last executing test programs: 27.769457433s ago: executing program 3 (id=11784): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket(0x840000000002, 0x3, 0xff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46e, &(0x7f0000000bc0)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYui4KGioId6jMm2hG4baaLYUmwqUi+CFPQsHgX/Am8iiHoSvOrFkxSK9tLqKTKzM+1mm02N2WRi9veDzb7vzrs7z5P5eud9dwPoWkPZnyRiR0T8EhEDjeriBkONpxvXzk/+de38ZBILC6//keTtrl87P1k2Ld+3vagMpxHph0mxksVmz547OVGv184U9dG5U2+Pzp4999S7pyZO1E7UTo8fOXL40Nizz4w/3ZE8s7yu73t/Zv/el9+8/Mrksctv/fBVFu+OYnlzHp0ylCX+50KuddnjnV5ZxXY2lZPeCgNhRXoiIttcffnxPxA9cWvjDcRLH1QaHLCmsmvTlvaL5xeATSyJqiMAqlFe6LP73/KxTl2PDeHq840boCzvG8WjsaQ30qJNX8v9bScNRcSx+b8/zx6xRuMQAADNPp787Gh/UV7c/0vjvvz5t/zvrmIOZTAi7o6I3RFxT0TsiYh7I/K290fEA6uM5/b+T3pllR+5rKz/91wxt7W4/1f2/mKwp6jtzPPvS45P12sHi//JcPRtyepjy6zjmxd//qTdsub+X/bI1l/2BYs4rvS2DNBNTcxN5J3SDrh6MWJf71L5JzdnApKI2BsR+1b20bvKwvQTX+5v1+jO+S+jA/NMC19k6c1n+c9HS/6lpHl+cvq2+cnRrVGvHRwt94rb/fjTpdfarX9V+XfA1VrjuWn7tzYZTJrna2dXvo5Lv37U9p7mP+7/aX/yRj7PXJ673puYmzszFtGfHM3ri14fv/Xesl62z/b/4QNLH/+7i/dk+T8YEdlO/FBEPBwRjxSxPxoRj0XEgWXy//6F9svK/COtaPtfjJha8vx3c/9v2f4rL/Sc/O7rduv/d9v/cF4aLl7Jz393sFQ42emiNcDV/O8AAADg/yLNvwOfpCM3y2k6MtL4Dv+euCutz8zOPXl85p3TU43vyg9GX1qOdA0U46H16XptLJkvPrExPjpejBWX46WHinHjT3u25fWRyZn6VMW5Q7fb3ub4z/zeU3V0wBrbtuSr4/3rHghQgdZ59HRx9cKr4WQAm5Xfa0P3usPxn65XHMD6c/2H7rXU8X+hpW4uADYn13/oXo5/6FLpt1VHAFTI9R+60mp+17+Gha0bI4xqCht1o+SFiLKQboh4FNaoUPWZCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+CQAA//9Chukd") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x44f0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000), 0x4) r6 = io_uring_setup(0xab4, &(0x7f0000000740)={0x0, 0x25f7, 0x40, 0x2, 0x38c}) close(r6) recvmsg(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, 0x0}, 0x40002100) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x14200, 0x0) ioctl$PPPIOCGFLAGS1(r8, 0x8004745a, &(0x7f0000000640)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000000), 0x4) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {}], 0x2}}, {{&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000800)="696b487a92e473bb265f9a7a", 0xc}], 0x2}}], 0x2, 0x4004040) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="41a49f827dad", @ANYRESHEX=r0, @ANYRESHEX=r7, @ANYRESOCT=r0, @ANYRES16=r0, @ANYBLOB="4d33d67a124412550e7e7ca09c98f9d799ba564a6ab68cb6feb494a54bee3304b43d19c2b8b29f2072bb087dcb117a88e5f42818e25b7d079c9f3af126967c07f15ccdb617b86b4634d1c70300000000000000a867267466caf4ec759f6f072dd462d97dac31362d64fe"], 0x50) 27.342566886s ago: executing program 3 (id=11796): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xf, 0x0, &(0x7f0000000c00)="c25af548c2e206357dd69df0a72891", 0x0, 0x807, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000002000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x40, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) 27.036609168s ago: executing program 3 (id=11806): io_setup(0x4082, &(0x7f0000000380)=0x0) io_pgetevents(r0, 0x8, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x100, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x13, 0xf, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid}]}}) 26.893386269s ago: executing program 3 (id=11812): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext2\x00', &(0x7f0000000580)='./file0\x00', 0x800, &(0x7f0000000040), 0x0, 0x540, &(0x7f0000000b40)="$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") setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x2, 0x100000001, 0x10000, 0x3}, 0x1c) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') 26.75392015s ago: executing program 3 (id=11816): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async, rerun: 32) gettid() (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000140)=0xfffffffe, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b000000e9ffffffffffffff00000400d041c696", @ANYRES32=0x0, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400000000000000060000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095000000000000006ba5f7dc771fd92effa48f8620e91d90b133730dbfac3981268e136996641c3ac329717c8ac19ebfd9aa25ae09a36c0152dddfb1564c7d7d7586ee14080bfa14ba839c646cf7398522e15ffb0f8ce756a7b69d5db0b63ac725a7cf340b799cad7c1a7954"], &(0x7f0000000080)='GPL\x00', 0x1000000, 0x0, 0x0, 0x41000, 0x34, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xd, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x404c083}, 0x20000050) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) (async) unshare(0x22020400) (async) socket$rxrpc(0x21, 0x2, 0x2) r5 = socket(0x15, 0x5, 0x0) prctl$PR_SET_NAME(0xf, 0x0) (async) getsockopt(r5, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)=0x27) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async) setsockopt$packet_int(r7, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000d40)={0x0, 0xea, "ee53cf93d1d552b161b7694a0a29b293fa6ead41acde310e8a9b1a78f8653bc9ed3506693ceece796a4125010a392c5aa7c6ec840f7c715533056174589d3bdc4ee40f7149e5c3950d76ee1c277cafbbb61465af042fba4bd5493f8dc2b67db0e7a8dd4229d650742109ac0e8a6e8d09b6ccedb1bee925e3305fc4f836665befe542a5471bd17c8f0cc504297492c7369b89606a8b731dc98765c8e804387911d5283ba10738b2843706cf4f2490452818d78ea45a837f8d4e264b7dcd2b44b0f3d5a3274cc0a5c94cd8c49dfb30f2b9c96323ff72428e8c3fcfe779b360e6875e1c2c97046d98b5431d"}, &(0x7f00000001c0)=0xf2) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000e40)={r9, @in6={{0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0xf34}}}, 0x84) (async, rerun: 64) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001f00)={@fallback=r8, 0x22, 0x1, 0xff, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0]}, 0x40) (async) ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x5000940f, &(0x7f0000000f00)={{r8}, "167aa54c2a49f654f24f8c775a3245a63e331469f7a2e65b46ec5b29f7204425cbca7f9bb4aa14fe13caafc7219fa5feede9df659cf855fc752254e350e22b9b2a5d9f6de3e430b942bceab00eaa85d18102d4aa6601a655d78a1bd5f73313f9dace5402df9b9850c09df4e386547819ae319c7b52001408a9cda3d8a88018d1f6ed1748a2345250eb02340cb482560702050ccaef392a72b50ef64e7f90b2c5a8387c5d9fa4addb992520413e704dd717fb3d1ba66527ee7acfe72b48f92afc92a5d5b5978a312dca09a8533ebbabe61f689288c018f06045c84e4d0a9178022eb1d6efbfe32c6826472ced89326e00cd84ff2ba6cac080df255ad01ad0b00d33a97f0e233beaed1051e4399f650c1b729d7e5be28e88bf56cc6f12649ad99e21e93bd1e8cd4b11501d277517dd1a2adffe5e5bf9208476f5542137b8c3f8a5bc2d3d8b10d4533feac8f2e7b42635ddfce1c7ea780d97c3b3b16a2b5deddb935b1c1d4da2cc3d6f420c918411e5018d641bf4550d18c8f2f8868978f203c5ce4cb49211d3ef3bf1568ddc14228d44aedf6ddc33701ee30e060067e311e33ca2dc4b44998ca6b6da5a5deb397855e026e6b1e58ae70d31b7926613d2ff2895300776bf36510cc017d3bc742f461a76b90958aaff2a2a5267c9536912dfb2d9756e85317b8cf99101356d03f0544344fc393480251450285580fdd6d0480cb1fb4ef4cf7cf8d20e7074b4c9811cda757a590b6e1c0a542da4b67374e4ace2f4985b4185f80f4274101e73f90716d2328ee23f8c4d814e3cb0e088784506f88d753ea4d03f15d6b4352ded3d2e88fa89637357cd0ddc41b9515f85da125aa05b4b58a22ef2346f628a134029c55ea3931ac7708615ef8827845c9d3688a5560acd58e4b7a8002116dbbda74eaa189701b3b72c192f0928ebb114aa712df74e296e0c7edbc017a0d726cbf0b0768d96b5bda5b1f6ab9b32fb8d657533e26c8c4fbbf53ab4c4267f5df2548749992678414462a3f2123666146ae476951caf5feb6da720a14c337d7a3e6afd601e9535b9db7a7a4f21b4b66b470f2cbc83800708ec35b6921fc9c22cc27aa03f144196e3c9f78c0f76e220c0893f5bdf117b46d708202fc105a73b82f7ad5fc7b39f58c81401edca4610ffa3bad86cc003998fd46140b92f4b30adb662f80c76027774f85bf93ed07609d656945b87be57ff3807bc0df266f049c62ec9a243bf7a7866bccde9d6fd1080bc2eb85683538e5f3742b50302416ee23b9a78a183134e65c080eacbb63fb0c985980c30dede066e103cbde0f5b82a035d68d67a069225542c2c254fd46853ceaf648bd8351c0e63692a10dac2fe9877d9a23d9af6fa44c76d19b3d6e990c1ddee725679deff3c9ceb468ef8f5b5c50172576bf7c18bb8aaf30ecada8454116a168b803ed1e07102d2d89627bf14dbc76b91c5a4fa6535d8602eef9e1a40792dfb79bf288e733f3dd6c6eb40b7c26183a2379346b48a262bf100e160ca2eec2ffaa34b4a1772a66678cd37993369563fa100d928dc5c1546dd8b0e96c0de439c59033760ceddbf0e296f474fc9bbc8491847cb482409da3274b260c87b0f7045766be43d17276b5c6cff170f6ece0d53f5cc4c2b4f8b696092c624f58f50c2bd1eeb7a001ac91a46f335bf8f9bf555877ebac6fa6d0d6701f773b015ad03946bbcaec75c5419ecc6af7885c87dc69dc3303978cc01fb7ab1f783f18160d7ed219f5dffdbd17e9f9bd23a71978e9291e3f4ca2ffdc78918d49d9efeba1124bfeeed246b1668ee8207d3621b49b5446bb1423d5671ef486e08b78f7d481d6bb00ec3f9f63bd8dcd1c1281b232a52df67f98beece46712799b77f1b298f32c9f9c7980c1c0adcd03a86175ea7010117626aa9380e48ab3507dc1f5448b2e8541e0caae80f05e55fdc1c4fcac1c428e0a805c81b7ed89fe31e55f2f266d45f3f9de909a28626283684210a7dd3908a81b6acc76d184404cac6c325800005d9b4df0cf6afa4b9ec5324f834f306dd25db81707381e387771c418e3f4e2efe5f12ff2cde12164eb8c40c9f08b481a27b9e4c5b9a85510a1bcf9152837c615cc68e4659f2e98ffb1f8f5ab2f3ad87f4c2ceba28bc17ff83ef1fe45f1cbc0628d73e5b167b00fa0ddccef728115b7ff4733c271c57c39e72a88e43ae34f9b1efb209131b15ce158c8dfdabd733c7694046b6e28ab10194ec351da33edadbf20dba14bc556be168ac46adc385fe0d131f44f8cb6c1f0304dd95947b2e94e2392b55128279f62a76e0291c37d9b4b67b08c7c41c899d708d0a6a1a373d4b3e68dc05a20da47f87440c4bde21f51cdd321d96c0c240219de83bb14e627521ebdd9dbf77b0b15012b830b6ab303f915c19336e2ff3810dcfd88016019901844389c7bc6977da73aae1b264362b6bfe879ef7b9285b1873a95b3b5792f68152697dfdb1ebe3c2c67fc36832872bfd519a8ccf2bd3e13b253f15df8789efed7917a21744858bd81437181a4c0966d795db4ba11e2dc6dad141fa671a43d0ee9cc1702cf707a8e4cb1e1ff38b9555f226b9c22fb54fcd43548e9a168808aea35b2549ca1833d782e7b0dc656bd4b876794c7381a04bf7b01f9bdf2f355e816124fdc8254303e7b8908a1a6dcc179c4e90b02cee70c1c4c5b64d9b65289725ee6932fe987377d3df8394ab66e63bdb5f596e68bbbb6c9b99934dcdb533e496a010456c65e790885b4c3da7c40cebd479d4c9ecdfb521e15ae95e5b6365bd885094da0e02878c3c9e691dd4bde0f31ee9cc4607b2a7656f3ff6f2838195828b1d5e655bfd37561165bafacf8371dbb400fe25fa077e6898aa30dfc3c833f94a517e52a065840adfd7ebcaf90132ab8224e080f5c7f2c5f5ff5af8be8f368e98a626c3d9aab41d59a4ece790b32b27e3d8a31d63ebca4362426a1c293bc21de8d86f871688bdfca9bf2de48abaa6e3bba250e2190c98d25c9499e733cc855034d43280744ac0fb6272b019a9bbfe2c8693bca3f13b616b203e7c2ffdc2fb10c6d048429fdff784dcda93cbda2962d36f58b6d372454f560184e11781e0838a7ab63b4c7c23cf77c2077afbf91463f76994ad2364b05db2fca75f511b3d598719695c0df542f1389bd784603e84809c973c070fe2d5c7a416da0ef7273fd71730692835220d54b509eec73afece60b678a8fb9183f2befa963202a23580d1d351d5ebdbc3b97e2f19e8bde80f79736438dcae98850f95788beda7c44b0f03ccad06676a47b13069a069aa3baa22c561fa962ec4bb93d21036cc4d4822e74622a83542201a15d7ad0629c22d855bc2ee1b3973fb57415b9e38cefe42c3114395d034b9f2fa5e9124ab70cbb10180d6ec28c9b07e22937886d633b4ab81c4ffce1b22542ccfe843094feb5c9c2389585002ec8a0a71552ec4c830682ee262321177ca7dff9d8a7927d8e935bd7dedb53b01f403aecd1c6fc628e1a3592b2f72e5588e917649a8b4456a8d3279bee855f5d6a91988fc6603b6fd522520c5671ca58a006e06a8554d9a849a6eb95d0e7bb3778ad891f1dd79ef4e9d3c95f032b2f65788ed67f66a824655e370a967416ca64d269fd8bb79db60890347184c7437fcb5ccb6bc9a0d9cd216f50a7c812b0222b5794c6f1cef179fa9975b2dbd40a5517f58fc8ac2f3e9e475f0c61ccb94c3fa23a65b3c28997e6f58360985f5b9540d3f998c1361dc4b3b762499f844f6bcc5bab0b4afbaec24872405688941380f6e934f8d8a28d6b1d22ac31a445facebe2a7bf40b8189a2ca64cba0886d7e5a640297274a0932f51d884f515f2e88845edb3c7ad970b355dd5bb71d1698a033dea10337478f98d18d139d9fb4c152a5bf878153183b2ab14d483e7bd2f3cbaf81bc61eebb867f4eae090911eff49283b8bfe41d3e14cf7ab4f1f65b1f09ae199f56ab2d755b4c0553cf7c99835a953291c8b05ac5218541c7fedb4358be7c0c88510aa34941badb176370d63869ccc11ce38bddc999262b2b2ac25ed31bb5943338cddae6f7c70a5218e70d25afc1df71df97be97f7d80ee80167793fc9d9d6715d00f821ff6a7c89758151f18ff691d8de9ee311223f654d6281ee8e50748c269cc221afc61eb55c4f1ce4113ac069a0905c213491dfbe6e79e770b3d2ca5cf9318eae05bcdef4733d00ee78ee19ad4c17a9c6dcce1efce8aa68338d8032c1e15226db9a8f59d5a08468623d2e960ef66b4c0b1960b7114ee04ee857c1015f8771bcc41016cf6b564bfe083e0b8940bfb0850295d0e96b9b211f8bf00617c3ab2567b41706bc51e833955232fdd4f1d9aea6d61a47124877d1d9a23c3651b3981ab1d7bf5fbcc99870d1f2ef3743cb69e2f293330fa1e63aec95d2e29edb9729ccea7c485eee0fc364c1bde4b3f360dbbbe646ea04cf660f3beca05c28cae144ea6e7e2e0e9ffc744638621fb3d0943b53b6fe73d98d107529ba02d6c8d3665d35aa0aacc1fbfc86bcc329a6a110a6a78e3199137eb788bff5c4dfcfe5351581961014cd63d07df5bd86594d6d1f09ff23a742708f44b5f9f69d994dd4736a7145a06b0cea82c2a44ae407b7ccebff1d8c6d71c749419247e0eaf10640af8cf83b5414bda6dbc433eb21f33e429fcf8a0365c845a9b989c011ec8665bc55fd4346d7df0bc8c5f6e3da726eba888a769ed7904124ca6c99adaf50abead321b392dce5ee55a328af6c15619e639edc014b197dca02ea10fa01d6eca4f6aad6d587cbd1be29a24e4fff33fe75c7751294470dda288107c9a2f1c9bfe0b782cd92c776e95ba2360a23257bd5600ae16b5cb9f53523afb34067fb4f8991208bc068f535f700303ea49483f60fe27ca389e049e9137393d2ed1727590b96456c3543ef65692880ea89199196f2ea7f81c4a6f51944b81c9562b87f6d36b62327339056f01bc931db0bde3b8b589f1934765c491028c18d3c5fc035363972583c59129bdfae1d47e5feade164d4fc2bc6aa401d545c98b68d654a3e2b6bd5c5f89f88f108b16b7524ae3cb6c10055648f59a204ed1da4ad2ab5aea15c0dfffeed5a7bd8c5b32ac08ea01d1e16118dda70e2181edee7ff5f1cc4679fbafdb95f74ee638307ed8de0c24567360fdf2aa07feb86861cde778f031dd9610ecffe7bef38cdb9bec1e12f4d59b1e6971be2de9c8497316e5cf3a2c48e81f50f2e11a65ca4f3776bdcf4835c8ce8d8cd4278c874572a5be7d92a0fd214df8119c8e271583ab3ad34655bc281d2b08bf916f04a38dd00ffd5bc532d405098457e374f033a730991539772b6bc91d6feb7df4679f3cb7ee41dfe9f92beeb80f7e59e2f57fcaac391f32ad5838928e68cf86fd01368e2f090cd78c19c0f6eae93a634a4e160ec3be63d7919fc96fb5b07b484b942e5029ebc985b21fac9ea9833545a4e39d7f9dae7b5481a9f2ffd69f98563c5cceaec680846378a641210f80e090717ce7a0dda5372f395a63ad0f852b1ae2c0bff346876f8c033379a5c1589128644e7067d2edd5dfbea40550a01b3e37d8a870655d7954a0ff6bb9bd70751373306c600402774175cb2a6cb63ea9766ad91a0826de01ce535efde94568ebfc5623913af49eef63d95f2dc5e2214138f9f806793ec81c1875cf6638c24d48a3bd9de8307dba487e9315e89377386042aee42307e973d0ed687373607148d268848ffd23a6cb0b4eb1e2ece47537f76f7d80ad2e1dce4bca566bea87090504f888ea54c48bcd265f9f5f9bc151900358680a426b61"}) 26.511678801s ago: executing program 3 (id=11826): io_setup(0x4082, &(0x7f0000000380)=0x0) r1 = syz_io_uring_setup(0x100293f, &(0x7f0000001400)={0x0, 0x2000004, 0x10, 0xfffffffc}, &(0x7f0000000080), &(0x7f00000014c0)) io_pgetevents(r0, 0x8, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x100, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x13, 0xf, &(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid}]}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000fe16619494a026f455adb15a8aff40a5c77c3cf82b7b2f7316a190cf4e9859238fb1a9b506b3a"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) r9 