last executing test programs: 5m58.178741676s ago: executing program 32 (id=1412): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) 5m22.275479991s ago: executing program 33 (id=1800): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7ffc}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000000180)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x1}}, 0x10, 0x0}, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 2m20.07087399s ago: executing program 34 (id=3894): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x2ce, &(0x7f00000001c0)=ANY=[], 0x0) 2m14.163732307s ago: executing program 35 (id=3964): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = getpgrp(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$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") 2m11.129800539s ago: executing program 8 (id=4077): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x80, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 2m10.975522596s ago: executing program 8 (id=4102): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000040)="93d90400000304", 0x7}, {&(0x7f0000000140)="0151b1a5f10ecff5", 0x8}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000280)={0xa, 0x4e23, 0x80004, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r2], 0x18}, 0x40c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010092e50000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r4, 0x0, 0x4804}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 2m10.943645347s ago: executing program 8 (id=4103): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r1, &(0x7f0000000380), 0x0}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000c00), 0x5005) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r5 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000b40)={0x84, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x160, 0x1}}, 0x0, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x87}, &(0x7f0000000900)={0x40, 0xb, 0x2, '{J'}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000980)={0x40, 0x13, 0x6, @local}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "3191"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x14}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x8}}) socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, 0x0) 2m9.73750093s ago: executing program 36 (id=4013): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = getpgrp(0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff07}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_pidfd_open(r0, 0x0) process_madvise(r2, 0x0, 0x0, 0x4, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x400}, &(0x7f0000000000)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x3) writev(r7, &(0x7f0000000240)=[{0x0}, {&(0x7f00000001c0)='(', 0x1}], 0x2) io_uring_enter(r4, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r8, 0x40044591, 0x0) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x38, 0x2}, @cond=[{0x2, 0x5, 0x40, 0x9, 0x8001, 0xfc01}, {0x9, 0x6, 0x401, 0x3, 0x2000, 0x8}]}) write$char_usb(r9, &(0x7f0000000040)="e2", 0x2250) 1m59.788927733s ago: executing program 37 (id=4074): syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") 1m55.859706834s ago: executing program 38 (id=4103): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r1, &(0x7f0000000380), 0x0}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000c00), 0x5005) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r5 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000b40)={0x84, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x160, 0x1}}, 0x0, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x87}, &(0x7f0000000900)={0x40, 0xb, 0x2, '{J'}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000980)={0x40, 0x13, 0x6, @local}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "3191"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x14}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x8}}) socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, 0x0) 1m40.451750885s ago: executing program 39 (id=4228): r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0xffffffffffffffff}, 0x0, 0x3, 0x0, 0x0, 0xfff, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='cpu==0||!') 1m34.156097729s ago: executing program 40 (id=4307): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x5, 0x0, 0x0, 0x7, 0x510, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xbf, 0x8}, 0x100000, 0xfffe, 0x9, 0x3, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f00000002c0)=""/60, 0x3c}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x4, &(0x7f0000000680)=ANY=[@ANYRES64=r1], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000005cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r7, @ANYBLOB="0100000000000002000005000000180001801400020073797a5f74756e000000000000000000080005000a0f00005c0003800400010054000380"], 0x90}}, 0x0) r8 = socket(0x10, 0x80003, 0x0) write(r8, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) r9 = open(&(0x7f00000003c0)='./bus\x00', 0x143bc2, 0xe9) fcntl$setlease(r9, 0x400, 0x1) open(&(0x7f0000000000)='./bus\x00', 0x22103, 0x6) fcntl$setlease(r9, 0x400, 0x1) close_range(r8, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4a, &(0x7f0000000080)=0x15af, 0x4) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) pidfd_send_signal(0xffffffffffffffff, 0x34, &(0x7f0000000300)={0x2e, 0x5, 0x8}, 0x0) 1m27.870394203s ago: executing program 41 (id=4352): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) accept(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000080)=0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000540)={&(0x7f0000000300)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x10}}], 0x30, 0x8010}, 0x0) 1m23.478136274s ago: executing program 5 (id=4543): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x1a00404, &(0x7f0000000080)={[{@noblock_validity}, {@grpquota}]}, 0x1, 0xbb9, &(0x7f00000017c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0xcd) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 1m22.747837606s ago: executing program 5 (id=4548): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES16=r0], 0x118) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000896974c1a729b22d1f4e706ba3a95f75eb87b35ff90b0f97c7956425d62a94f49bfc1f7870df2e26b75eeb3a4667", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg1\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) 1m22.145341922s ago: executing program 5 (id=4558): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4, @ANYBLOB="b081c5a0e88dd5d4e291c1e04661a27dac2a996efbe4e27fcc9068bc38c92f579cc6b697ebe5befdf948915da36e3d4f53e344958040d644bd2a342354d4e2866fac445bf21d7013"], 0x3c}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000400)={@multicast1, @dev, 0x0}, &(0x7f0000000480)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000002680)=ANY=[@ANYBLOB="18120000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="08000300010000001400020076657468315f746f5f62726964676500080003000400000054000180080003000100000008000300000000001400020076657468315f746f5f627269646765001400020076657468315f6d6163767461700000000800030001000000080003000000000008000100", @ANYRES32=r6, @ANYBLOB], 0x1218}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0xfffe, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x1}, 0x865) syz_io_uring_setup(0x56b1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000580)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x401}, 0x11) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000240), 0x4) r8 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r8}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r8}) 1m21.943446581s ago: executing program 5 (id=4561): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 1m21.856546164s ago: executing program 5 (id=4563): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 1m21.822155846s ago: executing program 5 (id=4564): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1, 0x0, 0xfffffffffffffffd}, 0x18) setreuid(0xee01, 0xee01) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 1m18.641069955s ago: executing program 42 (id=4448): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) 1m17.719916265s ago: executing program 43 (id=4459): perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x100044, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x9) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) poll(&(0x7f00000000c0), 0x0, 0x400) shutdown(0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noblock_validity}]}, 0x3, 0x480, &(0x7f0000000a40)="$eJzs3M9vFFUcAPDvTLsFBGxF/MEPtYrGBrWlgMrBgxpNPGBiogeMp6YtBCnU0JoIIQrG4MkYE+/Go/+CJ70YoxcTr3o3JMT0AnhxzezOtLtld8u2225lP59k4L2dmX3f78683TfzdhtAzxrO/kkidkTEHxExWK3WbzBc/e/mwqXJWwuXJpMol9/+O6lsd2Ph0mSxabHf9rwykkaknyWxr0G7cxcunpmYmZk+n9fH5s9+MDZ34eJzp89OnJo+NX3u8LFjR4+Mv/jC4ecbBz7QXp5ZTDf2fjy7f88b73715vEv6vJflkeHDLda+VS53OHmumtnTTnp72IgtKUvIrLDVar0/8Hoi6WDNxivf9rV4IB1VS6Xy9ubr75cBu5iSdTXdXnoFcUHfXb9WyzLBwEvr9/wo+uuv1K9AMryvpkv1TX9kebblJZd33bScEScuPzPN9kSbd+HaPMmCABARPyQjX+ebTT+S+PBmu3uzeeGhiLivojYFRH3R8TuiHggorLtQxHxcGXPWBw7rWT5JMnt45/02poSXEE2/nspn9uqH/8tZjDUl9d2VvIvJSdPz0wfyl+TkShtyerjLdr48bXfv2y2rnb8ly1Z+8VYMI/jWv+W+n2mJuYn1pJzretXIvb2F7nW5p8szgQkEbEnIvauso3TB7/b32zdyvm30IF5pvK3EU9Xj//lWKjPv5C0np8c2xoz04fGirPidr/8dvWtJs1XXvgTB1eZfwdkx/+ehuf/Yv5DSe187Vz7bVz98/Om1zSrPf8Hkncq5eIK6KOJ+fnz4xEDyfFq0LWPH17at6gX22f5jxxo3P93xdIrsS8ispP4kYh4NCIey2N/PCKeiIgDLfL/+dUn32+4Il3j+d8BWf5TbR3/pcJALH+kcaHvzE/f1zU6tFTM87/V+vgfrZRG8kfu5P3vTuJa3dkMAAAA/z9pROyIJB1dLKfp6Gj1+/K7I9KZ2bn5Z07OfnhuqvobgaEopcWdrsGa+6Hj+WV9tX4lIqpfLSjWH8nvG3/dt61SH52cnZnqdvLQ47Y36f+Zv/q6HR2w7vxeC3qX/g+9q1H/39qFOICN5/MfeleD/r+tG3EAG6/R5/8nrXf5d71iATbWsv5v2g96SPvX/7++ty6BABuuaf+/m//yD1Dh/j/0pLltsfKP5FsWimda5e6bpZBEREefMEqbIq+1F8pJw4MbaVYobYYIFdah0N33JQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE75LwAA//8YzNth") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c9002002900000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000001f"]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1a034, &(0x7f0000000840)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@grpid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x4, 0x438, &(0x7f0000000340)="$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") socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1210410, &(0x7f0000000000), 0x6, 0x507, &(0x7f0000000680)="$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") setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) open(&(0x7f0000000280)='./file2\x00', 0x4201, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2a, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_GET_TSC(0x19, 0x0) unshare(0x22020600) symlinkat(0x0, 0xffffffffffffffff, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msgget$private(0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) creat(&(0x7f0000000280)='./bus\x00', 0x2) openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x40, 0x100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x80, 0x80, 0x6, 0x20000008, {{0x5, 0x4, 0x0, 0x20, 0x14, 0x66, 0x0, 0x80, 0x4, 0x0, @remote, @multicast1}}}}) 1m12.747720681s ago: executing program 8 (id=4582): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4, @ANYBLOB="b081c5a0e88dd5d4e291c1e04661a27dac2a996efbe4e27fcc9068bc38c92f579cc6b697ebe5befdf948915da36e3d4f53e344958040d644bd2a342354d4e2866fac445bf21d7013"], 0x3c}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000400)={@multicast1, @dev, 0x0}, &(0x7f0000000480)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000002680)=ANY=[@ANYBLOB="18120000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="08000300010000001400020076657468315f746f5f62726964676500080003000400000054000180080003000100000008000300000000001400020076657468315f746f5f627269646765001400020076657468315f6d6163767461700000000800030001000000080003000000000008000100", @ANYRES32=r6, @ANYBLOB], 0x1218}, 0x1, 0x0, 0x0, 0x80}, 0x800) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r7, 0x0, 0x401}, 0x11) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000240), 0x4) r8 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r8}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r8}) 1m12.592466068s ago: executing program 8 (id=4639): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 1m12.54824887s ago: executing program 8 (id=4641): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x12, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) 1m9.591107359s ago: executing program 1 (id=4684): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000005304ec"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0xe138, 0x198, 0x198, 0x198, 0x250, 0x358, 0x358, 0x250, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'netdevsim0\x00', 'veth1_vlan\x00'}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x2380, 'fsm\x00', "0d0080ff0000050000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348) flock(r4, 0xc) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x3c, r5, 0x1, 0x0, 0x0, {{}, {}, {0x20, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}}}, 0x3c}}, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x50, r0, 0xf78f4000) 1m9.443555006s ago: executing program 1 (id=4685): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r3, @ANYBLOB="b081c5a0e88dd5d4e291c1e04661a27dac2a996efbe4e27fcc9068bc38c92f579cc6b697ebe5befdf948915da36e3d4f53e344958040d644bd2a342354d4e2866fac445bf21d7013"], 0x3c}}, 0x0) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0xfffe, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x1}, 0x865) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r5, 0x0, 0x401}, 0x11) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000240), 0x4) r6 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r6}) 1m9.299860481s ago: executing program 1 (id=4688): openat$autofs(0xffffffffffffff9c, 0x0, 0x401, 0x0) msgsnd(0x0, 0x0, 0x7f, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000355835e91e7680eed5394cbf8d76407002dca18986e18a11aa23bee4e81b34"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_read_part_table(0x1064, &(0x7f0000000000)="$eJzsz7FNw0AYBeB3PlvyNRQswBqUFJS0iF1oAIkRmACJhip1skGWcmQnLrJAkuL7qrt37/TrD1fVuvF+kzx+3/1kTPKZ5G1IlktSurW427+UJMNvm+Oap36Jp+3fe8mxVZN+fh2mj9JO38pzG88Gdl8PdT3X1/+LLAkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN+4QAAD//xR/DGI=") bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r2, r3}, 0xc) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000010c0)={0x1, &(0x7f0000001080)=[{0xd321, 0xad, 0xb, 0x6}]}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000008100000000000000e4b979df76857b31fdebd2b10000001400"/43], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000001100)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x10) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000001380)={0x1, 0x4, 0xfc, 0x7f, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000001300)) 1m8.895510739s ago: executing program 1 (id=4691): r0 = getpid() r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r8 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r9 = syz_io_uring_setup(0x4b7, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x40289}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r8, 0x0, 0x0}) io_uring_enter(r9, 0x3498, 0x3b01, 0xffff000000000000, 0x0, 0x0) dup3(r6, r7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r12 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r12, &(0x7f0000000040), 0x10) 1m8.687446468s ago: executing program 1 (id=4695): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000072000000"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 1m8.675684919s ago: executing program 1 (id=4698): socket(0x28, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000100002020702500000020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9998500000004000000951fa2500bcd579c5be7cb332f5e659694582f5428aa5f88402b3a0229be9e7251ada1957ce8b6183d38ae4622cccf83a2aabeaf91d6ba679d2a8cdfd7d9ceb2c47af6fadc6fec353ded622065333528351471c08d7b1a8cd87303eef4ab8b06aad7e0e945488dc26a04c427f5e5"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000540)='global_dirty_state\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYRESDEC=r2], 0x7c}, 0x1, 0x0, 0x0, 0x20001044}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000af8010000120a010200000000000000000200fffe0900020073797a310000000008000440000000000900010073797a30000000000800034000000008"], 0x220}, 0x1, 0x0, 0x0, 0x890}, 0x4040) r5 = socket$netlink(0x10, 0x3, 0xc) splice(r1, 0x0, r5, 0x0, 0x10d00, 0xf) r6 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000003c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r8, @ANYBLOB="0100252100000008000300", @ANYRES32=r3, @ANYBLOB="24002d8005000100"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sigaltstack(&(0x7f0000000000)={&(0x7f0000000400)=""/172, 0x80000000, 0xac}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r11 = syz_pidfd_open(r6, 0x0) setns(r11, 0x24020000) r12 = syz_clone(0x30288000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r12) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000680)={0x5, &(0x7f0000000640)=[{0x0, 0x81, 0x80, 0x8001}, {0xfff, 0x0, 0xbd, 0x1}, {0x5, 0x9, 0x8, 0xfd}, {0x7, 0x3, 0x7, 0x1}, {0xf53, 0x1, 0x7, 0x9}]}) wait4(r12, 0x0, 0x8, 0x0) 1m6.80900268s ago: executing program 44 (id=4564): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1, 0x0, 0xfffffffffffffffd}, 0x18) setreuid(0xee01, 0xee01) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 59.966759508s ago: executing program 2 (id=4744): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a500200000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000024020380200200801c02018006000100d1030000"], 0x278}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 59.758662867s ago: executing program 2 (id=4746): writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e0fff0004fcff", 0x58}], 0x1) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042535f04d39b07b6e29b", 0x37, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) 58.75185009s ago: executing program 2 (id=4755): r0 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0xd, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0x1c144, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x8, 0xeb, 0x6, 0x9, 0x0, 0x6, 0x10220, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x8da05de0, 0x20}, 0x90020, 0x1, 0x1, 0x1c, 0x24, 0x408, 0x1, 0x0, 0x483, 0x0, 0x20008}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000900)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c505e4162e43ac6100165b53d300", [0xfffffffffffffce8, 0xa]}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x4bfa, &(0x7f0000000240)={0x19, 0x3d24, 0x1575, 0x0, 0x0, 0xfffe}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r6, 0xee01, 0x0) keyctl$chown(0x4, r6, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000480)=@sack_info={r9, 0x0, 0x5}, 0xc) r10 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0xff) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000580)={0x0, {}, 0x0, {}, 0x4db, 0x4, 0x1b, 0x11, "56c5e53decb370ff37aab7a4a0cbc28a36ce9868c4a0b69629b772ec176af31287c518ea7a7f4ee235ee1926032091f4d18a714d71cf2d1b2b832db640df2b8c", "c054e05912b25621061aae940605652013d28bab1e5c9e24dfdb663daf0ebb77", [0x0, 0xb]}) copy_file_range(r10, 0x0, r10, &(0x7f0000000080)=0xff80000000000000, 0x1, 0x0) r11 = gettid() syz_open_procfs$namespace(r11, &(0x7f0000000780)='ns/ipc\x00') sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x50, 0x6, 0xb, 0x5, 0x70bd2c, 0x25dfdbfb, {0x1, 0x0, 0x1}, [@generic="48f1662529da87220662a36c569e9c45b30e3976e5669e776d6443705aa09cbf201d18014378b808b45ad6010b7812e1dcd3034274c601e38975a9"]}, 0x50}, 0x1, 0x0, 0x0, 0x20004004}, 0x24000800) sendmsg$nl_route_sched(r10, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) ioctl$BTRFS_IOC_RESIZE(r10, 0x50009403, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000030dcffffffffffffff303030303030303030303947"]) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x28, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x83}]}, 0x10) 58.638650535s ago: executing program 2 (id=4756): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYBLOB='c j'], 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0b000000050000000400000032a9000009"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b700000000000000850000000300000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) statfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='devices.list\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000400)={0x4, 0x0, 0x0, 'queue0\x00', 0x10001}) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000280)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x3, 0x0, 0x2}) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r8 = inotify_init1(0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad1f50ad32d3fd25dfd73a015e0ca6a0f68a7d007f15451dfb265a0e3ccae669e173a64bc1cfd5587d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661ca3dbe74bd09de8793dbcceef76b2e5feecf9c66c54c3b3ffe1b4ce25d7c983c044c06cd0a48dfe3e26e7a23129d6606fd28a69989d552af6d9a9df2c3af36e0360050011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a13ed38ae82f87925bfacba83109753f541cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b70a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a92895614cd50cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba73c31b05c00fba8a4aee676d7c45bb29671a68ee2e60da7b01a2e5785a238afa4aba70c07fcd95bf8b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf334178b04963d67dd5a5707e618a1ef9057fec00f9e930219fa8d30e716de8cde9c60f0000000c3b64d10f0939b42b788daa7075fa542242b00f6bf9b64ad460e386b6f388351fbdacb3ad074574ee9d450f9dcfaef1be95ff3c449e6482e4403174618c20e887d6f320616d31d78a0e5421d5742cc52509fd90cf2df6d1404f6b8f810d7b94d421971b77a3270153a0d57cccfe27872f3e8e44480f93c33421986a7737842627301fb2fee8cabab074adaa2024ff57e609ba2f4d83b3bbf52309484532416f48f43b31395c6f45fee8f1682a4e8d5e3b9ae634ed24fb0e8b5fadaf5cb7eea62b7bb4264e72950c9dc791d771acc24c08cdb6ef24c813d082a86d9b879bdf5aefdfd905a2bd4ea36b0b54915a68fe149db154a8340017e1855511e9c0fe62d0cf55"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) r10 = inotify_add_watch(r8, &(0x7f0000000440)='.