2000000097.270:98650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24457 comm="syz.2.7740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 366.135669][T24472] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.184460][T24472] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.277589][T24472] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.319595][T24482] lo speed is unknown, defaulting to 1000 [ 366.348868][ T29] audit: type=1326 audit(2000000097.690:98651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24489 comm="syz.8.7756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 366.372818][ T29] audit: type=1326 audit(2000000097.690:98652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24489 comm="syz.8.7756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 366.411214][ T29] audit: type=1326 audit(2000000097.690:98653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24489 comm="syz.8.7756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 366.434978][ T29] audit: type=1326 audit(2000000097.690:98654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24489 comm="syz.8.7756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 366.530416][T24472] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.610033][ T143] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.623691][ T143] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.650955][ T143] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.662690][ T143] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.935078][T24524] __nla_validate_parse: 8 callbacks suppressed [ 366.935095][T24524] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7770'. [ 367.027242][T24529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7772'. [ 367.047443][T24529] IPVS: Unknown mcast interface: vcan0 [ 367.054890][T24532] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7774'. [ 367.187384][T24537] netlink: 28 bytes leftover after parsing attributes in process `'. [ 367.472047][T24563] netlink: 996 bytes leftover after parsing attributes in process `syz.5.7788'. [ 367.489905][T24563] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.511495][T24558] lo speed is unknown, defaulting to 1000 [ 367.542846][T24563] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.560686][T24537] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 367.615364][T24563] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.674552][T24563] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.729146][T24570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7790'. [ 367.746906][ T143] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.763577][ T143] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.781494][ T143] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.791078][ T143] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.279207][T24591] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7798'. [ 368.364395][T24599] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7802'. [ 368.439997][T24604] lo speed is unknown, defaulting to 1000 [ 368.985731][T24625] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7810'. [ 369.758115][T24642] lo speed is unknown, defaulting to 1000 [ 370.950488][T24701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7842'. [ 371.021669][T24708] IPVS: length: 209 != 24 [ 371.085791][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 371.085806][ T29] audit: type=1326 audit(2000000102.430:98715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24718 comm="syz.5.7848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc644eec9 code=0x7ffc0000 [ 371.125396][ T29] audit: type=1326 audit(2000000102.470:98716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24718 comm="syz.5.7848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc644eec9 code=0x7ffc0000 [ 371.149081][ T29] audit: type=1326 audit(2000000102.470:98717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24718 comm="syz.5.7848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4dc644eec9 code=0x7ffc0000 [ 371.172959][ T29] audit: type=1326 audit(2000000102.470:98718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24718 comm="syz.5.7848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc644eec9 code=0x7ffc0000 [ 371.196607][ T29] audit: type=1326 audit(2000000102.470:98719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24718 comm="syz.5.7848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc644eec9 code=0x7ffc0000 [ 371.220373][ T29] audit: type=1326 audit(2000000102.470:98720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24718 comm="syz.5.7848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f4dc644eec9 code=0x7ffc0000 [ 371.244079][ T29] audit: type=1326 audit(2000000102.470:98721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24718 comm="syz.5.7848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc644eec9 code=0x7ffc0000 [ 371.267724][ T29] audit: type=1326 audit(2000000102.470:98722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24718 comm="syz.5.7848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc644eec9 code=0x7ffc0000 [ 371.291752][ T29] audit: type=1326 audit(2000000102.470:98723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24722 comm="syz.7.7850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc597eec9 code=0x7ffc0000 [ 371.303664][T24727] lo speed is unknown, defaulting to 1000 [ 371.315547][ T29] audit: type=1326 audit(2000000102.470:98724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24722 comm="syz.7.7850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddc597eec9 code=0x7ffc0000 [ 371.999092][T24764] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7869'. [ 372.008220][T24764] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7869'. [ 372.105826][T24771] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7870'. [ 372.115090][T24768] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7870'. [ 372.126879][ C1] vcan0: j1939_tp_rxtimer: 0xffff88816e0cbe00: rx timeout, send abort [ 372.225196][T24785] netlink: 3 bytes leftover after parsing attributes in process `syz.7.7878'. [ 372.239933][T24785] batadv1: entered promiscuous mode [ 372.245382][T24785] batadv1: entered allmulticast mode [ 372.378072][T24802] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7886'. [ 372.546656][T24831] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7899'. [ 372.598810][T24842] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7903'. [ 372.635163][ C1] vcan0: j1939_tp_rxtimer: 0xffff88816e0cbe00: abort rx timeout. Force session deactivation [ 372.746497][T24864] syzkaller0: entered promiscuous mode [ 372.797044][T24870] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7915'. [ 372.836150][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ac4a400: rx timeout, send abort [ 373.015632][T24894] netlink: 996 bytes leftover after parsing attributes in process `syz.7.7922'. [ 373.026673][T24894] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.113800][T24894] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.173783][T24894] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.224537][T24894] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.297963][T18185] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.314719][T18185] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.328802][T18185] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.344389][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ac4a400: abort rx timeout. Force session deactivation [ 373.354693][T18185] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.486857][T24933] atomic_op ffff888103937928 conn xmit_atomic 0000000000000000 [ 373.788225][T24963] uprobe: syz.7.7949:24963 failed to unregister, leaking uprobe [ 373.995605][T24974] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24974 comm=syz.2.7952 [ 374.008335][T24974] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24974 comm=syz.2.7952 [ 374.058759][T24978] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24978 comm=syz.7.7956 [ 374.071607][T24978] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24978 comm=syz.7.7956 [ 374.257197][ T3376] IPVS: starting estimator thread 0... [ 374.362877][T25011] IPVS: using max 2784 ests per