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r9, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x6b) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x5, @mcast2}, r10}}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000007000000000000007f00000000000000", @ANYRES32=r7, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="02000000040000000100"/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioprio_set$uid(0x3, 0x0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) 26.505243501s ago: executing program 32 (id=11826): io_setup(0x4082, &(0x7f0000000380)=0x0) r1 = syz_io_uring_setup(0x100293f, &(0x7f0000001400)={0x0, 0x2000004, 0x10, 0xfffffffc}, &(0x7f0000000080), &(0x7f00000014c0)) io_pgetevents(r0, 0x8, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x100, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x13, 0xf, &(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid}]}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000fe16619494a026f455adb15a8aff40a5c77c3cf82b7b2f7316a190cf4e9859238fb1a9b506b3a"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) r9 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r9, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x6b) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x5, @mcast2}, r10}}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000007000000000000007f00000000000000", @ANYRES32=r7, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="02000000040000000100"/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioprio_set$uid(0x3, 0x0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) 18.84714647s ago: executing program 5 (id=11943): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a7000000080000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 18.727336761s ago: executing program 5 (id=11946): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000001140)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 18.664730931s ago: executing program 5 (id=11947): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x9, 0x1, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80, &(0x7f0000000000)={[{@errors_remount}]}, 0x1, 0x4dd, &(0x7f0000000240)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80, &(0x7f0000000000)={[{@errors_remount}]}, 0x1, 0x4dd, &(0x7f0000000240)="$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") 18.169628074s ago: executing program 5 (id=11953): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext2\x00', &(0x7f0000000580)='./file0\x00', 0x800, &(0x7f0000000040), 0x0, 0x540, &(0x7f0000000b40)="$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") setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x2, 0x100000001, 0x10000, 0x3}, 0x1c) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') 17.965197936s ago: executing program 5 (id=11959): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x29, 0xfffffffb, 0x2, 0x0, 0x1c00000000}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f00000001c0)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d6d697865642c756e695f786c6174653d302c63682c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c726f6469722c756e695f786c6174653d302c756e695f856c6174653d746e616d653d77696e6e742c696f636861727365743d757466382c757466383d312c73686f72746e616d653d77696e39352c696f636861727365743d69736f383835392d312c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c636865636b3d6e6f726d616c2c00000000000000"], 0x1, 0x369, &(0x7f0000000700)="$eJzs3U1oY1UbAOA3vWnSGfi+dicKQnQnaJnOTje2SAcGu1EJ/izE4HRUkiq0WGwX09aF4lJwqSt3CrpwIS5FUMSdC7eOIKPiQmc34OCR5OYmt0naaQerFJ9nkZy+57znnPtDcntJTp5bjPal6bh8/fq1mJmpRHXxkcW4UYm5yKKwG+NqE2IAwOlwI6X4PeWOmFI54SkBACes9/7/QkQ0Yi6PvP7lYe2Td38AOPX6//+fOazNzEEVr5zIlACAEzZ2///efdW1akQtqsWf1dKnAgCA0+qJp595dGkl4vFGYyZi7c3N5mYzHhrWL12Ol6ITq3EuZuNmRH6h0H2o9B4vXFxZPtdoNHbip7loRsRUP7GZXyksZb38eizEbMz187uXGqlXzi58srK80OiJiN2d3vixVtlsTsfZ/vjfn43V4YVH0UnvKeLiyvL5Rr+D5lqRvxOxN7xv0Z3/fMzGt88Pukmp+ATjyvKVhWLSw/zNZj0uDfbCgXdAAAAAAAAAAAAAAAAAAAAAAADgtsw3BuYG6+ek7nO+Us78/IT63vo4eX5/faC9fH2gVE+R0m+vPdB8K4t96wONrs+zaSFBAAAAAAAAAAAAAAAAAAAAGNjYqkWr01ld39jabpcLO+sbW1MR0Y28/PVHX5yJ8Ta3KFTzIeoRgyEa/WG3262UFY1TFjGennUHLyIffDqYcblNfbAVE6dRP7iq0/nfPT++O4zcnRU9/zlsk8XkDcxK03h4pOe1/+dTOs6OGhTOlyP18dGvppRKkTfK6VeeHe8wKhHV4x+47fZUHNwmdQtfXXvxzmLvtz5Pufvun33y6jvv/9JudbojR+8I1tY3bqZ2q1I0Pt5u6e7qIlKJvFApnwnVw9L39kda2Xe/PnXX298cbfRUjrzaPZ9H2mT55nw8ml7LC91pjlSdGaZP9zeiszo94eS/VeE2jukd7332YUo//HzkIYamxl42Kn/Pqw8AAAAAAAAAAAAAAAAAAFBW+q54X//LvtOHZT342MnPDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+OcPf/y8V9nZjJDIo7I5FBoU/diZk1VfXNyJq//ZmAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwH/dXAAAA//+g5Vir") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000002880)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf0}, 0x1, 0xe, 0x0, 0x4000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) r1 = getpgrp(0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001f40)={0xffffffffffffffff, 0xe0, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001cc0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000001dc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001e00), 0x0, 0x200000d4, &(0x7f0000002680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x58, 0x10, &(0x7f0000001e80), &(0x7f0000001ec0), 0x8, 0xec, 0x8, 0x8, &(0x7f0000001f00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_pidfd_open(r1, 0x0) process_madvise(r3, 0x0, 0x0, 0xa, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x8000, @loopback, 0xffffffff}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000400)="cf3c7110220b6c8ca063fee474879078bae7b658e70362aa13ca4b77ec5e5bb169363f573841a975be3bab38e85e80d9fd98e12ea17871c5ea1337efc9e599484358682d1e5611da06d415c2c99a6d4f682d3c2f2c88b3c2126e23cde1fb4918c2019f3f4d96e88358251c4ef70077bbb0839c070e0605d0329c82c1af64faf395eedc806c716a002997f3a8cacef89beefcdbc7d42859ccdfbfb039a5315e8ea9f987fc1f378db40b79f3", 0xab}, {&(0x7f00000004c0)="daf7f3f15d2c9d3de3f34e54882ea0bbb0c5a4de15dbf322417677d56288e312c02c4dbca47d9579fab487e800a87fdbcabae18c42afc31af2bf504b29f4f7e815faafe526e27cc51b5abfebcdf5cb368ab1067b8e1c611e20f15b04bc4f046bb4d7c511b17d3d433e3263637c404795e523f22856bbec526a791f83611c20701a4699a45ce7d864adb13020856e504c6285b99bde19b855e2f519de0d6e3d074d79960125efc910b96c823296ec190455849e9f3344c493f6c9517696415e6debf8221b863615e3e70816680bee551f5960b3465e325cc6ad1f084c0e3931c323d67efb", 0xe4}, {&(0x7f00000005c0)="da2067e91ada0410a80dc44a27ac29715ca533fe098affb466a211cebcf199a70829ca26f25399db8696fe7797f3d0577b14fc34c57cd0100f4781a0878497d245aa0d2e853faa7d0cc175bfa3c81666d0eae76088164c648cb2f622869245c5c47803f9f284c262b916fd19469b8625621f0d4803cfcaa14c2913a1b52a6be7666c0cc76e29ec2978a08e8906ad32420e668b0ad5b738dda1039e8c5715036c6f17d5f06210a49f44", 0xa9}, {&(0x7f0000000680)="c8e3b5d7fc626cb1bcdbe9438ae7ea17c228fed082c43627d349c957cab21db6081148fb359d5acf81160a73aa7c106b54f71b48273e09949ced829fba1f552f6172be77be59a543c2a0f44dd5f856f8957500abcd8b9733403bd71fca0b672fe62967aebbb5273bfedca49e7df876f28757d9b2241fb8a222d76bfbfd7e65126efb3e2f8f8b82ef42404a9a52414782139f02d65d4c4699b7862b340b02dd707c08f1083d45d3a5212e0979", 0xac}, {&(0x7f0000000740)="719a6a9c3ebf9dcaa710c2bb7ec31a5befa983b27c5378837dec6573a73cb009ee767239c308566e61d1316f865111cdf1b6911e8d28dde4e22af70cfeeaa4ed4b2e8343ac3cc3ed740b7d3713a75ce52ace07d91d5f2f68201957078cb43fe100d3ab607af25722587eb2a71fcd3bee65a5df8a1cf073203be4224e350ba2782e67854e8b3a6701bd4cc15da059cd6e38c210e36db2a05d8cf5b90ef3b900b8fa8b484b22256f89c6c931f041af5bb2", 0xb0}, {0x0}], 0x6, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/424, @ANYRES32=r5, @ANYBLOB="00000000e05043777252fa488bf008bf46a2030f1bb1ae8c741a90775ff2bd2c2d21935a8c0fd26f97e98924d071319044fad819f4bc452d4e9ffa90b8e75df1bb1680730502bb55e981c644f5f2ef4068861f857eb5cf2806c47f189288d5503177e83ad8c303320be09c5123097f631f4c8dddd271604d9645cabb954f45f0d58e68348c8a147ee7f849eae79747bce3cbae373abbe4ff066e2a8be54eff68cd50aa21"], 0x1b0}}], 0x1, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r8, &(0x7f0000001d40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000f0625050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x240080c0}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400001000000000000000000000000200000000020000000000000802000000020000000000000e030000000000000000006100"], 0x0, 0x54}, 0x20) connect$unix(r9, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socket$kcm(0x10, 0x2, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000002300), 0x40000000, &(0x7f0000002380)) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002440)=@delqdisc={0xa4, 0x25, 0x402, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0xffe0}, {0x2, 0x8}, {0xd, 0x8}}, [@TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x1, 0x8001, 0x0, 0x1, 0x4, 0x4, 0x6}}, {0x10, 0x2, [0x7, 0x8001, 0x100, 0x0, 0x8, 0xf82]}}, {{0x1c, 0x1, {0x3, 0x2, 0x6, 0xc3f, 0x2, 0x5, 0x2, 0x4}}, {0xc, 0x2, [0x6, 0x7, 0xbbe, 0x3]}}, {{0x1c, 0x1, {0x2, 0xa, 0xff80, 0x0, 0x1, 0xfffffff8, 0xa, 0x4}}, {0xc, 0x2, [0x0, 0x3, 0x6, 0xff]}}]}]}, 0xa4}}, 0x64044880) 17.755096317s ago: executing program 5 (id=11963): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x143143, 0x40) pwritev2(r1, 0x0, 0x0, 0x5405, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0), 0x200000, &(0x7f0000000180)=ANY=[@ANYBLOB=',loose,access=client,access=any,version=9p2000,version=9p2000.L,fscontext=', @ANYBLOB="120ddb4f2a337f81c4f61421db4c3b82b9d22878eb3f38b0803e247bd353baa137ae23caeedfc8216792b32e265b6ed9a6fabb39eca350395c1445b154955771c1189b33a848132ad8011338e7c659594ca4169cd622e4479c1f52c32149aac62ab7b90ef2270cf5e69c4344ca1fd9580aeac17330646eee7068f3f2eb354c3019b5d9118deb7ca0011271f2cefc96f54438c431c08ef28bfb417bea8886866e4b0c845022e91c9c"]) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3, 0x0, 0x200000000000006}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb0300050000"], 0x50}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0) r5 = gettid() syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) chdir(&(0x7f0000000100)='./file0\x00') timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000) socket$inet6_mptcp(0xa, 0x1, 0x106) write$cgroup_pid(r1, &(0x7f0000000000)=r5, 0x12) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x178270d30af4bf74) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000001180)='kfree\x00', r7, 0x0, 0x4}, 0x18) 17.729476167s ago: executing program 33 (id=11963): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x143143, 0x40) pwritev2(r1, 0x0, 0x0, 0x5405, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0), 0x200000, &(0x7f0000000180)=ANY=[@ANYBLOB=',loose,access=client,access=any,version=9p2000,version=9p2000.L,fscontext=', @ANYBLOB="120ddb4f2a337f81c4f61421db4c3b82b9d22878eb3f38b0803e247bd353baa137ae23caeedfc8216792b32e265b6ed9a6fabb39eca350395c1445b154955771c1189b33a848132ad8011338e7c659594ca4169cd622e4479c1f52c32149aac62ab7b90ef2270cf5e69c4344ca1fd9580aeac17330646eee7068f3f2eb354c3019b5d9118deb7ca0011271f2cefc96f54438c431c08ef28bfb417bea8886866e4b0c845022e91c9c"]) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3, 0x0, 0x200000000000006}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb0300050000"], 0x50}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0) r5 = gettid() syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) chdir(&(0x7f0000000100)='./file0\x00') timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000) socket$inet6_mptcp(0xa, 0x1, 0x106) write$cgroup_pid(r1, &(0x7f0000000000)=r5, 0x12) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x178270d30af4bf74) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000001180)='kfree\x00', r7, 0x0, 0x4}, 0x18) 14.986842214s ago: executing program 6 (id=11964): socket$inet(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffff001}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffcc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffff, 0xfffffffe}, 0x37) 14.960026575s ago: executing program 6 (id=12007): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000400)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000000600)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x4f) setxattr$security_capability(&(0x7f00000001c0)='./bus/file0\x00', &(0x7f0000000200), &(0x7f00000003c0)=@v3={0x3000000, [{0xc, 0x7ffffff1}, {0x5}]}, 0x18, 0x0) fallocate(r0, 0x1, 0x8, 0x2000402) r1 = accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10, 0x80000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x3, 0x10}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x1, 0x40}, &(0x7f0000000180)=0x8) 14.819153695s ago: executing program 6 (id=12012): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext2\x00', &(0x7f0000000580)='./file0\x00', 0x800, &(0x7f0000000040), 0x0, 0x540, &(0x7f0000000b40)="$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") setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x2, 0x100000001, 0x10000, 0x3}, 0x1c) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') 14.669541917s ago: executing program 6 (id=12016): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgrcv(r0, &(0x7f0000000200)={0x0, ""/1}, 0x9, 0x1, 0x3000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x572c6de, 0x0, 0x9fc, 0x0, 0xfffffc80, 0x8000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x1, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x7, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40003, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7db, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x4000d79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x5, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000200)=r5) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a308e0e00002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000048000000060a190400000000000000000100000108000b4000000000200004801c0001800b00010065787468647200000c00028008000640000000020900010073797a3000000000140000001100010000000000000000000100000a"], 0xbc}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r10}, 0x10) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r11, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r11, &(0x7f0000000040), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x0, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 12.907125678s ago: executing program 6 (id=12042): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r4 = socket(0x8000000010, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r5}, 0x10) write(r4, &(0x7f00000002c0)="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", 0xfc) 12.872011338s ago: executing program 34 (id=12042): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r4 = socket(0x8000000010, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r5}, 