last executing test programs: 35m34.066948591s ago: executing program 32 (id=407): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0xd, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x3c}}, 0x20004055) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000ac1414aa000000000000000000000000fc010000000000000000000000000001000107144e230006000080003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff070000002abd7000043500000a0001002000000000000000480003006465666c61746500"/234], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 32m52.849176036s ago: executing program 33 (id=3858): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 32m52.671947233s ago: executing program 34 (id=3660): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)}, 0x20) r1 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) close(r1) 32m46.429598617s ago: executing program 35 (id=3966): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000004c0)='kfree\x00', r4, 0x0, 0x4ab}, 0x18) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) r6 = dup(r5) ioctl$GIO_UNISCRNMAP(r6, 0x43403d0e, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99925bd70000000000000000000000300000000000000000000b21e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x20000044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r7}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) 23m11.266234001s ago: executing program 36 (id=8480): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3f2}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) 22m44.783508338s ago: executing program 37 (id=8752): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000070000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 22m43.299232776s ago: executing program 38 (id=8767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000040000000a20000000000a01020000000000000000070008000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000007500070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c000440000010c6f7a0b5ec0c00"], 0xec}}, 0x80000) 22m29.755349369s ago: executing program 39 (id=8864): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) 22m19.24702764s ago: executing program 40 (id=8931): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x24, 0x107, 0x70bd2d, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x76) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x2, 0x0, 0x9, 0x8, 0x8, 0x77ffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x8000000000000000}, r2, 0x4, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair(0x2c, 0xfec3068d46d68d73, 0x921, &(0x7f0000000ac0)={0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)=ANY=[@ANYBLOB="400000000d1410002dbd7000fddbdf2508003e0001000000080001000100000008003e0005000000080003000010000008000100020000000800030003000000"], 0x40}, 0x1, 0x0, 0x0, 0x200408d1}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x4, [@volatile={0x1, 0x0, 0x0, 0x9, 0x4}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x6}, {0xe, 0x1}, {0x4}]}, @func={0x9, 0x0, 0x0, 0xc, 0x4}, @enum={0xc, 0x5, 0x0, 0x6, 0x4, [{0xa}, {0x6, 0x2c0}, {0x3, 0x1ff}, {0x5, 0x972}, {0x3}]}, @var={0x7, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x61, 0x2e]}}, &(0x7f0000000600)=""/99, 0x9c, 0x63, 0x0, 0x2}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0x1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)=r0}, 0x20) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b4000"/20, @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000020000000300"/28], 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="12000000030000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r11}, &(0x7f0000000180), 0x0}, 0x20) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000900), 0x8) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0x0, 0xfffffffd, 0x18}, 0x5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={r6, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000a40)=[0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f0000000cc0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000d00), &(0x7f0000000500), 0x8, 0x46, 0x8, 0x8, &(0x7f0000000e00)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ffff0000000000000600000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100001800000004000000000000000300000018450000faffffff0000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000f80)='syzkaller\x00', 0x100009, 0x4f, &(0x7f0000000340)=""/79, 0x40f00, 0x41, '\x00', r14, 0x0, r7, 0x8, &(0x7f0000000440)={0x0, 0x6}, 0x8, 0x10, &(0x7f0000000a00)={0xfffffffd, 0x10, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000980)=[0x1, r8, r9, r3, r10, r11, r0, r12, r13], &(0x7f00000009c0), 0x10, 0xffff}, 0x94) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 22m18.197642785s ago: executing program 41 (id=8942): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x999047, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) 21m52.464001216s ago: executing program 42 (id=9337): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300240000000b000100736f636b65740000080002"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 21m51.575147405s ago: executing program 43 (id=9359): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000b00000007"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) 20m49.299265499s ago: executing program 44 (id=11133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}}, 0x0) 20m30.626887014s ago: executing program 45 (id=11237): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000500)=""/45, 0x2d) getdents64(r0, 0x0, 0x18) 20m25.097306337s ago: executing program 46 (id=11360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp6\x00') pread64(r3, &(0x7f0000000080)=""/220, 0xdc, 0x4009) 20m20.237783772s ago: executing program 47 (id=11409): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x54}}, 0x0) 6m40.410838482s ago: executing program 48 (id=16103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x25, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 6m37.580660343s ago: executing program 49 (id=16116): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f0000000c00)=""/199, 0xc7, 0x0, &(0x7f0000000d00)=""/110, 0x6e}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r5, 0x0, 0x9}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) readv(r6, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") sendmsg$key(r2, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/13], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r8, 0x0, 0x81}, 0x18) r9 = memfd_secret(0x80000) fcntl$setlease(r9, 0x400, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) 6m32.489781828s ago: executing program 50 (id=16134): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0xfffffffffffffe3c, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000200000000e1ffffff851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080200ffd00000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x24) 6m29.408415024s ago: executing program 51 (id=16146): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x999047, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 5m55.563126924s ago: executing program 52 (id=16285): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000300)=""/94, 0x5e, 0x227) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x174}}, 0x0) 5m54.546908986s ago: executing program 53 (id=16297): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000002020000ec0b000007"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000580), &(0x7f0000000240)=""/255}, 0x20) 5m51.139732124s ago: executing program 54 (id=16308): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2}, [@alu={0x4, 0x1, 0x4, 0x760cda05bcf95fa0, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) write$cgroup_pid(r0, &(0x7f00000005c0), 0x12) 5m45.551664369s ago: executing program 55 (id=16324): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 5m26.310584769s ago: executing program 56 (id=16446): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), &(0x7f0000000300)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0) 5m24.157007523s ago: executing program 57 (id=16466): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x4, 0x5}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc) 4m58.873744963s ago: executing program 58 (id=16707): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002200)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}}, 0x0) 4m41.878610791s ago: executing program 59 (id=16871): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008e60000b70300000000000085000000d0000000952a04390da55784f4eb4969568da0e5f046da998e64e2f1eae9f56e03c0e9d56e0395deef"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="77844923fbde9d724bbda199f4d6", 0x0, 0x8000, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000440)="340b76235e542388314c94ffb092fe45f73f8c986973c4976cfb5e6d1d8c82244df1f513a1c1fbfa9a9f0b95aeb353c71ce43ab84de2d842a33e91ce88d884ec2a248e85b886f115b686136aaf601bbff88abe474a8494073ad74fa9adc48bb0577ba007c034067d35226a6049c20b62fef3bad5f9e53c8ea5682c0073eec76929c6d3362325fe1144dcc97ff2c5aa59dde347555cd214a311db3942deef1b9143089b894379762ff8b5e92db6ab7ff6e4fe98137ee709c44a9353840f906e9a"}, 0x50) open(&(0x7f0000000280)='./file0\x00', 0x800, 0x30) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x80003, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x5) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000280)={0xffffffff, 0x10000007, 0xc4, 0xfb, 0x1, "09000000014cc40bfe00", 0x7, 0x1}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xd) 2m30.169546149s ago: executing program 60 (id=18124): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x29c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x81, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x3, 0x1, 0x0, 0xf, {0x9, 0x21, 0xf0c, 0x1, 0x1, {0x22, 0x256}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x86}}}}}]}}]}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@private1, 0x0, 0x2, 0x8}, {@in=@local, 0x4d5, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x13}, {0x7, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x20}, {0x0, 0x2}, {0x0, 0x20}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bond0\x00'}) epoll_create1(0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r5, &(0x7f0000000100), 0x8) r6 = syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r7) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) ptrace(0x10, r6) r8 = syz_open_procfs(r6, &(0x7f0000000040)='status\x00') pread64(r8, &(0x7f0000000140)=""/15, 0xf, 0x4) 2m28.675003457s ago: executing program 61 (id=18155): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x1, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x13}}, r1, 0x3}}, 0x48) 2m27.816311532s ago: executing program 62 (id=18174): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x3, 0x260, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000002c0)={0x8000000000000005, 0x20009baa, 0x81}) 2m25.963949346s ago: executing program 63 (id=18210): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195e", 0x2a, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) 2m22.045493595s ago: executing program 64 (id=18283): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000880)={0x20, r4, 0x4f79951a91b7df8f, 0x70bd2c, 0x3, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) 2m21.984452712s ago: executing program 65 (id=18286): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x600000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2m20.606665788s ago: executing program 66 (id=18315): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) ppoll(&(0x7f0000000200)=[{r0, 0x280}], 0x1, 0x0, 0x0, 0x0) 2m15.193242966s ago: executing program 67 (id=18358): r0 = socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0x3c, 0x2c, 0x409, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1m33.930862453s ago: executing program 68 (id=18623): clock_adjtime(0x0, &(0x7f0000000040)={0x37d8, 0x40000000, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xffc99a3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20100000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x200000, 0x100000001}) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r1}, 0x10) r2 = fsmount(r0, 0x0, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) 1m32.171293248s ago: executing program 69 (id=18635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000c9ded30ec727533d", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0xf0, 0x30, 0xffff, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x6c, 0x2, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1b1, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x26e6}}, @TCA_GACT_PROB={0xfffffffffffffe74, 0x3, {0x1, 0x18a8, 0x6}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xf0}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) 1m30.989975805s ago: executing program 70 (id=18646): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x80000) getsockopt$inet_buf(r1, 0x0, 0x11, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) socket$nl_route(0x10, 0x3, 0x0) 1m28.810904161s ago: executing program 71 (id=18655): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="780000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0503020000000000500012800e0001006970366772657461700000003c000280060018000200000005000b0002000000080014000900000006000f00ff01000008000c000e0000000800"], 0x78}}, 0x0) 1m25.593103691s ago: executing program 72 (id=18665): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={0x0, r1}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 1m14.036659718s ago: executing program 6 (id=18718): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, 0x0, 0x4010) shutdown(r0, 0x1) 1m13.961382676s ago: executing program 6 (id=18720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}}, 0x0) 1m13.91863883s ago: executing program 6 (id=18721): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = eventfd2(0x8, 0x0) write$eventfd(r2, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x190da) 1m13.751548667s ago: executing program 73 (id=18722): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) unshare(0x42000000) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000080)='./file2\x00', 0x80040, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRESOCT=r3, @ANYRESDEC, @ANYRES64=r1], 0x6, 0x2e5, &(0x7f0000000d00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000080)={0x4, 0xb831, 0x3ffe}) r5 = open(&(0x7f0000000200)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r5, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 1m13.354792146s ago: executing program 74 (id=18727): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a31000000000800054000000002"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x5}]}}}}}}}}, 0x0) 1m13.037791427s ago: executing program 6 (id=18729): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, 0x0, r0, &(0x7f0000000240)='./file0/file0\x00', 0x272) 1m12.971382344s ago: executing program 6 (id=18730): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, 0x0, 0x4010) shutdown(r0, 0x1) 1m12.741531077s ago: executing program 6 (id=18731): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) close(0xffffffffffffffff) unshare(0x42000000) 1m12.720651299s ago: executing program 75 (id=18731): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) close(0xffffffffffffffff) unshare(0x42000000) 1m6.502144666s ago: executing program 5 (id=18762): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) unshare(0x42000000) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000080)='./file2\x00', 0x80040, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRESOCT=r3, @ANYRESDEC, @ANYRES64=r1], 0x6, 0x2e5, &(0x7f0000000d00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000080)={0x4, 0xb831, 0x3ffe}) r5 = open(&(0x7f0000000200)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r5, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 1m5.594460357s ago: executing program 5 (id=18766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xc5}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x8814) 1m5.555333241s ago: executing program 5 (id=18768): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000300)=""/94, 0x5e, 0x227) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r5, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) 1m2.676573316s ago: executing program 5 (id=18778): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, 0x0, 0x272) 1m2.63355262s ago: executing program 5 (id=18779): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 1m2.426973031s ago: executing program 5 (id=18782): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x348cf000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) syz_io_uring_setup(0xeb, &(0x7f0000000480)={0x0, 0x7dbf, 0x8, 0x0, 0x1f0}, 0x0, &(0x7f0000000540)) fcntl$addseals(r1, 0x409, 0xb) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(r4, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 1m2.418654572s ago: executing program 76 (id=18782): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x348cf000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) syz_io_uring_setup(0xeb, &(0x7f0000000480)={0x0, 0x7dbf, 0x8, 0x0, 0x1f0}, 0x0, &(0x7f0000000540)) fcntl$addseals(r1, 0x409, 0xb) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(r4, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 15.846222806s ago: executing program 0 (id=19118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x8814) 15.741593716s ago: executing program 0 (id=19119): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="180300004000000000000000ff00000018000000", @ANYRES32, @ANYBLOB="0000000000010000b702000014000000b5020000000000008500000083000000bc0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1003, &(0x7f0000001e40)=""/4099, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1410, 0x4, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000041) socketpair(0x6, 0xdc816db803773663, 0x6, 0x0) 15.594573651s ago: executing program 0 (id=19120): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000440)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty=0xe000, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0xe000, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00000500", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0xcc808, &(0x7f0000000000)=ANY=[], 0x1, 0x1be, &(0x7f00000007c0)="$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") r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r4, 0x0, 0x4ab}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0xfffffe35) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0003110004000000a60c6eec00be004411"], 0xfdef) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x17, r7}) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) getsockname(r6, 0x0, &(0x7f0000000180)) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c00020100000009040000"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x0) 14.744225586s ago: executing program 0 (id=19126): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, 0x0, 0x272) 14.6972962s ago: executing program 0 (id=19128): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 14.618920918s ago: executing program 0 (id=19129): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 14.570008743s ago: executing program 77 (id=19129): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 10.57172786s ago: executing program 3 (id=19165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x8814) 10.529891074s ago: executing program 3 (id=19167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffa}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000040)=""/43) r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\t\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0xf5, &(0x7f00000005c0)=[{}], 