chain, 139200 per kthread [ 374.400968][T25000] lo speed is unknown, defaulting to 1000 [ 374.478248][T25015] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 374.634361][T25060] geneve2: entered promiscuous mode [ 374.646863][T25060] bridge0: port 3(batadv1) entered blocking state [ 374.653598][T25060] bridge0: port 3(batadv1) entered disabled state [ 374.670335][T25060] batadv1: entered allmulticast mode [ 374.681017][T25060] batadv1: entered promiscuous mode [ 374.830196][T25087] sch_fq: defrate 4294967295 ignored. [ 374.959493][T25105] lo speed is unknown, defaulting to 1000 [ 375.152571][T18205] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 375.161831][T18205] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 375.528873][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810aaa5000: rx timeout, send abort [ 375.741455][T24863] syzkaller0: left promiscuous mode [ 375.814579][T25162] lo speed is unknown, defaulting to 1000 [ 376.028912][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810aaa3e00: rx timeout, send abort [ 376.037272][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810aaa5000: abort rx timeout. Force session deactivation [ 376.093662][ T29] kauditd_printk_skb: 2877 callbacks suppressed [ 376.093677][ T29] audit: type=1326 audit(2000000003.860:101602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25190 comm="syz.7.8040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fddc597eec9 code=0x7ffc0000 [ 376.164697][ T29] audit: type=1326 audit(2000000003.860:101603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25190 comm="syz.7.8040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc597eec9 code=0x7ffc0000 [ 376.188521][ T29] audit: type=1326 audit(2000000003.860:101604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25190 comm="syz.7.8040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fddc597eec9 code=0x7ffc0000 [ 376.212361][ T29] audit: type=1326 audit(2000000003.860:101605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25190 comm="syz.7.8040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc597eec9 code=0x7ffc0000 [ 376.236042][ T29] audit: type=1326 audit(2000000003.890:101606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25159 comm="syz.8.8029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8711325d67 code=0x7ffc0000 [ 376.259629][ T29] audit: type=1326 audit(2000000003.890:101607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25159 comm="syz.8.8029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87112caf79 code=0x7ffc0000 [ 376.283247][ T29] audit: type=1326 audit(2000000003.890:101608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25159 comm="syz.8.8029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 376.306970][ T29] audit: type=1326 audit(2000000003.900:101609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25159 comm="syz.8.8029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8711325d67 code=0x7ffc0000 [ 376.330665][ T29] audit: type=1326 audit(2000000003.900:101610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25159 comm="syz.8.8029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87112caf79 code=0x7ffc0000 [ 376.354405][ T29] audit: type=1326 audit(2000000003.900:101611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25159 comm="syz.8.8029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 376.537214][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810aaa3e00: abort rx timeout. Force session deactivation [ 376.702857][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811addc800: rx timeout, send abort [ 376.732172][T25240] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25240 comm=syz.8.8062 [ 376.794481][T25248] lo speed is unknown, defaulting to 1000 [ 377.037434][T25282] __nla_validate_parse: 16 callbacks suppressed [ 377.037451][T25282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8077'. [ 377.202873][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811addc600: rx timeout, send abort [ 377.211111][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811addc800: abort rx timeout. Force session deactivation [ 377.243720][T25291] lo speed is unknown, defaulting to 1000 [ 377.667009][T25318] netlink: 996 bytes leftover after parsing attributes in process `syz.5.8092'. [ 377.711108][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811addc600: abort rx timeout. Force session deactivation [ 377.713903][T25324] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8094'. [ 377.920744][T25343] sch_fq: defrate 2147483649 ignored. [ 377.992363][T25350] netlink: 996 bytes leftover after parsing attributes in process `syz.2.8104'. [ 378.147653][T25355] infiniband syz2: set active [ 378.152471][T25355] infiniband syz2: added bond_slave_0 [ 378.166066][T25355] RDS/IB: syz2: added [ 378.171016][T25355] smc: adding ib device syz2 with port count 1 [ 378.179531][T25355] smc: ib device syz2 port 1 has pnetid [ 378.226090][T25365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8110'. [ 378.436259][T25383] lo speed is unknown, defaulting to 1000 [ 378.551290][T25393] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8121'. [ 379.165373][T25425] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.226187][T25425] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.283437][T25433] netlink: 996 bytes leftover after parsing attributes in process `syz.5.8136'. [ 379.294582][T25425] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.345216][T25425] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.436206][T18205] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.452758][T18205] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.464302][T18205] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.552666][T18210] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.794518][T25471] netlink: 'syz.8.8154': attribute type 3 has an invalid length. [ 379.854630][T25477] netlink: 996 bytes leftover after parsing attributes in process `syz.8.8156'. [ 380.255693][T25509] netlink: 996 bytes leftover after parsing attributes in process `syz.0.8169'. [ 380.558696][T25537] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8180'. [ 380.575396][T25537] hsr_slave_1 (unregistering): left promiscuous mode [ 381.107093][ T29] kauditd_printk_skb: 2378 callbacks suppressed [ 381.107108][ T29] audit: type=1326 audit(2000000008.870:103990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25510 comm="syz.0.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f53fb6a5d67 code=0x7ffc0000 [ 381.137110][ T29] audit: type=1326 audit(2000000008.870:103991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25510 comm="syz.0.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f53fb64af79 code=0x7ffc0000 [ 381.161028][ T29] audit: type=1326 audit(2000000008.870:103992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25510 comm="syz.0.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f53fb6aeec9 code=0x7ffc0000 [ 381.243103][ T29] audit: type=1326 audit(2000000008.880:103993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25510 comm="syz.0.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f53fb6a5d67 code=0x7ffc0000 [ 381.266899][ T29] audit: type=1326 audit(2000000008.880:103994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25510 comm="syz.0.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f53fb64af79 code=0x7ffc0000 [ 381.290556][ T29] audit: type=1326 audit(2000000008.880:103995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25510 comm="syz.0.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f53fb6aeec9 code=0x7ffc0000 [ 381.314211][ T29] audit: type=1326 audit(2000000008.880:103996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25510 comm="syz.0.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f53fb6a5d67 code=0x7ffc0000 [ 381.338056][ T29] audit: type=1326 audit(2000000008.880:103997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25510 comm="syz.0.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f53fb64af79 code=0x7ffc0000 [ 381.361744][ T29] audit: type=1326 audit(2000000008.880:103998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25510 comm="syz.0.