0x10) write(r4, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) 4.68724091s ago: executing program 0 (id=12173): io_setup(0x4082, &(0x7f0000000380)=0x0) r1 = syz_io_uring_setup(0x100293f, &(0x7f0000001400)={0x0, 0x2000004, 0x10, 0xfffffffc}, &(0x7f0000000080), &(0x7f00000014c0)) io_pgetevents(r0, 0x8, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x100, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x13, 0xf, &(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid}]}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000fe16619494a026f455adb15a8aff40a5c77c3cf82b7b2f7316a190cf4e9859238fb1a9b50"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) r9 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r9, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x6b) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x5, @mcast2}, r10}}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000007000000000000007f00000000000000", @ANYRES32=r7, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="02000000040000000100"/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioprio_set$uid(0x3, 0x0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) 2.446254034s ago: executing program 7 (id=12210): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000280)=""/131, 0x83}], 0x1, 0x0, 0x8) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xf, 0x0, 0x2}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) getrlimit(0x8, &(0x7f0000000040)) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) fstatfs(0xffffffffffffffff, 0x0) 2.178211755s ago: executing program 1 (id=12219): syz_io_uring_setup(0x3d9f, &(0x7f0000000000)={0x0, 0xbd60, 0x8, 0x80007, 0x2bb}, &(0x7f00000003c0), &(0x7f0000000540)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2.148450176s ago: executing program 1 (id=12221): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2.070543216s ago: executing program 1 (id=12222): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgrcv(r0, &(0x7f0000000200)={0x0, ""/1}, 0x9, 0x1, 0x3000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x572c6de, 0x0, 0x9fc, 0x0, 0xfffffc80, 0x8000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x1, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x7, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40003, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7db, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x4000d79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x5, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000200)=r5) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a308e0e00002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000048000000060a190400000000000000000100000108000b4000000000200004801c0001800b00010065787468647200000c00028008000640000000020900010073797a3000000000140000001100010000000000000000000100000a"], 0xbc}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r8, 0x5) 1.663444729s ago: executing program 2 (id=12230): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) setitimer(0x1, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000001c0)={@mcast2}, &(0x7f0000000340)=0x14) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xe1c}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newtaction={0x174, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x160, 0x1, [@m_mirred={0x110, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0xe3, 0x6, "3410f8156adf906474cfecaf107c0eea25de8d8827e2d55efa3a1fedf3ea550237feb0be10ff3e8b97b4505746b5d5bc090f6bdadea3c001612568fb134e57405e8f486b890cfdb2e9b27f04bc3634ce7b36261a80fe1f758a5948958a9e51658b00cf198af3d85cf81af1f6ed3d41905b34aa840ef4a5e359659df098ccc18b08a744bec4477c4726fcd358b98f0d2f5af2250b9e4db0dd1a745393d1e60ba4103b4e869a803f2684e4c4442d8ea2ec01be97dd96b406c819652721e86354a28d30050af3d4da1b1b0902b4fd46805c7dc053afc9cdfc568bad8208439d8e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x4000a, 0x7, 0x5, 0x8}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x8010}, 0xc0) syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x2800) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x1, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0xd20, 0x3, 0x8002, 0xfffffffffffffff7, 0x5, 0xfffffffffffffffd, 0x0, 0x802, 0x9, 0x100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xe1, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x3, 0x8, 0x100040000, 0x7, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x15, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xda, 0x2, 0x0, 0x4, 0x9, 0x6, 0x8000, 0x8000000000000000, 0x4, 0x0, 0x1000000000014, 0x5bc, 0x1, 0xa2, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0xc, 0x82c, 0x7ff, 0xbbc, 0x1fcc, 0x6, 0x0, 0xd, 0x22, 0xfffffffffffffffe, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x7, 0x9, 0x100000002, 0x0, 0x4, 0x7, 0x3, 0x7, 0x9, 0x1001, 0x16d, 0x6, 0x68e, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x2200000003, 0x4, 0x7, 0x6, 0x5, 0x8, 0x805, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xe, 0x3]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.46326987s ago: executing program 4 (id=12232): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 1.417712781s ago: executing program 4 (id=12233): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) close(0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4045}, 0x4000054) 1.346517701s ago: executing program 2 (id=12234): socket$kcm(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0xffff, 0x0, 0xf7, 0x0, 0x4, 0x0, 0xffffffff}, 0x0, 0x7, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYRESHEX], 0xfdef) 1.252699902s ago: executing program 2 (id=12235): io_setup(0x4082, &(0x7f0000000380)=0x0) io_pgetevents(r0, 0x8, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x100, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x13, 0xf, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid}]}}) 1.252436622s ago: executing program 4 (id=12236): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid}]}}) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000340)="4d58abdf12a837465f7466f951bf78949e2d5c936fa99490b8e72047dc884c670f971229733244d784b8888d5518aa8aaf80fc0cc364e8d5f4afbeab96c43f9bfe7a88a68066", 0x46) r9 = dup(r7) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="0a000010ffffffffffff00000000000086dd6900040000202c00fc020000000000000000000000000001ff0200000000000000000000000000010402000000000000c91063cf437d7e90cff00000000000000001000000000000"], 0x5a) r10 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'macvtap0\x00', 0x0}) setsockopt$inet6_mreq(r10, 0x29, 0x14, &(0x7f0000000000)={@mcast2, r11}, 0x14) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r12, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xb907}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x880) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r11, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) close(r10) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.206287402s ago: executing program 1 (id=12238): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44840}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d0000001801000020207025"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9af7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000d00)={'filter\x00', 0x104, 0x4, 0x3c8, 0x0, 0x220, 0x220, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0xff, 0x0, 0x0, 0x0, {@mac, {[0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @mangle={0x0, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x1e}, @broadcast, 0x4, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x427) socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) openat2(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)={0x4c81, 0x0, 0x10}, 0x18) syz_emit_ethernet(0xffffffffffffff68, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af0ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r4}, 0x18) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) sync() keyctl$setperm(0x5, r5, 0x52b242d) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x101180) r6 = socket(0x11, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a89723a0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb88b425f80200e3c0ab"], 0xdd12}], 0x1}, 0x0) 1.143069363s ago: executing program 1 (id=12239): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 1.111368502s ago: executing program 7 (id=12240): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x143143, 0x40) pwritev2(r1, 0x0, 0x0, 0x5405, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0), 0x200000, &(0x7f0000000180)=ANY=[@ANYBLOB=',loose,access=client,access=any,version=9p2000,version=9p2000.L,fscontext=', @ANYBLOB="120ddb4f2a337f81c4f61421db4c3b82b9d22878eb3f38b0803e247bd353baa137ae23caeedfc8216792b32e265b6ed9a6fabb39eca350395c1445b154955771c1189b33a848132ad8011338e7c659594ca4169cd622e4479c1f52c32149aac62ab7b90ef2270cf5e69c4344ca1fd9580aeac17330646eee7068f3f2eb354c3019b5d9118deb7ca0011271f2cefc96f54438c431c08ef28bfb417bea8886866e4b0c845022e91c9c"]) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3, 0x0, 0x200000000000006}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb0300050000"], 0x50}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0) r5 = gettid() syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) chdir(&(0x7f0000000100)='./file0\x00') timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000) socket$inet6_mptcp(0xa, 0x1, 0x106) write$cgroup_pid(r1, &(0x7f0000000000)=r5, 0x12) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x178270d30af4bf74) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000001180)='kfree\x00', r7, 0x0, 0x4}, 0x18) 1.062062903s ago: executing program 1 (id=12241): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x400007}, 0x18) membarrier(0x40, 0x0) 1.001515533s ago: executing program 4 (id=12242): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgrcv(r0, &(0x7f0000000200)={0x0, ""/1}, 0x9, 0x1, 0x3000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x572c6de, 0x0, 0x9fc, 0x0, 0xfffffc80, 0x8000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x1, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x7, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40003, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7db, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x4000d79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x5, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000200)=r5) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a308e0e00002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000048000000060a190400000000000000000100000108000b4000000000200004801c0001800b00010065787468647200000c00028008000640000000020900010073797a3000000000140000001100010000000000000000000100000a"], 0xbc}}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r9}, 0x18) r10 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r10, 0x5) 979.777453ms ago: executing program 0 (id=12179): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f0000000400000008000000060c9ca79f401b2c5c3803c49b300b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f02, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2, 0x0, 0x1075}, 0x18) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) syz_usb_disconnect(r3) 920.728444ms ago: executing program 2 (id=12244): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext2\x00', &(0x7f0000000580)='./file0\x00', 0x800, &(0x7f0000000040), 0x0, 0x540, &(0x7f0000000b40)="$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") setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x2, 0x100000001, 0x10000, 0x3}, 0x1c) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') 839.520704ms ago: executing program 7 (id=12245): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000200)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a89723a0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb88b425f80200e3c0ab"], 0xdd12}], 0x1}, 0x0) 797.003524ms ago: executing program 7 (id=12246): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7040000010000008500000078000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext2\x00', &(0x7f0000000580)='./file0\x00', 0x800, &(0x7f0000000040), 0x0, 0x540, &(0x7f0000000b40)="$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") setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x2, 0x100000001, 0x10000, 0x3}, 0x1c) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') 695.530395ms ago: executing program 7 (id=12247): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgrcv(r0, &(0x7f0000000200)={0x0, ""/1}, 0x9, 0x1, 0x3000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x572c6de, 0x0, 0x9fc, 0x0, 0xfffffc80, 0x8000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x1, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x7, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40003, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7db, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x4000d79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x5, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000200)=r5) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a308e0e00002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000048000000060a190400000000000000000100000108000b4000000000200004801c0001800b00010065787468647200000c00028008000640000000020900010073797a3000000000140000001100010000000000000000000100000a"], 0xbc}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r8, 0x5) 588.246726ms ago: executing program 2 (id=12248): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a118000300ff05000006000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x1, &(0x7f0000001c80)={0x0, 0x989680}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='cpu.weight.nice\x00', 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) 411.071317ms ago: executing program 7 (id=12249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xf802}) socket$netlink(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000280)=""/131, 0x83}], 0x1, 0x0, 0x8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xf, 0x0, 0x2}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) getrlimit(0x8, &(0x7f0000000040)) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) fstatfs(0xffffffffffffffff, 0x0) 410.867777ms ago: executing program 35 (id=12249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xf802}) socket$netlink(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000280)=""/131, 0x83}], 0x1, 0x0, 0x8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xf, 0x0, 0x2}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) getrlimit(0x8, &(0x7f0000000040)) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) fstatfs(0xffffffffffffffff, 