0x8, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x99, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) r6 = syz_open_dev$mouse(&(0x7f0000000ac0), 0x631, 0x400080) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b80)='net/igmp\x00') pwritev(r9, &(0x7f0000000100)=[{0x0, 0x72}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) setsockopt$MRT6_TABLE(r9, 0x29, 0xcf, &(0x7f0000000500)=0xffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r9, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfc, &(0x7f0000000640)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x5d, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f00000007c0)=ANY=[@ANYRES16=r8], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x1d, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffe01}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @jmp={0x5, 0x1, 0x6, 0x5, 0x2, 0x100, 0x5462e674fd78351b}, @call={0x85, 0x0, 0x0, 0x44}, @jmp={0x5, 0x1, 0x2, 0x6, 0x0, 0x1, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x4, 0x69, &(0x7f0000000540)=""/105, 0x41100, 0x39, '\x00', r5, @fallback=0x23, r6, 0x8, &(0x7f0000000b00)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x5, 0x7, 0x981c, 0x2}, 0x10, r10, 0xffffffffffffffff, 0x0, &(0x7f0000000bc0)=[r4, 0xffffffffffffffff, r4, r4], 0x0, 0x10, 0x8}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=r10, 0x4) r11 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r11, 0x8008551c, &(0x7f0000000180)={0x1, 0x18, 0x0, 0x1, 0x0, 0x0, 0x0}) 9.46106433s ago: executing program 3 (id=19181): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, 0x0, 0x272) 9.428277653s ago: executing program 3 (id=19182): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 9.170897639s ago: executing program 3 (id=19184): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 9.170741579s ago: executing program 78 (id=19184): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 7.433124811s ago: executing program 7 (id=19208): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0xf5ff, &(0x7f00000004c0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 6.6452361s ago: executing program 7 (id=19210): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) r3 = open(&(0x7f0000000040)='./file2\x00', 0x0, 0xf3) ioctl$BTRFS_IOC_DEFRAG(r3, 0x4c06, 0x3) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000080)={'custom1\x00'}) 6.454119128s ago: executing program 7 (id=19211): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a3100000000090001"], 0xe0}}, 0x0) 6.436917381s ago: executing program 7 (id=19212): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, 0x0, 0x272) 6.410590823s ago: executing program 7 (id=19213): set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0xfffffffc, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x3}, 0x18) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000280)='|', 0x1, 0xc010, 0x0, 0x0) writev(r5, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCFLSH(r6, 0x540b, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r7 = gettid() rt_tgsigqueueinfo(0x0, r7, 0x1d, &(0x7f00000000c0)={0x24, 0x8000006, 0x1}) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000500)={0x0, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200), {0x18}, &(0x7f0000000340)=""/92, 0x5c, &(0x7f00000003c0)=""/240, &(0x7f0000000240)=[0x0], 0x1, {r8}}, 0x58) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc4}) mount$nfs4(&(0x7f00000005c0)='syz1\x00', &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x891052, &(0x7f0000000700)={[{'syz1\x00'}, {'GPL\x00'}, {'kmem_cache_free\x00'}, {'kmem_cache_free\x00'}, {'GPL\x00'}, {'kmem_cache_free\x00'}], [{@smackfsroot}, {@dont_hash}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq}, {@fowner_lt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'GPL\x00'}}, {@euid_gt}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x64, 0x36, 0x62, 0x61, 0x32, 0x31, 0x34], 0x2d, [0x64, 0x33, 0x713332c42d2352c2, 0x31], 0x2d, [0x39, 0x66, 0x34, 0x35], 0x2d, [0x30, 0x61, 0x61, 0x66], 0x2d, [0x39, 0x63, 0x34, 0x64, 0x38, 0x30, 0x37, 0x36]}}}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x1, 0x0, &(0x7f00000004c0)='c', 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50) 6.055034578s ago: executing program 7 (id=19215): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 6.054800228s ago: executing program 79 (id=19215): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 4.317457551s ago: executing program 2 (id=19229): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 4.294516403s ago: executing program 2 (id=19230): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x0, 0xb, 0x303, 0xfffe, 0x0, 0x0, 0x0}) 4.253789467s ago: executing program 2 (id=19231): r0 = syz_io_uring_setup(0x172, &(0x7f0000000780)={0x0, 0xfd8f, 0x10100, 0xfffffffe, 0x2a0}, &(0x7f00000001c0), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000340)=[r0], 0x1) 4.197702303s ago: executing program 2 (id=19232): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r4, 0x0, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000080000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) r7 = syz_open_procfs(0x0, &(0x7f0000000640)='net/ip6_tables_names\x00') close_range(r7, 0xffffffffffffffff, 0x0) faccessat(r5, &(0x7f0000000000)='./file0\x00', 0x5) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1000007, 0x10012, r0, 0x1f33c000) rt_sigtimedwait(&(0x7f00000000c0)={[0x7]}, 0x0, &(0x7f0000000100)={0x77359400}, 0x8) 3.373109405s ago: executing program 2 (id=19247): close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000080400000000000000000000000000000000000006f67b0d7838ccdb44e390caac2b45ba32043e5424a937255df343ccb25befcd7b41909ec2042641d928f6d32"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000080), &(0x7f0000000180)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 3.354754157s ago: executing program 2 (id=19248): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x2001, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000008, 0x13, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x10c, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000640)=ANY=[], 0x200002e6) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) 2.054465415s ago: executing program 8 (id=19259): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000580), 0x2081800, &(0x7f00000004c0)=ANY=[@ANYBLOB='trZ\v\n=f\x00\b\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x640100fe}, 0x10) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="690000000000100600", @ANYRES32=r3, @ANYBLOB="fbffffff00"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0200000000000000030000000300"/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fbffffff000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000008000008500000086000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) 1.984622333s ago: executing program 8 (id=19261): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r2, r0, 0x80000) 1.802917881s ago: executing program 8 (id=19264): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x190, 0x168, 0x10, 0x388, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x3ff, 0x1, 0xfffffffc, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) fcntl$setown(r3, 0x8, r4) socket$packet(0x11, 0x3, 0x300) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300), 0x111, 0x5}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x7ff, 0x0, 0x0, 0x7fff0000}]}) timer_settime(r5, 0x0, &(0x7f0000000400), 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaadf00004000000800450000280000000000069078ac1e0000100000009a000000adaae833f0480d457432216f0d6a98f36fff2af22e014e94b6b3f96913fd33109b57e5b78dd45c3fd9b845f40e16bc5cb9403a85e578bb7326de6ae501ba65282569bb6a397f342cfb8edec82270b9537724f1d4cedf9c29040dcaabc4d361fbe2490889c4b8aca955741c9726ecf9f131ec1df4fdc986", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r9}, 0x10) r10 = gettid() r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r11, 0x545c, 0x200000000000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)=0x0) timer_settime(r12, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) 1.474900553s ago: executing program 4 (id=19267): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)={0x28, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x8, 0x1a, 0x0, 0x1, [@typed={0x4, 0x2d}]}]}, 0x28}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x20000000002}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0xf5, &(0x7f00000005c0)=[{}], 0x8, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x99, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) syz_open_dev$mouse(&(0x7f0000000ac0), 0x631, 0x400080) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b80)='net/igmp\x00') pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0, 0x72}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) 1.369093924s ago: executing program 4 (id=19268): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000019200)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000e3ffffdfff171200000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x20, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000019300)='mounts\x00') pread64(r1, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) fchdir(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f000001b600)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095", @ANYRESDEC, @ANYRES32=r2, @ANYBLOB="566327cdf04ef2d0567226ee6289805630d2", @ANYRES8=r3, @ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f00000008c0), &(0x7f0000000880)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x800000, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb, 0x8031, 0xffffffffffffffff, 0x0) r6 = memfd_create(0x0, 0x4) finit_module(r6, 0x0, 0x1) ustat(0xd, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000019440)={0x11, 0xf, &(0x7f00000193c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r9}, 0x10) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r10, 0x5425, 0x0) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r8, 0x5408, &(0x7f0000000040)={0x0, 0x400000, 0x0, 0x7d, 0x0, "23f557030000010000000090d1beaa82dc1ecf"}) 1.0038022s ago: executing program 4 (id=19271): set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x1d, &(0x7f00000000c0)={0x24, 0x8000006, 0x1}) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000500)={0x0, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200), {0x18}, &(0x7f0000000340)=""/92, 0x5c, &(0x7f00000003c0)=""/240, &(0x7f0000000240)=[0x0], 0x1, {r5}}, 0x58) syz_emit_ethernet(0x76, &(0x7f0000000240)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "6f21ef", 0x8, 0x2b, 0xff, @mcast1, @rand_addr=' \x01\x00', [@fragment={0x33}, @routing={0x3c, 0x0, 0x0, 0x5}]}}}}}}}, 0x0) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r6 = socket$inet6_udp(0xa, 0x2, 0x0) pause() getsockopt$inet6_opts(r6, 0x29, 0x37, 0x0, &(0x7f0000000b00)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x1, 0x0, &(0x7f00000004c0)='c', 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x20075, r8, 0x1000000}, 0x38) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x50) 893.762751ms ago: executing program 8 (id=19274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000"], 0xe0}}, 0x0) 855.720075ms ago: executing program 8 (id=19275): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) unshare(0x2c020400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r1], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x2, 0xd7, 0x8c, 0x1ff, 0x61, @local, @mcast2, 0x3f10235c0e30c815, 0x1, 0xfffffff9, 0x80000003}}) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) getrlimit(0x5, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffeffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='ext4_insert_range\x00', r3, 0x0, 0x3}, 0x18) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0c0100001000130428bd700000000000e0000001000000000000000000000000000000000000000000000000000000014e2100004e2400000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000001000000003c0000000a0101000000000000000000000000000400000000000000060000000000000002000000000000000400000000004000ffffffffffffffff03000000000000007f00000000000000000000000000000000000000000000000800150000000000cc000000000000000000000000000000f600000000000000000000002abd7000000000000200010500000000000000001c00040002004e2100270000fe880000000000000000000000000101"], 0x10c}}, 0x804) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r6, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x80045505, &(0x7f0000000000)=0x1) 763.191674ms ago: executing program 8 (id=19277): io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000001c0)=0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000640)}) quotactl$Q_SYNC(0xffffffff80000102, 0xfbff, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = syz_io_uring_setup(0x5d6b, &(0x7f0000000240)={0x0, 0x7c52, 0x2, 0x3, 0x284, 0x0, r1}, 0x0, &(0x7f00000000c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7fff}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r5) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, 0x0, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_enter(r2, 0x5535, 0x3acd, 0x22, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffeee, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @remote}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r7, 0x5608, 0x3) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) 654.278555ms ago: executing program 9 (id=19282): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') read(r0, &(0x7f0000001180)=""/4096, 0x1000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x55eb, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x168}) r2 = socket$inet(0x2, 0x80001, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000a80)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x42743417}, @TCA_PIE_TUPDATE={0x8, 0x3, 0xfffffff4}]}}]}, 0x40}}, 0x0) 608.042409ms ago: executing program 9 (id=19285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000"], 0xe0}}, 0x0) 575.697722ms ago: executing program 1 (id=19286): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) pipe2$9p(&(0x7f00000000c0), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket(0x10, 0x2, 0x0) flock(r5, 0x5) socket$nl_xfrm(0x10, 0x3, 0x6) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$SG_IO(r3, 0x2285, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0c00000f7fc08fcd111fbdf23ea32dbb0664a5f747d7deda3fa0b7327bd49eb067a0689fff2a41cfbf0e9d85e4400000000", 0x36}], 0x2) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000140)={0x0, 0xb, 0x303, 0xfffe, 0x0, 0x0, 0x0}) 548.578355ms ago: executing program 9 (id=19287): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x640100fe}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 532.758837ms ago: executing program 1 (id=19288): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000180)={[{@nodioread_nolock}, {@resgid}]}, 0x0, 0x545, &(0x7f0000002380)="$eJzs3cFvHFcZAPBvNt7YSTd1Cj0AAhpKIaAo63jTRlUvpBcQqiohKk4cUmNvLSu72ci7EbWJVOcG90pE4gT8B9w4IPXEgRs3uHEpB6QAFihGqtCgmR3bW3vXNvV6t/b+ftJ4Zt6M93tfNm/ezLN2XwAT60pEbETE+Yh4OyJmi/KkWOJ2d8nOe7r5cHFr8+FiEmn61j+S/HhWFj2/k3mmeM2ZiPj+dyJ+lOyP215bv7vQaNRXi/25TvP+XHtt/fpKqSip3Zq/dePVm6/UhpbrC83fPPn2yhs/+N1vv/ThHze++ZOsWpWfXcqP9eYxTN3Uy1HpKZuKiDdOItiYTBX/fzh9stb2mYh4MW//s3EufzcBgLMsTWcjne3dBwDOuuz5vxJJqVqMBVSiVKpWu2N4z8fFUqPV7lybbT24txT5GNblKJfeWWnUbxRjhZejnGT78/n27n7tY/vv129GxHMR8f70hfx4dbHVWBrnjQ8ATLBn9vT//57u9v/b+vzpDgA4C2bGXQEAYOR2+//irwLvjbU6AMAIeP4HgMnzf/T/Ph0IAGeE538AmDz6fwCYPIf2/49GUw8AYCS+9+ab2ZJudb//evvj/teX6u271eaDxepia/V+dbnVWm7Uq4tpetjrNVqt+/Mv7+y219bvNFsP7nXurDQXlut36uWTTAYAOJLnXvjgz1mnv/HahXyJnrkc9NVwtpXGXQFgbM6NuwLA2Pg8D0yuIzzjGwaAM27g93wXAwTJoBMem/wVTqurnzf+D5PqOOP/xg7gdPtk4//fGno9gNHTh8PkStPEnP8AMGGM8QOHzfM98CtCHg+/LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBaVPIlKVXzucA3sp+lajXiUkRcjnLyzkqjfiMino2IP02Xp7P9+XFXGgA4ptLfkmL+r6uzL1X2Hj2f/Gc6X0fEj3/x1s/fXeh0Vuez8n/ulHceZ+UXOqu18+NIAADodXt/Ud5/14p1z4P8082Hi0830zR9b6Q1jCevdycXzeJvFUv3yFRM5euZKEfExX8lxX5Xdr9ybgjxNx5FxOe285+Jd3siVPIxkO7Mp3vjZ7EvDT1+d+kfv/SxfEv5sWxdzv8tPht7Kgcc6oPXu9fJou1lTbxof6W4kq/7t/+Z/Ap1fNn1L2uuW/uuf6Wd69+5ffGTvM1f2dk/uCZPXv79d/cVprPdY48ivjDVL36yEz/pf/0tv3TEHP/yxS+/OOhY+suIq33z356RuplfZuc6zftz7bX16yvNheX6cv1erXZr/taNV2++UpvLx6i7P//QJ8R///7atWcHxc/yvzgg/szB+cfXDkp6Y3fzVx+9/cOvHBD/G1/t//4/f0D8rE/8+kHxeyxcvD1w+u4s/tKA/A95/+PaEeN/+Nf1pSOeCgCMQHtt/e5Co1FfPWQju9c87JwhbZSLqo0i1klupAedU/kUJZjdqw7rBfNBiYjoe052R/3pSPmkNpJP8ls//SjNHSv6r4edzjivSsAo7Db6cdcEAAAAAAAAAAAAAAAYpL22fne6/6e1hrYx7hwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4u/4XAAD//wqRzj0=") bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020640b0000000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r1, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x2, 0x0, &(0x7f00000003c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) rt_sigaction(0xe, &(0x7f00000000c0)={&(0x7f0000000040)="f30f1efc66450f2832c482adbcaf07000000c4e1fd5aa13c9c43713ef2400f1ed3c4c2e93be7f2262e669f8f88a4a2e100430f12957b280000653ed9fa", 0x8000000, 0x0, {[0x8000]}}, 0x0, 0x8, &(0x7f0000000200)) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) 531.673387ms ago: executing program 9 (id=19289): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) pipe2$9p(&(0x7f00000000c0), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x10, 0x2, 0x0) flock(r4, 0x5) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000140)={0x0, 0xb, 0x303, 0xfffe, 0x0, 0x0, 0x0}) 483.371151ms ago: executing program 9 (id=19290): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)={0x28, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x8, 0x1a, 0x0, 0x1, [@typed={0x4, 0x2d}]}]}, 0x28}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x20000000002}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0xf5, &(0x7f00000005c0)=[{}], 0x8, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x99, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) syz_open_dev$mouse(&(0x7f0000000ac0), 0x631, 0x400080) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b80)='net/igmp\x00') pwritev(r4, &(0x7f0000000100)=[{0x0, 0x72}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) 464.523133ms ago: executing program 1 (id=19291): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 455.837174ms ago: executing program 9 (id=19292): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x190, 0x168, 0x10, 0x388, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x3ff, 0x1, 0xfffffffc, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) fcntl$setown(r3, 0x8, r4) socket$packet(0x11, 0x3, 0x300) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000280), r6, r3}}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x7ff, 0x0, 0x0, 0x7fff0000}]}) timer_settime(r5, 0x0, &(0x7f0000000400), 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaadf00004000000800450000280000000000069078ac1e0000100000009a000000adaae833f0480d457432216f0d6a98f36fff2af22e014e94b6b3f96913fd33109b57e5b78dd45c3fd9b845f40e16bc5cb9403a85e578bb7326de6ae501ba65282569bb6a397f342cfb8edec82270b9537724f1d4cedf9c29040dcaabc4d361fbe2490889c4b8aca955741c9726ecf9f131ec1df4fdc986", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r8}, 0x10) r9 = gettid() r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r10, 0x545c, 0x200000000000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)=0x0) timer_settime(r11, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) 414.038759ms ago: executing program 1 (id=19293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x8814) 399.78914ms ago: executing program 1 (id=19294): set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0xfffffffc, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x3}, 