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f53fb6aeec9 code=0x7ffc0000 [ 381.385341][ T29] audit: type=1326 audit(2000000008.880:103999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25510 comm="syz.0.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f53fb6a5d67 code=0x7ffc0000 [ 381.437962][T25554] lo speed is unknown, defaulting to 1000 [ 381.609192][T25572] 0ªî{X¹¦: entered promiscuous mode [ 381.614600][T25572] 0ªî{X¹¦: left allmulticast mode [ 381.624720][T25572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25572 comm=syz.5.8192 [ 382.282929][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811aceca00: rx timeout, send abort [ 382.545190][T25630] lo speed is unknown, defaulting to 1000 [ 382.602829][T25633] 9pnet_fd: Insufficient options for proto=fd [ 382.791452][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811aceca00: abort rx timeout. Force session deactivation [ 383.453776][T25679] bridge_slave_0: default FDB implementation only supports local addresses [ 383.463678][T25679] netlink: 'syz.8.8236': attribute type 10 has an invalid length. [ 383.476379][T25679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.485198][T25679] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 383.497800][T25679] netlink: 'syz.8.8236': attribute type 10 has an invalid length. [ 383.505910][T25679] __nla_validate_parse: 4 callbacks suppressed [ 383.505924][T25679] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8236'. [ 383.525728][T25679] batadv0: entered promiscuous mode [ 383.530979][T25679] batadv0: entered allmulticast mode [ 383.538741][T25679] bond0: (slave batadv0): Releasing backup interface [ 383.553906][T25679] bridge0: port 2(batadv0) entered blocking state [ 383.560441][T25679] bridge0: port 2(batadv0) entered disabled state [ 383.629545][T25685] lo speed is unknown, defaulting to 1000 [ 383.654136][T18210] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 383.663400][T18210] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 384.451681][T25727] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8254'. [ 384.550302][T25729] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8255'. [ 384.860204][T25743] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8261'. [ 384.896211][T25746] 9pnet_fd: Insufficient options for proto=fd [ 384.918897][T25748] netlink: 148 bytes leftover after parsing attributes in process `syz.5.8263'. [ 384.972488][T25748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8263'. [ 385.008789][T25748] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8263'. [ 385.245065][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ad02c00: rx timeout, send abort [ 385.288285][T25768] netlink: 288 bytes leftover after parsing attributes in process `syz.0.8272'. [ 385.316270][T25768] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8272'. [ 385.548380][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ad02800: rx timeout, send abort [ 385.745074][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ad02400: rx timeout, send abort [ 385.753344][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ad02c00: abort rx timeout. Force session deactivation [ 385.911203][T25808] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8287'. [ 386.056636][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ad02800: abort rx timeout. Force session deactivation [ 386.083890][T25833] lo speed is unknown, defaulting to 1000 [ 386.116353][ T29] kauditd_printk_skb: 2002 callbacks suppressed [ 386.116366][ T29] audit: type=1326 audit(2000000013.880:106002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25779 comm="syz.5.8276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4dc6445d67 code=0x7ffc0000 [ 386.166424][ T29] audit: type=1326 audit(2000000013.890:106003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25779 comm="syz.5.8276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4dc63eaf79 code=0x7ffc0000 [ 386.190071][ T29] audit: type=1326 audit(2000000013.890:106004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25779 comm="syz.5.8276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4dc644eec9 code=0x7ffc0000 [ 386.213788][ T29] audit: type=1326 audit(2000000013.920:106005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25779 comm="syz.5.8276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4dc6445d67 code=0x7ffc0000 [ 386.237512][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881a5495400: rx timeout, send abort [ 386.245717][ T29] audit: type=1326 audit(2000000013.920:106006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25779 comm="syz.5.8276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4dc63eaf79 code=0x7ffc0000 [ 386.253310][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ad02400: abort rx timeout. Force session deactivation [ 386.269449][ T29] audit: type=1326 audit(2000000013.920:106007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25779 comm="syz.5.8276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4dc644eec9 code=0x7ffc0000 [ 386.303096][ T29] audit: type=1326 audit(2000000013.920:106008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25779 comm="syz.5.8276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4dc6445d67 code=0x7ffc0000 [ 386.326656][ T29] audit: type=1326 audit(2000000013.920:106009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25779 comm="syz.5.8276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4dc63eaf79 code=0x7ffc0000 [ 386.350250][ T29] audit: type=1326 audit(2000000013.920:106010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25779 comm="syz.5.8276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4dc644eec9 code=0x7ffc0000 [ 386.373844][ T29] audit: type=1326 audit(2000000013.930:106011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25779 comm="syz.5.8276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4dc6445d67 code=0x7ffc0000 [ 386.421168][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881a5495600: rx timeout, send abort [ 386.733151][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881a5494400: rx timeout, send abort [ 386.741509][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881a5495400: abort rx timeout. Force session deactivation [ 386.929474][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881a5495600: abort rx timeout. Force session deactivation [ 387.241409][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881a5494400: abort rx timeout. Force session deactivation [ 387.817358][T25895] bridge_slave_0: left allmulticast mode [ 387.823153][T25895] bridge_slave_0: left promiscuous mode [ 387.828859][T25895] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.843232][T25895] bridge_slave_1: left allmulticast mode [ 387.849010][T25895] bridge_slave_1: left promiscuous mode [ 387.854822][T25895] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.864391][T25895] .`: (slave bond_slave_0): Releasing backup interface [ 387.882951][T25898] netlink: 'syz.5.8319': attribute type 10 has an invalid length. [ 387.899933][T25895] .`: (slave bond_slave_1): Releasing backup interface [ 387.924604][T25895] team0: Port device team_slave_0 removed [ 387.940551][T25895] team0: Port device team_slave_1 removed [ 387.947046][T25895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.954564][T25895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.962839][T25895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.970223][T25895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.007447][T25902] lo speed is unknown, defaulting to 1000 [ 388.017707][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a693800: rx timeout, send abort [ 388.089088][T25908] lo speed is unknown, defaulting to 1000 [ 388.517720][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a693a00: rx timeout, send abort [ 388.526108][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a693800: abort rx timeout. Force session deactivation [ 388.637060][T25935] 9pnet_fd: Insufficient options for proto=fd [ 388.894206][T25948] __nla_validate_parse: 5 callbacks suppressed [ 388.894222][T25948] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8339'. [ 388.965283][T25947] rdma_op ffff888104620580 conn xmit_rdma 0000000000000000 [ 389.026005][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a693a00: abort rx timeout. Force session deactivation [ 389.134125][T25951] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8340'. [ 389.144418][T25951] netlink: 4228 bytes leftover after parsing attributes in process `syz.7.8340'. [ 389.154235][T25951] netlink: set zone limit has 8 unknown bytes [ 389.161138][T25951] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8340'. [ 389.175897][T25951] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8340'. [ 389.184931][T25953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8341'. [ 389.194532][T25953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8341'. [ 389.194562][T25951] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8340'. [ 389.212398][T25951] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8340'. [ 389.222076][T25953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8341'. [ 389.283105][T25954] TCP: tcp_parse_options: Illegal window scaling value 94 > 14 received [ 391.631411][ T29] kauditd_printk_skb: 1905 callbacks suppressed [ 391.631426][ T29] audit: type=1326 audit(2000000019.390:107917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26024 comm="syz.7.8367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc597eec9 code=0x7ffc0000 [ 391.746470][ T29] audit: type=1326 audit(2000000019.390:107918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26024 comm="syz.7.8367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc597eec9 code=0x7ffc0000 [ 391.770265][ T29] audit: type=1326 audit(2000000019.430:107919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26024 comm="syz.7.8367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fddc597eec9 code=0x7ffc0000 [ 391.793919][ T29] audit: type=1326 audit(2000000019.430:107920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26024 comm="syz.7.8367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc597eec9 code=0x7ffc0000 [ 391.817638][ T29] audit: type=1326 audit(2000000019.430:107921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26024 comm="syz.7.8367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc597eec9 code=0x7ffc0000 [ 391.997195][ T29] audit: type=1326 audit(2000000019.760:107922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26028 comm="syz.2.8369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 392.020964][ T29] audit: type=1326 audit(2000000019.760:107923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26028 comm="syz.2.8369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 392.044660][ T29] audit: type=1326 audit(2000000019.760:107924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26028 comm="syz.2.8369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 392.068344][ T29] audit: type=1326 audit(2000000019.760:107925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26028 comm="syz.2.8369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 392.092092][ T29] audit: type=1326 audit(2000000019.760:107926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26028 comm="syz.2.8369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 392.374284][T26061] lo speed is unknown, defaulting to 1000 [ 393.057887][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ac5b800: rx timeout, send abort [ 393.322155][T26129] lo speed is unknown, defaulting to 1000 [ 393.558788][T26171] lo speed is unknown, defaulting to 1000 [ 393.566334][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ac5b800: abort rx timeout. Force session deactivation [ 393.717521][T26184] TCP: tcp_parse_options: Illegal window scaling value 94 > 14 received [ 393.778277][T26129] chnl_net:caif_netlink_parms(): no params data found [ 393.838849][T26129] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.846019][T26129] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.857556][T26129] bridge_slave_0: entered allmulticast mode [ 393.864337][T26129] bridge_slave_0: entered promiscuous mode [ 393.874235][T26129] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.881379][T26129] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.888951][T26129] bridge_slave_1: entered allmulticast mode [ 393.897267][T26129] bridge_slave_1: entered promiscuous mode [ 393.921284][T26129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.932093][T26129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.956073][T18191] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.967718][T26129] team0: Port device team_slave_0 added [ 393.974684][T26129] team0: Port device team_slave_1 added [ 393.991883][T26129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.998896][T26129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.024887][T26129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.036657][T26129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.043654][T26129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.069615][T26129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.081618][T18191] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.108407][T26129] hsr_slave_0: entered promiscuous mode [ 394.114510][T26129] hsr_slave_1: entered promiscuous mode [ 394.120621][T26129] debugfs: 'hsr0' already exists in 'hsr' [ 394.126402][T26129] Cannot create hsr debugfs directory [ 394.133515][T18191] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.186398][T18191] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.354659][T18191] .` (unregistering): Released all slaves [ 394.379444][T18191] bond0 (unregistering): Released all slaves [ 394.395199][T18191] bond1 (unregistering): Released all slaves [ 394.436566][T18191] IPVS: stopping backup sync thread 22418 ... [ 394.463851][T26202] __nla_validate_parse: 10 callbacks suppressed [ 394.463869][T26202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8428'. [ 394.480499][T18191] hsr_slave_0: left promiscuous mode [ 394.612673][T18191] hsr_slave_1: left promiscuous mode [ 394.634405][T18191] veth1_macvtap: left promiscuous mode [ 394.639989][T18191] veth0_macvtap: left promiscuous mode [ 394.800523][T26228] sock: sock_timestamping_bind_phc: sock not bind to device [ 394.831539][T26231] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 394.865473][T26233] netlink: 288 bytes leftover after parsing attributes in process `syz.0.8440'. [ 394.958056][T26129] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 394.973816][T26129] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 395.002224][T26129] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 395.015375][T26129] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 395.066333][T26129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.081714][T26129] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.091848][T18210] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.098985][T18210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.121098][T26129] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 395.131583][T26129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 395.145155][T18210] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.152312][T18210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.205560][T18191] IPVS: stop unused estimator thread 0... [ 395.211362][T26129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.426249][T26129] veth0_vlan: entered promiscuous mode [ 395.444460][T26129] veth1_vlan: entered promiscuous mode [ 395.475619][T26129] veth0_macvtap: entered promiscuous mode [ 395.491559][T26129] veth1_macvtap: entered promiscuous mode [ 395.507630][T26129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.520284][T26129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.531883][T18191] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.548027][T18191] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.570056][T18191] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.587135][T18191] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.619189][T26297] netlink: 288 bytes leftover after parsing attributes in process `syz.5.8453'. [ 395.783453][T26306] loop5: detected capacity change from 0 to 1024 [ 395.807190][T26306] EXT4-fs: Ignoring removed orlov option [ 395.862091][T26306] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.099048][T26129] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.135642][T26321] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8460'. [ 