0x0) 228.957198ms ago: executing program 0 (id=12251): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 228.648198ms ago: executing program 2 (id=12252): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44840}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d0000001801000020207025"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9af7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000d00)={'filter\x00', 0x104, 0x4, 0x3c8, 0x0, 0x220, 0x220, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0xff, 0x0, 0x0, 0x0, {@mac, {[0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @mangle={0x0, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x1e}, @broadcast, 0x4, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x427) socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) openat2(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)={0x4c81, 0x0, 0x10}, 0x18) syz_emit_ethernet(0xffffffffffffff68, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af0ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r4}, 0x18) tkill(r3, 0x12) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) sync() keyctl$setperm(0x5, r5, 0x52b242d) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x101180) r6 = socket(0x11, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000200)=0xe9, 0x4) sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a89723a0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb88b425f80200e3c0ab"], 0xdd12}], 0x1}, 0x0) 180.016958ms ago: executing program 36 (id=12252): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44840}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d0000001801000020207025"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9af7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000d00)={'filter\x00', 0x104, 0x4, 0x3c8, 0x0, 0x220, 0x220, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0xff, 0x0, 0x0, 0x0, {@mac, {[0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @mangle={0x0, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x1e}, @broadcast, 0x4, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x427) socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) openat2(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)={0x4c81, 0x0, 0x10}, 0x18) syz_emit_ethernet(0xffffffffffffff68, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af0ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r4}, 0x18) tkill(r3, 0x12) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) sync() keyctl$setperm(0x5, r5, 0x52b242d) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x101180) r6 = socket(0x11, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000200)=0xe9, 0x4) sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a89723a0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb88b425f80200e3c0ab"], 0xdd12}], 0x1}, 0x0) 161.425128ms ago: executing program 0 (id=12254): socket$kcm(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0xffff, 0x0, 0xf7, 0x0, 0x4, 0x0, 0xffffffff}, 0x0, 0x7, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYRESHEX], 0xfdef) 91.254289ms ago: executing program 4 (id=12255): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r1}, 0x10) pause() 90.945309ms ago: executing program 0 (id=12256): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7040000010000008500000078000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext2\x00', &(0x7f0000000580)='./file0\x00', 0x800, &(0x7f0000000040), 0x0, 0x540, &(0x7f0000000b40)="$eJzs3c1rHOUfAPDvzGZ//bWNpuIL6qmgpUrpJm1aJLfm4LFSDR4lhs02hGyyIbupTcihBe8KCooiqCfvXkXEP8CziP4Dithgab1FJjub1s2L27TpSufzgdl9Xjb5Pk9mv092hhk2gMI6nj2kEc9FxKUkYuiuvoHIO4+3X3drfa16e32tmsTGxsQfSSQRcXN9rdp5fZI/H42IaxHxbER8X444lW6P21xZnZuq12tLeX24Nb843FxZPT07PzVTm6ktjI6dHxsde2Xs3Gj3jx7b71wnJsdeP/HTa8m3yfirNz9760YSF2Iw77t7Hg9S+29Sjgtd7ecOIlgfJV31J/o0Du5NKc/zckQ8HUNRyrMeePRtHIrYAAoqkf9QUJ3PAdnxb2d7mJ8/fh9vH4BkcW/lW7tnoH1uIv6/eWxy5M/kH0cmyf2cCIDctesRMTIwsP39n+Tvv/0beRAD5EB9N97eUdv3f7q1/sQO689g59zpfeqsf7e2rX934pd2Wf8u9RhjYeyHZ3aNfz3i+R3jJ1vxkx3ipxHxdo/xJ77+7cvd+ja+iDgZO8fvSPY+Pzx8ebZeG2k/7hjjvTdGvtpr/kd2iX9hj/lnbYs9zj/efPLna3vEf+mFvff/TvEPR8T7PYb/5ZMP3t2tL4s/vcv894qftX3eY/wTL38z3uNLAQAAAAAAAACAe5BuXsuWpJWtcppWKu17eJ+KI2m90WydutxYXphuX/N2LMpp50qroXY9yepn8utxO/WzXfXR/J7QD0uHN+uVaqM+3e/JAwAAAAAAAAAAAAAAAAAAwH/E0a77/2+W2vf/AwXhK7+huOQ/FJf8h+KS/1Bc8h+Kqyv/y/0aB/Dw+f8PxSX/objkPxSX/Ifikv8AAAAAAAAAAAAAAAAAAAAAAAAAAHAgLl28mG0bt9fXqll9+srK8lzjyunpWnOuMr9crVQbS4uVmUZjpl6rVBvz//b76o3G4vlYWL463Ko1W8PNldXJ+cbyQmtydn5qpjZZ891CAAAAAAAAAAAAAAAAAAAAsN3g5paklYhIN8tpWqlEPBYRx6KcXJ6t10Yi4vGI+LFUPpTVz/R70AAAAAAAAAAAAAAAAAAAAPCIaa6szk3V67UlBQUFha1Cv1cmAAAAAAAAAAAAAAAAAAAonjs3/fZ7JAAAAAAAAAAAAAAAAAAAAFBk6a9JRGTbyaEXB7t7/5f8Vdp8joh3Pp346OpUq7V0Jmu/sdXe+jhvP9uP8QO96uRpJ48BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAO5orq3NT9Xpt6QAL/Z4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH78HQAA///Dgdff") setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x2, 0x100000001, 0x10000, 0x3}, 0x1c) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') 0s ago: executing program 0 (id=12257): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) setitimer(0x1, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000001c0)={@mcast2}, &(0x7f0000000340)=0x14) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xe1c}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newtaction={0x174, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x160, 0x1, [@m_mirred={0x110, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0xe3, 0x6, "3410f8156adf906474cfecaf107c0eea25de8d8827e2d55efa3a1fedf3ea550237feb0be10ff3e8b97b4505746b5d5bc090f6bdadea3c001612568fb134e57405e8f486b890cfdb2e9b27f04bc3634ce7b36261a80fe1f758a5948958a9e51658b00cf198af3d85cf81af1f6ed3d41905b34aa840ef4a5e359659df098ccc18b08a744bec4477c4726fcd358b98f0d2f5af2250b9e4db0dd1a745393d1e60ba4103b4e869a803f2684e4c4442d8ea2ec01be97dd96b406c819652721e86354a28d30050af3d4da1b1b0902b4fd46805c7dc053afc9cdfc568bad8208439d8e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x4000a, 0x7, 0x5, 0x8}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x8010}, 0xc0) syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x2800) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x1, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0xd20, 0x3, 0x8002, 0xfffffffffffffff7, 0x5, 0xfffffffffffffffd, 0x0, 0x802, 0x9, 0x100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xe1, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x3, 0x8, 0x100040000, 0x7, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x15, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xda, 0x2, 0x0, 0x4, 0x9, 0x6, 0x8000, 0x8000000000000000, 0x4, 0x0, 0x1000000000014, 0x5bc, 0x1, 0xa2, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0xc, 0x82c, 0x7ff, 0xbbc, 0x1fcc, 0x6, 0x0, 0xd, 0x22, 0xfffffffffffffffe, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x7, 0x9, 0x100000002, 0x0, 0x4, 0x7, 0x3, 0x7, 0x9, 0x1001, 0x16d, 0x6, 0x68e, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x2200000003, 0x4, 0x7, 0x6, 0x5, 0x8, 0x805, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xe, 0x3]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): 0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9568 comm="syz.0.11150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fa4132af6c9 code=0x7ffc0000 [ 667.542063][ T9570] netlink: 'syz.4.11149': attribute type 13 has an invalid length. [ 667.573761][ T29] audit: type=1326 audit(1762222391.113:101478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9568 comm="syz.0.11150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4132af6c9 code=0x7ffc0000 [ 667.646524][ T9570] tipc: Enabling of bearer rejected, already enabled [ 669.053866][ T9612] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11168'. [ 669.899970][ T9625] loop3: detected capacity change from 0 to 1024 [ 669.917114][ T9625] EXT4-fs: Ignoring removed orlov option [ 669.962330][ T9625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 670.057793][ T9638] FAULT_INJECTION: forcing a failure. [ 670.057793][ T9638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.070920][ T9638] CPU: 0 UID: 0 PID: 9638 Comm: +}[@ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 670.070953][ T9638] Tainted: [W]=WARN [ 670.070960][ T9638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 670.070972][ T9638] Call Trace: [ 670.070979][ T9638] [ 670.071056][ T9638] __dump_stack+0x1d/0x30 [ 670.071083][ T9638] dump_stack_lvl+0xe8/0x140 [ 670.071104][ T9638] dump_stack+0x15/0x1b [ 670.071124][ T9638] should_fail_ex+0x265/0x280 [ 670.071165][ T9638] should_fail+0xb/0x20 [ 670.071248][ T9638] should_fail_usercopy+0x1a/0x20 [ 670.071332][ T9638] _copy_from_user+0x1c/0xb0 [ 670.071357][ T9638] memdup_user+0x5e/0xd0 [ 670.071403][ T9638] strndup_user+0x68/0xb0 [ 670.071451][ T9638] __se_sys_mount+0x4d/0x2e0 [ 670.071481][ T9638] ? fput+0x8f/0xc0 [ 670.071502][ T9638] ? ksys_write+0x192/0x1a0 [ 670.071533][ T9638] __x64_sys_mount+0x67/0x80 [ 670.071575][ T9638] x64_sys_call+0x2b51/0x3000 [ 670.071598][ T9638] do_syscall_64+0xd2/0x200 [ 670.071621][ T9638] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 670.071655][ T9638] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 670.071713][ T9638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.071733][ T9638] RIP: 0033:0x7f07f359f6c9 [ 670.071787][ T9638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.071805][ T9638] RSP: 002b:00007f07f1fe6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 670.071825][ T9638] RAX: ffffffffffffffda RBX: 00007f07f37f6090 RCX: 00007f07f359f6c9 [ 670.071837][ T9638] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000 [ 670.071848][ T9638] RBP: 00007f07f1fe6090 R08: 0000200000000180 R09: 0000000000000000 [ 670.071894][ T9638] R10: 0000000000804000 R11: 0000000000000246 R12: 0000000000000001 [ 670.071972][ T9638] R13: 00007f07f37f6128 R14: 00007f07f37f6090 R15: 00007ffec020d428 [ 670.071993][ T9638] [ 670.318652][ T9145] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.332439][ T9641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11176'. [ 670.461779][ T9652] lo speed is unknown, defaulting to 1000 [ 670.531426][ T9655] netlink: 'syz.2.11182': attribute type 4 has an invalid length. [ 670.737439][ T9667] netlink: 'syz.2.11185': attribute type 4 has an invalid length. [ 670.778070][ T9673] C: renamed from team_slave_0 [ 670.789510][ T9673] netlink: 'syz.2.11188': attribute type 3 has an invalid length. [ 670.797424][ T9673] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11188'. [ 670.806312][ T9678] loop3: detected capacity change from 0 to 512 [ 670.806731][ T9673] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 670.828554][ T9676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11186'. [ 670.829969][ T9679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11187'. [ 670.837748][ T9676] netlink: 'syz.0.11186': attribute type 12 has an invalid length. [ 670.846586][ T9679] netlink: 'syz.4.11187': attribute type 12 has an invalid length. [ 670.854538][ T9676] netlink: 'syz.0.11186': attribute type 13 has an invalid length. [ 670.862415][ T9679] netlink: 'syz.4.11187': attribute type 13 has an invalid length. [ 670.882905][ T9678] EXT4-fs (loop3): orphan cleanup on readonly fs [ 670.897109][ T9678] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.11190: EA inode hash validation failed [ 670.904118][ T9676] tipc: Enabling of bearer rejected, already enabled [ 670.913237][ T9678] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 670.931604][ T9679] tipc: Enabling of bearer rejected, already enabled [ 670.941500][ T9678] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.11190: corrupted inode contents [ 670.953781][ T9678] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.11190: mark_inode_dirty error [ 670.965394][ T9678] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.11190: corrupted inode contents [ 670.978207][ T9678] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.11190: mark_inode_dirty error [ 670.990707][ T9678] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.11190: mark inode dirty (error -117) [ 671.003614][ T9678] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 671.012712][ T9678] EXT4-fs (loop3): 1 orphan inode deleted [ 671.019256][ T9678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 671.053032][ T9678] SELinux: ebitmap: truncated map [ 671.062032][ T9678] SELinux: failed to load policy [ 671.071896][ T9678] pimreg: entered allmulticast mode [ 671.078088][ T9678] pimreg: left allmulticast mode [ 671.139306][ T9145] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.163506][ T9696] macvtap1: entered allmulticast mode [ 671.169267][ T9696] veth0_macvtap: entered allmulticast mode [ 671.177683][ T9696] 9pnet_fd: Insufficient options for proto=fd [ 671.184504][ T9696] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11195'. [ 671.193637][ T9696] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11195'. [ 671.208819][ T9696] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 671.219489][ T9696] bond1 (unregistering): Released all slaves [ 671.563172][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11196'. [ 671.637562][ T9715] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11201'. [ 671.671511][ T9720] batadv_slave_1: entered promiscuous mode [ 672.139112][ T9710] batadv_slave_1: left promiscuous mode [ 672.274318][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 672.274334][ T29] audit: type=1326 audit(1762222395.913:101802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.2.11207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f4ddf6c9 code=0x7ffc0000 [ 672.307574][ T9733] macvtap24: entered allmulticast mode [ 672.344259][ T29] audit: type=1326 audit(1762222395.923:101803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.2.11207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92f4ddf6c9 code=0x7ffc0000 [ 672.368095][ T29] audit: type=1326 audit(1762222395.923:101804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.2.11207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f4ddf6c9 code=0x7ffc0000 [ 672.391811][ T29] audit: type=1326 audit(1762222395.953:101805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.2.11207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f4ddf6c9 code=0x7ffc0000 [ 672.415813][ T29] audit: type=1326 audit(1762222395.953:101806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.2.11207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92f4ddf6c9 code=0x7ffc0000 [ 672.439712][ T29] audit: type=1326 audit(1762222395.953:101807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.2.11207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f4ddf6c9 code=0x7ffc0000 [ 672.463411][ T29] audit: type=1326 audit(1762222395.963:101808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.2.11207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f4ddf6c9 code=0x7ffc0000 [ 672.487209][ T29] audit: type=1326 audit(1762222395.963:101809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.2.11207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92f4ddf6c9 code=0x7ffc0000 [ 672.510931][ T29] audit: type=1326 audit(1762222395.983:101810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.2.11207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f4ddf6c9 code=0x7ffc0000 [ 672.534639][ T29] audit: type=1326 audit(1762222395.983:101811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.2.11207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f4ddf6c9 code=0x7ffc0000 [ 672.539836][ T9733] 9pnet_fd: Insufficient options for proto=fd [ 672.596634][ T9739] siw: device registration error -23 [ 672.608962][ T9736] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11206'. [ 672.618062][ T9736] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11206'. [ 672.690513][ T9736] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 672.712771][ T9745] netlink: 5 bytes leftover after parsing attributes in process `syz.4.11209'. [ 672.734757][ T9736] bond1 (unregistering): Released all slaves [ 672.773573][ T9745] 0{X: renamed from gretap0 (while UP) [ 672.814704][ T9745] 0{X: entered allmulticast mode [ 672.842661][ T9745] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 672.983595][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11210'. [ 672.992763][ T9754] netlink: 'syz.4.11210': attribute type 12 has an invalid length. [ 673.000754][ T9754] netlink: 'syz.4.11210': attribute type 13 has an invalid length. [ 673.405060][ T9762] macvtap25: entered allmulticast mode [ 673.433280][ T9762] 9pnet_fd: Insufficient options for proto=fd [ 673.448912][ T9762] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11215'. [ 673.458115][ T9762] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11215'. [ 673.499899][ T9762] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 673.519995][ T9762] bond1 (unregistering): Released all slaves [ 673.596533][ T9767] macvtap17: entered allmulticast mode [ 673.613965][ T9767] 9pnet_fd: Insufficient options for proto=fd [ 673.646531][ T9767] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 673.666412][ T9767] bond1 (unregistering): Released all slaves [ 674.466773][ T9802] loop3: detected capacity change from 0 to 512 [ 674.473814][ T9802] EXT4-fs: Ignoring removed nobh option [ 674.482265][ T9802] EXT4-fs (loop3): #clusters per group too big: 360448 [ 674.483749][ T9804] macvtap10: entered allmulticast mode [ 674.504215][ T9804] 9pnet_fd: Insufficient options for proto=fd [ 674.545107][ T9804] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 674.578458][ T9804] bond0 (unregistering): Released all slaves [ 674.865035][ T9834] xt_connbytes: Forcing CT accounting to be enabled [ 674.884281][ T9834] Cannot find set identified by id 0 to match [ 675.964676][ T9886] siw: device registration error -23 [ 676.133978][ T9890] netlink: 'syz.3.11261': attribute type 12 has an invalid length. [ 676.531141][ T9909] __nla_validate_parse: 11 callbacks suppressed [ 676.531156][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11268'. [ 676.546413][ T9909] netlink: 'syz.0.11268': attribute type 12 has an invalid length. [ 676.554335][ T9909] netlink: 'syz.0.11268': attribute type 13 has an invalid length. [ 676.618301][ T9911] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11270'. [ 676.627521][ T9911] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11270'. [ 676.658817][ T9911] xt_CT: You must specify a L4 protocol and not use inversions on it [ 676.889273][ T9911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.907247][ T9931] netlink: 'syz.2.11276': attribute type 12 has an invalid length. [ 676.927955][ T9911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.972832][ T9911] loop3: detected capacity change from 0 to 1024 [ 677.016767][ T9911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 677.073639][ T9911] can: request_module (can-proto-0) failed. [ 677.309465][ T29] kauditd_printk_skb: 439 callbacks suppressed [ 677.309480][ T29] audit: type=1326 audit(1762222400.953:102251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9947 comm="syz.1.11281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec300bf6c9 code=0x7ffc0000 [ 677.351672][ T29] audit: type=1326 audit(1762222400.983:102252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9947 comm="syz.1.11281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec300bf6c9 code=0x7ffc0000 [ 677.375559][ T29] audit: type=1326 audit(1762222400.983:102253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9947 comm="syz.1.11281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec300bf6c9 code=0x7ffc0000 [ 677.399264][ T29] audit: type=1326 audit(1762222400.983:102254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9947 comm="syz.1.11281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec300bf6c9 code=0x7ffc0000 [ 677.422996][ T29] audit: type=1326 audit(1762222400.983:102255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9947 comm="syz.1.11281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec300bf6c9 code=0x7ffc0000 [ 677.423577][ T9950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11283'. [ 677.446787][ T29] audit: type=1326 audit(1762222400.983:102256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9947 comm="syz.1.11281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec300bf6c9 code=0x7ffc0000 [ 677.479621][ T29] audit: type=1326 audit(1762222400.983:102257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9947 comm="syz.1.11281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec300bf6c9 code=0x7ffc0000 [ 677.503409][ T29] audit: type=1326 audit(1762222400.993:102258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9947 comm="syz.1.11281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec300bf6c9 code=0x7ffc0000 [ 677.527129][ T29] audit: type=1326 audit(1762222400.993:102259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9947 comm="syz.1.11281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec300bf6c9 code=0x7ffc0000 [ 677.550841][ T29] audit: type=1326 audit(1762222400.993:102260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9947 comm="syz.1.11281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec300bf6c9 code=0x7ffc0000 [ 677.615022][ T9957] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 677.658113][ T9957] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11284'. [ 677.668925][ T9957] team0: Mode changed to "loadbalance" [ 677.683484][ T9966] netlink: 120 bytes leftover after parsing attributes in process `syz.1.11288'. [ 677.695555][ T9968] macvtap18: entered allmulticast mode [ 677.705026][ T9968] 9pnet_fd: Insufficient options for proto=fd [ 677.723021][ T9145] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.734390][ T9968] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11289'. [ 677.743588][ T9968] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11289'. [ 677.783643][ T9968] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 677.798702][ T9968] bond1 (unregistering): Released all slaves [ 677.813968][ T9979] loop3: detected capacity change from 0 to 164 [ 677.828645][ T9983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11293'. [ 677.830953][ T9979] bio_check_eod: 4 callbacks suppressed [ 677.830971][ T9979] syz.3.11291: attempt to access beyond end of device [ 677.830971][ T9979] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 677.837687][ T9983] netlink: 'syz.0.11293': attribute type 12 has an invalid length. [ 677.865213][ T9983] netlink: 'syz.0.11293': attribute type 13 has an invalid length. [ 677.873692][ T9979] syz.3.11291: attempt to access beyond end of device [ 677.873692][ T9979] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 677.967838][ T9995] netlink: 120 bytes leftover after parsing attributes in process `syz.1.11298'. [ 678.049048][T10003] macvtap2: entered allmulticast mode [ 678.067121][T10003] 9pnet_fd: Insufficient options for proto=fd [ 678.106657][T10003] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 678.118906][T10003] bond1 (unregistering): Released all slaves [ 678.473265][T10024] lo speed is unknown, defaulting to 1000 [ 678.620625][T10030] xt_connbytes: Forcing CT accounting to be enabled [ 678.637703][T10030] set match dimension is over the limit! [ 679.257282][T10077] netlink: 'syz.4.11322': attribute type 12 has an invalid length. [ 679.985263][T10104] lo speed is unknown, defaulting to 1000 [ 680.901765][T10138] macvtap9: entered allmulticast mode [ 680.913644][T10138] tipc: Enabling of bearer rejected, failed to enable media [ 680.923227][T10138] 9pnet_fd: Insufficient options for proto=fd [ 680.935726][T10138] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 680.946682][T10138] bond1 (unregistering): Released all slaves [ 681.004362][T10145] siw: device registration error -23 [ 681.738207][T10172] siw: device registration error -23 [ 681.913359][T10178] __nla_validate_parse: 10 callbacks suppressed [ 681.913376][T10178] netlink: 120 bytes leftover after parsing attributes in process `syz.3.11365'. [ 682.177710][T10189] macvtap3: entered allmulticast mode [ 682.209057][T10189] 9pnet_fd: Insufficient options for proto=fd [ 682.232110][T10189] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11368'. [ 682.241208][T10189] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11368'. [ 682.321462][ T29] kauditd_printk_skb: 613 callbacks suppressed [ 682.321475][ T29] audit: type=1326 audit(1762222405.963:102874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10192 comm="syz.4.11370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 682.328811][T10189] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 682.352176][ T29] audit: type=1326 audit(1762222405.963:102875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10192 comm="syz.4.11370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 682.384711][ T29] audit: type=1326 audit(1762222405.963:102876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10192 comm="syz.4.11370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 682.408560][ T29] audit: type=1326 audit(1762222405.963:102877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10192 comm="syz.4.11370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 682.432248][ T29] audit: type=1326 audit(1762222405.963:102878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10192 comm="syz.4.11370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 682.456086][ T29] audit: type=1326 audit(1762222405.963:102879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10192 comm="syz.4.11370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 682.480098][ T29] audit: type=1326 audit(1762222405.963:102880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10192 comm="syz.4.11370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 682.503775][ T29] audit: type=1326 audit(1762222405.963:102881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10192 comm="syz.4.11370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 682.530920][T10189] bond1 (unregistering): Released all slaves [ 682.695326][T10210] netlink: 120 bytes leftover after parsing attributes in process `syz.3.11376'. [ 682.725553][ T29] audit: type=1326 audit(1762222406.353:102882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10181 comm="syz.2.11366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f4ddf6c9 code=0x7ffc0000 [ 682.749536][ T29] audit: type=1326 audit(1762222406.353:102883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10181 comm="syz.2.11366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f4ddf6c9 code=0x7ffc0000 [ 683.050115][T10227] macvtap10: entered allmulticast mode [ 683.073622][T10227] 9pnet_fd: Insufficient options for proto=fd [ 683.089453][T10227] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11383'. [ 683.098744][T10227] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11383'. [ 683.147653][T10227] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 683.186690][T10227] bond1 (unregistering): Released all slaves [ 683.509563][T10249] siw: device registration error -23 [ 683.521675][T10247] netlink: 120 bytes leftover after parsing attributes in process `syz.3.11389'. [ 683.793869][T10257] netlink: 120 bytes leftover after parsing attributes in process `syz.3.11393'. [ 683.924085][T10264] macvtap11: entered allmulticast mode [ 683.970860][T10264] 9pnet_fd: Insufficient options for proto=fd [ 683.977346][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11390'. [ 683.987605][T10264] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11396'. [ 684.018355][T10264] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 684.039083][T10264] bond0 (unregistering): Released all slaves [ 684.163357][T10272] loop3: detected capacity change from 0 to 164 [ 684.186806][T10272] syz.3.11399: attempt to access beyond end of device [ 684.186806][T10272] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 684.217774][T10272] syz.3.11399: attempt to access beyond end of device [ 684.217774][T10272] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 684.406340][T10292] macvtap12: entered allmulticast mode [ 684.414443][T10292] 9pnet_fd: Insufficient options for proto=fd [ 684.431759][T10292] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 684.446526][T10292] bond0 (unregistering): Released all slaves [ 684.817965][T10324] macvtap26: entered allmulticast mode [ 684.828801][T10324] 9pnet_fd: Insufficient options for proto=fd [ 684.862382][T10324] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 684.883845][T10324] bond1 (unregistering): Released all slaves [ 685.439522][T10358] loop3: detected capacity change from 0 to 512 [ 685.519177][T10358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 685.532941][T10358] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 685.546027][T10358] EXT4-fs (loop3): shut down requested (1) [ 685.552237][T10358] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 685.565503][T10366] siw: device registration error -23 [ 685.579868][ T9145] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 685.669963][T10375] FAULT_INJECTION: forcing a failure. [ 