\x00', 0x20000000) write$binfmt_elf32(r7, &(0x7f0000005640)=ANY=[@ANYRES16=r10], 0x69) close(r7) execve(&(0x7f0000019140)='./file0\x00', 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x7fff]) 58.31958374s ago: executing program 2 (id=4759): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 58.279203071s ago: executing program 2 (id=4760): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1800700, &(0x7f00000003c0)={[{@resgid}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@norecovery}, {@barrier}, {@nombcache}]}, 0x0, 0x481, &(0x7f00000014c0)="$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") 57.765008974s ago: executing program 7 (id=4766): syz_emit_ethernet(0xcc, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c200000050a241d5cde086dd61fbb2ea000033ff20010000000000000000000000000000ff02000000000000000000000000000115b342bd90c3c3653d716fd0e5dda3203a"], 0x0) 57.749985075s ago: executing program 7 (id=4767): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001000ffff26bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="32080500bb26", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4004840) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc0500, 0x0) ioctl$TCFLSH(r1, 0x541b, 0xffffffffffffc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000602, 0x0, &(0x7f00000000c0)={0x6, 0x80000000, 0x0, 0x6}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r4 = epoll_create(0x802) epoll_pwait(r4, 0x0, 0x0, 0x7fffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)={0xf4, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xcc, 0x84, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="d80f4a18fe4e"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x80000000}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8001}, @NL80211_BAND_LC={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x81}]}]}, {0x78, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x4d32}, @NL80211_BAND_LC={0x8, 0x5, 0x971}, @NL80211_BAND_LC={0x8, 0x5, 0x3}, @NL80211_BAND_LC={0x8, 0x5, 0xfffffae2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4a}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}, @NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7fffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3cec}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="e3d92c61ce43"}]}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x3}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x20000084) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000300)={0x10000001}) ioctl$FS_IOC_GETFLAGS(r3, 0x5437, 0x0) ppoll(&(0x7f00000004c0)=[{r4, 0x4038}], 0x1, &(0x7f0000000600), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setstatus(r2, 0x4, 0x40000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x13}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES8=r8, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x4}, 0x18) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1ff, 0x3, 0x100, 0xa00, 0x2, 0x200140, r10}) 57.688954087s ago: executing program 7 (id=4768): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a500200000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000024020380200200801c02018006000100d10300005e"], 0x278}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 57.688414687s ago: executing program 7 (id=4769): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1800700, &(0x7f00000003c0)={[{@resgid}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@norecovery}, {@barrier}, {@nombcache}]}, 0x0, 0x481, &(0x7f00000014c0)="$eJzs3M1rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJ0tZiUxFPghT0LB5F/wJvIoh6Erx68iSFor209RSZ2Zl0s90krdlkYvL5wOw+z8zszve78/bs82wSwKY1kD0kETsi4reI6GtUF64w0Hi6ce3C+M1rF8aTmJt7488kX+/6tQvj5arl67YXlcE0Iv0oKTay0PS58yfH6vXamaI+PHPqneHpc+efeu/U2Inaidrp0SNHDh8aefaZ0ac7kmeW1/V9H0zt3/vyW5dfHT92+e2fvsni3VEsb86jUwayxP+ay7Uue7zTG6vYzqZy0l1hINyVrojIdldPfv73RVfc2nl98dKHlQYHrKrs3rRl8cWzc8AGlkTVEQDVKG/02fffclqjpse6cPX5xhegLO8bxdRY0h1psU5Py/fbThqIiGOzf3+RTbFK/RAAAM0+Gf/8aG9EvH/z61eytkff/JI07suff88fdxVjKP0R8f+I2B0R90TEnoi4NyJf9/6IeGCF8dze/kmvrPAtl5S1/54rxrYWtv/K1l/0dxW1nXn+PcnxyXrtYPGZDEbPlqw+ssQ2vnvx108XW9bc/sumbPtlW7CI40p3SwfdxNjMWN4o7YCrlyL2dbfLP5kfCUgiYm9E7Lu7t95VFiaf+Gr/Yistn/8SOjDONPdllt5slv9stORfSprHJydvG58c3hr12sHh8qi43c+/fPz6YttfUf4dcLXWeG7a/01L89HR/qR5vHa6s9v/l8d/2pu8mY8z9xbzzo7NzJwZiehNjub1BfNHb722rJ/NTuqRxvE/eKD9+b+7eE2W/4MRkR3ED0XEwxHxSBH7oxHxWEQcWCLHH19YPv9IK9r/lyIm2l7/5o//lv1/94Wukz98u9j272z/H85Lg8Wc/Pq3jHbhZJeL1gBX8tkBAADAf0Wa9/Ik6dB8OU2Hhhq/4d8T/0vrU9MzTx6fevf0RKM3qD960rKnq6/oD61P1msjyWzxjo3+0dGir7jsLz1U9Bt/1rUtrw+NT9UnKs4dNrvti5z/mT+6qo4OWGXb2s4d7V3zQIAKtI6jpwurF18LFwPYqNr+jiZd+ziAtbfM7+hcCWAD8/9aYPNqd/5fbKkbC4CNyf0fNi/nP2xS6fdVRwBUyP0fNqWV/F3/Kha2ro8wqims152SFyLKQrou4tmAhW0RcQcr96xuGFVfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrjnwAAAP//KGbiqQ==") 57.61864708s ago: executing program 7 (id=4770): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0, 0x0, 0x4804}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 57.539284454s ago: executing program 7 (id=4771): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000003c0)=r0}, 0xfffffffffffffd06) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4040010, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000380)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r2, &(0x7f00000000c0), &(0x7f00000001c0)=""/135}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) syz_emit_ethernet(0x46, &(0x7f00000009c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000008000103afffc020000000000000000000000000001ff020054af86a60000000000000000018600907800"/70], 0x0) r6 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=r5], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r9}, 0x18) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/83, 0x53) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401080016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 57.525436624s ago: executing program 45 (id=4641): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x12, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) 53.603072295s ago: executing program 46 (id=4698): socket(0x28, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000100002020702500000020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9998500000004000000951fa2500bcd579c5be7cb332f5e659694582f5428aa5f88402b3a0229be9e7251ada1957ce8b6183d38ae4622cccf83a2aabeaf91d6ba679d2a8cdfd7d9ceb2c47af6fadc6fec353ded622065333528351471c08d7b1a8cd87303eef4ab8b06aad7e0e945488dc26a04c427f5e5"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000540)='global_dirty_state\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYRESDEC=r2], 0x7c}, 0x1, 0x0, 0x0, 0x20001044}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000af8010000120a010200000000000000000200fffe0900020073797a310000000008000440000000000900010073797a30000000000800034000000008"], 0x220}, 0x1, 0x0, 0x0, 0x890}, 0x4040) r5 = socket$netlink(0x10, 0x3, 0xc) splice(r1, 0x0, r5, 0x0, 0x10d00, 0xf) r6 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000003c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r8, @ANYBLOB="0100252100000008000300", @ANYRES32=r3, @ANYBLOB="24002d8005000100"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sigaltstack(&(0x7f0000000000)={&(0x7f0000000400)=""/172, 0x80000000, 0xac}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r11 = syz_pidfd_open(r6, 0x0) setns(r11, 0x24020000) r12 = syz_clone(0x30288000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r12) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000680)={0x5, &(0x7f0000000640)=[{0x0, 0x81, 0x80, 0x8001}, {0xfff, 0x0, 0xbd, 0x1}, {0x5, 0x9, 0x8, 0xfd}, {0x7, 0x3, 0x7, 0x1}, {0xf53, 0x1, 0x7, 0x9}]}) wait4(r12, 0x0, 0x8, 0x0) 43.072722354s ago: executing program 47 (id=4760): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1800700, &(0x7f00000003c0)={[{@resgid}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@norecovery}, {@barrier}, {@nombcache}]}, 0x0, 0x481, &(0x7f00000014c0)="$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") 42.487412039s ago: executing program 48 (id=4771): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000003c0)=r0}, 0xfffffffffffffd06) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4040010, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000380)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r2, &(0x7f00000000c0), &(0x7f00000001c0)=""/135}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) syz_emit_ethernet(0x46, &(0x7f00000009c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000008000103afffc020000000000000000000000000001ff020054af86a60000000000000000018600907800"/70], 0x0) r6 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=r5], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r9}, 0x18) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/83, 0x53) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401080016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1.138238879s ago: executing program 3 (id=5959): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYRESHEX=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0x1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x15, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}, 0x1, 0x0, 0x0, 0x8840}, 0x8010) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0x4, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYRESHEX, @ANYRES8=r7], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRESDEC=r4, @ANYRES64, @ANYRESDEC=r2, @ANYRES64, @ANYRES8=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000440)=[{&(0x7f0000000180)="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", 0x173}, {&(0x7f0000000080)="3c53ab5cdb4ac160a8d59e07", 0xc}], 0x2, 0xc) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x0) 1.044024374s ago: executing program 3 (id=5961): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x5594, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000080)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/4108, 0x100c}], &(0x7f0000000200), 0x1}, 0x20) 961.473997ms ago: executing program 3 (id=5965): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001480)=@newqdisc={0x280, 0x24, 0x400, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0xffff}, {0xfff1, 0x982c039dc86a6355}, {0xfff2, 0x7}}, [@TCA_STAB={0x158, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x8d, 0xe, 0x5, 0x1, 0x17a0000, 0x5, 0xa}}, {0x18, 0x2, [0x7fff, 0xffff, 0x401, 0xfff, 0x6, 0x2, 0x5, 0x0, 0x0, 0x4]}}, {{0x1c, 0x1, {0x0, 0x6, 0x8, 0x9, 0x2, 0x0, 0x5, 0x8}}, {0x14, 0x2, [0x8, 0x82, 0x80, 0x2, 0x9, 0x6, 0x6, 0x6]}}, {{0x1c, 0x1, {0xb0, 0x72, 0xc679, 0x4, 0x2, 0x3, 0x7fffffff, 0x4}}, {0xc, 0x2, [0x2, 0x86d, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x6, 0xc, 0x5, 0x0, 0x2, 0x9, 0x7}}, {0x12, 0x2, [0x3, 0x8, 0x0, 0x2, 0x7430, 0x0, 0x1]}}, {{0x1c, 0x1, {0x5, 0xb0, 0x3, 0x800, 0x2, 0x401, 0x6e, 0x2}}, {0x8, 0x2, [0x800, 0xb]}}, {{0x1c, 0x1, {0x2, 0x1, 0x9a3b, 0x0, 0x2, 0x7, 0xc0f, 0x2}}, {0x8, 0x2, [0x1, 0x7]}}, {{0x1c, 0x1, {0x6, 0x9, 0x5, 0x4, 0x0, 0x6, 0x0, 0x7}}, {0x12, 0x2, [0x1, 0xfc01, 0x4, 0x101, 0x7fff, 0xffff, 0x9]}}, {{0x1c, 0x1, {0x3, 0x9, 0x2, 0x11, 0x0, 0x4, 0xfb}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @qdisc_kind_options=@q_cbq={{0x8}, {0xdc, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x401, 0x38, 0x8, 0x4}}, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x3, 0x2, 0xffff, 0x3}}, @TCA_CBS_PARMS={0x18, 0x1, {0xff, '\x00', 0x5, 0x2, 0x3, 0x2}}, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0xc, 0x2e, 0x2213, 0x93749ff}}, @TCA_CBS_PARMS={0x18, 0x1, {0xb, '\x00', 0xc8, 0x3, 0x80000003, 0x401}}, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x1, 0x78, 0x7, 0x3}}, @TCA_CBS_PARMS={0x18, 0x1, {0xb, '\x00', 0x11, 0x1, 0x6, 0x8}}, @TCA_CBS_PARMS={0x18, 0x1, {0x9, '\x00', 0x1ff, 0x5, 0x2, 0x80000000}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7f, '\x00', 0x1, 0x8, 0x10001, 0x6}}]}}]}, 0x280}, 0x1, 0x0, 0x0, 0x81}, 0x20040894) socket(0x10, 0x803, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c3000000b5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x18) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101002, 0x2c) prctl$PR_SET_SECCOMP(0x4e, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) 928.183618ms ago: executing program 4 (id=5967): unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000038000900000000000021000004000000040000800c0003800743063b"], 0x24}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8204}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @multicast1}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040004) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@stripe={'stripe', 0x3d, 0x8001}}, {@auto_da_alloc}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)=ANY=[], 0x700, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="4caccbb099032cfdc2bf7004eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="03000000c01006002c001280080001007369740020000280080003000a01010214000b00fc010000000000000000000000000001"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) accept4(0xffffffffffffffff, &(0x7f0000000a00)=@ax25={{0x3, @netrom}, [@rose, @rose, @null, @remote, @bcast, @bcast, @bcast, @bcast]}, &(0x7f0000000980)=0x80, 0x800) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000940)={&(0x7f00000000c0), 0xc, &(0x7f0000000900)={&(0x7f0000000880)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000229bd7000fcdbdfc321df7e3e85e2562325155bb84d250b00000048000180060004004e240000060004004e22000008000b00736970000c0007002000000002000000060002003a000000060004004e2100000600"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4048853) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x80) fchdir(r8) syz_io_uring_submit(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") 919.104179ms ago: executing program 0 (id=5968): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x18) syz_emit_ethernet(0xfdef, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='.\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00'}, 0x18) pipe(&(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0xd17974f1334511e9}, 0x0) r5 = syz_io_uring_setup(0x3fb1, &(0x7f0000000300)={0x0, 0x9cae, 0x40, 0x400005, 0xd8}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x22, &(0x7f0000000380)={&(0x7f0000003000)={[{0x0, 0x0, 0x3}]}, 0x1}, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r7, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x28, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 918.566009ms ago: executing program 9 (id=5969): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) setresuid(0xee01, 0xee00, 0x0) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='y\xa9.ustV\x1eS=\xd4\x16\x95::\x01\x00\x00', 0x0) 882.61924ms ago: executing program 9 (id=5970): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r3}, &(0x7f0000000640), &(0x7f0000000680)=r2}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r1, {0xffff, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 729.076048ms ago: executing program 9 (id=5972): prctl$PR_SET_NAME(0xf, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000400)='rss_stat\x00', r0, 0x0, 0x2000004}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010004, &(0x7f00000000c0)={[{@nobh}, {@jqfmt_vfsv0}, {@data_err_ignore}]}, 0x3, 0x4f8, &(0x7f0000000140)="$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") 683.397619ms ago: executing program 9 (id=5973): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xfffffe71, 0x1}}, 0x20) r1 = socket$kcm(0x2, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) 682.953719ms ago: executing program 0 (id=5974): syz_emit_ethernet(0x86, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "9d42a08597d3b2f44ac89b1b52cc6728d6697d4cebc8f2f062c6f91f224aaacc", "99bd3410936eefeb3ea898dafab974aa", {"96deedc95f5d10a12027128db2e9bdf6", "f838a300b01b0e19ecdf00b20600"}}}}}}}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x1000000000000}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x57f}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00'}, 0x10) syz_io_uring_setup(0x3665, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x0, 0x0) 675.71741ms ago: executing program 6 (id=5975): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x10001, @empty, 0xfffffffd}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000bc0)={[{@errors_remount}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@stripe={'stripe', 0x3d, 0xb}}, {@auto_da_alloc}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000d80)="$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") r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) open(&(0x7f0000000080)='./file1\x00', 0x0, 0x86) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRESDEC=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, 0x0, &(0x7f0000000600)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xaa202, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b000b00000000e7000000000080000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000104000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000002000000f40000"], 0x50) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x118, 0xc8, 0x8, 0x0, 0x5803, 0x228, 0x2e8, 0x2e8, 0x228, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xff, 0xff, 0x0, 0xff000000], 'wlan0\x00', 'syzkaller1\x00', {}, {0xff}, 0x32, 0x3, 0x3, 0x4}, 0x0, 0xd8, 0x118, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@esp={{0x30}, {[0x4d4, 0x4d3], 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x81, 0xff, {0x4}}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x4], 