396.625164][T26371] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8481'. [ 396.634892][ T29] kauditd_printk_skb: 1968 callbacks suppressed [ 396.634906][ T29] audit: type=1326 audit(2000000024.400:109895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26309 comm="syz.8.8459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8711325d67 code=0x7ffc0000 [ 396.866911][ T29] audit: type=1326 audit(2000000024.400:109896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26309 comm="syz.8.8459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87112caf79 code=0x7ffc0000 [ 396.891159][ T29] audit: type=1326 audit(2000000024.400:109897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26309 comm="syz.8.8459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 396.915468][ T29] audit: type=1326 audit(2000000024.400:109898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26370 comm="syz.7.8481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc597eec9 code=0x7ffc0000 [ 396.939303][ T29] audit: type=1326 audit(2000000024.400:109899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26309 comm="syz.8.8459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8711325d67 code=0x7ffc0000 [ 396.963639][ T29] audit: type=1326 audit(2000000024.400:109900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26309 comm="syz.8.8459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87112caf79 code=0x7ffc0000 [ 396.987302][ T29] audit: type=1326 audit(2000000024.400:109901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26309 comm="syz.8.8459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 397.011601][ T29] audit: type=1326 audit(2000000024.400:109902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26370 comm="syz.7.8481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc597eec9 code=0x7ffc0000 [ 397.036414][ T29] audit: type=1326 audit(2000000024.440:109903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26309 comm="syz.8.8459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8711325d67 code=0x7ffc0000 [ 397.059997][ T29] audit: type=1326 audit(2000000024.440:109904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26309 comm="syz.8.8459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87112caf79 code=0x7ffc0000 [ 397.219409][T26404] netlink: 84 bytes leftover after parsing attributes in process `syz.8.8492'. [ 397.250486][T26400] loop5: detected capacity change from 0 to 4096 [ 397.266735][T26400] EXT4-fs: Ignoring removed nomblk_io_submit option [ 397.277603][T26400] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.384844][T26413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8494'. [ 397.516121][T26129] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.562347][T26437] netlink: 84 bytes leftover after parsing attributes in process `syz.2.8505'. [ 397.665290][T26440] loop5: detected capacity change from 0 to 4096 [ 397.682854][T26440] EXT4-fs: Ignoring removed nomblk_io_submit option [ 397.718911][T26440] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.769186][T26451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8509'. [ 397.824473][T26129] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.307553][T26473] ªªªªªª: renamed from vlan0 (while UP) [ 398.490489][T26485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8522'. [ 398.742317][T26514] loop5: detected capacity change from 0 to 1024 [ 398.750156][T26514] EXT4-fs: Ignoring removed orlov option [ 398.766044][T26514] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.906668][T26129] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.060341][T26544] netlink: 'syz.8.8547': attribute type 4 has an invalid length. [ 399.079917][T26544] .`: renamed from bond0 (while UP) [ 399.100874][T26550] loop5: detected capacity change from 0 to 512 [ 399.111709][T26550] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 399.130470][T26550] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.8549: invalid block [ 399.153573][T26550] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.8549: invalid indirect mapped block 4294967295 (level 1) [ 399.171266][T26550] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.8549: invalid indirect mapped block 4294967295 (level 1) [ 399.186169][T26550] EXT4-fs (loop5): 2 truncates cleaned up [ 399.207845][T26550] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.209850][T26558] openvswitch: netlink: Message has 6 unknown bytes. [ 399.272936][T26129] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.563692][T26596] __nla_validate_parse: 5 callbacks suppressed [ 399.563709][T26596] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8569'. [ 399.579007][T26596] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8569'. [ 399.651759][T26605] netlink: 288 bytes leftover after parsing attributes in process `syz.8.8573'. [ 399.825304][T26616] lo speed is unknown, defaulting to 1000 [ 400.219601][T26625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8581'. [ 400.228711][T26625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8581'. [ 400.465511][T26644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8590'. [ 400.607972][T26658] loop5: detected capacity change from 0 to 4096 [ 400.619250][T26658] EXT4-fs: Ignoring removed nomblk_io_submit option [ 400.637538][T26658] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.658485][T26669] netlink: 288 bytes leftover after parsing attributes in process `syz.8.8599'. [ 400.670456][T26665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8598'. [ 400.679503][T26665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8598'. [ 400.710213][T26129] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.777284][T26671] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8602'. [ 400.795567][T26682] lo speed is unknown, defaulting to 1000 [ 401.350810][T26730] loop5: detected capacity change from 0 to 4096 [ 401.373996][T26730] EXT4-fs: Ignoring removed nomblk_io_submit option [ 401.390576][T26730] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.421220][ T3399] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 401.430007][ T3399] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 401.473360][T26129] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.643483][ T29] kauditd_printk_skb: 1459 callbacks suppressed [ 401.643496][ T29] audit: type=1326 audit(2000000029.410:111364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26706 comm="syz.2.8613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff864b05d67 code=0x7ffc0000 [ 401.674149][ T29] audit: type=1326 audit(2000000029.410:111365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26706 comm="syz.2.8613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff864aaaf79 code=0x7ffc0000 [ 401.697759][ T29] audit: type=1326 audit(2000000029.410:111366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26706 comm="syz.2.8613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 401.727541][ T29] audit: type=1326 audit(2000000029.470:111367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26706 comm="syz.2.8613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff864b05d67 code=0x7ffc0000 [ 401.751770][ T29] audit: type=1326 audit(2000000029.470:111368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26706 comm="syz.2.8613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff864aaaf79 code=0x7ffc0000 [ 401.776035][ T29] audit: type=1326 audit(2000000029.470:111369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26706 comm="syz.2.8613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 401.799726][ T29] audit: type=1326 audit(2000000029.470:111370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26706 comm="syz.2.8613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff864b05d67 code=0x7ffc0000 [ 401.824056][ T29] audit: type=1326 audit(2000000029.470:111371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26706 comm="syz.2.8613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff864aaaf79 code=0x7ffc0000 [ 401.847757][ T29] audit: type=1326 audit(2000000029.470:111372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26706 comm="syz.2.8613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 401.872345][ T29] audit: type=1326 