685.669963][T10375] name failslab, interval 1, probability 0, space 0, times 0 [ 685.682679][T10375] CPU: 1 UID: 0 PID: 10375 Comm: syz.3.11438 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 685.682785][T10375] Tainted: [W]=WARN [ 685.682793][T10375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 685.682826][T10375] Call Trace: [ 685.682833][T10375] [ 685.682840][T10375] __dump_stack+0x1d/0x30 [ 685.682859][T10375] dump_stack_lvl+0xe8/0x140 [ 685.682881][T10375] dump_stack+0x15/0x1b [ 685.682902][T10375] should_fail_ex+0x265/0x280 [ 685.682976][T10375] should_failslab+0x8c/0xb0 [ 685.683002][T10375] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 685.683032][T10375] ? cond_bools_copy+0x30/0x80 [ 685.683088][T10375] ? __pfx_cond_bools_destroy+0x10/0x10 [ 685.683106][T10375] kmemdup_noprof+0x2b/0x70 [ 685.683209][T10375] ? __pfx_cond_bools_destroy+0x10/0x10 [ 685.683272][T10375] cond_bools_copy+0x30/0x80 [ 685.683290][T10375] ? __pfx_cond_bools_destroy+0x10/0x10 [ 685.683307][T10375] hashtab_duplicate+0x11e/0x360 [ 685.683391][T10375] ? __pfx_cond_bools_copy+0x10/0x10 [ 685.683417][T10375] cond_policydb_dup+0xd2/0x4e0 [ 685.683446][T10375] security_set_bools+0xa0/0x340 [ 685.683486][T10375] sel_commit_bools_write+0x1ea/0x270 [ 685.683567][T10375] vfs_writev+0x406/0x8b0 [ 685.683603][T10375] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 685.683632][T10375] ? mutex_lock+0xd/0x30 [ 685.683718][T10375] do_writev+0xe7/0x210 [ 685.683747][T10375] __x64_sys_writev+0x45/0x50 [ 685.683774][T10375] x64_sys_call+0x1e9a/0x3000 [ 685.683795][T10375] do_syscall_64+0xd2/0x200 [ 685.683815][T10375] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 685.683891][T10375] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 685.683921][T10375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.683940][T10375] RIP: 0033:0x7f07f359f6c9 [ 685.683953][T10375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.684034][T10375] RSP: 002b:00007f07f2007038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 685.684051][T10375] RAX: ffffffffffffffda RBX: 00007f07f37f5fa0 RCX: 00007f07f359f6c9 [ 685.684062][T10375] RDX: 0000000000000002 RSI: 00002000000025c0 RDI: 0000000000000003 [ 685.684073][T10375] RBP: 00007f07f2007090 R08: 0000000000000000 R09: 0000000000000000 [ 685.684084][T10375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.684095][T10375] R13: 00007f07f37f6038 R14: 00007f07f37f5fa0 R15: 00007ffec020d428 [ 685.684113][T10375] [ 686.000285][T10378] macvtap19: entered allmulticast mode [ 686.020855][T10378] 9pnet_fd: Insufficient options for proto=fd [ 686.054555][T10378] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 686.054751][T10382] loop3: detected capacity change from 0 to 512 [ 686.086041][T10378] bond1 (unregistering): Released all slaves [ 686.144012][T10382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 686.170177][T10382] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 686.215437][T10382] EXT4-fs (loop3): shut down requested (1) [ 686.234431][T10382] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 686.320893][ T9145] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 686.385671][T10403] loop3: detected capacity change from 0 to 512 [ 686.468989][T10403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 686.494885][T10403] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 686.517228][T10403] EXT4-fs (loop3): shut down requested (1) [ 686.523599][T10403] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 686.556900][ T9145] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 686.753967][T10432] netlink: 'syz.3.11452': attribute type 12 has an invalid length. [ 687.142148][T10451] __nla_validate_parse: 15 callbacks suppressed [ 687.142167][T10451] netlink: 120 bytes leftover after parsing attributes in process `syz.4.11467'. [ 687.170906][T10455] siw: device registration error -23 [ 687.287292][T10463] macvtap4: entered allmulticast mode [ 687.305538][T10463] 9pnet_fd: Insufficient options for proto=fd [ 687.318210][T10463] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11470'. [ 687.327412][T10463] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11470'. [ 687.405209][T10463] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 687.431837][T10463] bond1 (unregistering): Released all slaves [ 687.557769][ T29] kauditd_printk_skb: 533 callbacks suppressed [ 687.557785][ T29] audit: type=1326 audit(1762222411.203:103417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10481 comm="syz.3.11478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f359f6c9 code=0x7ffc0000 [ 687.564222][T10484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11476'. [ 687.624992][T10482] netlink: 'syz.3.11478': attribute type 4 has an invalid length. [ 687.632896][T10482] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11478'. [ 687.649673][ T29] audit: type=1326 audit(1762222411.233:103418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10481 comm="syz.3.11478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07f359f6c9 code=0x7ffc0000 [ 687.673546][ T29] audit: type=1326 audit(1762222411.233:103419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10481 comm="syz.3.11478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f359f6c9 code=0x7ffc0000 [ 687.697314][ T29] audit: type=1326 audit(1762222411.233:103420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10481 comm="syz.3.11478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f359f6c9 code=0x7ffc0000 [ 687.714215][T10482] .`: renamed from bond0 (while UP) [ 687.721121][ T29] audit: type=1326 audit(1762222411.263:103421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10481 comm="syz.3.11478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07f359f6c9 code=0x7ffc0000 [ 687.750157][ T29] audit: type=1326 audit(1762222411.263:103422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10481 comm="syz.3.11478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f359f6c9 code=0x7ffc0000 [ 687.774173][ T29] audit: type=1326 audit(1762222411.263:103423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10481 comm="syz.3.11478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f359f6c9 code=0x7ffc0000 [ 687.797973][ T29] audit: type=1326 audit(1762222411.263:103424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10481 comm="syz.3.11478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f07f359f6c9 code=0x7ffc0000 [ 687.821701][ T29] audit: type=1326 audit(1762222411.263:103425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10481 comm="syz.3.11478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f359f6c9 code=0x7ffc0000 [ 687.845466][ T29] audit: type=1326 audit(1762222411.263:103426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10481 comm="syz.3.11478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f359f6c9 code=0x7ffc0000 [ 688.093064][T10498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11483'. [ 688.102087][T10498] netlink: 'syz.3.11483': attribute type 12 has an invalid length. [ 688.110022][T10498] netlink: 'syz.3.11483': attribute type 13 has an invalid length. [ 688.470851][T10507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11487'. [ 688.487798][T10507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11487'. [ 688.561039][T10517] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10517 comm=syz.1.11491 [ 688.573848][T10517] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10517 comm=syz.1.11491 [ 688.902104][T10539] macvtap11: entered allmulticast mode [ 688.925190][T10539] 9pnet_fd: Insufficient options for proto=fd [ 688.949465][T10539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11498'. [ 688.958693][T10539] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11498'. [ 689.004721][T10539] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 689.055797][T10539] bond1 (unregistering): Released all slaves [ 689.133952][T10550] macvtap5: entered allmulticast mode [ 689.150277][T10550] tipc: Enabling of bearer rejected, failed to enable media [ 689.169991][T10550] 9pnet_fd: Insufficient options for proto=fd [ 689.195290][T10550] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 689.235915][T10550] bond0 (unregistering): Released all slaves [ 689.614999][T10583] loop3: detected capacity change from 0 to 512 [ 689.615515][T10596] macvtap13: entered allmulticast mode [ 689.676448][T10596] tipc: Enabling of bearer rejected, failed to enable media [ 689.693052][T10583] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.3.11516: corrupted xattr block 95: invalid header [ 689.757285][T10603] 9pnet_fd: Insufficient options for proto=fd [ 689.785417][T10583] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 689.826483][T10596] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 689.856761][T10583] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.11516: bg 0: block 7: invalid block bitmap [ 689.880706][T10596] bond0 (unregistering): Released all slaves [ 689.914853][T10583] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 689.967915][T10583] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2967: inode #11: comm syz.3.11516: corrupted xattr block 95: invalid header [ 690.007783][T10583] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 690.027136][T10583] EXT4-fs (loop3): 1 orphan inode deleted [ 690.033751][T10583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 690.662934][ T9145] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.084971][T10655] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10655 comm=syz.3.11533 [ 691.097694][T10655] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10655 comm=syz.3.11533 [ 691.183172][T10662] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 691.211693][T10665] macvtap6: entered allmulticast mode [ 691.231745][T10665] 9pnet_fd: Insufficient options for proto=fd [ 691.251701][T10665] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 691.290113][T10665] bond0 (unregistering): Released all slaves [ 691.827160][T10693] siw: device registration error -23 [ 692.140087][T10705] pimreg: entered allmulticast mode [ 692.188135][T10708] pimreg: left allmulticast mode [ 692.217133][T10707] __nla_validate_parse: 19 callbacks suppressed [ 692.217220][T10707] netlink: 120 bytes leftover after parsing attributes in process `syz.0.11557'. [ 692.407959][T10715] netlink: 120 bytes leftover after parsing attributes in process `syz.4.11559'. [ 692.497789][T10698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11553'. [ 692.639552][ T29] kauditd_printk_skb: 307 callbacks suppressed [ 692.639571][ T29] audit: type=1400 audit(1762222416.283:103734): avc: denied { create } for pid=10726 comm="syz.2.11564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 692.679682][ T29] audit: type=1400 audit(1762222416.283:103735): avc: denied { getopt } for pid=10726 comm="syz.2.11564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 692.769444][ T29] audit: type=1326 audit(1762222416.403:103736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10726 comm="syz.2.11564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f4ddf6c9 code=0x7fc00000 [ 692.793403][ T29] audit: type=1400 audit(1762222416.413:103737): avc: denied { ioctl } for pid=10726 comm="syz.2.11564" path="socket:[125963]" dev="sockfs" ino=125963 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 692.819949][ T29] audit: type=1326 audit(1762222416.413:103738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10726 comm="syz.2.11564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f92f4ddf6c9 code=0x7fc00000 [ 692.852744][T10735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11568'. [ 692.861976][T10735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11568'. [ 692.902520][T10735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11568'. [ 692.945915][T10743] pimreg: entered allmulticast mode [ 692.953170][ T29] audit: type=1400 audit(1762222416.483:103739): avc: denied { sys_module } for pid=10726 comm="syz.2.11564" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 692.974636][ T29] audit: type=1326 audit(1762222416.533:103740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10726 comm="syz.2.11564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f4ddf6c9 code=0x7fc00000 [ 693.009033][T10745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11569'. [ 693.018105][T10745] netlink: 'syz.1.11569': attribute type 12 has an invalid length. [ 693.026082][T10745] netlink: 'syz.1.11569': attribute type 13 has an invalid length. [ 693.034816][T10744] pimreg: left allmulticast mode [ 693.045458][T10745] vxlan0: entered promiscuous mode [ 693.053495][ T4105] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.097960][ T4105] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.127506][ T4060] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.137742][ T4060] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.189085][T10753] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 693.216112][ T29] audit: type=1326 audit(1762222416.853:103741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10746 comm="syz.2.11571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f92f4dd6567 code=0x7ffc0000 [ 693.240089][ T29] audit: type=1326 audit(1762222416.853:103742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10746 comm="syz.2.11571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f92f4d7b779 code=0x7ffc0000 [ 693.263960][ T29] audit: type=1326 audit(1762222416.853:103743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10746 comm="syz.2.11571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f92f4dd6567 code=0x7ffc0000 [ 693.628776][T10763] macvtap12: entered allmulticast mode [ 693.645182][T10763] 9pnet_fd: Insufficient options for proto=fd [ 693.659520][T10763] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11576'. [ 693.668670][T10763] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11576'. [ 693.706045][T10763] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 693.717667][T10763] bond1 (unregistering): Released all slaves [ 693.769278][T10769] netlink: 120 bytes leftover after parsing attributes in process `syz.3.11578'. [ 693.955153][T10779] pimreg: entered allmulticast mode [ 693.972102][T10779] pimreg: left allmulticast mode [ 693.993198][T10784] lo speed is unknown, defaulting to 1000 [ 694.992082][T10858] siw: device registration error -23 [ 695.034835][T10859] 9pnet_fd: Insufficient options for proto=fd [ 695.664322][T10896] bridge_slave_0: left allmulticast mode [ 695.670132][T10896] bridge_slave_0: left promiscuous mode [ 