0x81, 0x32, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x1, 0x4, 0x4}, {0x0, 0x3, 0x1}, 0x4, 0x101}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}], 0x1, 0x0) unshare(0x2c040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = epoll_create1(0x0) r7 = socket(0x23, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0x10000005}) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}]}], {0x14}}, 0xa4}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 643.586131ms ago: executing program 9 (id=5976): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x1a00404, &(0x7f0000000080)={[{@noblock_validity}, {@grpquota}]}, 0x1, 0xbb9, &(0x7f00000017c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0xcd) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000a903000000850000001b000000b70000a6a213f718d85cf5f64b0b39737e1d3f572131aeba00000000a2b844d2916109e7bc716336ac7b1059c20186d57c0ae163f5833d3f6b23ca1b6b9b9e5080a6f79a7a9e50cb1f1f48aaa950eb51d01df4bd19471a09cedb87809ee710b3b179837d10486a20cd1a5cfb27c140d884ada3414efff4697e7e37dade16b26524744581f22deb03ee061ce46bcd8829f5d63343ec4c5e8d23885d45a24267d273652be7dba058aa6bad7396a576f120bc3d380ad6858579d1c138fb5bcca37cf1ad026a9fdc5750968b8a95f625fa6a1013d86d056dc30b1a2caba7709d2d3301c2bda5962291fe9234d15cb63e31b79e3ef614a0818f99c9cb9668"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 636.697221ms ago: executing program 6 (id=5977): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x1, 0x21e}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000080)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/4108, 0x100c}], &(0x7f0000000200), 0x1}, 0x20) 617.473813ms ago: executing program 0 (id=5978): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600c, 0x1) setresuid(0xee01, 0xee00, 0x0) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='y\xa9.ustV\x1eS=\xd4\x16\x95::\x01\x00\x00', 0x0) 588.684534ms ago: executing program 6 (id=5979): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000007100010000000000000000000700", @ANYRES32, @ANYBLOB="0c000180080001000300010020"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x20040884}, 0x40000) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 553.284685ms ago: executing program 0 (id=5980): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffff9) vmsplice(r0, &(0x7f0000000b40)=[{&(0x7f0000000480)}, {&(0x7f0000000500)}, {0x0}, {0x0}], 0x4, 0x5) socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) fadvise64(r1, 0x807f, 0x1000000, 0x4) 508.503057ms ago: executing program 6 (id=5981): r0 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES32=0x0], 0x1, 0x214, &(0x7f0000000840)="$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") preadv(r0, &(0x7f0000000bc0)=[{&(0x7f0000000140)=""/107, 0x6b}, {&(0x7f00000001c0)=""/19, 0x13}, {&(0x7f00000004c0)=""/210, 0xd2}, {&(0x7f0000000240)=""/111, 0x6f}, {&(0x7f0000000340)=""/177, 0xb1}, {&(0x7f00000007c0)=""/110, 0x6e}, {&(0x7f0000000a80)=""/123, 0x7b}, {&(0x7f0000000b00)=""/184, 0xb8}, {&(0x7f00000005c0)=""/33, 0x21}], 0x9, 0x5, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c00018006000600894f"], 0x24}}, 0x10) 466.071969ms ago: executing program 0 (id=5982): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000077714500000009d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x64, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000) r0 = creat(&(0x7f0000000080)='\x00', 0x107) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x760, 0x0, 0xb, {{0x3c, 0x4, 0x0, 0x0, 0xf0, 0x66, 0x0, 0x4, 0x2f, 0x0, @local, @broadcast, {[@rr={0x7, 0x13, 0x9b, [@multicast2, @local, @loopback, @local]}, @timestamp_addr={0x44, 0x4c, 0xfb, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfca}, {@loopback, 0x1}, {@local, 0x4b1}, {@dev={0xac, 0x14, 0x14, 0x27}}, {@private=0xa010102, 0xfffffff7}, {@multicast1, 0x1b4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9a}, {@remote, 0x6}, {@broadcast, 0x5}]}, @timestamp={0x44, 0xc, 0xc, 0x0, 0x1, [0xc000, 0x7f]}, @noop, @generic={0x94, 0xd, "670852c50a5fbfcfff1fb5"}, @noop, @ssrr={0x89, 0x13, 0xd1, [@loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x44}, @multicast2]}, @ssrr={0x89, 0x17, 0x1d, [@empty, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @timestamp={0x44, 0x28, 0x6d, 0x0, 0x8, [0x5, 0xdbc, 0x1, 0x6, 0x7fffffff, 0x5, 0x7, 0x273, 0x9]}, @rr={0x7, 0xf, 0x33, [@broadcast, @broadcast, @broadcast]}]}}}}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={@dev={0xfe, 0x80, '\x00', 0xe2}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, 0xfffffffc, 0x3, 0x63e, 0x0, 0x7fffffff, 0x400000, r1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x80000000, 0x25dfdbfd, {0xa, 0x80, 0x80}, [@RTA_OIF={0xffffffffffffff37}]}, 0x24}}, 0x20040050) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x468fe4e8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4048000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 465.614859ms ago: executing program 6 (id=5983): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) creat(&(0x7f00000000c0)='./bus\x00', 0x182) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) mount(&(0x7f00000014c0)=@md0, &(0x7f0000000280)='./bus\x00', &(0x7f0000001480)='9p\x00', 0x48c, &(0x7f0000000300)='trans=rdma,') 393.253442ms ago: executing program 6 (id=5984): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x18) syz_emit_ethernet(0xfdef, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='.\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00'}, 0x18) pipe(&(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0xd17974f1334511e9}, 0x0) r5 = syz_io_uring_setup(0x3fb1, &(0x7f0000000300)={0x0, 0x9cae, 0x40, 0x400005, 0xd8}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x22, &(0x7f0000000380)={&(0x7f0000003000)={[{0x0, 0x0, 0x3}]}, 0x1}, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r7, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x28, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 284.699067ms ago: executing program 4 (id=5985): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYRESHEX=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0x1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x15, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}, 0x1, 0x0, 0x0, 0x8840}, 0x8010) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0x4, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYRESHEX, @ANYRES8=r7], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRESDEC=r4, @ANYRES64, @ANYRESDEC=r2, @ANYBLOB, @ANYRES64, @ANYRES8=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000440)=[{&(0x7f0000000180)="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", 0x173}, {&(0x7f0000000080)="3c53ab5cdb4ac160a8d59e07", 0xc}], 0x2, 0xc) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x0) 256.394338ms ago: executing program 4 (id=5986): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xfffffe71, 0x1}}, 0x20) r1 = socket$kcm(0x2, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) 205.79101ms ago: executing program 4 (id=5987): syz_emit_ethernet(0x86, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "9d42a08597d3b2f44ac89b1b52cc6728d6697d4cebc8f2f062c6f91f224aaacc", "99bd3410936eefeb3ea898dafab974aa", {"96deedc95f5d10a12027128db2e9bdf6", "f838a300b01b0e19ecdf00b20600"}}}}}}}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x1000000000000}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x57f}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00'}, 0x10) syz_io_uring_setup(0x3665, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x0, 0x0) 107.635485ms ago: executing program 3 (id=5988): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000d300", @ANYRES32, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0xec5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000080), &(0x7f0000000340)) syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x38) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) io_uring_setup(0x4d42, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x0, 0x3}) flock(0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mq_open(0x0, 0x80, 0xa, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 107.128425ms ago: executing program 9 (id=5989): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x1, 0x21e}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000080)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/4108, 0x100c}], &(0x7f0000000200), 0x1}, 0x20) 106.334744ms ago: executing program 4 (id=5990): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600c, 0x1) setresuid(0xee01, 0xee00, 0x0) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='y\xa9.ustV\x1eS=\xd4\x16\x95::\x01\x00\x00', 0x0) 47.471007ms ago: executing program 4 (id=5991): unshare(0x8000000) r0 = semget(0x1, 0x4, 0x3c4) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x10, 0x3000}], 0x1, 0x0) r1 = socket(0x29, 0x3, 0x103a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b303000000008fd885000000040000009583dd655cd17e7673669fda6470c0f277f43b2274bce27465c84f771f3347ad547ee52ed5f87d0630cf7956e6408b80f7a04aac61af0a380cb47018b140152a37914491a440dc9733d7b23b2d19bcf0fc2feeeedc189c5ad0ac093b061a9d15b96aed60c070d0eb5f49eba93a4ca11759f28e657f165c3e60a09957894162166358d00a9cb5103344395be359a982911a6984ea2a645e5e45e61d0135adc1ca37d068595928616f6ed07d4b03640a5a88f0d6ef7820fbfce815d2e1bfd8774496080730034b64e0725bc388af2d22f70c76c50214ae2a2d468980b047cc48afc03cd14dcfdfe2093794d8f5e9b0c59fb0"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x18) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) setns(r3, 0x8020000) r6 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x204040, 0x8) mkdirat(r6, &(0x7f0000000180)='./file0\x00', 0x90) write$binfmt_script(r6, &(0x7f0000000280)={'#! ', './file0', [{0x20, '%(,'}], 0xa, "239dcc6ac331dea68404d2babcf18b384f2057b3c9908ee3e2f8eab729f2a1a1b2e9a39df14dbbe1fa017d3551861283e72f5a3d65dd6fef15ec32e8e4d433b2df38abe87ee5dca7769011163386e4e246222e9b1efe53a3025841a09af956dc2aef4f35a384f52427053bd92e3600d02a291c892316dfa1db74b116b024a8272fc83e5da108e6744a7162bce34aefbae8d304a53c110004799ff602184bf32682788c02d32c8f5fce220c9e62cb4cb4f69c50408a68f9912e03a2907da46a0ec94dd356b0fd78c306716614b6eaaa31cfcc69fbed619a5c6299931382ea"}, 0xed) 45.057247ms ago: executing program 3 (id=5992): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x3cc0, &(0x7f0000000540)={0x0, 0x1568, 0x10000, 0x2, 0x3e8}, &(0x7f0000000280)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r1, 0x29ab, 0xd480, 0x0, 0x0, 0x0) 17.223878ms ago: executing program 0 (id=5993): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_clone(0x64087000, 0x0, 0xffffff59, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000440)='./file0/../file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file0/../file0/file0\x00') mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x200000, 0x0, 0x13}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000200)={0x1d, r5}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r4, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r6, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 0s ago: executing program 3 (id=5994): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) creat(&(0x7f00000000c0)='./bus\x00', 0x182) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) mount(&(0x7f00000014c0)=@md0, &(0x7f0000000280)='./bus\x00', &(0x7f0000001480)='9p\x00', 0x48c, &(0x7f0000000300)='trans=rdma,') kernel console output (not intermixed with test programs): Port device team_slave_1 removed [ 429.504444][T15418] team0 (unregistering): Port device team_slave_0 removed [ 429.600389][T17434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.613417][T17434] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.643746][T15432] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.650983][T15432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.659932][T15432] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.667056][T15432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.741359][T17434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.828386][T17434] veth0_vlan: entered promiscuous mode [ 429.876892][T17434] veth1_vlan: entered promiscuous mode [ 429.907273][T17457] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 429.937758][T17434] veth0_macvtap: entered promiscuous mode [ 429.953370][T17457] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 429.964697][T17434] veth1_macvtap: entered promiscuous mode [ 429.984859][T17457] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 429.993678][T17558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4613'. [ 429.996017][T17457] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 430.044863][T17434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.080693][T17434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.126252][T15409] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.157642][T15409] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.180794][T15409] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.195233][T17457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.214135][T15418] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.228110][T17457] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.273912][T15395] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.281125][T15395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.301302][T17575] netlink: 536 bytes leftover after parsing attributes in process `syz.1.4580'. [ 430.325458][T15395] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.332572][T15395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.378727][T17457] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 430.389217][T17457] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 430.545568][T17457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.767450][T17605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4624'. [ 430.807873][T17457] veth0_vlan: entered promiscuous mode [ 430.816567][T17457] veth1_vlan: entered promiscuous mode [ 430.860629][T17457] veth0_macvtap: entered promiscuous mode [ 430.878596][T17457] veth1_macvtap: entered promiscuous mode [ 430.907692][T17457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.934221][T17457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.967661][T15395] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.985484][T15395] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.996111][T17615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 431.012581][T17615] 9pnet_fd: Insufficient options for proto=fd [ 431.020023][T15395] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.037296][T15395] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.410659][T17653] FAULT_INJECTION: forcing a failure. [ 431.410659][T17653] name failslab, interval 1, probability 0, space 0, times 0 [ 431.423515][T17653] CPU: 1 UID: 0 PID: 17653 Comm: syz.1.4644 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 431.423557][T17653] Tainted: [W]=WARN [ 431.423565][T17653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 431.423580][T17653] Call Trace: [ 431.423586][T17653] [ 431.423596][T17653] __dump_stack+0x1d/0x30 [ 431.423618][T17653] dump_stack_lvl+0xe8/0x140 [ 431.423642][T17653] dump_stack+0x15/0x1b [ 431.423660][T17653] should_fail_ex+0x265/0x280 [ 431.423695][T17653] should_failslab+0x8c/0xb0 [ 431.423749][T17653] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 431.423818][T17653] ? __alloc_skb+0x101/0x320 [ 431.423855][T17653] __alloc_skb+0x101/0x320 [ 431.423908][T17653] netlink_alloc_large_skb+0xbf/0xf0 [ 431.423987][T17653] netlink_sendmsg+0x3cf/0x6b0 [ 431.424021][T17653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.424100][T17653] __sock_sendmsg+0x145/0x180 [ 431.424205][T17653] ____sys_sendmsg+0x31e/0x4e0 [ 431.424232][T17653] ___sys_sendmsg+0x17b/0x1d0 [ 431.424268][T17653] __x64_sys_sendmsg+0xd4/0x160 [ 431.424321][T17653] x64_sys_call+0x191e/0x3000 [ 431.424352][T17653] do_syscall_64+0xd2/0x200 [ 431.424374][T17653] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 431.424407][T17653] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 431.424520][T17653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.424548][T17653] RIP: 0033:0x7f715d93f749 [ 431.424564][T17653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.424582][T17653] RSP: 002b:00007f715c39f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.424601][T17653] RAX: ffffffffffffffda RBX: 00007f715db95fa0 RCX: 00007f715d93f749 [ 431.424613][T17653] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 431.424708][T17653] RBP: 00007f715c39f090 R08: 0000000000000000 R09: 0000000000000000 [ 431.424724][T17653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.424740][T17653] R13: 00007f715db96038 R14: 00007f715db95fa0 R15: 00007fffd8510938 [ 431.424766][T17653] [ 432.163092][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 432.163109][ T29] audit: type=1326 audit(2000000829.472:14368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17678 comm="syz.3.4654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 432.213058][T17679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4654'. [ 432.226206][T17683] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 432.226206][T17682] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 432.234289][ T29] audit: type=1326 audit(2000000829.512:14369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17678 comm="syz.3.4654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 432.234321][ T29] audit: type=1326 audit(2000000829.512:14370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17678 comm="syz.3.4654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 432.289626][ T29] audit: type=1326 audit(2000000829.512:14371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17678 comm="syz.3.4654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 432.313287][ T29] audit: type=1326 audit(2000000829.522:14372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17678 comm="syz.3.4654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 432.361820][ T29] audit: type=1326 audit(2000000829.572:14373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17678 comm="syz.3.4654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 432.385793][ T29] audit: type=1326 audit(2000000829.572:14374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17678 comm="syz.3.4654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 432.409766][ T29] audit: type=1326 audit(2000000829.622:14375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17678 comm="syz.3.4654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 432.433361][ T29] audit: type=1326 audit(2000000829.622:14376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17678 comm="syz.3.4654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 432.457131][ T29] audit: type=1326 audit(2000000829.622:14377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17678 comm="syz.3.4654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 432.559065][T17693] loop1: detected capacity change from 0 to 4096 [ 432.587237][T17693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.356525][T17719] bridge0: port 3(gretap0) entered blocking state [ 433.363113][T17719] bridge0: port 3(gretap0) entered disabled state [ 433.372969][T17719] gretap0: entered allmulticast mode [ 433.387403][T17719] gretap0: entered promiscuous mode [ 433.393195][T17434] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.402425][T17719] bridge0: port 3(gretap0) entered blocking state [ 433.408907][T17719] bridge0: port 3(gretap0) entered forwarding state [ 433.804998][T17742] netlink: 528 bytes leftover after parsing attributes in process `syz.1.4676'. [ 434.067966][T17747] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 434.274418][T17759] tipc: Started in network mode [ 434.279410][T17759] tipc: Node identity