audit(2000000029.470:111373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26723 comm="syz.7.8622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fddc5975d67 code=0x7ffc0000 [ 402.251430][T26773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.274468][T26773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.091813][ C1] vcan0: j1939_tp_rxtimer: 0xffff888109436800: rx timeout, send abort [ 403.162196][ C1] vcan0: j1939_tp_rxtimer: 0xffff888109436600: rx timeout, send abort [ 403.268642][T26883] lo speed is unknown, defaulting to 1000 [ 403.600103][ C1] vcan0: j1939_tp_rxtimer: 0xffff888109436800: abort rx timeout. Force session deactivation [ 403.670744][ C1] vcan0: j1939_tp_rxtimer: 0xffff888109436600: abort rx timeout. Force session deactivation [ 403.798209][T26920] lo speed is unknown, defaulting to 1000 [ 404.491381][T26950] lo speed is unknown, defaulting to 1000 [ 405.557735][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a682400: rx timeout, send abort [ 405.577532][T26995] loop5: detected capacity change from 0 to 4096 [ 405.584334][T26995] EXT4-fs: Ignoring removed nomblk_io_submit option [ 405.604040][T26995] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.649111][T26129] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.691096][T27005] lo speed is unknown, defaulting to 1000 [ 405.752803][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ac2fa00: rx timeout, send abort [ 406.057793][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a683000: rx timeout, send abort [ 406.066045][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a682400: abort rx timeout. Force session deactivation [ 406.252820][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ac2ea00: rx timeout, send abort [ 406.261339][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ac2fa00: abort rx timeout. Force session deactivation [ 406.473825][T27053] __nla_validate_parse: 10 callbacks suppressed [ 406.473897][T27053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8753'. [ 406.566050][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a683000: abort rx timeout. Force session deactivation [ 406.584161][T27056] lo speed is unknown, defaulting to 1000 [ 406.699613][ T29] kauditd_printk_skb: 1465 callbacks suppressed [ 406.699628][ T29] audit: type=1326 audit(2000000034.460:112839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27072 comm="syz.2.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 406.761228][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ac2ea00: abort rx timeout. Force session deactivation [ 406.774507][ T29] audit: type=1326 audit(2000000034.460:112840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27072 comm="syz.2.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 406.798188][ T29] audit: type=1326 audit(2000000034.460:112841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27072 comm="syz.2.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 406.822141][ T29] audit: type=1326 audit(2000000034.460:112842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27072 comm="syz.2.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 406.845887][ T29] audit: type=1326 audit(2000000034.460:112843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27072 comm="syz.2.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 406.869587][ T29] audit: type=1326 audit(2000000034.460:112844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27072 comm="syz.2.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 406.893244][ T29] audit: type=1326 audit(2000000034.460:112845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27072 comm="syz.2.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 406.916898][ T29] audit: type=1326 audit(2000000034.460:112846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27072 comm="syz.2.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 406.940590][ T29] audit: type=1326 audit(2000000034.460:112847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27072 comm="syz.2.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 406.964403][ T29] audit: type=1326 audit(2000000034.460:112848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27072 comm="syz.2.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 406.988069][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a682400: rx timeout, send abort [ 407.056676][T27089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8770'. [ 407.075026][T27089] netem: change failed [ 407.251577][ C1] vcan0: j1939_tp_rxtimer: 0xffff888116a84800: rx timeout, send abort [ 407.488106][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a682400: abort rx timeout. Force session deactivation [ 407.759846][ C1] vcan0: j1939_tp_rxtimer: 0xffff888116a84800: abort rx timeout. Force session deactivation [ 408.214049][T27140] lo speed is unknown, defaulting to 1000 [ 408.390317][T27145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8788'. [ 408.576553][T27168] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8801'. [ 408.754792][T27180] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8805'. [ 409.160790][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811acb7600: rx timeout, send abort [ 409.417626][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811acb6800: rx timeout, send abort [ 409.637541][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119cada00: rx timeout, send abort [ 409.669002][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811acb7600: abort rx timeout. Force session deactivation [ 409.852480][T27245] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8830'. [ 409.926015][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811acb6800: abort rx timeout. Force session deactivation [ 410.145806][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119cada00: abort rx timeout. Force session deactivation [ 411.629458][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ac27c00: rx timeout, send abort [ 411.709969][ T29] kauditd_printk_skb: 2889 callbacks suppressed [ 411.709982][ T29] audit: type=1326 audit(2000000039.470:115738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27302 comm="syz.8.8851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8711325d67 code=0x7ffc0000 [ 411.833238][ T29] audit: type=1326 audit(2000000039.470:115739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27302 comm="syz.8.8851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87112caf79 code=0x7ffc0000 [ 411.856943][ T29] audit: type=1326 audit(2000000039.470:115740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27302 comm="syz.8.8851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 411.880646][ T29] audit: type=1326 audit(2000000039.480:115741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27302 comm="syz.8.8851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8711325d67 code=0x7ffc0000 [ 411.904252][ T29] audit: type=1326 audit(2000000039.480:115742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27302 comm="syz.8.8851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87112caf79 code=0x7ffc0000 [ 411.928088][ T29] audit: type=1326 audit(2000000039.480:115743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27302 comm="syz.8.8851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 411.951813][ T29] audit: type=1326 audit(2000000039.490:115744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27302 comm="syz.8.8851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8711325d67 code=0x7ffc0000 [ 411.975549][ T29] audit: type=1326 audit(2000000039.490:115745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27302 comm="syz.8.8851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87112caf79 code=0x7ffc0000 [ 411.999273][ T29] audit: type=1326 audit(2000000039.490:115746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27302 comm="syz.8.8851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 412.023076][ T29] audit: type=1326 audit(2000000039.500:115747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27302 comm="syz.8.8851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8711325d67 code=0x7ffc0000 [ 412.113942][T27341] lo speed is unknown, defaulting to 1000 [ 412.137730][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ac27c00: abort rx timeout. Force session