0x18) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000280)='|', 0x1, 0xc010, 0x0, 0x0) writev(r5, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCFLSH(r6, 0x540b, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x3, 0x0, 0x0) gettid() syz_clone3(&(0x7f0000000500)={0x0, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200), {0x18}, &(0x7f0000000340)=""/92, 0x5c, &(0x7f00000003c0)=""/240, &(0x7f0000000240)=[0x0], 0x1}, 0x58) 345.488275ms ago: executing program 1 (id=19295): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020600) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) memfd_secret(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x3}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x18) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05d", 0x1b, 0xfffffffffffffffd) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003140100c68f7bec9aff06860900020073796232000000000800410073697700140033006272696467653000"], 0x38}, 0x1, 0x0, 0x0, 0x44805}, 0x50) syz_usbip_server_init(0x6) 82.197781ms ago: executing program 4 (id=19296): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000200000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) 985.85µs ago: executing program 4 (id=19297): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000"], 0xe0}}, 0x0) 0s ago: executing program 4 (id=19298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000c9ded30ec727533d", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0xf0, 0x30, 0xffff, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x6c, 0x2, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1b1, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x26e6}}, @TCA_GACT_PROB={0xfffffffffffffe74, 0x3, {0x1, 0x18a8, 0x6}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xf0}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bind$netlink(r0, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e008104df635e731a5bfcd942f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd4f6cfdfe756bc00d08e36655c00"}) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) kernel console output (not intermixed with test programs): 81 - 0 [ 2102.933994][T20683] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2103.014011][T20683] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2103.145354][T20683] bridge_slave_1: left allmulticast mode [ 2103.151109][T20683] bridge_slave_1: left promiscuous mode [ 2103.156832][T20683] bridge0: port 2(bridge_slave_1) entered disabled state [ 2103.164981][T20683] bridge_slave_0: left allmulticast mode [ 2103.170802][T20683] bridge_slave_0: left promiscuous mode [ 2103.176593][T20683] bridge0: port 1(bridge_slave_0) entered disabled state [ 2103.303863][T20683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2103.322144][T20683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2103.341625][T20683] bond0 (unregistering): Released all slaves [ 2103.381759][T26950] syz_tun: entered allmulticast mode [ 2103.401327][T26949] netlink: 4 bytes leftover after parsing attributes in process `syz.9.18625'. [ 2103.425051][T26949] syz_tun (unregistering): left allmulticast mode [ 2103.473153][T20683] tipc: Disabling bearer [ 2103.478441][T20683] tipc: Left network mode [ 2103.496849][T26938] chnl_net:caif_netlink_parms(): no params data found [ 2103.527235][T20683] hsr_slave_0: left promiscuous mode [ 2103.535823][T20683] hsr_slave_1: left promiscuous mode [ 2103.550603][T20683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2103.558035][T20683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2103.567359][T20683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2103.574859][T20683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2103.585697][T20683] veth1_macvtap: left promiscuous mode [ 2103.592587][T20683] veth0_macvtap: left promiscuous mode [ 2103.598276][T20683] veth1_vlan: left promiscuous mode [ 2103.604255][T20683] veth0_vlan: left promiscuous mode [ 2103.641306][T26960] loop5: detected capacity change from 0 to 512 [ 2103.664655][T26956] netlink: 12 bytes leftover after parsing attributes in process `syz.8.18627'. [ 2103.677771][T26960] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 2103.688292][T26960] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 2103.706001][T26960] EXT4-fs (loop5): mount failed [ 2103.743524][T26960] loop5: detected capacity change from 0 to 2048 [ 2103.750418][T20683] team0 (unregistering): Port device team_slave_1 removed [ 2103.760712][T20683] team0 (unregistering): Port device team_slave_0 removed [ 2103.763493][T26960] Alternate GPT is invalid, using primary GPT. [ 2103.774287][T26960] loop5: p2 p3 p7 [ 2103.845011][T26970] program syz.5.18631 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2104.133554][T26938] bridge0: port 1(bridge_slave_0) entered blocking state [ 2104.140815][T26938] bridge0: port 1(bridge_slave_0) entered disabled state [ 2104.157344][T26938] bridge_slave_0: entered allmulticast mode [ 2104.165616][T26938] bridge_slave_0: entered promiscuous mode [ 2104.178716][T26938] bridge0: port 2(bridge_slave_1) entered blocking state [ 2104.185932][T26938] bridge0: port 2(bridge_slave_1) entered disabled state [ 2104.193998][T26938] bridge_slave_1: entered allmulticast mode [ 2104.201523][T26938] bridge_slave_1: entered promiscuous mode [ 2104.266550][T26938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2104.278868][T26938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2104.305420][T26938] team0: Port device team_slave_0 added [ 2104.315289][T26938] team0: Port device team_slave_1 added [ 2104.341779][T26938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2104.348819][T26938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2104.374951][T26938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2104.430925][T26938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2104.437981][T26938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2104.464103][T26938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2104.694171][T26989] loop0: detected capacity change from 0 to 256 [ 2105.080433][T26938] hsr_slave_0: entered promiscuous mode [ 2105.092997][T26938] hsr_slave_1: entered promiscuous mode [ 2105.105325][T26938] debugfs: 'hsr0' already exists in 'hsr' [ 2105.111160][T26938] Cannot create hsr debugfs directory [ 2105.352922][T26938] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2105.478910][T26938] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2105.512394][T27008] netlink: 28 bytes leftover after parsing attributes in process `syz.9.18640'. [ 2105.524447][T26990] chnl_net:caif_netlink_parms(): no params data found [ 2105.573381][T27016] program syz.8.18643 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2105.577732][T26938] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2105.671530][T26938] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2105.718668][T26990] bridge0: port 1(bridge_slave_0) entered blocking state [ 2105.725856][T26990] bridge0: port 1(bridge_slave_0) entered disabled state [ 2105.733244][T26990] bridge_slave_0: entered allmulticast mode [ 2105.739992][T26990] bridge_slave_0: entered promiscuous mode [ 2105.747070][T26990] bridge0: port 2(bridge_slave_1) entered blocking state [ 2105.754288][T26990] bridge0: port 2(bridge_slave_1) entered disabled state [ 2105.761660][T26990] bridge_slave_1: entered allmulticast mode [ 2105.768345][T26990] bridge_slave_1: entered promiscuous mode [ 2105.791221][T26990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2105.804450][T26990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2105.852135][T26990] team0: Port device team_slave_0 added [ 2105.861448][T20683] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2105.874058][T26990] team0: Port device team_slave_1 added [ 2105.879831][T26938] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2105.888482][T26938] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2105.902949][T26938] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2105.914531][T26938] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2105.935642][T26990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2105.942693][T26990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2105.968727][T26990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2105.993172][T20683] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2106.005142][T27031] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18645'. [ 2106.022163][T26990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2106.029180][T26990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2106.055273][T26990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2106.082323][T20683] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2106.129518][T26990] hsr_slave_0: entered promiscuous mode [ 2106.136554][T26990] hsr_slave_1: entered promiscuous mode [ 2106.142932][T26990] debugfs: 'hsr0' already exists in 'hsr' [ 2106.148722][T26990] Cannot create hsr debugfs directory [ 2106.158728][T20683] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2106.223790][T27021] chnl_net:caif_netlink_parms(): no params data found [ 2106.280645][T20683] bridge_slave_1: left allmulticast mode [ 2106.286347][T20683] bridge_slave_1: left promiscuous mode [ 2106.292189][T20683] bridge0: port 2(bridge_slave_1) entered disabled state [ 2106.315043][T20683] bridge_slave_0: left allmulticast mode [ 2106.320942][T20683] bridge_slave_0: left promiscuous mode [ 2106.326708][T20683] bridge0: port 1(bridge_slave_0) entered disabled state [ 2106.496585][T27045] loop0: detected capacity change from 0 to 256 [ 2106.749155][T20683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2106.769599][T20683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2106.801794][T20683] bond0 (unregistering): Released all slaves [ 2106.869732][T26938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2106.966510][T20683] hsr_slave_0: left promiscuous mode [ 2106.972523][T20683] hsr_slave_1: left promiscuous mode [ 2106.978414][T20683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2106.985917][T20683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2106.993637][T20683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2107.001065][T20683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2107.012129][T20683] veth1_macvtap: left promiscuous mode [ 2107.017760][T20683] veth0_macvtap: left promiscuous mode [ 2107.023342][T20683] veth1_vlan: left promiscuous mode [ 2107.028616][T20683] veth0_vlan: left promiscuous mode [ 2107.089764][T20683] team0 (unregistering): Port device team_slave_1 removed [ 2107.099661][T20683] team0 (unregistering): Port device team_slave_0 removed [ 2107.153247][T26938] 8021q: adding VLAN 0 to HW filter on device team0 [ 2107.170729][T27021] bridge0: port 1(bridge_slave_0) entered blocking state [ 2107.177888][T27021] bridge0: port 1(bridge_slave_0) entered disabled state [ 2107.190523][T27021] bridge_slave_0: entered allmulticast mode [ 2107.197142][T27021] bridge_slave_0: entered promiscuous mode [ 2107.204342][T27021] bridge0: port 2(bridge_slave_1) entered blocking state [ 2107.211508][T27021] bridge0: port 2(bridge_slave_1) entered disabled state [ 2107.219284][T27021] bridge_slave_1: entered allmulticast mode [ 2107.225837][T27021] bridge_slave_1: entered promiscuous mode [ 2107.226591][T27054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18650'. [ 2107.242916][T10825] bridge0: port 1(bridge_slave_0) entered blocking state [ 2107.250107][T10825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2107.259056][T10825] bridge0: port 2(bridge_slave_1) entered blocking state [ 2107.266212][T10825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2107.292942][T27021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2107.307147][T27021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2107.337435][T27021] team0: Port device team_slave_0 added [ 2107.355058][T27021] team0: Port device team_slave_1 added [ 2107.355232][T27057] SELinux: failed to load policy [ 2107.383437][T27021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2107.390618][T27021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2107.416776][T27021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2107.428395][T27021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2107.435376][T27021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2107.461571][T27021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2107.491911][T27021] hsr_slave_0: entered promiscuous mode [ 2107.498138][T27021] hsr_slave_1: entered promiscuous mode [ 2107.504108][T27021] debugfs: 'hsr0' already exists in 'hsr' [ 2107.509842][T27021] Cannot create hsr debugfs directory [ 2107.530155][T26938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2107.568819][T26990] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2107.596644][T26990] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2107.620736][T26990] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2107.640693][T26990] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2107.719966][T26990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2107.737637][T26990] 8021q: adding VLAN 0 to HW filter on device team0 [ 2107.753788][T10825] bridge0: port 1(bridge_slave_0) entered blocking state [ 2107.761080][T10825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2107.770153][T10825] bridge0: port 2(bridge_slave_1) entered blocking state [ 2107.777265][T10825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2107.801386][T26938] veth0_vlan: entered promiscuous mode [ 2107.825868][T26938] veth1_vlan: entered promiscuous mode [ 2107.836395][T26990] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2107.865205][T26938] veth0_macvtap: entered promiscuous mode [ 2107.883244][T26938] veth1_macvtap: entered promiscuous mode [ 2107.900056][T20683] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2107.918599][T26938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2107.932099][T26938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2107.946878][T10822] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2107.967127][T10822] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2107.981523][T20683] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2107.998009][T26990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2108.007638][T10822] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2108.034453][T10822] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2108.040330][T27102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18624'. [ 2108.056263][T20683] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2108.084353][T27021] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2108.103020][T27021] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2108.120662][T20683] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2108.137240][T27021] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2108.153986][T27021] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2108.744065][T20683] bridge_slave_1: left allmulticast mode [ 2108.750524][T20683] bridge_slave_1: left promiscuous mode [ 2108.756227][T20683] bridge0: port 2(bridge_slave_1) entered disabled state [ 2108.765156][T20683] bridge_slave_0: left allmulticast mode [ 2108.770910][T20683] bridge_slave_0: left promiscuous mode [ 2108.776661][T20683] bridge0: port 1(bridge_slave_0) entered disabled state [ 2108.972965][T20683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2108.998005][T20683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2109.065255][T20683] bond0 (unregistering): Released all slaves [ 2109.151437][T26990] veth0_vlan: entered promiscuous mode [ 2109.159152][T26990] veth1_vlan: entered promiscuous mode [ 2109.172610][T27089] chnl_net:caif_netlink_parms(): no params data found [ 2109.201433][T27021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2109.210785][T20683] hsr_slave_0: left promiscuous mode [ 2109.216646][T20683] hsr_slave_1: left promiscuous mode [ 2109.230969][T20683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2109.238503][T20683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2109.247940][T20683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2109.255457][T20683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2109.266297][T20683] veth1_macvtap: left promiscuous mode [ 2109.272526][T20683] veth0_macvtap: left promiscuous mode [ 2109.278153][T20683] veth1_vlan: left promiscuous mode [ 2109.284138][T20683] veth0_vlan: left promiscuous mode [ 2109.355749][T20683] team0 (unregistering): Port device team_slave_1 removed [ 2109.367333][T20683] team0 (unregistering): Port device team_slave_0 removed [ 2109.419567][T26990] veth0_macvtap: entered promiscuous mode [ 2109.453332][T26990] veth1_macvtap: entered promiscuous mode [ 2109.468120][T26990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2109.483978][T26990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2109.495116][T27021] 8021q: adding VLAN 0 to HW filter on device team0 [ 2109.530808][T10819] bridge0: port 1(bridge_slave_0) entered blocking state [ 2109.538107][T10819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2109.551678][T27089] bridge0: port 1(bridge_slave_0) entered blocking state [ 2109.558853][T27089] bridge0: port 1(bridge_slave_0) entered disabled state [ 2109.566816][T27089] bridge_slave_0: entered allmulticast mode [ 2109.573820][T27089] bridge_slave_0: entered promiscuous mode [ 2109.580990][T10825] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2109.589895][T27089] bridge0: port 2(bridge_slave_1) entered blocking state [ 2109.597024][T27089] bridge0: port 2(bridge_slave_1) entered disabled state [ 2109.605074][T27089] bridge_slave_1: entered allmulticast mode [ 2109.611615][T27089] bridge_slave_1: entered promiscuous mode [ 2109.619107][T10819] bridge0: port 2(bridge_slave_1) entered blocking state [ 2109.626201][T10819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2109.638240][T10825] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2109.660725][T10825] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2109.688665][T10825] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2109.702598][T27089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2109.718762][T27021] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2109.744605][T27089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2109.790486][T27089] team0: Port device team_slave_0 added [ 2109.797716][T27089] team0: Port device team_slave_1 added [ 2109.823445][T27089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2109.830471][T27089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2109.856668][T27089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2109.921923][T27089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2109.928946][T27089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2109.955105][T27089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2110.362151][T27021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2110.436861][T27089] hsr_slave_0: entered promiscuous mode [ 2110.443845][T27089] hsr_slave_1: entered promiscuous mode [ 2110.449748][T27089] debugfs: 'hsr0' already exists in 'hsr' [ 2110.455696][T27089] Cannot create hsr debugfs directory [ 2110.536778][T27089] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2110.559041][T27021] veth0_vlan: entered promiscuous mode [ 2110.570238][T27021] veth1_vlan: entered promiscuous mode [ 2110.588350][T27021] veth0_macvtap: entered promiscuous mode [ 2110.599884][T27021] veth1_macvtap: entered promiscuous mode [ 