aaaaaaaaaa38, cluster identity 4711 [ 434.286672][T17759] tipc: Enabled bearer , priority 0 [ 434.465517][T17768] netlink: 528 bytes leftover after parsing attributes in process `syz.3.4687'. [ 434.754428][T17772] loop1: detected capacity change from 0 to 8192 [ 434.812925][T17772] loop1: p1 p4 [ 434.816522][T17772] loop1: p1 size 196608 extends beyond EOD, truncated [ 434.853700][T17772] loop1: p4 size 50331648 extends beyond EOD, truncated [ 435.223882][T17791] bond2: entered allmulticast mode [ 435.274896][T17797] netlink: 528 bytes leftover after parsing attributes in process `syz.3.4699'. [ 435.402749][ T10] tipc: Node number set to 9611946 [ 436.064666][T17808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4703'. [ 437.003064][T17824] chnl_net:caif_netlink_parms(): no params data found [ 437.129340][ T416] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.182845][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 437.182864][ T29] audit: type=1326 audit(2000000834.492:14506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17839 comm="syz.3.4713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 437.220823][ T416] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.240389][ T29] audit: type=1326 audit(2000000834.492:14507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17839 comm="syz.3.4713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 437.346670][T17824] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.353846][T17824] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.361135][T17824] bridge_slave_0: entered allmulticast mode [ 437.373388][T17824] bridge_slave_0: entered promiscuous mode [ 437.394943][ T416] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.408309][T17824] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.415642][T17824] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.423207][T17824] bridge_slave_1: entered allmulticast mode [ 437.429743][T17824] bridge_slave_1: entered promiscuous mode [ 437.499507][T17824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.511124][ T416] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.611807][T17824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.700024][T17824] team0: Port device team_slave_0 added [ 437.713081][T17824] team0: Port device team_slave_1 added [ 437.747454][T17824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.754489][T17824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.780475][T17824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.797698][T17824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.804793][T17824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.830877][T17824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.869285][ T416] bridge_slave_1: left allmulticast mode [ 437.875034][ T416] bridge_slave_1: left promiscuous mode [ 437.880821][ T416] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.902937][ T416] bridge_slave_0: left promiscuous mode [ 437.908685][ T416] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.062851][ T416] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 438.120489][ T416] dvmrp8 (unregistering): left allmulticast mode [ 438.139416][ T416] batman_adv: batadv0: Interface deactivated: macvtap1 [ 438.147044][ T416] bridge0 (unregistering): left allmulticast mode [ 438.157547][ T416] batman_adv: batadv0: Removing interface: macvtap1 [ 438.795652][ T416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.809300][ T416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.819265][ T416] bond0 (unregistering): Released all slaves [ 438.854882][ T416] bond1 (unregistering): Released all slaves [ 438.875095][ T416] bond2 (unregistering): Released all slaves [ 438.977910][T17863] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 439.035433][T17824] hsr_slave_0: entered promiscuous mode [ 439.052926][T17824] hsr_slave_1: entered promiscuous mode [ 439.060739][ T416] hsr_slave_0: left promiscuous mode [ 439.082771][ T416] hsr_slave_1: left promiscuous mode [ 439.088424][ T416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.095939][ T416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.123111][ T416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.130541][ T416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.173025][ T416] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 439.180274][ T416] batman_adv: batadv0: Removing interface: veth1_vlan [ 439.212841][ T416] veth1_macvtap: left promiscuous mode [ 439.223492][ T416] veth0_macvtap: left promiscuous mode [ 439.239205][ T416] veth1_vlan: left promiscuous mode [ 439.249417][ T416] veth0_vlan: left promiscuous mode [ 439.412864][ T416] team0 (unregistering): Port device team_slave_1 removed [ 439.440564][ T29] audit: type=1326 audit(2000000836.742:14508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17871 comm="syz.3.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 439.468673][ T29] audit: type=1326 audit(2000000836.772:14509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17871 comm="syz.3.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 439.473045][ T416] team0 (unregistering): Port device team_slave_0 removed [ 439.492305][ T29] audit: type=1326 audit(2000000836.772:14510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17871 comm="syz.3.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 439.523130][ T29] audit: type=1326 audit(2000000836.772:14511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17871 comm="syz.3.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 439.546791][ T29] audit: type=1326 audit(2000000836.772:14512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17871 comm="syz.3.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 439.570449][ T29] audit: type=1326 audit(2000000836.772:14513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17871 comm="syz.3.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 439.594013][ T29] audit: type=1326 audit(2000000836.772:14514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17871 comm="syz.3.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 439.617803][ T29] audit: type=1326 audit(2000000836.772:14515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17871 comm="syz.3.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 439.714934][T17841] chnl_net:caif_netlink_parms(): no params data found [ 439.893005][T17841] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.900131][T17841] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.932917][T17841] bridge_slave_0: entered allmulticast mode [ 439.955997][T17841] bridge_slave_0: entered promiscuous mode [ 439.977580][T17841] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.984963][T17841] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.992348][T17841] bridge_slave_1: entered allmulticast mode [ 440.004280][T17841] bridge_slave_1: entered promiscuous mode [ 440.093037][T17841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.144035][ T416] IPVS: stop unused estimator thread 0... [ 440.153983][T17841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.234084][T17841] team0: Port device team_slave_0 added [ 440.248980][T17841] team0: Port device team_slave_1 added [ 440.296082][T17841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.303467][T17841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.329477][T17841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.396445][ T416] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.416353][T17841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.423364][T17841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.449449][T17841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.495030][ T416] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.545604][T17841] hsr_slave_0: entered promiscuous mode [ 440.552106][T17841] hsr_slave_1: entered promiscuous mode [ 440.573565][T17841] debugfs: 'hsr0' already exists in 'hsr' [ 440.579336][T17841] Cannot create hsr debugfs directory [ 440.597381][ T416] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.692136][ T416] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.808170][T17824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 440.844710][T17824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 440.874839][T17824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 440.904833][T17824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 440.994455][ T416] bridge_slave_1: left allmulticast mode [ 441.000226][ T416] bridge_slave_1: left promiscuous mode [ 441.005993][ T416] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.036961][ T416] bridge_slave_0: left allmulticast mode [ 441.042797][ T416] bridge_slave_0: left promiscuous mode [ 441.048641][ T416] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.275252][ T416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.302702][ T416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.324291][ T416] bond0 (unregistering): Released all slaves [ 441.389858][ T416] hsr_slave_0: left promiscuous mode [ 441.403658][ T416] hsr_slave_1: left promiscuous mode [ 441.409353][ T416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.416786][ T416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.443193][ T416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.450612][ T416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.476522][ T416] veth1_macvtap: left promiscuous mode [ 441.482045][ T416] veth0_macvtap: left promiscuous mode [ 441.492865][ T416] veth1_vlan: left promiscuous mode [ 441.502830][ T416] veth0_vlan: left promiscuous mode [ 441.653653][ T416] team0 (unregistering): Port device team_slave_1 removed [ 441.666016][ T416] team0 (unregistering): Port device team_slave_0 removed [ 441.748763][T17824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.773971][T17824] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.787546][T15432] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.794722][T15432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.825640][T15391] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.832767][T15391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.976609][T17841] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 441.999345][T17841] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 442.030635][T17841] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 442.052722][T17841] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 442.108841][T17824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.147619][T17841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.171322][T17841] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.192448][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.199608][ T416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.237617][T15432] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.244827][T15432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.300713][T17824] veth0_vlan: entered promiscuous mode [ 442.319910][T17824] veth1_vlan: entered promiscuous mode [ 442.352381][T17824] veth0_macvtap: entered promiscuous mode [ 442.370769][T17824] veth1_macvtap: entered promiscuous mode [ 442.389341][T17841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.405635][T17824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.427444][T17824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.448959][T15396] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.471026][T15396] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.501834][T15396] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.534776][T15396] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.577721][T17945] netlink: 528 bytes leftover after parsing attributes in process `syz.2.4710'. [ 442.627429][T17841] veth0_vlan: entered promiscuous mode [ 442.646329][T17841] veth1_vlan: entered promiscuous mode [ 442.681254][T17841] veth0_macvtap: entered promiscuous mode [ 442.697163][T17841] veth1_macvtap: entered promiscuous mode [ 442.721175][T17841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.741459][T17841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.897072][T15396] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.957296][T15396] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.002859][T15396] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.035441][T15396] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.058678][T17959] loop7: detected capacity change from 0 to 512 [ 443.083682][T17959] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 443.092416][T17959] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 443.343361][T17959] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.4714: Allocating blocks 41-42 which overlap fs metadata [ 443.367494][T17959] __quota_error: 14 callbacks suppressed [ 443.367512][T17959] Quota error (device loop7): write_blk: dquota write failed [ 443.380642][T17959] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 443.432769][T17959] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.4714: Allocating blocks 41-42 which overlap fs metadata [ 443.492946][T17959] Quota error (device loop7): write_blk: dquota write failed [ 443.522925][T17959] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 443.567504][T17959] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.4714: Failed to acquire dquot type 1 [ 443.612842][T17959] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 443.634853][T17959] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.4714: corrupted inode contents [ 443.777431][T17977] loop2: detected capacity change from 0 to 512 [ 443.786356][T17977] EXT4-fs (loop2): 1 orphan inode deleted [ 443.787072][T17959] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #12: comm syz.7.4714: mark_inode_dirty error [ 443.792550][T17977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.852764][T17959] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.4714: corrupted inode contents [ 443.888660][T17959] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.4714: mark_inode_dirty error [ 443.892955][T17824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.900666][T17959] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.4714: corrupted inode contents [ 443.921664][T17959] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 443.932573][T17959] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.4714: corrupted inode contents [ 443.945026][T17959] EXT4-fs error (device loop7): ext4_truncate:4637: inode #12: comm syz.7.4714: mark_inode_dirty error [ 443.969253][T17959] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 443.978543][T17959] EXT4-fs (loop7): 1 truncate cleaned up [ 443.984699][T17959] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.011171][T17980] netlink: 528 bytes leftover after parsing attributes in process `syz.2.4744'. [ 444.012933][T17959] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.094705][T17959] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4714'. [ 444.104071][ T29] audit: type=1326 audit(2000000841.402:14530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17957 comm="syz.7.4714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8aa0f749 code=0x7ffc0000 [ 444.127899][ T29] audit: type=1326 audit(2000000841.402:14531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17957 comm="syz.7.4714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd8aa0f749 code=0x7ffc0000 [ 444.151625][ T29] audit: type=1326 audit(2000000841.402:14532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17957 comm="syz.7.4714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8aa0f749 code=0x7ffc0000 [ 444.175412][ T29] audit: type=1326 audit(2000000841.402:14533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17957 comm="syz.7.4714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efd8aa0f749 code=0x7ffc0000 [ 444.218964][ T29] audit: type=1326 audit(2000000841.512:14534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17957 comm="syz.7.4714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8aa0f749 code=0x7ffc0000 [ 444.242729][ T29] audit: type=1326 audit(2000000841.512:14535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17957 comm="syz.7.4714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8aa0f749 code=0x7ffc0000 [ 445.189969][T18012] netlink: 432 bytes leftover after parsing attributes in process `syz.7.4757'. [ 445.262930][T18014] loop7: detected capacity change from 0 to 512 [ 445.279042][T18014] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 445.287937][T18014] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 445.337767][T18014] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.4758: Allocating blocks 41-42 which overlap fs metadata [ 445.372105][T18014] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.4758: Allocating blocks 41-42 which overlap fs metadata [ 445.386176][T18014] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.4758: Failed to acquire dquot type 1 [ 445.398056][T18014] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 445.413355][T18014] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.4758: corrupted inode contents [ 445.427365][T18014] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #12: comm syz.7.4758: mark_inode_dirty error [ 445.439017][T18014] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.4758: corrupted inode contents [ 445.451249][T18014] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.4758: mark_inode_dirty error [ 445.462769][T18014] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.4758: corrupted inode contents [ 445.475336][T18014] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 445.484317][T18014] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.4758: corrupted inode contents [ 445.496597][T18014] EXT4-fs error (device loop7): ext4_truncate:4637: inode #12: comm syz.7.4758: mark_inode_dirty error [ 445.508061][T18014] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 445.517444][T18014] EXT4-fs (loop7): 1 truncate cleaned up [ 445.524388][T18014] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.539292][T18014] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.565111][T18014] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4758'. [ 445.653954][T18021] SELinux: Context ׸ýÿX7ªÞd¹Q¬‰YI{C´¨pUèÒ–hÙ»ŒÐ r: is not valid (left unmapped). [ 446.095065][T18035] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4767'. [ 446.130139][T18037] netlink: 432 bytes leftover after parsing attributes in process `syz.7.4768'. [ 446.159137][T18039] loop7: detected capacity change from 0 to 512 [ 446.174884][T18039] EXT4-fs (loop7): 1 orphan inode deleted [ 446.181106][T18039] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.237582][T17841] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.581046][T15409] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.684303][T15409] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.718378][T18044] chnl_net:caif_netlink_parms(): no params data found [ 446.746697][T15409] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.859372][T15409] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.922760][T18044] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.930246][T18044] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.962871][T18044] bridge_slave_0: entered allmulticast mode [ 446.969454][T18044] bridge_slave_0: entered promiscuous mode [ 447.003911][T18044] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.011122][T18044] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.034778][T18044] bridge_slave_1: entered allmulticast mode [ 447.053495][T18044] bridge_slave_1: entered promiscuous mode [ 447.082521][T18065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4776'. [ 447.148295][T18044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.179405][T18044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.189012][T15409] bridge_slave_1: left allmulticast mode [ 447.189150][T18072] netlink: 'syz.3.4779': attribute type 39 has an invalid length. [ 447.194858][T15409] bridge_slave_1: left promiscuous mode [ 447.208373][T15409] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.252948][T15409] bridge_slave_0: left allmulticast mode [ 447.258657][T15409] bridge_slave_0: left promiscuous mode [ 447.264372][T15409] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.623050][T15409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.643043][T15409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.658246][T15409] bond0 (unregistering): Released all slaves [ 447.753029][T18044] team0: Port device team_slave_0 added [ 447.759519][T18044] team0: Port device team_slave_1 added [ 447.779869][T15409] hsr_slave_0: left promiscuous mode [ 447.792019][T15409] hsr_slave_1: left promiscuous mode [ 447.812957][T15409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.820382][T15409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.852786][T15409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.860208][T15409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.886367][T15409] veth1_macvtap: left promiscuous mode [ 447.891870][T15409] veth0_macvtap: left promiscuous mode [ 447.901051][T18074] netlink: 324 bytes leftover after parsing attributes in process `syz.3.4780'. [ 447.912712][T15409] veth1_vlan: left promiscuous mode [ 447.917987][T15409] veth0_vlan: left promiscuous mode [ 448.266485][T15409] team0 (unregistering): Port device team_slave_1 removed [ 448.286000][T15409] team0 (unregistering): Port device team_slave_0 removed [ 448.522054][T18044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.529125][T18044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.555118][T18044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.567166][T18044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.574289][T18044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.600605][T18044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.649620][T18044] hsr_slave_0: entered promiscuous mode [ 448.655963][T18044] hsr_slave_1: entered promiscuous mode [ 448.661918][T18044] debugfs: 'hsr0' already exists in 'hsr' [ 448.667728][T18044] Cannot create hsr debugfs directory [ 448.898819][T18083] 9pnet_fd: Insufficient options for proto=fd [ 448.992668][ C1] EXT4-fs (loop0): error count since last fsck: 5 [ 448.999162][ C1] EXT4-fs (loop0): last error at time 2000000030: ext4_lookup:1791: inode 2 [ 449.178647][T18044] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 449.214945][T18044] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 449.244761][T18044] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 449.274908][T18044] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 449.356982][T18044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.379147][T18044] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.407540][T15409] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.414706][T15409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.433738][T15409] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.440827][T15409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.491698][T18044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 449.600498][T18044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.826322][T18044] veth0_vlan: entered promiscuous mode [ 449.844706][T18044] veth1_vlan: entered promiscuous mode [ 449.868008][T18044] veth0_macvtap: entered promiscuous mode [ 449.897729][T18044] veth1_macvtap: entered promiscuous mode [ 449.935169][T18044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.954253][T18044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.985309][ T416] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.025186][ T416] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.061105][ T416] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.078663][ T416] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.394685][T18121] IPv6: NLM_F_CREATE should be specified when creating new route [ 450.458041][T15401] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.495275][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 450.495294][ T29] audit: type=1326 audit(2000000847.802:14611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18127 comm="syz.3.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 450.529399][T15401] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.541293][ T29] audit: type=1326 audit(2000000847.802:14612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18127 comm="syz.3.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 450.565104][ T29] audit: type=1326 audit(2000000847.832:14613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18127 comm="syz.3.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 450.588689][ T29] audit: type=1326 audit(2000000847.832:14615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18127 comm="syz.3.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 450.612445][ T29] audit: type=1326 audit(2000000847.832:14614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18127 comm="syz.3.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 450.636395][ T29] audit: type=1326 audit(2000000847.832:14616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18127 comm="syz.3.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 450.660150][ T29] audit: type=1326 audit(2000000847.832:14617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18127 comm="syz.3.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 450.683906][ T29] audit: type=1326 audit(2000000847.842:14618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18127 comm="syz.3.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 450.707633][ T29] audit: type=1326 audit(2000000847.842:14619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18127 comm="syz.3.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 450.733115][ T29] audit: type=1326 audit(2000000847.842:14620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18127 comm="syz.3.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 450.829446][T15401] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.898301][T15401] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.052246][T18137] loop4: detected capacity change from 0 to 4096 [ 451.075679][T18118] chnl_net:caif_netlink_parms(): no params data found [ 451.093812][T18137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.108773][T15401] bridge_slave_1: left allmulticast mode [ 451.114481][T15401] bridge_slave_1: left promiscuous mode [ 451.120253][T15401] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.138738][T15401] bridge_slave_0: left allmulticast mode [ 451.144587][T15401] bridge_slave_0: left promiscuous mode [ 451.150350][T15401] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.424900][T15401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.445286][T15401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.456352][T15401] bond0 (unregistering): Released all slaves [ 451.576326][T15401] tipc: Disabling bearer [ 451.592972][T15401] tipc: Left network mode [ 451.610265][T15401] hsr_slave_0: left promiscuous mode [ 451.616183][T15401] hsr_slave_1: left promiscuous mode [ 451.626321][T15401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.633858][T15401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.643904][T15401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.651300][T15401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.706903][T15401] veth1_macvtap: left promiscuous mode [ 451.712510][T15401] veth0_macvtap: left promiscuous mode [ 451.718769][T15401] veth1_vlan: left promiscuous mode [ 451.728534][T15401] veth0_vlan: left promiscuous mode [ 451.771783][T18044] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.176624][T15401] team0 (unregistering): Port device team_slave_1 removed [ 452.202841][T15401] team0 (unregistering): Port device team_slave_0 removed [ 452.300840][T18118] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.308666][T18118] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.341852][T18118] bridge_slave_0: entered allmulticast mode [ 452.356195][T18118] bridge_slave_0: entered promiscuous mode [ 452.374050][T18118] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.381138][T18118] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.390195][T18118] bridge_slave_1: entered allmulticast mode [ 452.397197][T18118] bridge_slave_1: entered promiscuous mode [ 452.427910][T18118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.440707][T18118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.468086][T18118] team0: Port device team_slave_0 added [ 452.475704][T18118] team0: Port device team_slave_1 added [ 452.501827][T18118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.509085][T18118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.535744][T18118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.547341][T18118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.554507][T18118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.580802][T18118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.675581][T18118] hsr_slave_0: entered promiscuous mode [ 452.681808][T18118] hsr_slave_1: entered promiscuous mode [ 452.727120][T18118] debugfs: 'hsr0' already exists in 'hsr' [ 452.733072][T18118] Cannot create hsr debugfs directory [ 452.851402][T18186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4808'. [ 452.873713][T18186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4808'. [ 452.913588][T18186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4808'. [ 453.216177][T18190] loop4: detected capacity change from 0 to 1024 [ 453.232804][T18190] EXT4-fs (loop4): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 453.242006][T18118] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 453.260288][T18190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.295379][T18118] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 453.324654][T18118] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 453.360608][T18118] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 453.500875][T18118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.637782][T18118] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.666980][T15396] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.674159][T15396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.704675][T15396] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.711879][T15396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.825800][T18118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.009805][T18190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.034066][T18118] veth0_vlan: entered promiscuous mode [ 454.042679][T18118] veth1_vlan: entered promiscuous mode [ 454.058887][T18118] veth0_macvtap: entered promiscuous mode [ 454.079638][T18118] veth1_macvtap: entered promiscuous mode [ 454.254065][T18118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.306340][T18118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.441972][T15401] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.455749][ T416] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.473983][ T416] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.529521][ T416] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.519511][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 455.519594][ T29] audit: type=1326 audit(2000000852.822:14806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz.3.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 455.597958][ T29] audit: type=1326 audit(2000000852.902:14807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz.3.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 455.639292][ T29] audit: type=1326 audit(2000000852.932:14808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz.3.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 455.663195][ T29] audit: type=1326 audit(2000000852.932:14809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz.3.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 455.687211][ T29] audit: type=1326 audit(2000000852.932:14810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz.3.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 455.711075][ T29] audit: type=1326 audit(2000000852.932:14811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz.3.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 455.734846][ T29] audit: type=1326 audit(2000000852.932:14812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz.3.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 455.758676][ T29] audit: type=1326 audit(2000000852.932:14813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz.3.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 455.782940][ T29] audit: type=1326 audit(2000000852.932:14814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz.3.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 455.807366][ T29] audit: type=1326 audit(2000000852.942:14815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz.3.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 456.689555][T18284] loop4: detected capacity change from 0 to 4096 [ 456.727684][T18284] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.454574][T18044] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.516783][T18305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4844'. [ 457.562176][T18305] team1: entered promiscuous mode [ 457.567369][T18305] team1: entered allmulticast mode [ 457.583692][T18305] 8021q: adding VLAN 0 to HW filter on device team1 [ 457.777513][T18314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4847'. [ 457.815549][T18320] bridge0: entered allmulticast mode [ 458.054699][T18337] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4854'. [ 458.118858][T18340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4854'. [ 459.485830][T18369] FAULT_INJECTION: forcing a failure. [ 459.485830][T18369] name failslab, interval 1, probability 0, space 0, times 0 [ 459.498549][T18369] CPU: 0 UID: 0 PID: 18369 Comm: syz.0.4864 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 459.498592][T18369] Tainted: [W]=WARN [ 459.498602][T18369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 459.498616][T18369] Call Trace: [ 459.498625][T18369] [ 459.498634][T18369] __dump_stack+0x1d/0x30 [ 459.498715][T18369] dump_stack_lvl+0xe8/0x140 [ 459.498763][T18369] dump_stack+0x15/0x1b [ 459.498787][T18369] should_fail_ex+0x265/0x280 [ 459.498824][T18369] should_failslab+0x8c/0xb0 [ 459.498862][T18369] kmem_cache_alloc_noprof+0x50/0x480 [ 459.498944][T18369] ? skb_clone+0x151/0x1f0 [ 459.499084][T18369] skb_clone+0x151/0x1f0 [ 459.499112][T18369] __netlink_deliver_tap+0x2c9/0x500 [ 459.499142][T18369] netlink_unicast+0x66b/0x690 [ 459.499300][T18369] netlink_sendmsg+0x58b/0x6b0 [ 459.499347][T18369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.499385][T18369] __sock_sendmsg+0x145/0x180 [ 459.499418][T18369] ____sys_sendmsg+0x31e/0x4e0 [ 459.499557][T18369] ___sys_sendmsg+0x17b/0x1d0 [ 459.499596][T18369] __x64_sys_sendmsg+0xd4/0x160 [ 459.499621][T18369] x64_sys_call+0x191e/0x3000 [ 459.499649][T18369] do_syscall_64+0xd2/0x200 [ 459.499676][T18369] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 459.499730][T18369] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 459.499776][T18369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.499805][T18369] RIP: 0033:0x7f898533f749 [ 459.499825][T18369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.499913][T18369] RSP: 002b:00007f8983da7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.500007][T18369] RAX: ffffffffffffffda RBX: 00007f8985595fa0 RCX: 00007f898533f749 [ 459.500019][T18369] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 459.500031][T18369] RBP: 00007f8983da7090 R08: 0000000000000000 R09: 0000000000000000 [ 459.500106][T18369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.500124][T18369] R13: 00007f8985596038 R14: 00007f8985595fa0 R15: 00007ffd9e6c9d08 [ 459.500150][T18369] [ 459.724055][T18369] vlan2: entered allmulticast mode [ 460.531520][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 460.531537][ T29] audit: type=1326 audit(2000000857.832:15055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18389 comm="syz.3.4873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 460.569757][ T29] audit: type=1400 audit(2000000857.832:15056): avc: denied { create } for pid=18389 comm="syz.3.4873" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 460.590988][ T29] audit: type=1326 audit(2000000857.832:15057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18389 comm="syz.3.4873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 460.614977][ T29] audit: type=1326 audit(2000000857.832:15058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18389 comm="syz.3.4873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 460.638778][ T29] audit: type=1326 audit(2000000857.832:15059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18389 comm="syz.3.4873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 460.662387][ T29] audit: type=1400 audit(2000000857.832:15060): avc: denied { write } for pid=18389 comm="syz.3.4873" name="file0" dev="tmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 460.685184][ T29] audit: type=1400 audit(2000000857.832:15061): avc: denied { open } for pid=18389 comm="syz.3.4873" path="/166/file0" dev="tmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 460.708262][ T29] audit: type=1326 audit(2000000857.832:15062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18389 comm="syz.3.4873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 460.731891][ T29] audit: type=1326 audit(2000000857.832:15063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18389 comm="syz.3.4873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 460.755755][ T29] audit: type=1326 audit(2000000857.832:15064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18389 comm="syz.3.4873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 461.032920][ T416] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.113147][ T416] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.145468][T18393] chnl_net:caif_netlink_parms(): no params data found [ 461.206737][ T416] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.226402][T18432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4887'. [ 461.240293][T18428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18428 comm=syz.0.4885 [ 461.254616][T18393] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.255374][T18432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4887'. [ 461.261804][T18393] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.279270][T18393] bridge_slave_0: entered allmulticast mode [ 461.285992][T18393] bridge_slave_0: entered promiscuous mode [ 461.312386][T18432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4887'. [ 461.322682][T18437] FAULT_INJECTION: forcing a failure. [ 461.322682][T18437] name failslab, interval 1, probability 0, space 0, times 0 [ 461.335450][T18437] CPU: 0 UID: 0 PID: 18437 Comm: syz.0.4888 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 461.335490][T18437] Tainted: [W]=WARN [ 461.335497][T18437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 461.335509][T18437] Call Trace: [ 461.335518][T18437] [ 461.335526][T18437] __dump_stack+0x1d/0x30 [ 461.335548][T18437] dump_stack_lvl+0xe8/0x140 [ 461.335575][T18437] dump_stack+0x15/0x1b [ 461.335598][T18437] should_fail_ex+0x265/0x280 [ 461.335640][T18437] should_failslab+0x8c/0xb0 [ 461.335676][T18437] kmem_cache_alloc_noprof+0x50/0x480 [ 461.335711][T18437] ? vm_area_alloc+0x2c/0xb0 [ 461.335752][T18437] vm_area_alloc+0x2c/0xb0 [ 461.335788][T18437] mmap_region+0xa99/0x1620 [ 461.335858][T18437] do_mmap+0x9b3/0xbe0 [ 