deactivation [ 412.197636][T27354] lo speed is unknown, defaulting to 1000 [ 412.846427][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ac27200: rx timeout, send abort [ 412.948859][T27384] lo speed is unknown, defaulting to 1000 [ 413.313252][T27398] lo speed is unknown, defaulting to 1000 [ 413.354696][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ac27200: abort rx timeout. Force session deactivation [ 413.853070][T27424] lo speed is unknown, defaulting to 1000 [ 413.915017][T27426] lo speed is unknown, defaulting to 1000 [ 414.721111][T27457] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8905'. [ 415.267894][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811add4c00: rx timeout, send abort [ 415.400862][T27478] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8915'. [ 415.492142][T27490] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8920'. [ 415.650990][T27507] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8926'. [ 415.660928][T27507] IPVS: Unknown mcast interface: ipvlan1 [ 415.767953][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ad1dc00: rx timeout, send abort [ 415.776257][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811add4c00: abort rx timeout. Force session deactivation [ 415.834265][T27518] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8931'. [ 415.946512][T27531] netlink: 'syz.8.8936': attribute type 10 has an invalid length. [ 415.954482][T27531] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8936'. [ 415.968457][T27531] team0: Port device geneve1 added [ 416.276186][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ad1dc00: abort rx timeout. Force session deactivation [ 416.427786][T27549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8944'. [ 416.526964][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881094dba00: rx timeout, send abort [ 416.544715][T27561] netlink: 'syz.0.8948': attribute type 10 has an invalid length. [ 416.552616][T27561] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8948'. [ 416.578370][T27561] team0: Port device geneve1 added [ 416.715766][ T29] kauditd_printk_skb: 1656 callbacks suppressed [ 416.715782][ T29] audit: type=1326 audit(2000000044.480:117404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27527 comm="syz.2.8935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff864b05d67 code=0x7ffc0000 [ 416.746635][ T29] audit: type=1326 audit(2000000044.480:117405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27527 comm="syz.2.8935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff864aaaf79 code=0x7ffc0000 [ 416.770300][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ac51600: rx timeout, send abort [ 416.778669][ T29] audit: type=1326 audit(2000000044.480:117406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27527 comm="syz.2.8935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 416.802348][ T29] audit: type=1326 audit(2000000044.480:117407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27541 comm="syz.8.8941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8711325d67 code=0x7ffc0000 [ 416.825931][ T29] audit: type=1326 audit(2000000044.480:117408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27541 comm="syz.8.8941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87112caf79 code=0x7ffc0000 [ 416.850352][ T29] audit: type=1326 audit(2000000044.480:117409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27541 comm="syz.8.8941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f871132eec9 code=0x7ffc0000 [ 416.873997][ T29] audit: type=1326 audit(2000000044.480:117410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27527 comm="syz.2.8935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff864b05d67 code=0x7ffc0000 [ 416.897596][ T29] audit: type=1326 audit(2000000044.480:117411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27527 comm="syz.2.8935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff864aaaf79 code=0x7ffc0000 [ 416.921397][ T29] audit: type=1326 audit(2000000044.480:117412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27527 comm="syz.2.8935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 416.945211][ T29] audit: type=1326 audit(2000000044.480:117413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27541 comm="syz.8.8941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8711325d67 code=0x7ffc0000 [ 416.968771][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881094dae00: rx timeout, send abort [ 417.035293][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881094dba00: abort rx timeout. Force session deactivation [ 417.037635][T27585] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8956'. [ 417.270346][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ac51600: abort rx timeout. Force session deactivation [ 417.356285][T27612] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8967'. [ 417.461826][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881199ca000: rx timeout, send abort [ 417.510594][T27630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=27630 comm=syz.8.8974 [ 417.661511][T27646] lo speed is unknown, defaulting to 1000 [ 417.970153][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881199ca000: abort rx timeout. Force session deactivation [ 418.571011][T27691] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 418.733861][T27713] 9pnet_fd: Insufficient options for proto=fd [ 418.740534][T27712] 9pnet_fd: Insufficient options for proto=fd [ 419.699452][T27773] vlan0: entered promiscuous mode [ 419.704629][T27773] vlan0: entered allmulticast mode [ 419.709804][T27773] hsr_slave_1: entered allmulticast mode [ 419.739964][T27773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27773 comm=syz.2.9031 [ 419.755555][T27773] __nla_validate_parse: 4 callbacks suppressed [ 419.755594][T27773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9031'. [ 420.091245][T27802] lo speed is unknown, defaulting to 1000 [ 420.143689][T27824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9049'. [ 420.488285][T27802] chnl_net:caif_netlink_parms(): no params data found [ 420.564898][T27802] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.572058][T27802] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.589591][T27843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9057'. [ 420.598887][T27802] bridge_slave_0: entered allmulticast mode [ 420.605485][T27802] bridge_slave_0: entered promiscuous mode [ 420.618619][T18205] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.654234][T27802] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.661357][T27802] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.669304][T27802] bridge_slave_1: entered allmulticast mode [ 420.677089][T27802] bridge_slave_1: entered promiscuous mode [ 420.700270][T27802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.714282][T18205] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.745297][T27802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.768758][T27802] team0: Port device team_slave_0 added [ 420.786003][T18205] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.801337][T27802] team0: Port device team_slave_1 added [ 420.820045][T27802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.827117][T27802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.853118][T27802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.866625][T18205] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.877733][T27802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.884730][T27802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.910701][T27802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.923324][T27860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9062'. [ 420.932272][T27860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9062'. [ 420.949150][T27802] hsr_slave_0: entered promiscuous mode [ 420.955459][T27802] hsr_slave_1: entered promiscuous mode [ 420.961542][T27802] debugfs: 'hsr0' already exists in 'hsr' [ 420.961802][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ad16400: rx timeout, send abort [ 420.967341][T27802] Cannot create hsr debugfs directory [ 420.995572][T18205] bridge0: port 2(batadv0) entered disabled state [ 421.003427][T18205] dummy0: left allmulticast mode [ 421.008595][T18205] bridge0: port 1(dummy0) entered disabled state [ 421.042441][T18205] team0: Port device geneve1 removed [ 421.123850][T18205] .