2110.613492][T27021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2110.626530][T27021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2110.638055][T20687] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2110.652933][T20687] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2110.666165][T27089] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2110.682997][T20687] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2110.707196][T27158] xt_hashlimit: max too large, truncated to 1048576 [ 2110.724295][T20687] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2110.738004][T27089] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2110.748684][T27158] No such timeout policy "syz1" [ 2110.841777][T27089] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2110.939421][T27089] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2110.956151][T27089] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2111.095424][T27089] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2111.110532][T27089] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2111.154008][T27089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2111.170013][T27089] 8021q: adding VLAN 0 to HW filter on device team0 [ 2111.208422][T10822] bridge0: port 1(bridge_slave_0) entered blocking state [ 2111.215821][T10822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2111.226196][T10822] bridge0: port 2(bridge_slave_1) entered blocking state [ 2111.233310][T10822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2111.253712][T27089] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2111.264278][T27089] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2111.290238][T10822] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2111.567407][T27089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2111.583798][T10822] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2111.753718][T10822] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2111.853965][T10822] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2112.279339][T27176] chnl_net:caif_netlink_parms(): no params data found [ 2112.357656][T27176] bridge0: port 1(bridge_slave_0) entered blocking state [ 2112.365057][T27176] bridge0: port 1(bridge_slave_0) entered disabled state [ 2112.372398][T27176] bridge_slave_0: entered allmulticast mode [ 2112.378995][T27176] bridge_slave_0: entered promiscuous mode [ 2112.389898][T27176] bridge0: port 2(bridge_slave_1) entered blocking state [ 2112.397203][T27176] bridge0: port 2(bridge_slave_1) entered disabled state [ 2112.445714][T27176] bridge_slave_1: entered allmulticast mode [ 2112.482090][T27176] bridge_slave_1: entered promiscuous mode [ 2112.731239][T10822] bridge_slave_1: left allmulticast mode [ 2112.736956][T10822] bridge_slave_1: left promiscuous mode [ 2112.742774][T10822] bridge0: port 2(bridge_slave_1) entered disabled state [ 2112.794624][T10822] bridge_slave_0: left allmulticast mode [ 2112.800466][T10822] bridge_slave_0: left promiscuous mode [ 2112.806182][T10822] bridge0: port 1(bridge_slave_0) entered disabled state [ 2113.065303][T10822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2113.098479][T10822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2113.129664][T10822] bond0 (unregistering): Released all slaves [ 2113.208775][T27176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2113.270542][T10822] hsr_slave_0: left promiscuous mode [ 2113.276806][T10822] hsr_slave_1: left promiscuous mode [ 2113.296675][T10822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2113.304306][T10822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2113.335911][T10822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2113.343379][T10822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2113.376349][T10822] veth1_macvtap: left promiscuous mode [ 2113.403047][T10822] veth0_macvtap: left promiscuous mode [ 2113.409635][T10822] veth1_vlan: left promiscuous mode [ 2113.428844][T10822] veth0_vlan: left promiscuous mode [ 2113.595420][T10822] team0 (unregistering): Port device team_slave_1 removed [ 2113.611901][T10822] team0 (unregistering): Port device team_slave_0 removed [ 2113.660143][T27176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2113.705589][T27089] veth0_vlan: entered promiscuous mode [ 2113.733075][T27176] team0: Port device team_slave_0 added [ 2113.760134][T27176] team0: Port device team_slave_1 added [ 2113.786738][T27089] veth1_vlan: entered promiscuous mode [ 2113.825016][T27176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2113.832096][T27176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2113.858169][T27176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2113.872050][T27176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2113.879119][T27176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2113.905091][T27176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2113.955260][T27089] veth0_macvtap: entered promiscuous mode [ 2113.967113][T27089] veth1_macvtap: entered promiscuous mode [ 2114.004385][T27176] hsr_slave_0: entered promiscuous mode [ 2114.015218][T27176] hsr_slave_1: entered promiscuous mode [ 2114.021756][T27176] debugfs: 'hsr0' already exists in 'hsr' [ 2114.027561][T27176] Cannot create hsr debugfs directory [ 2114.039968][T27089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2114.058325][T27234] netlink: 28 bytes leftover after parsing attributes in process `syz.7.18674'. [ 2114.058622][T27089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2114.067461][T27234] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18674'. [ 2114.147720][ T377] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2114.156964][ T377] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2114.167208][T27239] xt_hashlimit: max too large, truncated to 1048576 [ 2114.188988][T27239] No such timeout policy "syz1" [ 2114.653567][T10822] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2114.663652][T10822] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.039458][T27254] xt_hashlimit: max too large, truncated to 1048576 [ 2115.069695][T27176] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2115.069989][T27254] No such timeout policy "syz1" [ 2115.092509][T27176] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2115.099677][T27255] 9pnet_fd: Insufficient options for proto=fd [ 2115.133868][T27176] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2115.162045][T27176] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2115.264525][T27176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2115.278260][T27176] 8021q: adding VLAN 0 to HW filter on device team0 [ 2115.287780][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 2115.295057][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2115.316972][T27176] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2115.327400][T27176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2115.341365][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 2115.348483][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2115.417685][T27176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2115.497886][T27176] veth0_vlan: entered promiscuous mode [ 2115.506703][T27176] veth1_vlan: entered promiscuous mode [ 2115.525970][T27176] veth0_macvtap: entered promiscuous mode [ 2115.533778][T27176] veth1_macvtap: entered promiscuous mode [ 2115.545570][T27176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2115.558735][T27176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2115.607924][T18353] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.639105][T18353] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.668469][T18353] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.702401][T18353] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.726955][T27280] xt_hashlimit: max too large, truncated to 1048576 [ 2115.733885][T27280] No such timeout policy "syz1" [ 2115.740079][T27280] 9pnet_fd: Insufficient options for proto=fd [ 2115.783063][T27282] serio: Serial port ptm0 [ 2115.842789][T27285] loop1: detected capacity change from 0 to 512 [ 2115.873279][T27285] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 2115.893366][T27285] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 2115.899375][T27290] serio: Serial port ptm1 [ 2115.918773][T27285] EXT4-fs (loop1): mount failed [ 2115.945932][T27285] loop1: detected capacity change from 0 to 2048 [ 2115.997951][T27285] Alternate GPT is invalid, using primary GPT. [ 2116.004490][T27285] loop1: p2 p3 p7 [ 2116.626125][T27312] serio: Serial port ptm0 [ 2116.781165][T27317] loop6: detected capacity change from 0 to 1024 [ 2116.802521][T27317] EXT4-fs: test_dummy_encryption option not supported [ 2118.882779][T27344] xt_hashlimit: max too large, truncated to 1048576 [ 2118.962434][T27344] No such timeout policy "syz1" [ 2119.624503][T27352] serio: Serial port ptm0 [ 2119.672370][T27357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18702'. [ 2119.742704][T27358] loop2: detected capacity change from 0 to 512 [ 2119.797553][T27358] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 2119.818028][T27358] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 2119.897327][T27358] EXT4-fs (loop2): mount failed [ 2119.944681][T27352] loop2: detected capacity change from 0 to 2048 [ 2119.995384][T27352] Alternate GPT is invalid, using primary GPT. [ 2120.001906][T27352] loop2: p2 p3 p7 [ 2121.878324][T27398] SELinux: failed to load policy [ 2122.627741][T27412] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2122.824065][T27418] SELinux: failed to load policy [ 2123.152540][T27422] chnl_net:caif_netlink_parms(): no params data found [ 2123.220182][T27422] bridge0: port 1(bridge_slave_0) entered blocking state [ 2123.227392][T27422] bridge0: port 1(bridge_slave_0) entered disabled state [ 2123.270427][T27422] bridge_slave_0: entered allmulticast mode [ 2123.284749][T27422] bridge_slave_0: entered promiscuous mode [ 2123.294092][T27422] bridge0: port 2(bridge_slave_1) entered blocking state [ 2123.301455][T27422] bridge0: port 2(bridge_slave_1) entered disabled state [ 2123.310559][T27422] bridge_slave_1: entered allmulticast mode [ 2123.326113][T27422] bridge_slave_1: entered promiscuous mode [ 2123.344137][T10812] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2123.399447][T27422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2123.413186][T10812] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2123.429939][T27422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2123.456580][T27422] team0: Port device team_slave_0 added [ 2123.469940][T10812] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2123.486692][T27422] team0: Port device team_slave_1 added [ 2123.508651][T27422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2123.515705][T27422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2123.541737][T27422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2123.553571][T27422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2123.560670][T27422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2123.586677][T27422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2123.613625][T10812] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2123.639113][T27422] hsr_slave_0: entered promiscuous mode [ 2123.645874][T27422] hsr_slave_1: entered promiscuous mode [ 2123.653319][T27422] debugfs: 'hsr0' already exists in 'hsr' [ 2123.659172][T27422] Cannot create hsr debugfs directory [ 2123.768972][T10812] bridge_slave_1: left allmulticast mode [ 2123.774704][T10812] bridge_slave_1: left promiscuous mode [ 2123.780361][T10812] bridge0: port 2(bridge_slave_1) entered disabled state [ 2123.807464][T10812] bridge_slave_0: left allmulticast mode [ 2123.813321][T10812] bridge_slave_0: left promiscuous mode [ 2123.819064][T10812] bridge0: port 1(bridge_slave_0) entered disabled state [ 2123.991191][T10812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2124.009982][T10812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2124.019867][T10812] bond0 (unregistering): Released all slaves [ 2124.107567][T10812] hsr_slave_0: left promiscuous mode [ 2124.120962][T10812] hsr_slave_1: left promiscuous mode [ 2124.127124][T10812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2124.134560][T10812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2124.538934][T10812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2124.546446][T10812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2124.557704][T10812] veth1_macvtap: left promiscuous mode [ 2124.563281][T10812] veth0_macvtap: left promiscuous mode [ 2124.568880][T10812] veth1_vlan: left promiscuous mode [ 2124.574347][T10812] veth0_vlan: left promiscuous mode [ 2124.645824][T10812] team0 (unregistering): Port device team_slave_1 removed [ 2124.656042][T10812] team0 (unregistering): Port device team_slave_0 removed [ 2124.779026][T27445] chnl_net:caif_netlink_parms(): no params data found [ 2124.901927][T27445] bridge0: port 1(bridge_slave_0) entered blocking state [ 2124.909311][T27445] bridge0: port 1(bridge_slave_0) entered disabled state [ 2124.916952][T27445] bridge_slave_0: entered allmulticast mode [ 2124.923511][T27445] bridge_slave_0: entered promiscuous mode [ 2124.966533][T27445] bridge0: port 2(bridge_slave_1) entered blocking state [ 2124.973721][T27445] bridge0: port 2(bridge_slave_1) entered disabled state [ 2124.983692][T27445] bridge_slave_1: entered allmulticast mode [ 2124.990800][T27445] bridge_slave_1: entered promiscuous mode [ 2124.997677][T27491] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2125.005486][T27492] netlink: 'syz.0.18736': attribute type 3 has an invalid length. [ 2125.013513][T27492] netlink: 'syz.0.18736': attribute type 3 has an invalid length. [ 2125.021394][T27492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18736'. [ 2125.068944][T27492] usb usb1: check_ctrlrecip: process 27492 (syz.0.18736) requesting ep 01 but needs 81 [ 2125.079559][T27492] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 2125.139714][T27445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2125.179327][T27445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2125.193720][T27461] chnl_net:caif_netlink_parms(): no params data found [ 2125.368275][T27445] team0: Port device team_slave_0 added [ 2125.391458][T27422] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2125.406551][T27445] team0: Port device team_slave_1 added [ 2125.412567][T27422] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2125.421696][T27461] bridge0: port 1(bridge_slave_0) entered blocking state [ 2125.428803][T27461] bridge0: port 1(bridge_slave_0) entered disabled state [ 2125.437186][T27461] bridge_slave_0: entered allmulticast mode [ 2125.446037][T27461] bridge_slave_0: entered promiscuous mode [ 2125.454576][T27461] bridge0: port 2(bridge_slave_1) entered blocking state [ 2125.461744][T27461] bridge0: port 2(bridge_slave_1) entered disabled state [ 2125.469372][T27461] bridge_slave_1: entered allmulticast mode [ 2125.476250][T27461] bridge_slave_1: entered promiscuous mode [ 2125.490738][T27422] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2125.500329][T27422] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2125.538681][T27445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2125.545703][T27445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2125.571774][T27445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2125.583282][T27445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2125.590237][T27445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2125.616302][T27445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2125.629804][T27461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2125.644926][T27461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2125.718349][T27445] hsr_slave_0: entered promiscuous mode [ 2125.735631][T27445] hsr_slave_1: entered promiscuous mode [ 2125.742014][T27445] debugfs: 'hsr0' already exists in 'hsr' [ 2125.747895][T27445] Cannot create hsr debugfs directory [ 2125.757313][T27461] team0: Port device team_slave_0 added [ 2125.778612][T27461] team0: Port device team_slave_1 added [ 2125.795192][T27513] SELinux: failed to load policy [ 2125.847130][T27461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2125.854238][T27461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2125.880367][T27461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2125.918487][T27461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2125.925521][T27461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2125.951724][T27461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2125.985974][T27422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2126.033732][T27422] 8021q: adding VLAN 0 to HW filter on device team0 [ 2126.044343][T27445] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2126.068846][T10822] bridge0: port 1(bridge_slave_0) entered blocking state [ 2126.075983][T10822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2126.090608][T27523] xt_hashlimit: max too large, truncated to 1048576 [ 2126.099883][T10822] bridge0: port 2(bridge_slave_1) entered blocking state [ 2126.107040][T10822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2126.116890][T27523] No such timeout policy "syz1" [ 2126.136299][T27523] 9pnet_fd: Insufficient options for proto=fd [ 2126.143922][T27461] hsr_slave_0: entered promiscuous mode [ 2126.151405][T27461] hsr_slave_1: entered promiscuous mode [ 2126.157504][T27461] debugfs: 'hsr0' already exists in 'hsr' [ 2126.163331][T27461] Cannot create hsr debugfs directory [ 2126.171697][T27445] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2126.200043][T27422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2126.246911][T27445] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2126.306408][T27445] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2126.333637][T27422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2126.404919][T27422] veth0_vlan: entered promiscuous mode [ 2126.416557][T27422] veth1_vlan: entered promiscuous mode [ 2126.445751][T27422] veth0_macvtap: entered promiscuous mode [ 2126.455615][T27445] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2126.465609][T27422] veth1_macvtap: entered promiscuous mode [ 2126.472404][T27445] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2126.481408][T27445] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2126.495172][T27422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2126.505146][T27445] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2126.519454][T27422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2126.535808][T10822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2126.553955][T10822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2126.563537][T20698] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2126.599332][T20698] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2126.629070][T27445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2126.690330][T27461] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2126.710092][T27461] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2126.728661][T27461] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2126.777495][T27445] 8021q: adding VLAN 0 to HW filter on device team0 [ 2126.787889][T10822] bridge0: port 1(bridge_slave_0) entered blocking state [ 2126.795038][T10822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2126.803697][T27461] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2126.817930][T10822] bridge0: port 2(bridge_slave_1) entered blocking state [ 2126.825189][T10822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2127.558562][T27461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2127.593896][T27561] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2127.627523][T27461] 