461.335886][T18437] vm_mmap_pgoff+0x17a/0x2e0 [ 461.335927][T18437] ksys_mmap_pgoff+0xc2/0x310 [ 461.335949][T18437] ? __x64_sys_mmap+0x49/0x70 [ 461.335980][T18437] x64_sys_call+0x14a3/0x3000 [ 461.336008][T18437] do_syscall_64+0xd2/0x200 [ 461.336034][T18437] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 461.336069][T18437] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 461.336110][T18437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.336135][T18437] RIP: 0033:0x7f898533f783 [ 461.336155][T18437] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 461.336178][T18437] RSP: 002b:00007f8983da6d68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 461.336202][T18437] RAX: ffffffffffffffda RBX: 00000000000005c2 RCX: 00007f898533f783 [ 461.336217][T18437] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 461.336232][T18437] RBP: 0000200000000982 R08: 00000000ffffffff R09: 0000000000000000 [ 461.336245][T18437] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000006 [ 461.336258][T18437] R13: 00007f8983da6dec R14: 00007f8983da6df0 R15: 00007ffd9e6c9d08 [ 461.336278][T18437] [ 461.341613][ T416] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.548193][T18393] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.555429][T18393] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.562781][T18393] bridge_slave_1: entered allmulticast mode [ 461.569347][T18393] bridge_slave_1: entered promiscuous mode [ 461.609038][T18393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.639074][T18393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.679243][ T416] bridge_slave_1: left allmulticast mode [ 461.685016][ T416] bridge_slave_1: left promiscuous mode [ 461.690770][ T416] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.699355][ T416] bridge_slave_0: left allmulticast mode [ 461.705105][ T416] bridge_slave_0: left promiscuous mode [ 461.710905][ T416] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.751077][T18461] FAULT_INJECTION: forcing a failure. [ 461.751077][T18461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.764419][T18461] CPU: 1 UID: 0 PID: 18461 Comm: syz.0.4896 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 461.764461][T18461] Tainted: [W]=WARN [ 461.764475][T18461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 461.764519][T18461] Call Trace: [ 461.764527][T18461] [ 461.764537][T18461] __dump_stack+0x1d/0x30 [ 461.764565][T18461] dump_stack_lvl+0xe8/0x140 [ 461.764591][T18461] dump_stack+0x15/0x1b [ 461.764610][T18461] should_fail_ex+0x265/0x280 [ 461.764696][T18461] should_fail+0xb/0x20 [ 461.764715][T18461] should_fail_usercopy+0x1a/0x20 [ 461.764741][T18461] _copy_from_user+0x1c/0xb0 [ 461.764795][T18461] ___sys_sendmsg+0xc1/0x1d0 [ 461.764831][T18461] __x64_sys_sendmsg+0xd4/0x160 [ 461.764860][T18461] x64_sys_call+0x191e/0x3000 [ 461.764885][T18461] do_syscall_64+0xd2/0x200 [ 461.764906][T18461] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 461.765007][T18461] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 461.765041][T18461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.765065][T18461] RIP: 0033:0x7f898533f749 [ 461.765084][T18461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.765107][T18461] RSP: 002b:00007f8983da7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.765173][T18461] RAX: ffffffffffffffda RBX: 00007f8985595fa0 RCX: 00007f898533f749 [ 461.765185][T18461] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 461.765200][T18461] RBP: 00007f8983da7090 R08: 0000000000000000 R09: 0000000000000000 [ 461.765215][T18461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.765230][T18461] R13: 00007f8985596038 R14: 00007f8985595fa0 R15: 00007ffd9e6c9d08 [ 461.765254][T18461] [ 462.051380][ T416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.068790][ T416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.086492][T18470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4899'. [ 462.097066][ T416] bond0 (unregistering): Released all slaves [ 462.116772][T18470] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4899'. [ 462.169893][T18393] team0: Port device team_slave_0 added [ 462.198057][ T416] hsr_slave_0: left promiscuous mode [ 462.203850][ T416] hsr_slave_1: left promiscuous mode [ 462.209559][ T416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.217192][ T416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.263831][ T416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.271270][ T416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.301820][ T416] veth1_macvtap: left promiscuous mode [ 462.317031][ T416] veth0_macvtap: left promiscuous mode [ 462.322836][ T416] veth1_vlan: left promiscuous mode [ 462.328175][ T416] veth0_vlan: left promiscuous mode [ 462.460182][ T416] team0 (unregistering): Port device team_slave_1 removed [ 462.507580][ T416] team0 (unregistering): Port device team_slave_0 removed [ 462.587237][T18393] team0: Port device team_slave_1 added [ 462.618252][T18393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.625397][T18393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.651447][T18393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.664931][T18393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.671904][T18393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.698016][T18393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.745579][T18393] hsr_slave_0: entered promiscuous mode [ 462.751990][T18393] hsr_slave_1: entered promiscuous mode [ 462.769075][T18481] IPv6: Can't replace route, no match found [ 462.894492][T18439] chnl_net:caif_netlink_parms(): no params data found [ 462.979590][T18439] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.986756][T18439] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.030528][T18439] bridge_slave_0: entered allmulticast mode [ 463.048896][T18439] bridge_slave_0: entered promiscuous mode [ 463.057172][T18439] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.064356][T18439] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.072266][T18439] bridge_slave_1: entered allmulticast mode [ 463.079347][T18439] bridge_slave_1: entered promiscuous mode [ 463.090848][ T416] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.129680][T18439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.150440][T18507] bridge0: port 3(gretap0) entered disabled state [ 463.172878][T18507] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.180386][T18507] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.233826][T18507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.245934][T18507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.294183][T18439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.307198][ T416] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.332163][T15409] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.358573][T18439] team0: Port device team_slave_0 added [ 463.364759][T15409] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.375618][T18439] team0: Port device team_slave_1 added [ 463.396519][T15409] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.407990][ T416] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.419634][T18439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.426818][T18439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.452961][T18439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.464830][T18439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.471820][T18439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.497955][T18439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.508979][T15409] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.547829][ T416] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.564931][T18439] hsr_slave_0: entered promiscuous mode [ 463.571153][T18439] hsr_slave_1: entered promiscuous mode [ 463.577327][T18439] debugfs: 'hsr0' already exists in 'hsr' [ 463.583078][T18439] Cannot create hsr debugfs directory [ 463.624004][T18393] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 463.650813][T18393] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 463.684887][T18393] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 463.705174][T18393] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 463.784648][ T416] bridge_slave_1: left allmulticast mode [ 463.790370][ T416] bridge_slave_1: left promiscuous mode [ 463.796257][ T416] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.805382][ T416] bridge_slave_0: left allmulticast mode [ 463.811076][ T416] bridge_slave_0: left promiscuous mode [ 463.816932][ T416] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.920871][ T416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.931232][ T416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.941476][ T416] bond0 (unregistering): Released all slaves [ 463.995196][ T416] hsr_slave_0: left promiscuous mode [ 464.004222][ T416] hsr_slave_1: left promiscuous mode [ 464.013005][ T416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.020561][ T416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.030829][ T416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.038787][ T416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.064668][T18546] __vm_enough_memory: pid: 18546, comm: syz.4.4923, bytes: 4503599627366400 not enough memory for the allocation [ 464.086708][ T416] veth1_macvtap: left promiscuous mode [ 464.089077][T18544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4922'. [ 464.092319][ T416] veth0_macvtap: left promiscuous mode [ 464.092378][ T416] veth1_vlan: left promiscuous mode [ 464.115854][ T416] veth0_vlan: left promiscuous mode [ 464.146067][T18544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4922'. [ 464.194683][T18544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4922'. [ 464.262418][ T416] team0 (unregistering): Port device team_slave_1 removed [ 464.273466][ T416] team0 (unregistering): Port device team_slave_0 removed [ 464.354633][T18393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.382246][T18393] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.392232][T18569] rdma_op ffff88812c591980 conn xmit_rdma 0000000000000000 [ 464.448160][T15395] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.455448][T15395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.473462][T15401] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.480728][T15401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.640714][T18393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.655846][T18439] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 464.681691][T18439] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 464.721650][T18439] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 464.736185][T18439] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 464.768427][T18599] loop4: detected capacity change from 0 to 4096 [ 464.794795][T18599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.854746][T18439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.870904][T18439] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.886957][T15396] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.894229][T15396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.918793][T15432] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.926095][T15432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.947815][T18393] veth0_vlan: entered promiscuous mode [ 464.995439][T18393] veth1_vlan: entered promiscuous mode [ 465.023920][T18393] veth0_macvtap: entered promiscuous mode [ 465.034613][T18393] veth1_macvtap: entered promiscuous mode [ 465.051672][T18393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.073252][T18393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.087436][T15432] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.098280][T18439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.112593][T15432] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.134947][T15432] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.144072][T15432] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.211686][T18631] loop9: detected capacity change from 0 to 512 [ 465.219837][T18631] ext4: Bad value for 'commit' [ 465.255156][T18636] loop9: detected capacity change from 0 to 512 [ 465.277177][T18636] EXT4-fs (loop9): 1 orphan inode deleted [ 465.290027][T18636] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.329838][T18439] veth0_vlan: entered promiscuous mode [ 465.344322][T18393] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.367294][T18439] veth1_vlan: entered promiscuous mode [ 465.399858][T18439] veth0_macvtap: entered promiscuous mode [ 465.408944][T18439] veth1_macvtap: entered promiscuous mode [ 465.410725][T18646] netlink: 39 bytes leftover after parsing attributes in process `syz.9.4944'. [ 465.423745][T18646] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4944'. [ 465.428880][T18439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.443639][T18646] netlink: 39 bytes leftover after parsing attributes in process `syz.9.4944'. [ 465.457170][T18439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.468516][T18044] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.482596][T15395] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.492421][T15395] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.503885][T18649] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=18649 comm=syz.4.4945 [ 465.518609][T15395] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.531520][T18650] loop9: detected capacity change from 0 to 128 [ 465.538313][ T29] kauditd_printk_skb: 744 callbacks suppressed [ 465.538328][ T29] audit: type=1326 audit(465.529:15809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18648 comm="syz.9.4946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd8aa11e3aa code=0x7ffc0000 [ 465.570859][ T416] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.582540][T18650] FAT-fs (loop9): Directory bread(block 162) failed [ 465.589960][T18650] FAT-fs (loop9): Directory bread(block 163) failed [ 465.590532][T18649] loop4: detected capacity change from 0 to 8192 [ 465.597387][T18650] FAT-fs (loop9): Directory bread(block 164) failed [ 465.607120][ T29] audit: type=1326 audit(465.569:15810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18648 comm="syz.9.4946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd8aa11e3aa code=0x7ffc0000 [ 465.609870][T18650] FAT-fs (loop9): Directory bread(block 165) failed [ 465.632626][ T29] audit: type=1326 audit(465.569:15811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18648 comm="syz.9.4946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd8aa11de97 code=0x7ffc0000 [ 465.639950][T18650] FAT-fs (loop9): Directory bread(block 166) failed [ 465.662519][ T29] audit: type=1326 audit(465.569:15812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18648 comm="syz.9.4946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd8aa120eea code=0x7ffc0000 [ 465.669018][T18650] FAT-fs (loop9): Directory bread(block 167) failed [ 465.698807][T18650] FAT-fs (loop9): Directory bread(block 168) failed [ 465.710664][T18650] FAT-fs (loop9): Directory bread(block 169) failed [ 465.719428][T18649] loop4: p1 p2 p3 p4 [ 465.729886][ T29] audit: type=1400 audit(465.719:15813): avc: denied { write } for pid=18655 comm="syz.6.4889" name="rt_acct" dev="proc" ino=4026532645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 465.754563][T18649] loop4: p3 start 331777 is beyond EOD, truncated [ 465.758639][ T29] audit: type=1400 audit(465.749:15814): avc: denied { unmount } for pid=18655 comm="syz.6.4889" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 465.761066][T18649] loop4: p4 size 262912 extends beyond EOD, truncated [ 465.788961][ T29] audit: type=1400 audit(465.779:15815): avc: denied { mount } for pid=18648 comm="syz.9.4946" name="/" dev="loop9" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 465.810612][ T29] audit: type=1326 audit(465.779:15816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18648 comm="syz.9.4946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8aa11df90 code=0x7ffc0000 [ 465.833804][ T29] audit: type=1326 audit(465.779:15817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18648 comm="syz.9.4946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fd8aa11e497 code=0x7ffc0000 [ 465.861100][ T29] audit: type=1326 audit(465.799:15818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18648 comm="syz.9.4946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8aa11df90 code=0x7ffc0000 [ 465.883031][T18650] FAT-fs (loop9): Directory bread(block 162) failed [ 465.885884][T18658] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4947'. [ 465.899933][T18650] FAT-fs (loop9): Directory bread(block 163) failed [ 465.915480][T18650] bio_check_eod: 68098 callbacks suppressed [ 465.915494][T18650] syz.9.4946: attempt to access beyond end of device [ 465.915494][T18650] loop9: rw=3, sector=226, nr_sectors = 6 limit=128 [ 465.935357][T18650] syz.9.4946: attempt to access beyond end of device [ 465.935357][T18650] loop9: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 465.956213][T18650] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 465.963509][T18650] IPv6: NLM_F_CREATE should be set when creating new route [ 465.970722][T18650] IPv6: NLM_F_CREATE should be set when creating new route [ 465.978069][T18650] IPv6: NLM_F_CREATE should be set when creating new route [ 466.103984][T18665] loop4: detected capacity change from 0 to 2048 [ 466.124171][T18665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.148854][T18667] netlink: 14 bytes leftover after parsing attributes in process `syz.9.4951'. [ 466.168162][T18667] hsr_slave_0: left promiscuous mode [ 466.182452][T18667] hsr_slave_1: left promiscuous mode [ 466.252239][T18677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.324075][T18677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.385162][T18683] netlink: 'syz.0.4955': attribute type 1 has an invalid length. [ 466.398011][T18677] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4950: bg 0: block 345: padding at end of block bitmap is not set [ 466.413376][T18681] netlink: 'syz.0.4955': attribute type 1 has an invalid length. [ 466.532706][T18677] EXT4-fs (loop4): Remounting filesystem read-only [ 466.578771][T18681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 466.689972][T18686] bond1: (slave geneve2): making interface the new active one [ 466.701714][T18686] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 466.755433][T18690] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 466.867834][T18696] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5133 sclass=netlink_audit_socket pid=18696 comm=syz.6.4958 [ 467.228826][T18044] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.564253][T18761] netlink: '': attribute type 30 has an invalid length. [ 468.265249][T18841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5019'. [ 468.331854][T18841] ip6gretap0: entered promiscuous mode [ 468.337969][T18841] macvtap1: entered promiscuous mode [ 468.343413][T18841] macvtap1: entered allmulticast mode [ 468.348846][T18841] ip6gretap0: entered allmulticast mode [ 469.028819][T18901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5044'. [ 469.056399][T18904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5041'. [ 469.078405][T18901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5044'. [ 469.088180][T18901] bridge_slave_1: left allmulticast mode [ 469.093965][T18901] bridge_slave_1: left promiscuous mode [ 469.099776][T18901] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.108698][T18901] bridge_slave_0: left promiscuous mode [ 469.114415][T18901] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.330381][T18932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5053'. [ 469.864570][T18939] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5057'. [ 