695.675774][T10896] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.711423][T10902] netlink: 'syz.1.11628': attribute type 10 has an invalid length. [ 695.726291][T10896] bridge_slave_1: left allmulticast mode [ 695.732008][T10896] bridge_slave_1: left promiscuous mode [ 695.737935][T10896] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.763048][T10903] siw: device registration error -23 [ 695.789130][T10896] $H: (slave bond_slave_0): Releasing backup interface [ 695.801116][T10896] bond_slave_0: left promiscuous mode [ 695.823222][T10896] $H: (slave bond_slave_1): Releasing backup interface [ 695.838619][T10896] bond_slave_1: left promiscuous mode [ 695.870069][T10896] team0: Port device team_slave_0 removed [ 695.900475][T10896] team0: Port device team_slave_1 removed [ 695.909618][T10908] x_tables: duplicate underflow at hook 2 [ 695.941382][T10896] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 695.963712][T10902] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 696.376547][T10922] netlink: 'syz.4.11636': attribute type 12 has an invalid length. [ 696.458817][T10927] pimreg: entered allmulticast mode [ 696.476539][T10927] pimreg: left allmulticast mode [ 697.058570][T10959] macvtap20: entered allmulticast mode [ 697.071306][T10959] 9pnet_fd: Insufficient options for proto=fd [ 697.099454][T10959] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 697.121605][T10959] bond1 (unregistering): Released all slaves [ 697.372497][T10971] loop3: detected capacity change from 0 to 2048 [ 697.411962][T10971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 697.573523][T10983] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 697.901183][T10981] __nla_validate_parse: 14 callbacks suppressed [ 697.901204][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11656'. [ 697.947709][T10977] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 697.989562][T10971] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 698.002228][T10971] EXT4-fs (loop3): This should not happen!! Data will be lost [ 698.002228][T10971] [ 698.012041][T10971] EXT4-fs (loop3): Total free blocks count 0 [ 698.018323][T10971] EXT4-fs (loop3): Free/Dirty block details [ 698.024307][T10971] EXT4-fs (loop3): free_blocks=2415919104 [ 698.030089][T10971] EXT4-fs (loop3): dirty_blocks=8208 [ 698.035858][T10971] EXT4-fs (loop3): Block reservation details [ 698.042205][T10971] EXT4-fs (loop3): i_reserved_data_blocks=513 [ 698.054026][T10994] netlink: 120 bytes leftover after parsing attributes in process `syz.0.11660'. [ 698.087833][ T29] kauditd_printk_skb: 472 callbacks suppressed [ 698.087851][ T29] audit: type=1326 audit(1762222421.723:104216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10970 comm="syz.3.11654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f359f6c9 code=0x7ffc0000 [ 698.117963][ T29] audit: type=1326 audit(1762222421.723:104217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10970 comm="syz.3.11654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f359f6c9 code=0x7ffc0000 [ 698.145966][ T4095] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 698.364398][ T29] audit: type=1326 audit(1762222422.003:104218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.4.11665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 698.388210][ T29] audit: type=1326 audit(1762222422.003:104219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.4.11665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 698.445290][T11006] netlink: 120 bytes leftover after parsing attributes in process `syz.0.11666'. [ 698.472096][ T29] audit: type=1326 audit(1762222422.053:104220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.4.11665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 698.496001][ T29] audit: type=1326 audit(1762222422.053:104221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.4.11665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 698.519892][ T29] audit: type=1326 audit(1762222422.053:104222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.4.11665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 698.543686][ T29] audit: type=1326 audit(1762222422.063:104223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.4.11665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 698.567446][ T29] audit: type=1326 audit(1762222422.063:104224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.4.11665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 698.591342][ T29] audit: type=1326 audit(1762222422.063:104225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.4.11665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 698.718398][T11019] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 698.897903][T11034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11675'. [ 698.978414][T11040] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 699.004624][T11040] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11677'. [ 699.024716][T11040] netlink: 'syz.2.11677': attribute type 10 has an invalid length. [ 699.032692][T11040] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11677'. [ 699.055558][T11040] veth1_vlan: left promiscuous mode [ 699.062816][T11040] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 699.182440][T11057] netlink: 'syz.1.11680': attribute type 12 has an invalid length. [ 699.421166][T11068] netlink: 120 bytes leftover after parsing attributes in process `syz.2.11687'. [ 699.931174][T11095] netlink: 120 bytes leftover after parsing attributes in process `syz.1.11698'. [ 700.051269][T11100] netlink: 'syz.2.11699': attribute type 12 has an invalid length. [ 700.228556][T11108] netlink: 120 bytes leftover after parsing attributes in process `syz.1.11703'. [ 700.453851][T11118] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 700.838668][T11135] netlink: 120 bytes leftover after parsing attributes in process `syz.2.11711'. [ 701.176339][T11152] netlink: 'syz.2.11715': attribute type 12 has an invalid length. [ 701.310436][T11164] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 701.321808][T11165] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 701.476498][T11175] pimreg: entered allmulticast mode [ 701.482707][T11175] pimreg: left allmulticast mode [ 702.180141][T11196] pimreg: entered allmulticast mode [ 702.197844][T11196] pimreg: left allmulticast mode [ 702.314931][T11207] netlink: 'syz.0.11737': attribute type 12 has an invalid length. [ 702.382099][T11214] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 702.527301][T11227] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 703.191417][ T29] kauditd_printk_skb: 641 callbacks suppressed [ 703.191435][ T29] audit: type=1326 audit(1762222426.833:104867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11238 comm="syz.0.11751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4132af6c9 code=0x7ffc0000 [ 703.221517][ T29] audit: type=1326 audit(1762222426.833:104868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11238 comm="syz.0.11751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4132af6c9 code=0x7ffc0000 [ 703.308550][ T29] audit: type=1326 audit(1762222426.953:104869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11248 comm="syz.1.11757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec300bf6c9 code=0x7ffc0000 [ 703.332439][ T29] audit: type=1326 audit(1762222426.953:104870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11248 comm="syz.1.11757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec300bf6c9 code=0x7ffc0000 [ 703.358202][ T29] audit: type=1326 audit(1762222426.953:104871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11248 comm="syz.1.11757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec300bf6c9 code=0x7ffc0000 [ 703.382149][ T29] audit: type=1326 audit(1762222426.953:104872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11248 comm="syz.1.11757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec300bf6c9 code=0x7ffc0000 [ 703.405943][ T29] audit: type=1326 audit(1762222426.953:104873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11248 comm="syz.1.11757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec300bf6c9 code=0x7ffc0000 [ 703.429752][ T29] audit: type=1326 audit(1762222426.953:104874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11248 comm="syz.1.11757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec300bf6c9 code=0x7ffc0000 [ 703.453596][ T29] audit: type=1326 audit(1762222426.953:104875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11248 comm="syz.1.11757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec300bf6c9 code=0x7ffc0000 [ 703.477422][ T29] audit: type=1326 audit(1762222426.953:104876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11248 comm="syz.1.11757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec300bf6c9 code=0x7ffc0000 [ 703.523014][T11258] netlink: 'syz.2.11754': attribute type 12 has an invalid length. [ 703.840422][T11283] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 704.201366][T11300] netlink: 'syz.0.11771': attribute type 12 has an invalid length. [ 704.484779][T11323] loop3: detected capacity change from 0 to 512 [ 704.498359][T11323] EXT4-fs (loop3): orphan cleanup on readonly fs [ 704.515670][T11323] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.11784: EA inode hash validation failed [ 704.543593][T11323] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 704.578657][T11328] netlink: 'syz.1.11785': attribute type 12 has an invalid length. [ 704.603470][T11323] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.11784: corrupted inode contents [ 704.637715][T11323] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.11784: mark_inode_dirty error [ 704.651980][T11323] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.11784: corrupted inode contents [ 704.674457][T11323] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.11784: mark_inode_dirty error [ 704.705195][T11323] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.11784: mark inode dirty (error -117) [ 704.738685][T11323] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 704.749650][T11323] EXT4-fs (loop3): 1 orphan inode deleted [ 704.758523][T11323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 704.781911][T11337] netlink: 'syz.2.11791': attribute type 4 has an invalid length. [ 704.789790][T11337] __nla_validate_parse: 1 callbacks suppressed [ 704.789810][T11337] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11791'. [ 704.820576][T11337] .`: renamed from bond0 [ 704.848976][T11323] SELinux: ebitmap: truncated map [ 704.855960][T11348] netlink: 120 bytes leftover after parsing attributes in process `syz.2.11794'. [ 704.858904][T11323] SELinux: failed to load policy [ 704.892797][ T9145] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.053667][T11365] netlink: 'syz.1.11799': attribute type 12 has an invalid length. [ 705.170410][T11373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11805'. [ 705.282820][T11384] 9pnet_fd: Insufficient options for proto=fd [ 705.317893][T11369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11803'. [ 705.348843][T11391] netlink: 120 bytes leftover after parsing attributes in process `syz.4.11811'. [ 705.373457][T11392] loop3: detected capacity change from 0 to 1024 [ 705.397896][T11392] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 705.437134][T11394] netlink: 'syz.0.11813': attribute type 12 has an invalid length. [ 705.623708][T11412] netlink: 'syz.4.11822': attribute type 4 has an invalid length. [ 705.631604][T11412] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11822'. [ 705.643250][T11412] .`: renamed from bond0 (while UP) [ 705.699796][ T4095] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.710220][ T4095] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.787321][ T4095] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.797807][ T4095] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.848802][T11425] netlink: 'syz.4.11828': attribute type 12 has an invalid length. [ 705.881966][ T4095] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.892326][ T4095] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.971550][ T4095] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.981960][ T4095] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.036954][T11423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11825'. [ 706.042643][T11428] lo speed is unknown, defaulting to 1000 [ 706.107146][ T4095] bridge_slave_1: left allmulticast mode [ 706.113549][ T4095] bridge_slave_1: left promiscuous mode [ 706.119412][ T4095] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.153561][ T4095] bridge_slave_0: left allmulticast mode [ 706.159272][ T4095] bridge_slave_0: left promiscuous mode [ 706.164977][ T4095] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.270896][ T4095] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 706.297792][ T4095] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.330655][ T4095] .