8021q: adding VLAN 0 to HW filter on device team0 [ 2127.801752][T27445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2127.819524][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 2127.826757][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2127.878517][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 2127.885635][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2128.145709][T27461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2128.215563][T27445] veth0_vlan: entered promiscuous mode [ 2128.253599][T27445] veth1_vlan: entered promiscuous mode [ 2128.303576][T27445] veth0_macvtap: entered promiscuous mode [ 2128.331106][T27445] veth1_macvtap: entered promiscuous mode [ 2128.393048][T27445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2128.432336][T27445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2128.474025][T20698] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2128.527137][T20698] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2128.581897][T20698] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2128.596126][T27597] serio: Serial port ptm0 [ 2128.617552][T20698] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2128.643961][T27461] veth0_vlan: entered promiscuous mode [ 2128.653451][T27603] loop0: detected capacity change from 0 to 512 [ 2128.672445][T27461] veth1_vlan: entered promiscuous mode [ 2128.732494][T27461] veth0_macvtap: entered promiscuous mode [ 2128.741412][T27603] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 2128.758033][T27461] veth1_macvtap: entered promiscuous mode [ 2128.770516][T27603] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 2128.786209][T27461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2128.812704][T27461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2128.830087][T27603] EXT4-fs (loop0): mount failed [ 2128.838835][T20698] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2128.881832][T20687] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2128.907173][T27597] loop0: detected capacity change from 0 to 2048 [ 2128.916660][ T377] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2128.926286][ T377] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2128.972296][T27597] Alternate GPT is invalid, using primary GPT. [ 2128.978942][T27597] loop0: p2 p3 p7 [ 2130.145143][T27645] serio: Serial port ptm0 [ 2130.207319][T27651] loop0: detected capacity change from 0 to 512 [ 2130.427754][T27653] loop5: detected capacity change from 0 to 256 [ 2130.808070][T27651] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 2130.820657][T27651] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 2130.838099][T27651] EXT4-fs (loop0): mount failed [ 2130.884150][T27645] loop0: detected capacity change from 0 to 2048 [ 2130.962998][T27645] Alternate GPT is invalid, using primary GPT. [ 2130.969732][T27645] loop0: p2 p3 p7 [ 2131.564909][T27679] loop0: detected capacity change from 0 to 256 [ 2132.294295][T27684] serio: Serial port ptm0 [ 2133.786327][T27687] kthread_run failed with err -4 [ 2133.911151][T27699] xt_hashlimit: max too large, truncated to 1048576 [ 2133.940490][T27699] No such timeout policy "syz1" [ 2133.980841][T27699] 9pnet_fd: Insufficient options for proto=fd [ 2134.182145][T16274] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2134.243775][T16274] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2134.306204][T16274] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2134.381607][T16274] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2134.537733][T16274] bridge_slave_1: left allmulticast mode [ 2134.543499][T16274] bridge_slave_1: left promiscuous mode [ 2134.549167][T16274] bridge0: port 2(bridge_slave_1) entered disabled state [ 2134.588368][T16274] bridge_slave_0: left allmulticast mode [ 2134.594348][T16274] bridge_slave_0: left promiscuous mode [ 2134.600111][T16274] bridge0: port 1(bridge_slave_0) entered disabled state [ 2134.704644][T16274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2134.715256][T16274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2134.725904][T16274] bond0 (unregistering): Released all slaves [ 2134.820000][T16274] hsr_slave_0: left promiscuous mode [ 2134.848856][T16274] hsr_slave_1: left promiscuous mode [ 2134.875039][T16274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2134.882673][T16274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2134.918046][T16274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2134.925623][T16274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2134.932625][T27729] xt_hashlimit: max too large, truncated to 1048576 [ 2134.953399][T16274] veth1_macvtap: left promiscuous mode [ 2134.958988][T16274] veth0_macvtap: left promiscuous mode [ 2134.972903][T27729] No such timeout policy "syz1" [ 2134.977957][T16274] veth1_vlan: left promiscuous mode [ 2134.987281][T16274] veth0_vlan: left promiscuous mode [ 2135.043729][T27729] 9pnet_fd: Insufficient options for proto=fd [ 2135.155874][T16274] team0 (unregistering): Port device team_slave_1 removed [ 2135.191682][T16274] team0 (unregistering): Port device team_slave_0 removed [ 2135.448684][T27714] chnl_net:caif_netlink_parms(): no params data found [ 2135.701322][T27714] bridge0: port 1(bridge_slave_0) entered blocking state [ 2135.708587][T27714] bridge0: port 1(bridge_slave_0) entered disabled state [ 2135.716050][T27714] bridge_slave_0: entered allmulticast mode [ 2135.727288][T27714] bridge_slave_0: entered promiscuous mode [ 2135.770967][T27714] bridge0: port 2(bridge_slave_1) entered blocking state [ 2135.778063][T27714] bridge0: port 2(bridge_slave_1) entered disabled state [ 2135.794057][T27714] bridge_slave_1: entered allmulticast mode [ 2135.802628][T27714] bridge_slave_1: entered promiscuous mode [ 2135.828188][T27714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2135.838952][T27714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2135.992192][T27714] team0: Port device team_slave_0 added [ 2135.999203][T27714] team0: Port device team_slave_1 added [ 2136.160745][T27714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2136.167829][T27714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2136.193911][T27714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2136.290772][T27714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2136.297793][T27714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2136.323818][T27714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2136.413273][T27714] hsr_slave_0: entered promiscuous mode [ 2136.419416][T27714] hsr_slave_1: entered promiscuous mode [ 2136.430866][T27714] debugfs: 'hsr0' already exists in 'hsr' [ 2136.436643][T27714] Cannot create hsr debugfs directory [ 2136.582752][T27763] loop0: detected capacity change from 0 to 256 [ 2137.354115][T27771] xt_hashlimit: max too large, truncated to 1048576 [ 2137.370670][T27771] No such timeout policy "syz1" [ 2137.474749][T27714] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2137.545616][T27714] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2137.573305][T27714] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2137.644371][T27714] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2138.805236][T27797] xt_hashlimit: max too large, truncated to 1048576 [ 2138.830515][T27797] No such timeout policy "syz1" [ 2138.857781][T27797] 9pnet_fd: Insufficient options for proto=fd [ 2138.892275][T27714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2138.904353][T27714] 8021q: adding VLAN 0 to HW filter on device team0 [ 2138.924331][T27714] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2138.934746][T27714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2138.955011][T20668] bridge0: port 1(bridge_slave_0) entered blocking state [ 2138.962141][T20668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2138.991647][T20668] bridge0: port 2(bridge_slave_1) entered blocking state [ 2138.998843][T20668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2139.163312][T27714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2140.065768][T27714] veth0_vlan: entered promiscuous mode [ 2140.089201][T27714] veth1_vlan: entered promiscuous mode [ 2140.133025][T27714] veth0_macvtap: entered promiscuous mode [ 2140.215860][T27714] veth1_macvtap: entered promiscuous mode [ 2140.381742][T27714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2140.412723][T27714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2140.498771][T20698] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2140.793462][T20698] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2140.894283][T20698] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2140.921828][T20698] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2144.464576][T27867] xt_hashlimit: max too large, truncated to 1048576 [ 2144.471502][T27867] No such timeout policy "syz1" [ 2144.477654][T27867] 9pnet_fd: Insufficient options for proto=fd [ 2144.971980][T27877] loop0: detected capacity change from 0 to 256 [ 2146.145419][T27891] netlink: 'syz.3.18819': attribute type 3 has an invalid length. [ 2146.179434][T27891] netlink: 'syz.3.18819': attribute type 3 has an invalid length. [ 2146.238315][T27891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18819'. [ 2146.294070][T27891] usb usb1: check_ctrlrecip: process 27891 (syz.3.18819) requesting ep 01 but needs 81 [ 2146.340770][T27891] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 2146.438996][T27895] serio: Serial port ptm0 [ 2146.796462][T27904] xt_hashlimit: max too large, truncated to 1048576 [ 2146.840524][T27904] No such timeout policy "syz1" [ 2146.871988][T27904] 9pnet_fd: Insufficient options for proto=fd [ 2146.931146][T27907] serio: Serial port ptm0 [ 2146.989758][T27911] loop0: detected capacity change from 0 to 512 [ 2147.040639][T27911] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 2147.079255][T27911] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 2147.102711][T27911] EXT4-fs (loop0): mount failed [ 2147.133287][T27907] loop0: detected capacity change from 0 to 2048 [ 2147.188779][T27907] Alternate GPT is invalid, using primary GPT. [ 2147.195341][T27907] loop0: p2 p3 p7 [ 2149.223922][T27959] netlink: 'syz.0.18838': attribute type 3 has an invalid length. [ 2149.319113][T27963] usb usb1: check_ctrlrecip: process 27963 (syz.0.18838) requesting ep 01 but needs 81 [ 2149.332521][T27959] netlink: 'syz.0.18838': attribute type 3 has an invalid length. [ 2149.421950][T27959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18838'. [ 2149.432350][T27963] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 2152.637770][T28027] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 2152.644391][T28027] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2152.652018][T28027] vhci_hcd vhci_hcd.0: Device attached [ 2152.720927][T28030] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(7) [ 2152.727506][T28030] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2152.735241][T28030] vhci_hcd vhci_hcd.0: Device attached [ 2152.834052][T28032] vhci_hcd: connection closed [ 2152.834392][T20668] vhci_hcd: stop threads [ 2152.843432][T20668] vhci_hcd: release socket [ 2152.847910][T20668] vhci_hcd: disconnect device [ 2152.855461][T28028] vhci_hcd: connection closed [ 2152.855830][T20668] vhci_hcd: stop threads [ 2152.864923][T20668] vhci_hcd: release socket [ 2152.869428][T20668] vhci_hcd: disconnect device [ 2154.286089][T28097] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18886'. [ 2155.341649][T28128] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=28128 comm=syz.8.18897 [ 2156.229393][T28151] usb usb1: check_ctrlrecip: process 28151 (syz.3.18905) requesting ep 01 but needs 81 [ 2156.353606][T28151] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 2157.402884][T28180] program syz.3.18917 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2157.486862][T28174] netlink: 'syz.0.18914': attribute type 3 has an invalid length. [ 2157.494804][T28174] netlink: 'syz.0.18914': attribute type 3 has an invalid length. [ 2157.502759][T28174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18914'. [ 2157.523574][T28182] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 2157.530140][T28182] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2157.537762][T28182] vhci_hcd vhci_hcd.0: Device attached [ 2157.561076][T28182] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(5) [ 2157.567638][T28182] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2157.575253][T28182] vhci_hcd vhci_hcd.0: Device attached [ 2157.583067][T28182] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(7) [ 2157.589665][T28182] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2157.597483][T28182] vhci_hcd vhci_hcd.0: Device attached [ 2157.604294][T28182] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(9) [ 2157.610840][T28182] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2157.618480][T28182] vhci_hcd vhci_hcd.0: Device attached [ 2157.656585][T28174] usb usb1: check_ctrlrecip: process 28174 (syz.0.18914) requesting ep 01 but needs 81 [ 2157.666625][T28174] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 2158.214117][T28204] netlink: 'syz.3.18919': attribute type 3 has an invalid length. [ 2158.222156][T28204] netlink: 'syz.3.18919': attribute type 3 has an invalid length. [ 2158.230091][T28204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18919'. [ 2158.377522][T28207] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=28207 comm=syz.9.18923 [ 2158.591659][T28182] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(11) [ 2158.593751][T28210] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 2158.598441][T28182] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2158.605080][T28210] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2158.612612][T28182] vhci_hcd vhci_hcd.0: Device attached [ 2158.620082][T28210] vhci_hcd vhci_hcd.0: Device attached [ 2158.726253][T28210] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(6) [ 2158.732819][T28210] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2158.740498][T28210] vhci_hcd vhci_hcd.0: Device attached [ 2158.748046][T28191] vhci_hcd: connection closed [ 2158.748347][T10824] vhci_hcd: stop threads [ 2158.757452][T10824] vhci_hcd: release socket [ 2158.761917][T10824] vhci_hcd: disconnect device [ 2158.772072][T28209] vhci_hcd: connection closed [ 2158.772195][T28187] vhci_hcd: connection closed [ 2158.777259][T10824] vhci_hcd: stop threads [ 2158.784534][ T8761] usb 15-1: new low-speed USB device number 3 using vhci_hcd [ 2158.786245][T10824] vhci_hcd: release socket [ 2158.786264][T10824] vhci_hcd: disconnect device [ 2158.800372][T28189] vhci_hcd: connection closed [ 2158.803442][T28183] vhci_hcd: connection closed [ 2158.812108][T28210] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(8) [ 2158.819315][T28184] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 2158.823431][T28210] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2158.823514][T28210] vhci_hcd vhci_hcd.0: Device attached [ 2158.829724][T10824] vhci_hcd: stop threads [ 2158.846810][T10824] vhci_hcd: release socket [ 2158.851285][T10824] vhci_hcd: disconnect device [ 2158.859193][T10824] vhci_hcd: stop threads [ 2158.863555][T10824] vhci_hcd: release socket [ 2158.868015][T10824] vhci_hcd: disconnect device [ 2158.873352][T10824] vhci_hcd: stop threads [ 2158.877649][T10824] vhci_hcd: release socket [ 2158.882169][T10824] vhci_hcd: disconnect device [ 2158.899202][T20467] usb 17-1: new low-speed USB device number 4 using vhci_hcd [ 2159.017197][T28210] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(10) [ 2159.023935][T28210] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2159.031654][T28210] vhci_hcd vhci_hcd.0: Device attached [ 2159.041593][T28225] vhci_hcd: connection closed [ 2159.041788][T10824] vhci_hcd: stop threads [ 2159.050914][T10824] vhci_hcd: release socket [ 2159.055349][T10824] vhci_hcd: disconnect device [ 2159.520424][T28220] vhci_hcd: connection closed [ 2159.520670][T28216] vhci_hcd: connection closed [ 2159.525646][T10824] vhci_hcd: stop threads [ 2159.534685][T10824] vhci_hcd: release socket [ 2159.539186][T10824] vhci_hcd: disconnect device [ 2159.544475][T10824] vhci_hcd: stop threads [ 2159.548746][T10824] vhci_hcd: release socket [ 2159.553251][T10824] vhci_hcd: disconnect device [ 2159.559881][T28214] vhci_hcd: connection reset by peer [ 2159.596601][T10824] vhci_hcd: stop threads [ 2159.601012][T10824] vhci_hcd: release socket [ 2159.605455][T10824] vhci_hcd: disconnect device [ 2159.766643][T28236] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=28236 comm=syz.9.18930 [ 2159.872017][T28245] program syz.9.18933 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2160.105633][T28251] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=28251 comm=syz.9.18936 [ 2161.245533][T28286] program syz.3.18950 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2161.344608][T28294] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=28294 comm=syz.0.18953 [ 2161.419581][T28297] netlink: 'syz.9.18951': attribute type 3 has an invalid length. [ 2161.427632][T28297] netlink: 'syz.9.18951': attribute type 3 has an invalid length. [ 2161.435558][T28297] netlink: 12 bytes leftover after parsing attributes in process `syz.9.18951'. [ 2161.980520][T28311] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=28311 comm=syz.7.18959 [ 2162.217361][T28315] usb usb1: check_ctrlrecip: process 28315 (syz.0.18956) requesting ep 01 but needs 81 [ 2162.227100][T28315] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 2162.922322][T28330] usb usb1: check_ctrlrecip: process 28330 (syz.3.18964) requesting ep 01 but needs 81 [ 2162.932122][T28330] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 2163.174007][T28335] program syz.0.18966 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2163.624987][T28342] program syz.9.18969 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2163.672299][T28343] netlink: 68 bytes leftover after parsing attributes in process `syz.3.18968'. [ 2163.920092][T28356] usb usb1: check_ctrlrecip: process 28356 (syz.9.18970) requesting ep 01 but needs 81 [ 2163.930027][T28356] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 2164.251712][ T8761] usb 15-1: enqueue for inactive port 0 [ 2164.440631][ T8761] usb 15-1: enqueue for inactive port 0 [ 2164.524666][ T8761] vhci_hcd: vhci_device speed not set [ 2164.748304][T20467] usb 17-1: enqueue for inactive port 0 [ 2164.754981][T20467] usb 17-1: enqueue for inactive port 0 [ 2164.777338][T28361] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18967'. [ 2165.108322][T20684] bond0 (unregistering): Released all slaves [ 2165.174922][T20467] vhci_hcd: vhci_device speed not set [ 2165.195616][T20684] hsr_slave_0: left promiscuous mode [ 2165.219617][T20684] hsr_slave_1: left promiscuous mode [ 2165.226443][T28373] program syz.7.18977 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2165.246801][T20684] veth1_macvtap: left promiscuous mode [ 2165.252606][T20684] veth0_macvtap: left promiscuous mode [ 2165.258609][T20684] veth1_vlan: left promiscuous mode [ 2165.270699][T20684] veth0_vlan: left promiscuous mode [ 2166.448376][T28380] kthread_run failed with err -4 [ 2166.613679][T28389] netlink: 68 bytes leftover after parsing attributes in process `syz.8.18982'. [ 2166.642434][T28391] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=28391 comm=syz.7.18983 [ 2166.799217][T20684] IPVS: stop unused estimator thread 0... [ 2166.928765][T28400] netlink: 28 bytes leftover after parsing attributes in process `syz.8.18984'. [ 2166.957691][T28402] program syz.7.18987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2167.580492][T28419] program