470.443570][ T29] kauditd_printk_skb: 1196 callbacks suppressed [ 470.443665][ T29] audit: type=1400 audit(476.582:17015): avc: denied { bind } for pid=18986 comm="syz.6.5077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 470.474366][T18987] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.524881][T18987] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.580901][T18987] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.627401][T18987] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.674724][T15432] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.686952][ T29] audit: type=1400 audit(476.834:17016): avc: denied { create } for pid=18993 comm="syz.4.5079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 470.699269][T15432] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.714741][T15432] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.726654][T15432] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.735126][ T29] audit: type=1400 audit(476.866:17017): avc: denied { connect } for pid=18993 comm="syz.4.5079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 470.754512][ T29] audit: type=1400 audit(476.866:17018): avc: denied { write } for pid=18993 comm="syz.4.5079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 470.815610][T18999] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5081'. [ 470.952374][ T29] audit: type=1400 audit(477.118:17019): avc: denied { setopt } for pid=19004 comm="syz.4.5084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 471.046882][T19010] loop4: detected capacity change from 0 to 1024 [ 471.056563][T19010] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 471.067842][T19010] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 471.079092][T19010] JBD2: no valid journal superblock found [ 471.085096][T19010] EXT4-fs (loop4): Could not load journal inode [ 471.142284][T19014] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5087'. [ 471.256749][ T29] audit: type=1326 audit(477.433:17020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19026 comm="syz.6.5092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb9eef749 code=0x7ffc0000 [ 471.280011][ T29] audit: type=1326 audit(477.433:17021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19026 comm="syz.6.5092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb9eef749 code=0x7ffc0000 [ 471.303145][ T29] audit: type=1326 audit(477.443:17022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19026 comm="syz.6.5092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7faeb9eef749 code=0x7ffc0000 [ 471.326255][ T29] audit: type=1326 audit(477.443:17023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19026 comm="syz.6.5092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb9eef749 code=0x7ffc0000 [ 471.349497][ T29] audit: type=1326 audit(477.443:17024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19026 comm="syz.6.5092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7faeb9eef749 code=0x7ffc0000 [ 472.290227][T19057] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5106'. [ 472.435813][T19074] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5112'. [ 472.600629][T19079] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 472.747630][T19091] SELinux: failed to load policy [ 472.867732][T19102] loop4: detected capacity change from 0 to 1024 [ 472.874583][T19102] EXT4-fs: inline encryption not supported [ 472.880480][T19102] EXT4-fs: Ignoring removed orlov option [ 472.886627][T19102] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 472.901292][T19102] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 472.910127][T19102] System zones: 0-1, 3-12 [ 472.915555][T19102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.985598][T19113] netlink: 'syz.9.5129': attribute type 10 has an invalid length. [ 473.006041][T19113] team0 (unregistering): Port device team_slave_0 removed [ 473.025520][T19113] team0 (unregistering): Port device team_slave_1 removed [ 473.039551][T19102] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 473.052082][T19102] EXT4-fs (loop4): This should not happen!! Data will be lost [ 473.052082][T19102] [ 473.061921][T19102] EXT4-fs (loop4): Total free blocks count 0 [ 473.067948][T19102] EXT4-fs (loop4): Free/Dirty block details [ 473.073902][T19102] EXT4-fs (loop4): free_blocks=0 [ 473.078859][T19102] EXT4-fs (loop4): dirty_blocks=0 [ 473.084003][T19102] EXT4-fs (loop4): Block reservation details [ 473.090111][T19102] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 473.120217][T18044] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.156904][T19119] netlink: 'syz.4.5130': attribute type 4 has an invalid length. [ 473.164759][T19119] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5130'. [ 473.179125][T19119] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 473.246813][T19120] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.254115][T19120] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.305415][T19120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.330391][T19129] loop4: detected capacity change from 0 to 512 [ 473.340187][T19120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.387429][T15432] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.399460][T15432] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.460258][T15432] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.478796][T15432] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.518894][T19147] 9pnet_fd: Insufficient options for proto=fd [ 473.521865][T19149] futex_wake_op: syz.9.5142 tries to shift op by -1; fix this program [ 473.558943][T19154] netlink: 'syz.6.5141': attribute type 1 has an invalid length. [ 473.567313][T19154] netlink: 'syz.6.5141': attribute type 2 has an invalid length. [ 473.616006][T19152] gre1: entered allmulticast mode [ 473.810337][T19183] 9pnet_fd: Insufficient options for proto=fd [ 473.816836][T19184] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 474.086797][T19207] loop4: detected capacity change from 0 to 512 [ 474.102956][T19207] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 474.144375][T19202] __nla_validate_parse: 4 callbacks suppressed [ 474.144395][T19202] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5165'. [ 474.160287][T19202] IPv6: NLM_F_REPLACE set, but no existing node found! [ 474.201649][T19213] 9pnet_fd: Insufficient options for proto=fd [ 474.272253][T19218] loop4: detected capacity change from 0 to 128 [ 474.281244][T19218] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 474.289303][T19218] FAT-fs (loop4): Filesystem has been set read-only [ 474.296159][T19218] syz.4.5170: attempt to access beyond end of device [ 474.296159][T19218] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 474.310642][T19218] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 474.318645][T19218] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 474.327071][T19218] syz.4.5170: attempt to access beyond end of device [ 474.327071][T19218] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 474.340915][T19218] syz.4.5170: attempt to access beyond end of device [ 474.340915][T19218] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 474.354358][T19218] syz.4.5170: attempt to access beyond end of device [ 474.354358][T19218] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 474.368061][T19226] syz.4.5170: attempt to access beyond end of device [ 474.368061][T19226] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 474.381302][T19226] buffer_io_error: 67470 callbacks suppressed [ 474.381337][T19226] Buffer I/O error on dev loop4, logical block 2065, async page read [ 474.395636][T19226] syz.4.5170: attempt to access beyond end of device [ 474.395636][T19226] loop4: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 474.408981][T19226] Buffer I/O error on dev loop4, logical block 2066, async page read [ 474.417147][T19226] syz.4.5170: attempt to access beyond end of device [ 474.417147][T19226] loop4: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 474.430408][T19226] Buffer I/O error on dev loop4, logical block 2067, async page read [ 474.439261][T19227] xt_connbytes: Forcing CT accounting to be enabled [ 474.446182][T19227] Cannot find set identified by id 0 to match [ 474.452027][T19226] syz.4.5170: attempt to access beyond end of device [ 474.452027][T19226] loop4: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 474.465540][T19226] Buffer I/O error on dev loop4, logical block 2068, async page read [ 474.480449][T19226] syz.4.5170: attempt to access beyond end of device [ 474.480449][T19226] loop4: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 474.493888][T19226] Buffer I/O error on dev loop4, logical block 2069, async page read [ 474.502303][T19226] syz.4.5170: attempt to access beyond end of device [ 474.502303][T19226] loop4: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 474.515622][T19226] Buffer I/O error on dev loop4, logical block 2070, async page read [ 474.524119][T19226] Buffer I/O error on dev loop4, logical block 2071, async page read [ 474.532598][T19226] Buffer I/O error on dev loop4, logical block 2072, async page read [ 474.540742][T19218] Buffer I/O error on dev loop4, logical block 2065, async page read [ 474.549526][T19218] Buffer I/O error on dev loop4, logical block 2066, async page read [ 474.608390][T19239] 9pnet_fd: Insufficient options for proto=fd [ 475.080641][T19254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5187'. [ 475.089728][T19254] netlink: 'syz.4.5187': attribute type 15 has an invalid length. [ 475.097544][T19254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5187'. [ 475.110771][T15432] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.123082][T15432] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.132032][T15432] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.141737][T15432] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.314435][T19281] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 475.352917][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 475.352935][ T29] audit: type=1326 audit(2000000000.115:17294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19285 comm="syz.4.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e807f749 code=0x7ffc0000 [ 475.394961][ T29] audit: type=1326 audit(2000000000.157:17295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19285 comm="syz.4.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f40e807f749 code=0x7ffc0000 [ 475.418678][ T29] audit: type=1326 audit(2000000000.157:17296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19285 comm="syz.4.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e807f749 code=0x7ffc0000 [ 475.442297][ T29] audit: type=1326 audit(2000000000.157:17297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19285 comm="syz.4.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f40e807f749 code=0x7ffc0000 [ 475.465899][ T29] audit: type=1326 audit(2000000000.157:17298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19285 comm="syz.4.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e807f749 code=0x7ffc0000 [ 475.488788][T19291] netlink: 'syz.4.5203': attribute type 1 has an invalid length. [ 475.489997][ T29] audit: type=1326 audit(2000000000.157:17299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19285 comm="syz.4.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f40e807f749 code=0x7ffc0000 [ 475.521590][ T29] audit: type=1326 audit(2000000000.157:17300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19285 comm="syz.4.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e807f749 code=0x7ffc0000 [ 475.640211][T19303] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5208'. [ 475.649322][T19303] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5208'. [ 475.658405][T19303] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5208'. [ 476.034719][ T29] audit: type=1326 audit(2000000000.608:17301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19312 comm="syz.0.5212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898533f749 code=0x7ffc0000 [ 476.058436][ T29] audit: type=1326 audit(2000000000.608:17302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19312 comm="syz.0.5212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898533f749 code=0x7ffc0000 [ 476.081100][T19332] netlink: 'syz.0.5220': attribute type 12 has an invalid length. [ 476.082535][ T29] audit: type=1326 audit(2000000000.608:17303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19312 comm="syz.0.5212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f898533f749 code=0x7ffc0000 [ 476.555277][T19365] netlink: 'syz.0.5232': attribute type 12 has an invalid length. [ 476.679875][T19314] delete_channel: no stack [ 477.072241][T19419] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5257'. [ 477.130836][T19426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5260'. [ 477.133046][T19416] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5256'. [ 477.162541][T19426] bridge0: port 4(macvtap1) entered blocking state [ 477.169386][T19426] bridge0: port 4(macvtap1) entered disabled state [ 477.195433][T19426] macvtap1: entered allmulticast mode [ 477.200897][T19426] bridge0: entered allmulticast mode [ 477.217313][T19426] macvtap1: left allmulticast mode [ 477.222486][T19426] bridge0: left allmulticast mode [ 477.519213][T19470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5273'. [ 477.533841][T19476] --map-set only usable from mangle table [ 477.632211][T19490] 8021q: VLANs not supported on ip6gre0 [ 477.679495][T19494] netlink: 'syz.4.5287': attribute type 10 has an invalid length. [ 477.692241][T19494] team0: Port device dummy0 added [ 477.699483][T19494] netlink: 'syz.4.5287': attribute type 10 has an invalid length. [ 477.708490][T19494] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 477.719807][T19494] team0: Failed to send options change via netlink (err -105) [ 477.727388][T19494] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 477.736408][T19494] team0: Port device dummy0 removed [ 477.745067][T19494] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 478.266868][T19517] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 478.279753][T19521] gre1: left allmulticast mode [ 478.310330][T19523] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 478.380143][T19528] --map-set only usable from mangle table [ 478.549190][T19545] netlink: 'syz.9.5311': attribute type 16 has an invalid length. [ 478.712132][T19562] bridge0: port 3(gretap0) entered blocking state [ 478.718705][T19562] bridge0: port 3(gretap0) entered disabled state [ 478.736359][T19562] gretap0: entered allmulticast mode [ 478.742327][T19562] gretap0: entered promiscuous mode [ 478.750867][T19569] netlink: 'syz.6.5319': attribute type 12 has an invalid length. [ 479.360613][T19614] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 480.186585][T19634] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 480.530406][T19641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5126 sclass=netlink_route_socket pid=19641 comm=syz.0.5345 [ 480.759356][T19654] netlink: 'syz.3.5349': attribute type 13 has an invalid length. [ 481.082477][T19662] netlink: 'syz.3.5353': attribute type 3 has an invalid length. [ 481.214291][T19666] bridge0: port 3(gretap0) entered blocking state [ 481.220815][T19666] bridge0: port 3(gretap0) entered forwarding state [ 481.275681][T19666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.292878][T19666] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.342825][T19666] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 481.842072][T19711] __nla_validate_parse: 6 callbacks suppressed [ 481.842088][T19711] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5370'. [ 482.252470][ T29] kauditd_printk_skb: 388 callbacks suppressed [ 482.252488][ T29] audit: type=1326 audit(2000000007.359:17692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19733 comm="syz.3.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 482.310296][ T29] audit: type=1326 audit(2000000007.401:17693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19733 comm="syz.3.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 482.334062][ T29] audit: type=1326 audit(2000000007.401:17694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19733 comm="syz.3.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 482.357711][ T29] audit: type=1326 audit(2000000007.401:17695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19733 comm="syz.3.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 482.381327][ T29] audit: type=1326 audit(2000000007.401:17696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19733 comm="syz.3.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 482.404972][ T29] audit: type=1326 audit(2000000007.401:17697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19733 comm="syz.3.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 482.428494][ T29] audit: type=1326 audit(2000000007.401:17698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19733 comm="syz.3.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 482.452160][ T29] audit: type=1326 audit(2000000007.401:17699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19733 comm="syz.3.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 482.476046][ T29] audit: type=1326 audit(2000000007.401:17700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19733 comm="syz.3.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 482.499655][ T29] audit: type=1326 audit(2000000007.401:17701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19733 comm="syz.3.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4d0f749 code=0x7ffc0000 [ 483.322060][T19779] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 483.464362][T19790] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5406'. [ 483.488425][T19792] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 484.156531][T19810] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5416'. [ 484.165493][T19810] netlink: 'syz.6.5416': attribute type 30 has an invalid length. [ 484.177204][T15396] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.185704][T15396] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.196218][T19810] tipc: Started in network mode [ 484.201197][T19810] tipc: Node identity aaaaaaaaaa38, cluster identity 4711 [ 484.208426][T19810] tipc: Enabled bearer , priority 0 [ 484.217138][T15396] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.225615][T15396] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.847016][T19852] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 484.917726][T19855] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5431'. [ 484.927085][T19855] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5431'. [ 484.965617][T19855] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5431'. [ 484.974699][T19855] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5431'. [ 484.985261][T19855] netlink: 'syz.4.5431': attribute type 10 has an invalid length. [ 484.995117][T19863] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5436'. [ 485.007791][T19855] bond0: (slave dummy0): Releasing backup interface [ 485.022311][T19855] team0: Port device dummy0 added [ 485.125603][T19878] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 485.205065][T19882] netlink: 'syz.0.5445': attribute type 13 has an invalid length. [ 485.608380][T19882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.623506][T19882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.760433][T19882] ip6gretap0: left allmulticast mode [ 485.771895][ T36] tipc: Node number set to 9611946 [ 485.779451][T15395] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.797852][T15395] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.824463][T15395] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.864959][T15395] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.271432][T19947] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 486.955165][T19987] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5484'. [ 487.169679][T19985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5483'. [ 487.433983][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 487.434002][ T29] audit: type=1326 audit(2000000012.797:17936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20013 comm="syz.6.