` (unregistering): Released all slaves [ 421.138320][T27863] lo speed is unknown, defaulting to 1000 [ 421.164837][T18205] IPVS: stopping backup sync thread 23639 ... [ 421.210433][T18205] hsr_slave_0: left promiscuous mode [ 421.219967][T18205] veth1_macvtap: left promiscuous mode [ 421.226459][T18205] veth0_macvtap: left promiscuous mode [ 421.293182][ T3376] lo speed is unknown, defaulting to 1000 [ 421.298992][ T3376] infiniband syz0: ib_query_port failed (-19) [ 421.475533][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ad16400: abort rx timeout. Force session deactivation [ 421.641226][T27802] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 421.670527][T27802] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 421.675933][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ad16a00: rx timeout, send abort [ 421.689037][T27802] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 421.713208][T27802] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 421.729322][T27878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9069'. [ 421.808255][T27802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.834821][T27802] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.855501][T18176] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.862686][T18176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.881761][ T29] kauditd_printk_skb: 1737 callbacks suppressed [ 421.881776][ T29] audit: type=1326 audit(2000000049.640:119151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27901 comm="syz.2.9078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 421.911939][ T29] audit: type=1326 audit(2000000049.640:119152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27901 comm="syz.2.9078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 421.935622][ T29] audit: type=1326 audit(2000000049.640:119153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27901 comm="syz.2.9078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 421.959543][ T29] audit: type=1326 audit(2000000049.640:119154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27901 comm="syz.2.9078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 421.983221][ T29] audit: type=1326 audit(2000000049.640:119155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27901 comm="syz.2.9078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 422.006963][ T29] audit: type=1326 audit(2000000049.640:119156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27901 comm="syz.2.9078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 422.030772][ T29] audit: type=1326 audit(2000000049.640:119157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27901 comm="syz.2.9078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff864b0eec9 code=0x7ffc0000 [ 422.039694][T27802] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 422.054573][ T29] audit: type=1326 audit(2000000049.640:119158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27901 comm="syz.2.9078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff864b0d710 code=0x7ffc0000 [ 422.065067][T27802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 422.099334][ T29] audit: type=1326 audit(2000000049.640:119159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27901 comm="syz.2.9078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff864b0d97f code=0x7ffc0000 [ 422.121457][T18176] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.122869][ T29] audit: type=1326 audit(2000000049.640:119160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27901 comm="syz.2.9078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff864b0d97f code=0x7ffc0000 [ 422.129933][T18176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.169318][T27909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9079'. [ 422.178313][T27909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9079'. [ 422.185470][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ad16a00: abort rx timeout. Force session deactivation [ 422.284337][T27802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.316113][T27924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9083'. [ 422.461998][T27802] veth0_vlan: entered promiscuous mode [ 422.476855][T27802] veth1_vlan: entered promiscuous mode [ 422.515295][T27802] veth0_macvtap: entered promiscuous mode [ 422.527376][T27802] veth1_macvtap: entered promiscuous mode [ 422.548698][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a683000: rx timeout, send abort [ 422.552321][T27802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.624130][T27802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.644938][T18191] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.655320][T18191] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.671186][T18191] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.697876][T18191] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.855706][T27958] loop8: detected capacity change from 0 to 512 [ 422.870106][T27958] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 422.914158][T27958] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.9093: invalid block [ 422.926945][T27958] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.9093: invalid indirect mapped block 4294967295 (level 1) [ 422.943660][T27958] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.9093: invalid indirect mapped block 4294967295 (level 1) [ 422.982764][T27958] EXT4-fs (loop8): 2 truncates cleaned up [ 422.988989][T27958] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.025936][T27802] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.055584][T27970] SELinux: failed to load policy [ 423.060586][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a683000: abort rx timeout. Force session deactivation [ 423.082451][T27972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9097'. [ 423.091549][T27972] IPVS: Unknown mcast interface: vcan0 [ 423.145356][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ac54e00: rx timeout, send abort [ 423.298318][T27988] ================================================================== [ 423.306443][T27988] BUG: KCSAN: data-race in call_rcu / mas_state_walk [ 423.313140][T27988] [ 423.315458][T27988] write to 0xffff8881094fec10 of 8 bytes by task 27985 on cpu 0: [ 423.323173][T27988] call_rcu+0x44/0x3f0 [ 423.327249][T27988] mas_replace_node+0x2e7/0x410 [ 423.332106][T27988] mas_wr_store_entry+0x2406/0x2b50 [ 423.337312][T27988] mas_store_prealloc+0x74d/0x9e0 [ 423.342351][T27988] vma_iter_store_new+0x1c5/0x200 [ 423.347387][T27988] vma_complete+0x125/0x580 [ 423.351896][T27988] __split_vma+0x591/0x650 [ 423.356360][T27988] vma_modify+0x21e/0xc80 [ 423.360730][T27988] vma_modify_flags+0x101/0x130 [ 423.365640][T27988] mprotect_fixup+0x2cc/0x570 [ 423.370327][T27988] do_mprotect_pkey+0x6d6/0x980 [ 423.375189][T27988] __x64_sys_mprotect+0x48/0x60 [ 423.380048][T27988] x64_sys_call+0x274e/0x2ff0 [ 423.384822][T27988] do_syscall_64+0xd2/0x200 [ 423.389346][T27988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.395261][T27988] [ 423.397585][T27988] read to 0xffff8881094fec10 of 8 bytes by task 27988 on cpu 1: [ 423.405212][T27988] mas_state_walk+0x3e9/0x650 [ 423.409897][T27988] mas_walk+0x60/0x150 [ 423.413971][T27988] lock_vma_under_rcu+0x8d/0x160 [ 423.419004][T27988] do_user_addr_fault+0x233/0x1090 [ 423.424220][T27988] exc_page_fault+0x62/0xa0 [ 423.428745][T27988] asm_exc_page_fault+0x26/0x30 [ 423.433646][T27988] [ 423.435962][T27988] value changed: 0x00007fee74f9dfff -> 0xffffffff8564ac50 [ 423.443335][T27988] [ 423.445748][T27988] Reported by Kernel Concurrency Sanitizer on: [ 423.451980][T27988] CPU: 1 UID: 0 PID: 27988 Comm: syz.5.9103 Not tainted syzkaller #0 PREEMPT(voluntary) [ 423.461796][T27988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 423.471859][T27988] ================================================================== [ 423.645425][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881199f8c00: rx timeout, send abort [ 424.153688][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881199f8c00: abort rx timeout. Force session deactivation