syz.9.18993 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2168.244026][T28422] usb usb1: check_ctrlrecip: process 28422 (syz.7.18991) requesting ep 01 but needs 81 [ 2168.253769][T28422] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 2168.630623][T28430] netlink: 68 bytes leftover after parsing attributes in process `syz.3.18995'. [ 2168.658196][T28432] program syz.0.18996 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2169.414701][T28455] netlink: 'syz.0.19004': attribute type 3 has an invalid length. [ 2169.422704][T28455] netlink: 'syz.0.19004': attribute type 3 has an invalid length. [ 2169.430666][T28455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19004'. [ 2169.541999][T28455] usb usb1: check_ctrlrecip: process 28455 (syz.0.19004) requesting ep 01 but needs 81 [ 2169.551740][T28455] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 2170.019768][T28464] program syz.8.19005 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2170.246349][T28465] serio: Serial port ptm1 [ 2170.360433][T28483] netlink: 'syz.3.19011': attribute type 3 has an invalid length. [ 2170.368593][T28483] netlink: 'syz.3.19011': attribute type 3 has an invalid length. [ 2170.376524][T28483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19011'. [ 2170.516948][T28483] usb usb1: check_ctrlrecip: process 28483 (syz.3.19011) requesting ep 01 but needs 81 [ 2170.526961][T28483] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 2170.629207][T28486] bridge_slave_0: left allmulticast mode [ 2170.635044][T28486] bridge_slave_0: left promiscuous mode [ 2170.640945][T28486] bridge0: port 1(bridge_slave_0) entered disabled state [ 2170.691517][T28486] bridge_slave_1: left allmulticast mode [ 2170.697412][T28486] bridge_slave_1: left promiscuous mode [ 2170.703273][T28486] bridge0: port 2(bridge_slave_1) entered disabled state [ 2170.716337][T28486] bond0: (slave bond_slave_0): Releasing backup interface [ 2170.731240][T28486] bond0: (slave bond_slave_1): Releasing backup interface [ 2170.746366][T28486] team0: Port device team_slave_0 removed [ 2170.765347][T28486] team0: Port device team_slave_1 removed [ 2170.773416][T28486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2170.780964][T28486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2170.790626][T28486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2170.798065][T28486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2170.809107][T28486] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2170.827443][T28481] tipc: Enabling of bearer rejected, already enabled [ 2170.865410][T28494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2170.874043][T28494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2170.904264][T28489] bridge_slave_0: left allmulticast mode [ 2170.910000][T28489] bridge_slave_0: left promiscuous mode [ 2170.915712][T28489] bridge0: port 1(bridge_slave_0) entered disabled state [ 2170.928458][T28489] bridge_slave_1: left allmulticast mode [ 2170.934242][T28489] bridge_slave_1: left promiscuous mode [ 2170.939911][T28489] bridge0: port 2(bridge_slave_1) entered disabled state [ 2170.949676][T28489] bond0: (slave bond_slave_0): Releasing backup interface [ 2170.960095][T28489] bond0: (slave bond_slave_1): Releasing backup interface [ 2170.972495][T28489] team0: Port device team_slave_0 removed [ 2170.981496][T28489] team0: Port device team_slave_1 removed [ 2170.988286][T28489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2170.995756][T28489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2171.004946][T28489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2171.012518][T28489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2171.022319][T28489] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2171.106117][T28503] program syz.9.19021 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2171.173327][T28505] netlink: 'syz.8.19019': attribute type 3 has an invalid length. [ 2171.181435][T28505] netlink: 'syz.8.19019': attribute type 3 has an invalid length. [ 2171.189279][T28505] netlink: 12 bytes leftover after parsing attributes in process `syz.8.19019'. [ 2171.306146][T28505] usb usb1: check_ctrlrecip: process 28505 (syz.8.19019) requesting ep 01 but needs 81 [ 2171.315955][T28505] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 2172.152813][T28518] netlink: 'syz.3.19022': attribute type 3 has an invalid length. [ 2172.160788][T28518] netlink: 'syz.3.19022': attribute type 3 has an invalid length. [ 2172.168660][T28518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19022'. [ 2172.280458][T28518] usb usb1: check_ctrlrecip: process 28518 (syz.3.19022) requesting ep 01 but needs 81 [ 2172.290306][T28518] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 2172.615872][T28527] lo: entered allmulticast mode [ 2172.643155][T28529] bridge_slave_0: left allmulticast mode [ 2172.648990][T28529] bridge_slave_0: left promiscuous mode [ 2172.654760][T28529] bridge0: port 1(bridge_slave_0) entered disabled state [ 2172.677927][T28529] bridge_slave_1: left allmulticast mode [ 2172.683683][T28529] bridge_slave_1: left promiscuous mode [ 2172.689372][T28529] bridge0: port 2(bridge_slave_1) entered disabled state [ 2173.474037][T28529] bond0: (slave bond_slave_0): Releasing backup interface [ 2173.524399][T28529] bond0: (slave bond_slave_1): Releasing backup interface [ 2173.700560][T28529] team0: Port device team_slave_0 removed [ 2173.712872][T28529] team0: Port device team_slave_1 removed [ 2173.719720][T28529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2173.727194][T28529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2173.738976][T28529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2173.746597][T28529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2173.812981][T28529] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2173.842486][T28525] lo: left allmulticast mode [ 2173.857026][T28551] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2173.933347][T28555] program syz.3.19036 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2173.989403][T28554] loop0: detected capacity change from 0 to 512 [ 2174.048902][T28559] bridge_slave_0: left allmulticast mode [ 2174.054774][T28559] bridge_slave_0: left promiscuous mode [ 2174.060548][T28559] bridge0: port 1(bridge_slave_0) entered disabled state [ 2174.098014][T28559] bridge_slave_1: left allmulticast mode [ 2174.103800][T28559] bridge_slave_1: left promiscuous mode [ 2174.109548][T28559] bridge0: port 2(bridge_slave_1) entered disabled state [ 2174.159921][T28554] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 2174.170459][T28554] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 2174.188188][T28559] bond0: (slave bond_slave_0): Releasing backup interface [ 2174.195939][T28554] EXT4-fs (loop0): mount failed [ 2174.270653][T28575] usb usb1: check_ctrlrecip: process 28575 (syz.7.19042) requesting ep 01 but needs 81 [ 2174.280380][T28575] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 2174.817125][T28559] bond0: (slave bond_slave_1): Releasing backup interface [ 2174.893130][T28559] team0: Port device team_slave_0 removed [ 2174.906443][T28559] team0: Port device team_slave_1 removed [ 2174.918196][T28559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2174.925871][T28559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2174.939978][T28559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2174.947507][T28559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2174.958923][T28559] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2174.975889][T28570] netlink: 'syz.7.19042': attribute type 3 has an invalid length. [ 2174.984029][T28570] netlink: 'syz.7.19042': attribute type 3 has an invalid length. [ 2174.992052][T28570] netlink: 12 bytes leftover after parsing attributes in process `syz.7.19042'. [ 2175.035456][T28585] syz_tun: entered allmulticast mode [ 2175.108615][T28580] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19044'. [ 2175.123043][T28592] xt_hashlimit: max too large, truncated to 1048576 [ 2175.139662][T28580] syz_tun (unregistering): left allmulticast mode [ 2175.150607][T28592] No such timeout policy "syz1" [ 2175.162750][T28595] team0: No ports can be present during mode change [ 2175.227693][T28598] program syz.0.19050 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2175.450030][T28612] bridge_slave_0: left allmulticast mode [ 2175.455870][T28612] bridge_slave_0: left promiscuous mode [ 2175.461639][T28612] bridge0: port 1(bridge_slave_0) entered disabled state [ 2175.490193][T28612] bridge_slave_1: left allmulticast mode [ 2175.495945][T28612] bridge_slave_1: left promiscuous mode [ 2175.501898][T28612] bridge0: port 2(bridge_slave_1) entered disabled state [ 2175.529317][T28612] bond0: (slave bond_slave_0): Releasing backup interface [ 2175.559949][T28612] bond0: (slave bond_slave_1): Releasing backup interface [ 2175.589927][T28612] team0: Port device team_slave_0 removed [ 2175.611742][T28612] team0: Port device team_slave_1 removed [ 2175.627588][T28612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2175.635212][T28612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2175.650220][T28615] netlink: 12 bytes leftover after parsing attributes in process `syz.9.19053'. [ 2175.667211][T28612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2175.674710][T28612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2175.705828][T28612] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2175.724018][T28613] team0: Mode changed to "loadbalance" [ 2176.053549][T28623] team0: Unable to change to the same mode the team is in [ 2177.022596][T28647] netlink: 'syz.0.19063': attribute type 3 has an invalid length. [ 2177.030556][T28647] netlink: 'syz.0.19063': attribute type 3 has an invalid length. [ 2177.038457][T28647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19063'. [ 2177.146274][T28647] usb usb1: check_ctrlrecip: process 28647 (syz.0.19063) requesting ep 01 but needs 81 [ 2177.156064][T28647] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 2177.426140][T28658] xt_hashlimit: max too large, truncated to 1048576 [ 2177.455822][T28658] No such timeout policy "syz1" [ 2177.507916][T28662] syz_tun: entered allmulticast mode [ 2177.535866][T28662] netlink: 4 bytes leftover after parsing attributes in process `syz.8.19074'. [ 2177.580604][T28661] syz_tun: left allmulticast mode [ 2177.652673][T28675] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2178.069335][T28693] xt_hashlimit: max too large, truncated to 1048576 [ 2178.080504][T28693] No such timeout policy "syz1" [ 2178.165334][T28678] netlink: 12 bytes leftover after parsing attributes in process `syz.7.19082'. [ 2179.629566][T28710] netlink: 'syz.7.19091': attribute type 3 has an invalid length. [ 2179.637535][T28710] netlink: 'syz.7.19091': attribute type 3 has an invalid length. [ 2179.645584][T28710] netlink: 12 bytes leftover after parsing attributes in process `syz.7.19091'. [ 2179.760111][T28710] usb usb1: check_ctrlrecip: process 28710 (syz.7.19091) requesting ep 01 but needs 81 [ 2179.769958][T28710] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 2179.984826][ T29] audit: type=1400 audit(2000001192.090:34343): avc: denied { write } for pid=28727 comm="syz.7.19098" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 2180.010702][T28729] ip6t_srh: unknown srh match flags 4000 [ 2180.092499][T28739] netlink: 'syz.3.19099': attribute type 3 has an invalid length. [ 2180.128255][T28739] netlink: 'syz.3.19099': attribute type 3 has an invalid length. [ 2180.175849][T28739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19099'. [ 2180.213340][T28744] netlink: 'syz.8.19103': attribute type 3 has an invalid length. [ 2180.241845][T28744] netlink: 'syz.8.19103': attribute type 3 has an invalid length. [ 2180.262655][T28752] FAULT_INJECTION: forcing a failure. [ 2180.262655][T28752] name failslab, interval 1, probability 0, space 0, times 0 [ 2180.272269][T28744] netlink: 12 bytes leftover after parsing attributes in process `syz.8.19103'. [ 2180.275646][T28752] CPU: 0 UID: 0 PID: 28752 Comm: syz.0.19109 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 2180.275695][T28752] Tainted: [W]=WARN [ 2180.275707][T28752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2180.275725][T28752] Call Trace: [ 2180.275734][T28752] [ 2180.275745][T28752] __dump_stack+0x1d/0x30 [ 2180.275778][T28752] dump_stack_lvl+0xe8/0x140 [ 2180.275807][T28752] dump_stack+0x15/0x1b [ 2180.275883][T28752] should_fail_ex+0x265/0x280 [ 2180.275932][T28752] should_failslab+0x8c/0xb0 [ 2180.275971][T28752] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 2180.276047][T28752] ? __d_alloc+0x3d/0x340 [ 2180.276201][T28752] __d_alloc+0x3d/0x340 [ 2180.276286][T28752] ? mpol_shared_policy_init+0xbd/0x4c0 [ 2180.276326][T28752] d_alloc_pseudo+0x1e/0x80 [ 2180.276368][T28752] alloc_file_pseudo+0x71/0x160 [ 2180.276399][T28752] __shmem_file_setup+0x1de/0x210 [ 2180.276503][T28752] shmem_file_setup+0x3b/0x50 [ 2180.276529][T28752] __se_sys_memfd_create+0x2c3/0x590 [ 2180.276565][T28752] __x64_sys_memfd_create+0x31/0x40 [ 2180.276598][T28752] x64_sys_call+0x2ac2/0x3000 [ 2180.276630][T28752] do_syscall_64+0xd2/0x200 [ 2180.276684][T28752] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 2180.276716][T28752] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 2180.276785][T28752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2180.276867][T28752] RIP: 0033:0x7fca1e5bf6c9 [ 2180.276890][T28752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2180.276917][T28752] RSP: 002b:00007fca1d01ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 2180.276944][T28752] RAX: ffffffffffffffda RBX: 000000000000036e RCX: 00007fca1e5bf6c9 [ 2180.276962][T28752] RDX: 00007fca1d01eef0 RSI: 0000000000000000 RDI: 00007fca1e642960 [ 2180.276980][T28752] RBP: 00002000000007c0 R08: 00007fca1d01ebb7 R09: 00007fca1d01ee40 [ 2180.276998][T28752] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000180 [ 2180.277033][T28752] R13: 00007fca1d01eef0 R14: 00007fca1d01eeb0 R15: 0000200000003240 [ 2180.277060][T28752] [ 2180.597941][T28744] usb usb1: check_ctrlrecip: process 28744 (syz.8.19103) requesting ep 01 but needs 81 [ 2180.612761][T28744] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 2180.699038][T28776] netlink: 'syz.0.19117': attribute type 3 has an invalid length. [ 2180.707139][T28776] netlink: 'syz.0.19117': attribute type 3 has an invalid length. [ 2180.715005][T28776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19117'. [ 2180.765176][T28776] usb usb1: check_ctrlrecip: process 28776 (syz.0.19117) requesting ep 01 but needs 81 [ 2180.775092][T28776] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 2180.849820][T28782] netlink: 'syz.9.19115': attribute type 3 has an invalid length. [ 2180.884380][T28782] netlink: 'syz.9.19115': attribute type 3 has an invalid length. [ 2180.932803][T28782] netlink: 12 bytes leftover after parsing attributes in process `syz.9.19115'. [ 2180.990269][T28782] usb usb1: check_ctrlrecip: process 28782 (syz.9.19115) requesting ep 01 but needs 81 [ 2181.046827][T28782] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 2181.066472][T28788] loop0: detected capacity change from 0 to 128 [ 2181.151018][T28788] netlink: 3 bytes leftover after parsing attributes in process `syz.0.19120'. [ 2181.210436][T28788] 0ªX¹¦À: renamed from caif0 [ 2181.216596][T28788] 0ªX¹¦À: entered allmulticast mode [ 2181.222073][T28788] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 2181.282526][T28788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19120'. [ 2181.309228][T28788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2181.318679][T28788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2181.702314][T28799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19124'. [ 2181.750400][T28799] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2181.771959][T28801] bond1: Unable to set up delay as MII monitoring is disabled [ 2181.954591][T28808] ip6tnl1: entered allmulticast mode [ 2181.991156][T20698] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2182.083397][T20698] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2182.270479][T20698] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2182.340778][T28818] : renamed from vlan0 (while UP) [ 2182.352459][ T29] audit: type=1400 audit(2000001194.450:34344): avc: denied { ioctl } for pid=28817 comm="syz.9.19133" path="socket:[255435]" dev="sockfs" ino=255435 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2182.403479][T20698] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2182.487070][T28827] FAULT_INJECTION: forcing a failure. [ 2182.487070][T28827] name failslab, interval 1, probability 0, space 0, times 0 [ 2182.499839][T28827] CPU: 0 UID: 0 PID: 28827 Comm: syz.9.19134 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 2182.499890][T28827] Tainted: [W]=WARN [ 2182.499897][T28827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2182.499909][T28827] Call Trace: [ 2182.499916][T28827] [ 2182.499976][T28827] __dump_stack+0x1d/0x30 [ 2182.500004][T28827] dump_stack_lvl+0xe8/0x140 [ 2182.500068][T28827] dump_stack+0x15/0x1b [ 2182.500138][T28827] should_fail_ex+0x265/0x280 [ 2182.500197][T28827] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 2182.500219][T28827] should_failslab+0x8c/0xb0 [ 2182.500349][T28827] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 2182.500482][T28827] ? debugfs_alloc_inode+0x34/0x40 [ 2182.500503][T28827] ? lookup_noperm+0xc9/0x180 [ 2182.500527][T28827] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 2182.500556][T28827] debugfs_alloc_inode+0x34/0x40 [ 2182.500584][T28827] alloc_inode+0x40/0x170 [ 2182.500616][T28827] new_inode+0x1d/0xe0 [ 2182.500651][T28827] __debugfs_create_file+0x109/0x330 [ 2182.500736][T28827] debugfs_create_file_full+0x3f/0x60 [ 2182.500763][T28827] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 2182.500801][T28827] ref_tracker_dir_debugfs+0x100/0x1e0 [ 2182.500890][T28827] alloc_netdev_mqs+0x1a7/0xa50 [ 2182.500919][T28827] ip6_tnl_locate+0x37e/0x4a0 [ 2182.500960][T28827] ip6_tnl_siocdevprivate+0x550/0x920 [ 2182.501008][T28827] dev_ifsioc+0x8f8/0xaa0 [ 2182.501105][T28827] dev_ioctl+0x78d/0x960 [ 2182.501126][T28827] sock_ioctl+0x593/0x610 [ 2182.501253][T28827] ? __pfx_sock_ioctl+0x10/0x10 [ 2182.501276][T28827] __se_sys_ioctl+0xce/0x140 [ 2182.501304][T28827] __x64_sys_ioctl+0x43/0x50 [ 2182.501331][T28827] x64_sys_call+0x1816/0x3000 [ 2182.501360][T28827] do_syscall_64+0xd2/0x200 [ 2182.501405][T28827] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 2182.501442][T28827] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 2182.501481][T28827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2182.501564][T28827] RIP: 0033:0x7fe81482f6c9 [ 2182.501660][T28827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2182.501735][T28827] RSP: 002b:00007fe813297038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2182.501760][T28827] RAX: ffffffffffffffda RBX: 00007fe814a85fa0 RCX: 00007fe81482f6c9 [ 2182.501777][T28827] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000008 [ 2182.501793][T28827] RBP: 00007fe813297090 R08: 0000000000000000 R09: 0000000000000000 [ 2182.501810][T28827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2182.501825][T28827] R13: 00007fe814a86038 R14: 00007fe814a85fa0 R15: 00007ffc1eb03798 [ 2182.501920][T28827] [ 2182.762846][T28827] debugfs: out of free dentries, can not create file 'netdev@ffff888115612558' [ 2183.365887][T20698] bond0 (unregistering): Released all slaves [ 2183.506939][T20698] tipc: Disabling bearer [ 2183.512247][T20698] tipc: Left network