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb9eef749 code=0x7ffc0000 [ 487.484495][ T29] audit: type=1326 audit(2000000012.839:17937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20013 comm="syz.6.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb9eef749 code=0x7ffc0000 [ 487.508498][ T29] audit: type=1326 audit(2000000012.839:17938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20013 comm="syz.6.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb9eef749 code=0x7ffc0000 [ 487.532931][ T29] audit: type=1326 audit(2000000012.839:17939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20013 comm="syz.6.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb9eef749 code=0x7ffc0000 [ 487.556790][ T29] audit: type=1326 audit(2000000012.839:17940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20013 comm="syz.6.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7faeb9eef749 code=0x7ffc0000 [ 487.580880][ T29] audit: type=1326 audit(2000000012.839:17941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20013 comm="syz.6.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faeb9eef783 code=0x7ffc0000 [ 487.604768][ T29] audit: type=1326 audit(2000000012.839:17942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20013 comm="syz.6.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faeb9eee1ff code=0x7ffc0000 [ 487.628895][ T29] audit: type=1326 audit(2000000012.849:17943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20013 comm="syz.6.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7faeb9eef7d7 code=0x7ffc0000 [ 487.643953][T20025] SELinux: Context system_u:object_r:ld_so_cache_t:s0 is not valid (left unmapped). [ 487.652801][ T29] audit: type=1326 audit(2000000012.849:17944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20013 comm="syz.6.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faeb9eedf90 code=0x7ffc0000 [ 487.686140][ T29] audit: type=1326 audit(2000000012.849:17945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20013 comm="syz.6.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7faeb9eee3aa code=0x7ffc0000 [ 487.760906][T20032] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 487.903854][T20040] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5504'. [ 488.048930][T20051] netlink: 'syz.4.5510': attribute type 13 has an invalid length. [ 488.121212][T20051] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.128626][T20051] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.151039][T20059] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5512'. [ 488.208369][T20051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.227660][T20051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.354296][T20059] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.361605][T20059] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.408503][T20059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.438541][T20059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.473760][T20059] tipc: Resetting bearer [ 488.488240][T15391] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.497246][T15391] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.507158][T15391] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.516158][T15391] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.591855][T15391] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.600858][T15391] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.616284][T15391] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.625439][T15391] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.636021][T15391] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.644414][T15391] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.654351][T15391] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.662867][T15391] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.672564][T15391] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.681095][T15391] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.689643][T15391] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.698189][T15391] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.952151][T20100] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 489.277772][T20121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5537'. [ 489.781615][T20149] netlink: 'syz.9.5549': attribute type 13 has an invalid length. [ 489.799370][T20150] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5548'. [ 492.075552][T20267] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 492.202186][ T29] kauditd_printk_skb: 1731 callbacks suppressed [ 492.202205][ T29] audit: type=1326 audit(2000000017.804:19677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20276 comm="syz.6.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb9eef749 code=0x7ffc0000 [ 492.232667][ T29] audit: type=1326 audit(2000000017.804:19678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20276 comm="syz.6.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb9eef749 code=0x7ffc0000 [ 492.270016][ T29] audit: type=1326 audit(2000000017.804:19679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20276 comm="syz.6.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb9eef749 code=0x7ffc0000 [ 492.293761][ T29] audit: type=1326 audit(2000000017.804:19680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20276 comm="syz.6.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb9eef749 code=0x7ffc0000 [ 492.317515][ T29] audit: type=1326 audit(2000000017.867:19681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20276 comm="syz.6.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7faeb9eef749 code=0x7ffc0000 [ 492.341207][ T29] audit: type=1326 audit(2000000017.867:19682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20276 comm="syz.6.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faeb9eef783 code=0x7ffc0000 [ 492.364735][ T29] audit: type=1326 audit(2000000017.867:19683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20276 comm="syz.6.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faeb9eee1ff code=0x7ffc0000 [ 492.388484][ T29] audit: type=1326 audit(2000000017.878:19684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20276 comm="syz.6.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7faeb9eef7d7 code=0x7ffc0000 [ 492.412127][ T29] audit: type=1326 audit(2000000017.878:19685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20276 comm="syz.6.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faeb9eedf90 code=0x7ffc0000 [ 492.435942][ T29] audit: type=1326 audit(2000000017.878:19686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20276 comm="syz.6.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7faeb9eee3aa code=0x7ffc0000 [ 492.466081][T20286] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 492.509799][T20288] netlink: 'syz.6.5604': attribute type 12 has an invalid length. [ 492.509893][T20292] netlink: 'syz.0.5606': attribute type 13 has an invalid length. [ 492.617876][T20301] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5609'. [ 492.756560][T20309] 9pnet_fd: Insufficient options for proto=fd [ 492.901713][T20320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5615'. [ 494.167899][T20368] netlink: 'syz.3.5637': attribute type 13 has an invalid length. [ 494.205632][T20368] bridge0: port 3(gretap0) entered disabled state [ 494.305466][T20370] $Hÿ: renamed from bond0 [ 494.311993][T20370] $Hÿ: entered promiscuous mode [ 494.317422][T20370] bond_slave_0: entered promiscuous mode [ 494.323251][T20370] bond_slave_1: entered promiscuous mode [ 494.328553][T20381] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 494.456892][T20397] netlink: 'syz.6.5649': attribute type 12 has an invalid length. [ 494.471878][T20399] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 494.691027][T20429] netlink: 'syz.3.5663': attribute type 12 has an invalid length. [ 494.927405][T20445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5670'. [ 495.015162][T20462] netlink: 'syz.0.5677': attribute type 12 has an invalid length. [ 495.304024][T20499] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5686'. [ 495.323623][T20499] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5686'. [ 495.366280][T20507] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 495.607334][T20533] pimreg: entered allmulticast mode [ 495.626045][T20533] pimreg: left allmulticast mode [ 495.706424][T20541] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 495.707658][T20539] macvtap1: left promiscuous mode [ 495.722142][T20539] macvtap1: left allmulticast mode [ 496.476971][T20620] netlink: 'syz.4.5744': attribute type 12 has an invalid length. [ 496.506840][T20623] netlink: 'syz.0.5745': attribute type 13 has an invalid length. [ 496.702221][T20639] netlink: 'syz.0.5753': attribute type 13 has an invalid length. [ 496.772858][T20644] team1: left promiscuous mode [ 496.777702][T20644] team1: left allmulticast mode [ 496.811045][T20648] netlink: 'syz.3.5757': attribute type 12 has an invalid length. [ 496.891448][T20646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5756'. [ 497.097890][T20670] netlink: 'syz.3.5766': attribute type 13 has an invalid length. [ 497.375005][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 497.375023][ T29] audit: type=1326 audit(2000000023.242:19926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20692 comm="syz.0.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898533f749 code=0x7ffc0000 [ 497.404863][ T29] audit: type=1326 audit(2000000023.242:19927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20692 comm="syz.0.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898533f749 code=0x7ffc0000 [ 497.482108][ T29] audit: type=1326 audit(2000000023.242:19928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20692 comm="syz.0.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f898533f749 code=0x7ffc0000 [ 497.505833][ T29] audit: type=1326 audit(2000000023.242:19929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20692 comm="syz.0.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898533f749 code=0x7ffc0000 [ 497.529565][ T29] audit: type=1326 audit(2000000023.242:19930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20692 comm="syz.0.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898533f749 code=0x7ffc0000 [ 497.553454][ T29] audit: type=1326 audit(2000000023.295:19931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20692 comm="syz.0.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f898533f749 code=0x7ffc0000 [ 497.577363][ T29] audit: type=1326 audit(2000000023.295:19932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20692 comm="syz.0.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898533f749 code=0x7ffc0000 [ 497.601127][ T29] audit: type=1326 audit(2000000023.295:19933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20692 comm="syz.0.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898533f749 code=0x7ffc0000 [ 497.624915][ T29] audit: type=1326 audit(2000000023.316:19934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20692 comm="syz.0.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f898533f749 code=0x7ffc0000 [ 497.648900][ T29] audit: type=1326 audit(2000000023.316:19935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20692 comm="syz.0.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898533f749 code=0x7ffc0000 [ 497.713249][T20706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5779'. [ 497.722221][T20706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5779'. [ 497.763583][T20708] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5781'. [ 498.081842][T20734] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.192707][T20743] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 498.440356][T20756] $Hÿ: left promiscuous mode [ 498.445330][T20756] bond_slave_0: left promiscuous mode [ 498.450989][T20756] bond_slave_1: left promiscuous mode [ 498.526310][T20768] bond1: option all_slaves_active: invalid value (11) [ 498.534030][T20768] bond1 (unregistering): Released all slaves [ 498.578787][T20772] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 499.326889][T20824] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 499.637474][T20835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5830'. [ 499.646703][T20835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.655716][T20835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.828687][T20837] netlink: 64 bytes leftover after parsing attributes in process `syz.9.5831'. [ 499.869198][T20850] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 499.905237][T20853] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 500.249896][T20883] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 500.446602][T20898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5853'. [ 500.456503][T20898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5853'. [ 500.639644][T20913] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 500.990267][T20936] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 501.073881][T20942] netlink: 'syz.4.5874': attribute type 12 has an invalid length. [ 501.207311][T20965] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 501.258365][T20972] netlink: 'syz.0.5887': attribute type 12 has an invalid length. [ 501.352906][T20987] netlink: 'syz.0.5894': attribute type 13 has an invalid length. [ 501.368124][T20991] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 501.410335][T20997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5899'. [ 501.411018][T20995] netlink: 'syz.6.5898': attribute type 13 has an invalid length. [ 501.420128][T20997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.435713][T20997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.469687][T20999] netlink: 'syz.9.5900': attribute type 12 has an invalid length. [ 501.617609][T21014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5907'. [ 502.228950][T21091] netlink: 'syz.4.5939': attribute type 13 has an invalid length. [ 502.510051][ T29] kauditd_printk_skb: 512 callbacks suppressed [ 502.510067][ T29] audit: type=1326 audit(2000000028.628:20448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21123 comm="syz.9.5953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8aa11f749 code=0x7ffc0000 [ 502.540161][ T29] audit: type=1326 audit(2000000028.628:20449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21123 comm="syz.9.5953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8aa11f749 code=0x7ffc0000 [ 502.584101][T21126] netlink: 'syz.3.5952': attribute type 13 has an invalid length. [ 502.619325][ T29] audit: type=1326 audit(2000000028.628:20450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21123 comm="syz.9.5953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8aa11f749 code=0x7ffc0000 [ 502.643081][ T29] audit: type=1326 audit(2000000028.628:20451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21123 comm="syz.9.5953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8aa11f749 code=0x7ffc0000 [ 502.666692][ T29] audit: type=1326 audit(2000000028.628:20452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21123 comm="syz.9.5953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8aa11f749 code=0x7ffc0000 [ 502.690407][ T29] audit: type=1326 audit(2000000028.628:20453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21123 comm="syz.9.5953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8aa11f749 code=0x7ffc0000 [ 502.714025][ T29] audit: type=1326 audit(2000000028.628:20454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21123 comm="syz.9.5953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8aa11f749 code=0x7ffc0000 [ 502.737795][ T29] audit: type=1326 audit(2000000028.628:20455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21123 comm="syz.9.5953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd8aa11f749 code=0x7ffc0000 [ 502.761333][ T29] audit: type=1326 audit(2000000028.628:20456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21123 comm="syz.9.5953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8aa11f749 code=0x7ffc0000 [ 502.785044][ T29] audit: type=1326 audit(2000000028.628:20457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21123 comm="syz.9.5953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8aa11f749 code=0x7ffc0000 [ 502.961185][T21164] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5970'. [ 502.980302][T21164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.988853][T21164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.008214][T21165] netlink: 'syz.4.5967': attribute type 30 has an invalid length. [ 503.263166][T21186] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5979'. [ 503.343897][T21191] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 503.830036][T15403] ================================================================== [ 503.838186][T15403] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp [ 503.844808][T15403] [ 503.847146][T15403] write to 0xffff88810d3fa190 of 112 bytes by task 17031 on cpu 1: [ 503.855058][T15403] __bpf_get_stackid+0x761/0x800 [ 503.860035][T15403] bpf_get_stackid+0xe9/0x120 [ 503.864746][T15403] bpf_get_stackid_raw_tp+0xf6/0x120 [ 503.870076][T15403] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 503.875574][T15403] bpf_trace_run3+0x10f/0x1d0 [ 503.880312][T15403] kmem_cache_free+0x329/0x3d0 [ 503.885165][T15403] security_file_free+0x61/0xa0 [ 503.890059][T15403] file_free+0x16/0x130 [ 503.894242][T15403] __fput_deferred+0x1df/0x270 [ 503.899034][T15403] fput_close+0x6e/0x120 [ 503.903295][T15403] path_openat+0x1e1a/0x2170 [ 503.907907][T15403] do_filp_open+0x109/0x230 [ 503.912439][T15403] do_sys_openat2+0xa6/0x110 [ 503.917050][T15403] __x64_sys_openat+0xf2/0x120 [ 503.921843][T15403] x64_sys_call+0x2eab/0x3000 [ 503.926559][T15403] do_syscall_64+0xd2/0x200 [ 503.931086][T15403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.937269][T15403] [ 503.939618][T15403] read to 0xffff88810d3fa1a8 of 8 bytes by task 15403 on cpu 0: [ 503.947256][T15403] bcmp+0x23/0x90 [ 503.950910][T15403] __bpf_get_stackid+0x371/0x800 [ 503.955869][T15403] bpf_get_stackid+0xe9/0x120 [ 503.960564][T15403] bpf_get_stackid_raw_tp+0xf6/0x120 [ 503.965871][T15403] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 503.971335][T15403] bpf_trace_run3+0x10f/0x1d0 [ 503.976037][T15403] kmem_cache_free+0x329/0x3d0 [ 503.980826][T15403] __io_req_caches_free+0xfe/0x210 [ 503.985973][T15403] io_req_caches_free+0x1f/0x60 [ 503.990838][T15403] io_ring_exit_work+0x26d/0x560 [ 503.995795][T15403] process_scheduled_works+0x4ce/0x9d0 [ 504.001284][T15403] worker_thread+0x582/0x770 [ 504.005928][T15403] kthread+0x489/0x510 [ 504.010011][T15403] ret_from_fork+0x122/0x1b0 [ 504.014619][T15403] ret_from_fork_asm+0x1a/0x30 [ 504.019392][T15403] [ 504.021717][T15403] value changed: 0xffffffff8122641e -> 0xffffffff81d21c41 [ 504.028827][T15403] [ 504.031168][T15403] Reported by Kernel Concurrency Sanitizer on: [ 504.037323][T15403] CPU: 0 UID: 0 PID: 15403 Comm: kworker/u8:32 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 504.049048][T15403] Tainted: [W]=WARN [ 504.052851][T15403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 504.062908][T15403] Workqueue: iou_exit io_ring_exit_work [ 504.068488][T15403] ==================================================================