mode [ 2183.530496][T20684] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2183.549749][T20684] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2183.582223][T20698] hsr_slave_0: left promiscuous mode [ 2183.610432][T20698] hsr_slave_1: left promiscuous mode [ 2183.640733][T20698] veth1_macvtap: left promiscuous mode [ 2183.646273][T20698] veth0_macvtap: left promiscuous mode [ 2183.670439][T20698] veth1_vlan: left promiscuous mode [ 2183.675806][T20698] veth0_vlan: left promiscuous mode [ 2183.682744][T28857] FAULT_INJECTION: forcing a failure. [ 2183.682744][T28857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2183.695952][T28857] CPU: 1 UID: 0 PID: 28857 Comm: +}[@ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 2183.696000][T28857] Tainted: [W]=WARN [ 2183.696008][T28857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2183.696025][T28857] Call Trace: [ 2183.696111][T28857] [ 2183.696120][T28857] __dump_stack+0x1d/0x30 [ 2183.696149][T28857] dump_stack_lvl+0xe8/0x140 [ 2183.696170][T28857] dump_stack+0x15/0x1b [ 2183.696187][T28857] should_fail_ex+0x265/0x280 [ 2183.696221][T28857] should_fail+0xb/0x20 [ 2183.696280][T28857] should_fail_usercopy+0x1a/0x20 [ 2183.696303][T28857] strncpy_from_user+0x25/0x230 [ 2183.696330][T28857] ? kmem_cache_alloc_noprof+0x242/0x480 [ 2183.696398][T28857] ? getname_flags+0x80/0x3b0 [ 2183.696433][T28857] getname_flags+0xae/0x3b0 [ 2183.696533][T28857] __x64_sys_symlink+0x40/0x60 [ 2183.696562][T28857] x64_sys_call+0x23d0/0x3000 [ 2183.696584][T28857] do_syscall_64+0xd2/0x200 [ 2183.696604][T28857] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 2183.696653][T28857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2183.696674][T28857] RIP: 0033:0x7f3e422bf6c9 [ 2183.696754][T28857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2183.696778][T28857] RSP: 002b:00007f3e40d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 2183.696797][T28857] RAX: ffffffffffffffda RBX: 00007f3e42515fa0 RCX: 00007f3e422bf6c9 [ 2183.696809][T28857] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000200000000380 [ 2183.696861][T28857] RBP: 00007f3e40d27090 R08: 0000000000000000 R09: 0000000000000000 [ 2183.696877][T28857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2183.696893][T28857] R13: 00007f3e42516038 R14: 00007f3e42515fa0 R15: 00007fffedd13a98 [ 2183.696914][T28857] [ 2184.104705][T28866] xt_hashlimit: max too large, truncated to 1048576 [ 2184.118654][T28866] No such timeout policy "syz1" [ 2184.179003][T20684] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2184.250779][T20655] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2184.314977][T28822] chnl_net:caif_netlink_parms(): no params data found [ 2184.475980][T28822] bridge0: port 1(bridge_slave_0) entered blocking state [ 2184.483143][T28822] bridge0: port 1(bridge_slave_0) entered disabled state [ 2184.492111][T28822] bridge_slave_0: entered allmulticast mode [ 2184.505322][T28822] bridge_slave_0: entered promiscuous mode [ 2184.519889][T28822] bridge0: port 2(bridge_slave_1) entered blocking state [ 2184.527118][T28822] bridge0: port 2(bridge_slave_1) entered disabled state [ 2184.553346][T28822] bridge_slave_1: entered allmulticast mode [ 2184.559976][T28822] bridge_slave_1: entered promiscuous mode [ 2184.585245][T28822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2184.597965][T28822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2184.629078][T28822] team0: Port device team_slave_0 added [ 2184.649116][T28822] team0: Port device team_slave_1 added [ 2184.668417][T28886] xt_hashlimit: max too large, truncated to 1048576 [ 2184.684108][T28886] No such timeout policy "syz1" [ 2184.690157][T28822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2184.697156][T28822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2184.723121][T28822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2184.735408][T28822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2184.742406][T28822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2184.768481][T28822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2184.806327][T28822] hsr_slave_0: entered promiscuous mode [ 2184.821186][T28822] hsr_slave_1: entered promiscuous mode [ 2184.837468][T28822] debugfs: 'hsr0' already exists in 'hsr' [ 2184.843280][T28822] Cannot create hsr debugfs directory [ 2185.036570][T28891] netlink: 'syz.8.19152': attribute type 1 has an invalid length. [ 2185.044474][T28891] __nla_validate_parse: 2 callbacks suppressed [ 2185.044493][T28891] netlink: 224 bytes leftover after parsing attributes in process `syz.8.19152'. [ 2185.095138][T28893] FAULT_INJECTION: forcing a failure. [ 2185.095138][T28893] name failslab, interval 1, probability 0, space 0, times 0 [ 2185.107841][T28893] CPU: 1 UID: 0 PID: 28893 Comm: syz.8.19153 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 2185.107880][T28893] Tainted: [W]=WARN [ 2185.107889][T28893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2185.107905][T28893] Call Trace: [ 2185.107913][T28893] [ 2185.107922][T28893] __dump_stack+0x1d/0x30 [ 2185.107976][T28893] dump_stack_lvl+0xe8/0x140 [ 2185.107999][T28893] dump_stack+0x15/0x1b [ 2185.108030][T28893] should_fail_ex+0x265/0x280 [ 2185.108067][T28893] should_failslab+0x8c/0xb0 [ 2185.108098][T28893] kmem_cache_alloc_noprof+0x50/0x480 [ 2185.108162][T28893] ? getname_flags+0x80/0x3b0 [ 2185.108199][T28893] getname_flags+0x80/0x3b0 [ 2185.108254][T28893] getname_uflags+0x21/0x30 [ 2185.108286][T28893] __x64_sys_execveat+0x5d/0x90 [ 2185.108312][T28893] x64_sys_call+0x1fec/0x3000 [ 2185.108366][T28893] do_syscall_64+0xd2/0x200 [ 2185.108388][T28893] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 2185.108419][T28893] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 2185.108506][T28893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2185.108606][T28893] RIP: 0033:0x7f3e422bf6c9 [ 2185.108627][T28893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2185.108650][T28893] RSP: 002b:00007f3e40d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2185.108674][T28893] RAX: ffffffffffffffda RBX: 00007f3e42515fa0 RCX: 00007f3e422bf6c9 [ 2185.108691][T28893] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2185.108707][T28893] RBP: 00007f3e40d27090 R08: 0000000000001000 R09: 0000000000000000 [ 2185.108724][T28893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2185.108738][T28893] R13: 00007f3e42516038 R14: 00007f3e42515fa0 R15: 00007fffedd13a98 [ 2185.108824][T28893] [ 2185.318654][ T29] audit: type=1400 audit(2000001197.420:34345): avc: denied { lock } for pid=28895 comm="syz.7.19154" path="socket:[256967]" dev="sockfs" ino=256967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 2185.319310][T28896] sg_write: data in/out 49276/12 bytes for SCSI command 0x6-- guessing data in; [ 2185.319310][T28896] program syz.7.19154 not setting count and/or reply_len properly [ 2185.397976][T28822] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2185.407745][T28822] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2185.425951][T28822] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2185.440159][T28822] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2185.547343][T28909] netlink: 'syz.7.19156': attribute type 1 has an invalid length. [ 2185.591024][T28909] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2185.627744][T28822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2185.651836][T28822] 8021q: adding VLAN 0 to HW filter on device team0 [ 2185.660153][T28900] netlink: 112 bytes leftover after parsing attributes in process `syz.7.19156'. [ 2185.681221][T10824] bridge0: port 1(bridge_slave_0) entered blocking state [ 2185.688407][T10824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2185.697358][ T29] audit: type=1326 audit(2000001197.780:34346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28916 comm="syz.9.19159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe81482f6c9 code=0x7ffc0000 [ 2185.721222][ T29] audit: type=1326 audit(2000001197.780:34347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28916 comm="syz.9.19159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe81482f6c9 code=0x7ffc0000 [ 2185.744936][ T29] audit: type=1326 audit(2000001197.780:34348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28916 comm="syz.9.19159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe81482f6c9 code=0x7ffc0000 [ 2185.769148][ T29] audit: type=1326 audit(2000001197.780:34349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28916 comm="syz.9.19159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe81482f6c9 code=0x7ffc0000 [ 2185.792996][ T29] audit: type=1326 audit(2000001197.780:34350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28916 comm="syz.9.19159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe81482f6c9 code=0x7ffc0000 [ 2185.817265][ T29] audit: type=1326 audit(2000001197.780:34351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28916 comm="syz.9.19159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe81482f6c9 code=0x7ffc0000 [ 2185.841042][ T29] audit: type=1326 audit(2000001197.780:34352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28916 comm="syz.9.19159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe81482f6c9 code=0x7ffc0000 [ 2185.864733][ T29] audit: type=1326 audit(2000001197.780:34353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28916 comm="syz.9.19159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe81482f6c9 code=0x7ffc0000 [ 2185.888679][ T29] audit: type=1326 audit(2000001197.780:34354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28916 comm="syz.9.19159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe81482f6c9 code=0x7ffc0000 [ 2185.942291][T20655] bridge0: port 2(bridge_slave_1) entered blocking state [ 2185.949424][T20655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2185.985838][T28925] hsr0: entered allmulticast mode [ 2185.991019][T28925] hsr_slave_0: entered allmulticast mode [ 2185.996736][T28925] hsr_slave_1: entered allmulticast mode [ 2186.058299][T28931] netlink: 40 bytes leftover after parsing attributes in process `syz.7.19164'. [ 2186.115847][T28822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2186.218693][T28948] netlink: 'syz.7.19166': attribute type 3 has an invalid length. [ 2186.226797][T28948] netlink: 'syz.7.19166': attribute type 3 has an invalid length. [ 2186.234675][T28948] netlink: 12 bytes leftover after parsing attributes in process `syz.7.19166'. [ 2186.301065][T28948] usb usb1: check_ctrlrecip: process 28948 (syz.7.19166) requesting ep 01 but needs 81 [ 2186.310819][T28948] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 2186.496039][T28822] veth0_vlan: entered promiscuous mode [ 2186.530794][T28822] veth1_vlan: entered promiscuous mode [ 2186.603553][T28822] veth0_macvtap: entered promiscuous mode [ 2186.611471][T28822] veth1_macvtap: entered promiscuous mode [ 2186.631192][T28822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2186.643678][T28822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2186.665053][T10824] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2186.703785][T10824] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2186.717912][T10824] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2186.732186][T16761] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2186.758585][T28963] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=28963 comm=syz.9.19169 [ 2186.809093][T28967] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2186.874838][T28967] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2187.000185][T28972] netlink: 'syz.9.19172': attribute type 3 has an invalid length. [ 2187.008374][T28972] netlink: 'syz.9.19172': attribute type 3 has an invalid length. [ 2187.085184][T28983] netlink: 40 bytes leftover after parsing attributes in process `syz.9.19175'. [ 2187.107660][T28987] netlink: 'syz.8.19177': attribute type 1 has an invalid length. [ 2187.115699][T28987] netlink: 224 bytes leftover after parsing attributes in process `syz.8.19177'. [ 2187.652271][T29016] netlink: 8 bytes leftover after parsing attributes in process `syz.9.19186'. [ 2187.661314][T29016] IPv6: NLM_F_CREATE should be specified when creating new route [ 2187.670606][T29016] IPv6: Can't replace route, no match found [ 2187.684009][T29016] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 2187.690718][T29016] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2187.698992][T29016] vhci_hcd vhci_hcd.0: Device attached [ 2187.705447][T29017] vhci_hcd: connection closed [ 2187.705677][T10824] vhci_hcd: stop threads [ 2187.714783][T10824] vhci_hcd: release socket [ 2187.719267][T10824] vhci_hcd: disconnect device [ 2187.759494][T29005] chnl_net:caif_netlink_parms(): no params data found [ 2187.804504][T29005] bridge0: port 1(bridge_slave_0) entered blocking state [ 2187.811623][T29005] bridge0: port 1(bridge_slave_0) entered disabled state [ 2187.818867][T29005] bridge_slave_0: entered allmulticast mode [ 2187.825527][T29005] bridge_slave_0: entered promiscuous mode [ 2187.832561][T29005] bridge0: port 2(bridge_slave_1) entered blocking state [ 2187.839662][T29005] bridge0: port 2(bridge_slave_1) entered disabled state [ 2187.847400][T29005] bridge_slave_1: entered allmulticast mode [ 2187.854116][T29005] bridge_slave_1: entered promiscuous mode [ 2187.874003][T29005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2187.886382][T29005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2187.909083][T29005] team0: Port device team_slave_0 added [ 2187.916271][T29005] team0: Port device team_slave_1 added [ 2187.934714][T29005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2187.941786][T29005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2187.967924][T29005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2187.980005][T29028] netlink: 'syz.7.19187': attribute type 3 has an invalid length. [ 2187.988132][T29028] netlink: 'syz.7.19187': attribute type 3 has an invalid length. [ 2187.996083][T29028] netlink: 12 bytes leftover after parsing attributes in process `syz.7.19187'. [ 2188.006171][T29005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2188.013205][T29005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2188.039336][T29005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2188.058391][T29029] usb usb1: check_ctrlrecip: process 29029 (syz.7.19187) requesting ep 01 but needs 81 [ 2188.068346][T29029] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 2188.102318][T29005] hsr_slave_0: entered promiscuous mode [ 2188.108498][T29005] hsr_slave_1: entered promiscuous mode [ 2188.114603][T29005] debugfs: 'hsr0' already exists in 'hsr' [ 2188.120374][T29005] Cannot create hsr debugfs directory [ 2188.181504][T29005] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2188.224133][T29005] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2188.262671][T29035] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 2188.274007][T29035] bond1 (unregistering): Released all slaves [ 2188.288035][T29005] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2188.313149][T29038] netlink: 40 bytes leftover after parsing attributes in process `syz.9.19190'. [ 2188.349375][T29040] bridge0: port 1(macsec1) entered blocking state [ 2188.355996][T29040] bridge0: port 1(macsec1) entered disabled state [ 2188.362759][T29040] macsec1: entered allmulticast mode [ 2188.368103][T29040] bridge0: entered allmulticast mode [ 2188.374011][T29040] macsec1: left allmulticast mode [ 2188.379056][T29040] bridge0: left allmulticast mode [ 2188.391378][T29005] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2188.408486][T29042] usb usb1: usbfs: interface 0 claimed by usbfs while 'syz.8.19192' sets config #0 [ 2188.422072][T29042] usb usb1: usbfs: interface 0 claimed by usbfs while 'syz.8.19192' sets config #1 [ 2188.422401][T28967] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2188.442791][T29043] 9pnet: Could not find request transport: fd [ 2188.522210][T29050] __dump_stack+0x1d/0x30 [ 2188.522303][T29050] dump_stack_lvl+0xe8/0x140 [ 2188.522331][T29050] dump_stack+0x15/0x1b [ 2188.522357][T29050] should_fail_ex+0x265/0x280 [ 2188.522407][T29050] should_fail+0xb/0x20 [ 2188.522510][T29050] should_fail_usercopy+0x1a/0x20 [ 2188.522538][T29050] _copy_from_user+0x1c/0xb0 [ 2188.522573][T29050] ___sys_sendmsg+0xc1/0x1d0 [ 2188.522632][T29050] __x64_sys_sendmsg+0xd4/0x160 [ 2188.522759][T29050] x64_sys_call+0x191e/0x3000 [ 2188.522790][T29050] do_syscall_64+0xd2/0x200 [ 2188.522818][T29050] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 2188.522858][T29050] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 2188.522939][T29050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2188.522968][T29050] RIP: 0033:0x7fe81482f6c9 [ 2188.522991][T29050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2188.523065][T29050] RSP: 002b:00007fe813297038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2188.523094][T29050] RAX: ffffffffffffffda RBX: 00007fe814a85fa0 RCX: 00007fe81482f6c9 [ 2188.523111][T29050] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 2188.523129][T29050] RBP: 00007fe813297090 R08: 0000000000000000 R09: 0000000000000000 [ 2188.523146][T29050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2188.523163][T29050] R13: 00007fe814a86038 R14: 00007fe814a85fa0 R15: 00007ffc1eb03798 [ 2188.523190][T29050] [ 2188.708911][T29005] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2188.721158][T29005] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2188.741740][T29054] netlink: 'syz.9.19197': attribute type 1 has an invalid length. [ 2188.749755][T29054] netlink: 224 bytes leftover after parsing attributes in process `syz.9.19197'. [ 2188.759126][T29005] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2188.846063][T29005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2188.858130][T29005] 8021q: adding VLAN 0 to HW filter on device team0 [ 2188.878075][T20668] bridge0: port 1(bridge_slave_0) entered blocking state [ 2188.885259][T20668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2188.914657][T20698] bridge0: port 2(bridge_slave_1) entered blocking state [ 2188.921885][T20698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2188.939793][T29074] netlink: 'syz.8.19204': attribute type 1 has an invalid length. [ 2189.141739][T29005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2189.203147][T29090] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2189.745093][T29090] loop5: detected capacity change from 0 to 8231 [ 2189.795602][T29096] loop5: detected capacity change from 8231 to 16479 [ 2190.030164][T20698] bridge_slave_1: left allmulticast mode [ 2190.035925][T20698] bridge_slave_1: left promiscuous mode [ 2190.041631][T20698] bridge0: port 2(bridge_slave_1) entered disabled state [ 2190.063510][T20698] bridge_slave_0: left allmulticast mode [ 2190.069252][T20698] bridge_slave_0: left promiscuous mode [ 2190.075105][T20698] bridge0: port 1(bridge_slave_0) entered disabled state [ 2190.149896][T29105] __nla_validate_parse: 4 callbacks suppressed [ 2190.149910][T29105] netlink: 16 bytes leftover after parsing attributes in process `syz.7.19211'. [ 2190.303184][T20698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2190.313413][T20698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2190.323295][T20698] bond0 (unregistering): Released all slaves [ 2190.370193][T20698] tipc: Disabling bearer [ 2190.375626][T20698] tipc: Left network mode [ 2190.391233][T20698] hsr_slave_0: left promiscuous mode [ 2190.396909][T20698] hsr_slave_1: left promiscuous mode [ 2190.408896][T20698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2190.416368][T20698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2190.447962][T20698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2190.455432][T20698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2190.482140][T20698] veth1_macvtap: left promiscuous mode [ 2190.498734][T20698] veth0_macvtap: left promiscuous mode [ 2190.510695][T20698] veth1_vlan: left promiscuous mode [ 2190.522924][T20698] veth0_vlan: left promiscuous mode [ 2190.659306][T20698] team0 (unregistering): Port device team_slave_1 removed [ 2190.670482][T20698] team0 (unregistering): Port device team_slave_0 removed [ 2190.743339][T29005] veth0_vlan: entered promiscuous mode [ 2190.764413][T29005] veth1_vlan: entered promiscuous mode [ 2190.781599][T29005] veth0_macvtap: entered promiscuous mode [ 2190.789192][T29005] veth1_macvtap: entered promiscuous mode [ 2190.809157][T29005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2190.822912][T29005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2190.842906][T20684] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2190.855906][T20684] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2190.865054][T20684] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2190.876409][T28967] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2190.891750][T20684] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2190.990030][T20668] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2191.019161][T29114] chnl_net:caif_netlink_parms(): no params data found [ 2191.082738][T29114] bridge0: port 1(bridge_slave_0) entered blocking state [ 2191.089888][T29114] bridge0: port 1(bridge_slave_0) entered disabled state [ 2191.106004][T29114] bridge_slave_0: entered allmulticast mode [ 2191.112853][T29114] bridge_slave_0: entered promiscuous mode [ 2191.120027][T29141] netlink: 'syz.9.19219': attribute type 3 has an invalid length. [ 2191.128247][T29141] netlink: 'syz.9.19219': attribute type 3 has an invalid length. [ 2191.136288][T29141] netlink: 12 bytes leftover after parsing attributes in process `syz.9.19219'. [ 2191.152056][T29114] bridge0: port 2(bridge_slave_1) entered blocking state [ 2191.159278][T29114] bridge0: port 2(bridge_slave_1) entered disabled state [ 2191.166594][T29114] bridge_slave_1: entered allmulticast mode [ 2191.173287][T29114] bridge_slave_1: entered promiscuous mode [ 2191.196375][T29114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2191.207505][T29148] usb usb1: check_ctrlrecip: process 29148 (syz.9.19219) requesting ep 01 but needs 81 [ 2191.217247][T29148] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 2191.227694][T29114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2191.250714][T29114] team0: Port device team_slave_0 added [ 2191.257715][T29114] team0: Port device team_slave_1 added [ 2191.275894][T29114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2191.282940][T29114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2191.309101][T29114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2191.320845][T29114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2191.327849][T29114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2191.354823][T29114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2191.399481][T29114] hsr_slave_0: entered promiscuous mode [ 2191.405722][T29114] hsr_slave_1: entered promiscuous mode [ 2191.676873][T29114] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2191.685406][T29114] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2191.694498][T29114] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2191.704080][T29114] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2191.740036][T29114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2191.753722][T29114] 8021q: adding VLAN 0 to HW filter on device team0 [ 2191.763600][T16761] bridge0: port 1(bridge_slave_0) entered blocking state [ 2191.770718][T16761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2191.790162][T29114] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2191.800693][T20467] usb usb6-port1: attempt power cycle [ 2191.806115][T29114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2191.821579][T16761] bridge0: port 2(bridge_slave_1) entered blocking state [ 2191.828833][T16761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2191.901377][T29114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2191.982812][T29114] veth0_vlan: entered promiscuous mode [ 2191.991136][T29114] veth1_vlan: entered promiscuous mode [ 2192.017987][T29114] veth0_macvtap: entered promiscuous mode [ 2192.041342][T29114] veth1_macvtap: entered promiscuous mode [ 2192.070968][T29114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2192.090142][T29114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2192.097580][T29175] netlink: 96 bytes leftover after parsing attributes in process `syz.9.19226'. [ 2192.109622][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 2192.109640][ T29] audit: type=1326 audit(2000001204.220:34598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29176 comm="syz.2.19227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7732df6c9 code=0x7ffc0000 [ 2192.113032][T20655] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2192.116239][ T29] audit: type=1326 audit(2000001204.220:34599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29176 comm="syz.2.19227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7732df6c9 code=0x7ffc0000 [ 2192.155667][T19049] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2192.181822][ T29] audit: type=1326 audit(2000001204.260:34600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29176 comm="syz.2.19227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7732df6c9 code=0x7ffc0000 [ 2192.205762][ T29] audit: type=1326 audit(2000001204.260:34601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29176 comm="syz.2.19227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7732df6c9 code=0x7ffc0000 [ 2192.229567][ T29] audit: type=1326 audit(2000001204.260:34602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29176 comm="syz.2.19227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7732df6c9 code=0x7ffc0000 [ 2192.234683][T19049] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2192.253421][ T29] audit: type=1326 audit(2000001204.260:34603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29176 comm="syz.2.19227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7732df6c9 code=0x7ffc0000 [ 2192.253457][ T29] audit: type=1326 audit(2000001204.260:34604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29176 comm="syz.2.19227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7732df6c9 code=0x7ffc0000 [ 2192.310638][ T29] audit: type=1326 audit(2000001204.260:34605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29176 comm="syz.2.19227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7732df6c9 code=0x7ffc0000 [ 2192.334459][ T29] audit: type=1326 audit(2000001204.260:34606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29176 comm="syz.2.19227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff7732ddf10 code=0x7ffc0000 [ 2192.351266][T29183] netlink: 'syz.9.19228': attribute type 1 has an invalid length. [ 2192.358669][ T29] audit: type=1326 audit(2000001204.260:34607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29176 comm="syz.2.19227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7732df6c9 code=0x7ffc0000 [ 2192.366163][T29183] netlink: 224 bytes leftover after parsing attributes in process `syz.9.19228'. [ 2192.401694][T20655] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2192.427003][T20668] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2192.451435][T20668] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2192.523646][T29204] netlink: 'syz.1.19238': attribute type 1 has an invalid length. [ 2192.531632][T29204] netlink: 224 bytes leftover after parsing attributes in process `syz.1.19238'. [ 2192.773592][T28967] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2192.798479][T29220] FAULT_INJECTION: forcing a failure. [ 2192.798479][T29220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2192.811630][T29220] CPU: 0 UID: 0 PID: 29220 Comm: syz.9.19245 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 2192.811670][T29220] Tainted: [W]=WARN [ 2192.811678][T29220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2192.811791][T29220] Call Trace: [ 2192.811797][T29220] [ 2192.811804][T29220] __dump_stack+0x1d/0x30 [ 2192.811824][T29220] dump_stack_lvl+0xe8/0x140 [ 2192.811842][T29220] dump_stack+0x15/0x1b [ 2192.811857][T29220] should_fail_ex+0x265/0x280 [ 2192.811922][T29220] should_fail+0xb/0x20 [ 2192.811948][T29220] should_fail_usercopy+0x1a/0x20 [ 2192.812007][T29220] _copy_from_user+0x1c/0xb0 [ 2192.812129][T29220] ___sys_sendmsg+0xc1/0x1d0 [ 2192.812171][T29220] __x64_sys_sendmsg+0xd4/0x160 [ 2192.812243][T29220] x64_sys_call+0x191e/0x3000 [ 2192.812263][T29220] do_syscall_64+0xd2/0x200 [ 2192.812282][T29220] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 2192.812379][T29220] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 2192.812409][T29220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2192.812429][T29220] RIP: 0033:0x7fe81482f6c9 [ 2192.812452][T29220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2192.812529][T29220] RSP: 002b:00007fe813297038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2192.812546][T29220] RAX: ffffffffffffffda RBX: 00007fe814a85fa0 RCX: 00007fe81482f6c9 [ 2192.812558][T29220] RDX: 0000000000002014 RSI: 0000200000000000 RDI: 0000000000000003 [ 2192.812568][T29220] RBP: 00007fe813297090 R08: 0000000000000000 R09: 0000000000000000 [ 2192.812631][T29220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2192.812647][T29220] R13: 00007fe814a86038 R14: 00007fe814a85fa0 R15: 00007ffc1eb03798 [ 2192.812672][T29220] [ 2193.511549][T29234] wg1 speed is unknown, defaulting to 1000 [ 2193.523784][T29234] wg1 speed is unknown, defaulting to 1000 [ 2193.535948][T29234] wg1 speed is unknown, defaulting to 1000 [ 2193.551706][T29234] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 2193.572318][T29234] wg1 speed is unknown, defaulting to 1000 [ 2193.585318][T29234] wg1 speed is unknown, defaulting to 1000 [ 2193.599400][T29234] wg1 speed is unknown, defaulting to 1000 [ 2193.610900][T29234] wg1 speed is unknown, defaulting to 1000 [ 2193.618807][T29234] wg1 speed is unknown, defaulting to 1000 [ 2193.628823][T29234] wg1 speed is unknown, defaulting to 1000 [ 2193.640835][T29234] wg1 speed is unknown, defaulting to 1000 [ 2193.647407][T29234] wg1 speed is unknown, defaulting to 1000 [ 2193.656314][T29234] wg1 speed is unknown, defaulting to 1000 [ 2193.662790][T29234] wg1 speed is unknown, defaulting to 1000 [ 2193.900709][T20467] usb usb6-port1: unable to enumerate USB device [ 2193.959684][T29238] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 2193.996192][T29238] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(17) [ 2194.002905][T29238] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2194.011396][T29238] vhci_hcd vhci_hcd.0: Device attached [ 2194.079801][T29246] loop1: detected capacity change from 0 to 1024 [ 2194.086741][T29246] EXT4-fs: inline encryption not supported [ 2194.101285][T29246] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 2194.124477][T29246] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19253'. [ 2194.140497][T29246] bond0: entered promiscuous mode [ 2194.145608][T29246] bond_slave_0: entered promiscuous mode [ 2194.151514][T29246] bond_slave_1: entered promiscuous mode [ 2194.157364][T29246] bond0: entered allmulticast mode [ 2194.162524][T29246] bond_slave_0: entered allmulticast mode [ 2194.168272][T29246] bond_slave_1: entered allmulticast mode [ 2194.280474][T20467] usb 18-1: SetAddress Request (2) to port 0 [ 2194.286716][T20467] usb 18-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2194.568507][T29241] vhci_hcd: connection reset by peer [ 2194.582888][T16761] vhci_hcd: stop threads [ 2194.587410][T16761] vhci_hcd: release socket [ 2194.591977][T16761] vhci_hcd: disconnect device [ 2194.862349][T29272] xt_hashlimit: max too large, truncated to 1048576 [ 2194.877630][T29272] No such timeout policy "syz1" [ 2195.056030][T29276] loop1: detected capacity change from 0 to 1024 [ 2195.082490][T29276] EXT4-fs: Ignoring removed mblk_io_submit option [ 2195.100689][T29276] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2195.127732][T29276] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 2195.164459][T29276] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.19265: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 2195.205693][T29276] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.19265: couldn't read orphan inode 11 (err -117) [ 2195.247632][T29276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2195.282187][T29276] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20004 [ 2195.633382][T29293] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 2195.661871][T29299] netlink: 'syz.9.19272': attribute type 1 has an invalid length. [ 2195.669763][T29299] netlink: 224 bytes leftover after parsing attributes in process `syz.9.19272'. [ 2195.705111][T29302] netlink: 'syz.9.19273': attribute type 10 has an invalid length. [ 2195.725490][T29302] team0: Port device dummy0 added [ 2195.740622][T29302] netlink: 'syz.9.19273': attribute type 10 has an invalid length. [ 2195.750143][T29302] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 2195.775971][T29302] team0: Failed to send options change via netlink (err -105) [ 2195.784047][ T3424] usb usb6-port1: attempt power cycle [ 2195.791973][T29302] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 2195.801384][T29302] team0: Port device dummy0 removed [ 2195.808345][T29302] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2195.823624][T29306] hub 1-0:1.0: USB hub found [ 2195.825897][T29302] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19273'. [ 2195.828366][T29306] hub 1-0:1.0: 8 ports detected [ 2195.864312][T29114] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2196.015965][T29331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2196.075437][T29335] sg_write: data in/out 49276/12 bytes for SCSI command 0x6-- guessing data in; [ 2196.075437][T29335] program syz.1.19286 not setting count and/or reply_len properly [ 2196.116407][T29339] loop1: detected capacity change from 0 to 512 [ 2196.132550][T29339] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2196.145512][T29339] ext4 filesystem being mounted at /21/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 2196.173997][T29114] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2196.183703][T29347] xt_hashlimit: max too large, truncated to 1048576 [ 2196.197735][T29347] No such timeout policy "syz1" [ 2196.208850][T29347] 9pnet_fd: Insufficient options for proto=fd [ 2196.318308][T29357] siw: device registration error -23 [ 2196.325272][T29357] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(17) [ 2196.332036][T29357] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2196.340446][T29357] vhci_hcd vhci_hcd.0: Device attached [ 2196.610426][ T8761] usb 4-1: SetAddress Request (3) to port 0 [ 2196.616407][ T8761] usb 4-1: new SuperSpeed USB device number 3 using vhci_hcd [ 2196.698399][T29367] netlink: 'syz.4.19298': attribute type 3 has an invalid length. [ 2196.706471][T29367] netlink: 'syz.4.19298': attribute type 3 has an invalid length. [ 2196.714328][T29367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19298'. [ 2196.714444][T29310] ================================================================== [ 2196.731628][T29310] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 2196.738653][T29310] [ 2196.741012][T29310] write to 0xffffffff868eff68 of 88 bytes by task 29367 on cpu 1: [ 2196.748812][T29310] prb_reserve+0x695/0xaf0 [ 2196.753235][T29310] vprintk_store+0x56d/0x860 [ 2196.757831][T29310] vprintk_emit+0x10d/0x580 [ 2196.762349][T29310] vprintk_default+0x26/0x30 [ 2196.766972][T29310] vprintk+0x1d/0x30 [ 2196.770895][T29310] _printk+0x79/0xa0 [ 2196.774820][T29310] __nla_validate_parse+0x1738/0x1d00 [ 2196.780214][T29310] __nla_parse+0x40/0x60 [ 2196.784465][T29310] tcf_gact_init+0x112/0x510 [ 2196.789067][T29310] tcf_action_init_1+0x36a/0x4a0 [ 2196.794011][T29310] tcf_action_init+0x267/0x6d0 [ 2196.798781][T29310] tc_ctl_action+0x291/0x830 [ 2196.803378][T29310] rtnetlink_rcv_msg+0x65a/0x6d0 [ 2196.808331][T29310] netlink_rcv_skb+0x123/0x220 [ 2196.813119][T29310] rtnetlink_rcv+0x1c/0x30 [ 2196.817542][T29310] netlink_unicast+0x5c0/0x690 [ 2196.822319][T29310] netlink_sendmsg+0x58b/0x6b0 [ 2196.827092][T29310] __sock_sendmsg+0x145/0x180 [ 2196.831776][T29310] ____sys_sendmsg+0x31e/0x4e0 [ 2196.836539][T29310] ___sys_sendmsg+0x17b/0x1d0 [ 2196.841220][T29310] __x64_sys_sendmsg+0xd4/0x160 [ 2196.846077][T29310] x64_sys_call+0x191e/0x3000 [ 2196.850766][T29310] do_syscall_64+0xd2/0x200 [ 2196.855367][T29310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2196.861273][T29310] [ 2196.863601][T29310] read to 0xffffffff868eff68 of 8 bytes by task 29310 on cpu 0: [ 2196.871234][T29310] _prb_read_valid+0x1c4/0x920 [ 2196.876015][T29310] prb_read_valid+0x3c/0x60 [ 2196.880543][T29310] console_unlock+0x164/0x2e0 [ 2196.885234][T29310] con_shutdown+0x4b/0x60 [ 2196.889593][T29310] release_tty+0x85/0x4f0 [ 2196.893940][T29310] tty_release_struct+0x96/0xb0 [ 2196.898803][T29310] tty_release+0x856/0xb10 [ 2196.903245][T29310] __fput+0x29b/0x650 [ 2196.907245][T29310] ____fput+0x1c/0x30 [ 2196.911418][T29310] task_work_run+0x131/0x1a0 [ 2196.916121][T29310] exit_to_user_mode_loop+0xed/0x110 [ 2196.921421][T29310] do_syscall_64+0x1d6/0x200 [ 2196.926024][T29310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2196.931948][T29310] [ 2196.934285][T29310] value changed: 0x0000000000002ff5 -> 0x0000000000004ff5 [ 2196.941398][T29310] [ 2196.943725][T29310] Reported by Kernel Concurrency Sanitizer on: [ 2196.949917][T29310] CPU: 0 UID: 0 PID: 29310 Comm: syz.8.19277 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 2196.961484][T29310] Tainted: [W]=WARN [ 2196.965383][T29310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2196.975890][T29310] ================================================================== [ 2197.001138][T29367] wg1 speed is unknown, defaulting to 1000 [ 2197.028844][T29358] vhci_hcd: connection reset by peer [ 2197.048712][T16761] vhci_hcd: stop threads [ 2197.053506][T16761] vhci_hcd: release socket [ 2197.057990][T16761] vhci_hcd: disconnect device [ 2197.064197][T29367] usb usb1: check_ctrlrecip: process 29367 (syz.4.19298) requesting ep 01 but needs 81 [ 2197.073941][T29367] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 2197.900829][ T3424] usb usb6-port1: unable to enumerate USB device [ 2199.390545][T20467] usb 18-1: device descriptor read/8, error -110 [ 2199.500405][T20467] usb 18-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2199.520415][T20467] usb 18-1: enqueue for inactive port 0 [ 2199.526338][T20467] usb 18-1: enqueue for inactive port 0 [ 2199.532146][T20467] usb 18-1: enqueue for inactive port 0 [ 2200.560564][T20467] usb usb18-port1: attempt power cycle [ 2201.710399][ T8761] usb 4-1: device descriptor read/8, error -110 [ 2201.820469][ T8761] usb 4-1: new SuperSpeed USB device number 3 using vhci_hcd [ 2201.840407][ T8761] usb 4-1: enqueue for inactive port 0 [ 2201.845904][ T8761] usb 4-1: enqueue for inactive port 0 [ 2201.851774][ T8761] usb 4-1: enqueue for inactive port 0 [ 2202.380981][T20467] usb usb18-port1: unable to enumerate USB device [ 2202.870639][ T8761] usb usb4-port1: attempt power cycle [ 2204.690667][ T8761] usb usb4-port1: unable to enumerate USB device