` (unregistering): Released all slaves [ 706.345567][T11471] netlink: 120 bytes leftover after parsing attributes in process `syz.0.11839'. [ 706.400761][ T4095] tipc: Disabling bearer [ 706.406051][ T4095] tipc: Left network mode [ 706.445773][ T4095] hsr_slave_0: left promiscuous mode [ 706.472314][ T4095] hsr_slave_1: left promiscuous mode [ 706.499487][ T4095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.506901][ T4095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.544102][ T4095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.551620][ T4095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.594506][ T4095] veth0_macvtap: left allmulticast mode [ 706.600304][ T4095] veth1_macvtap: left promiscuous mode [ 706.605868][ T4095] veth0_macvtap: left promiscuous mode [ 706.612029][ T4095] veth1_vlan: left promiscuous mode [ 706.617305][ T4095] veth0_vlan: left promiscuous mode [ 706.635879][T11478] Cannot find set identified by id 0 to match [ 706.786970][ T4095] team0 (unregistering): Port device team_slave_1 removed [ 706.804981][ T4095] team0 (unregistering): Port device team_slave_0 removed [ 706.853918][T11480] netlink: 'syz.0.11841': attribute type 12 has an invalid length. [ 706.863202][T11428] chnl_net:caif_netlink_parms(): no params data found [ 707.016392][T11428] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.023576][T11428] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.040068][T11428] bridge_slave_0: entered allmulticast mode [ 707.046961][T11428] bridge_slave_0: entered promiscuous mode [ 707.055974][T11428] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.063111][T11428] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.070532][T11428] bridge_slave_1: entered allmulticast mode [ 707.077113][T11428] bridge_slave_1: entered promiscuous mode [ 707.130915][T11428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.142941][T11428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.172392][T11428] team0: Port device team_slave_0 added [ 707.180357][T11428] team0: Port device team_slave_1 added [ 707.204842][T11428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.211975][T11428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.238075][T11428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.250776][T11428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.257839][T11428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.283908][T11428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.334115][T11428] hsr_slave_0: entered promiscuous mode [ 707.348743][T11428] hsr_slave_1: entered promiscuous mode [ 707.354861][T11428] debugfs: 'hsr0' already exists in 'hsr' [ 707.360702][T11428] Cannot create hsr debugfs directory [ 707.386465][ T4095] ------------[ cut here ]------------ [ 707.392228][ T4095] WARNING: CPU: 1 PID: 4095 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x179/0x1f0 [ 707.401872][ T4095] Modules linked in: [ 707.405800][ T4095] CPU: 1 UID: 0 PID: 4095 Comm: kworker/u8:48 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 707.418192][ T4095] Tainted: [W]=WARN [ 707.422006][ T4095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 707.432096][ T4095] Workqueue: netns cleanup_net [ 707.436881][ T4095] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 707.442526][ T4095] Code: 48 8d bb 70 0e 00 00 e8 75 3d b7 fc 48 8b bb 70 0e 00 00 e8 29 ea c3 fc 5b 41 5e 41 5f 5d e9 be 66 b5 00 cc e8 18 e4 9b fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 0a e4 9b fc 90 0f 0b 90 4c 89 f7 e8 3e [ 707.462872][ T4095] RSP: 0018:ffffc90001177c60 EFLAGS: 00010293 [ 707.468977][ T4095] RAX: ffffffff84bb65a8 RBX: ffff888144dae000 RCX: ffff888101553180 [ 707.477021][ T4095] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888144daee40 [ 707.485042][ T4095] RBP: ffffffff86c91040 R08: 0001ffff868480ef R09: 0000000000000000 [ 707.493822][ T4095] R10: ffffc90001177be8 R11: 0001c90001177be8 R12: ffffffff86c91060 [ 707.501849][ T4095] R13: ffff888144dae028 R14: ffff888144daee40 R15: ffff888144dae000 [ 707.509867][ T4095] FS: 0000000000000000(0000) GS:ffff8882aef13000(0000) knlGS:0000000000000000 [ 707.519522][ T4095] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 707.526126][ T4095] CR2: 0000000000000000 CR3: 000000015d0ac000 CR4: 00000000003506f0 [ 707.534140][ T4095] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 707.542135][ T4095] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 707.550774][ T4095] Call Trace: [ 707.554064][ T4095] [ 707.557004][ T4095] xfrm_net_exit+0x2d/0x60 [ 707.561525][ T4095] ops_undo_list+0x27b/0x410 [ 707.566141][ T4095] cleanup_net+0x2f4/0x4f0 [ 707.570631][ T4095] process_scheduled_works+0x4ce/0x9d0 [ 707.576124][ T4095] worker_thread+0x582/0x770 [ 707.581496][ T4095] kthread+0x489/0x510 [ 707.585596][ T4095] ? finish_task_switch+0xad/0x2b0 [ 707.590748][ T4095] ? __pfx_worker_thread+0x10/0x10 [ 707.595918][ T4095] ? __pfx_kthread+0x10/0x10 [ 707.600578][ T4095] ret_from_fork+0x122/0x1b0 [ 707.605290][ T4095] ? __pfx_kthread+0x10/0x10 [ 707.610756][ T4095] ret_from_fork_asm+0x1a/0x30 [ 707.615579][ T4095] [ 707.618656][ T4095] ---[ end trace 0000000000000000 ]--- [ 707.625658][T11515] netlink: 120 bytes leftover after parsing attributes in process `syz.0.11852'. [ 707.724112][T11521] netlink: 'syz.4.11853': attribute type 12 has an invalid length. [ 707.859348][T11428] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 707.884197][T11537] netlink: 120 bytes leftover after parsing attributes in process `syz.4.11861'. [ 707.893859][T11428] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 707.923780][T11428] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 707.953329][T11428] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 708.334698][ T29] kauditd_printk_skb: 522 callbacks suppressed [ 708.334714][ T29] audit: type=1400 audit(1762222431.973:105399): avc: denied { write } for pid=11556 comm="syz.1.11867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 708.590973][T11559] veth0_macvtap: left allmulticast mode [ 708.623419][T11558] veth0_macvtap: left allmulticast mode [ 708.648688][ T29] audit: type=1326 audit(1762222432.293:105400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11579 comm="syz.4.11873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 708.672580][ T29] audit: type=1326 audit(1762222432.293:105401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11579 comm="syz.4.11873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 708.672776][ T4057] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.706125][ T4057] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.730246][T11583] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 708.742310][T11428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.780046][ T29] audit: type=1326 audit(1762222432.353:105402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11579 comm="syz.4.11873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 708.804091][ T29] audit: type=1326 audit(1762222432.353:105403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11579 comm="syz.4.11873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 708.811369][T11428] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.828897][ T29] audit: type=1326 audit(1762222432.353:105404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11579 comm="syz.4.11873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 708.859144][ T29] audit: type=1326 audit(1762222432.363:105405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11579 comm="syz.4.11873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 708.867912][ T4057] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.883130][ T29] audit: type=1326 audit(1762222432.363:105406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11579 comm="syz.4.11873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 708.892043][ T4057] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.894283][ T4053] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.916349][ T29] audit: type=1326 audit(1762222432.363:105407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11579 comm="syz.4.11873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 708.925324][ T4053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.964695][ T29] audit: type=1326 audit(1762222432.363:105408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11579 comm="syz.4.11873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 708.978562][ T4053] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.995514][ T4053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.119951][ T4057] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.129072][ T4057] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.156149][ T4057] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.165222][ T4057] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.209731][ T4057] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.218906][ T4057] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.228611][ T4057] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.237538][ T4057] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.385144][T11428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.198025][ T4053] bridge_slave_1: left allmulticast mode [ 710.203824][ T4053] bridge_slave_1: left promiscuous mode [ 710.209546][ T4053] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.238788][ T4053] bridge_slave_0: left promiscuous mode [ 710.244609][ T4053] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.317917][ T4053] team0: Port device geneve1 removed [ 710.393955][ T4053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 710.429512][ T4053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 710.458601][ T4053] bond0 (unregistering): (slave team0): Releasing backup interface [ 710.485642][ T4053] bond0 (unregistering): Released all slaves [ 710.500453][ T4053] bond1 (unregistering): Released all slaves [ 710.521395][ T4053] bond2 (unregistering): Released all slaves [ 710.532277][ T4053] bond3 (unregistering): Released all slaves [ 710.544509][ T4053] bond4 (unregistering): Released all slaves [ 710.554523][ T4053] bond5 (unregistering): Released all slaves [ 710.570904][ T4053] bond6 (unregistering): Released all slaves [ 710.591159][ T4053] bond7 (unregistering): Released all slaves [ 710.602037][ T4053] bond8 (unregistering): Released all slaves [ 710.611341][ T4053] bond9 (unregistering): Released all slaves [ 710.753190][ T4053] hsr_slave_0: left promiscuous mode [ 710.761932][ T4053] hsr_slave_1: left promiscuous mode [ 710.767765][ T4053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.775327][ T4053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.784685][ T4053] veth0_macvtap: left allmulticast mode [ 710.925969][ T4053] team0 (unregistering): Port device team_slave_1 removed [ 710.936454][ T4053] team0 (unregistering): Port device team_slave_0 removed [ 710.984484][T11641] __nla_validate_parse: 5 callbacks suppressed [ 710.984502][T11641] netlink: 120 bytes leftover after parsing attributes in process `syz.4.11889'. [ 711.007271][T11648] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 711.098673][T11428] veth0_vlan: entered promiscuous mode [ 711.128587][T11428] veth1_vlan: entered promiscuous mode [ 711.181666][T11428] veth0_macvtap: entered promiscuous mode [ 711.202379][T11428] veth1_macvtap: entered promiscuous mode [ 711.222240][T11665] netlink: 'syz.4.11896': attribute type 12 has an invalid length. [ 711.236611][T11428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 711.269905][T11428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.292653][ T4111] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.336471][ T4111] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.375586][ T4111] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.407681][ T4111] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.533517][T11680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11901'. [ 711.542798][T11677] loop5: detected capacity change from 0 to 512 [ 711.545969][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11895'. [ 711.555796][T11680] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11901'. [ 711.570531][T11677] EXT4-fs (loop5): orphan cleanup on readonly fs [ 711.603244][T11677] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.11900: EA inode hash validation failed [ 711.634013][T11686] netlink: 120 bytes leftover after parsing attributes in process `syz.4.11903'. [ 711.659293][T11677] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.11900: corrupted inode contents [ 711.697939][T11677] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #15: comm syz.5.11900: mark_inode_dirty error [ 711.722710][T11677] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.11900: corrupted inode contents [ 711.754758][T11677] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2996: inode #15: comm syz.5.11900: mark_inode_dirty error [ 711.796482][T11677] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.11900: mark inode dirty (error -117) [ 711.843281][T11677] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 711.876544][T11677] EXT4-fs (loop5): 1 orphan inode deleted [ 711.887304][T11677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 711.972183][T11677] SELinux: ebitmap: truncated map [ 711.996217][T11677] SELinux: failed to load policy [ 712.042102][T11428] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.111472][T11712] syz_tun: entered allmulticast mode [ 712.124969][T11711] syz_tun: left allmulticast mode [ 712.210555][T11725] netlink: 120 bytes leftover after parsing attributes in process `syz.5.11919'. [ 712.374023][T11734] netlink: 'syz.4.11923': attribute type 4 has an invalid length. [ 712.437227][T11737] loop5: detected capacity change from 0 to 512 [ 712.483402][T11737] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 712.504880][T11737] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.11925: attempt to clear invalid blocks 2 len 1 [ 712.505076][T11745] siw: device registration error -23 [ 712.526928][T11737] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 712.599506][T11737] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.11925: invalid indirect mapped block 1819239214 (level 0) [ 712.616463][T11722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11917'. [ 712.672708][T11737] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.11925: invalid indirect mapped block 1819239214 (level 1) [ 712.730860][T11737] EXT4-fs (loop5): 1 truncate cleaned up [ 712.755856][T11737] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 712.827210][T11756] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11931'. [ 712.858492][T11428] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.884757][T11756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11931'. [ 712.936789][T11767] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20000 [ 713.012357][T11770] netlink: 120 bytes leftover after parsing attributes in process `syz.4.11936'. [ 713.035508][T11772] netlink: 'syz.2.11937': attribute type 12 has an invalid length. [ 713.118063][T11780] FAULT_INJECTION: forcing a failure. [ 713.118063][T11780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 713.131342][T11780] CPU: 0 UID: 0 PID: 11780 Comm: syz.5.11940 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 713.131372][T11780] Tainted: [W]=WARN [ 713.131378][T11780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 713.131390][T11780] Call Trace: [ 713.131397][T11780] [ 713.131406][T11780] __dump_stack+0x1d/0x30 [ 713.131433][T11780] dump_stack_lvl+0xe8/0x140 [ 713.131458][T11780] dump_stack+0x15/0x1b [ 713.131512][T11780] should_fail_ex+0x265/0x280 [ 713.131535][T11780] should_fail+0xb/0x20 [ 713.131562][T11780] should_fail_usercopy+0x1a/0x20 [ 713.131646][T11780] _copy_from_user+0x1c/0xb0 [ 713.131678][T11780] xsk_setsockopt+0x308/0x640 [ 713.131710][T11780] ? __pfx_xsk_setsockopt+0x10/0x10 [ 713.131753][T11780] __sys_setsockopt+0x184/0x200 [ 713.131798][T11780] __x64_sys_setsockopt+0x64/0x80 [ 713.131913][T11780] x64_sys_call+0x20ec/0x3000 [ 713.131949][T11780] do_syscall_64+0xd2/0x200 [ 713.131989][T11780] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 713.132027][T11780] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 713.132070][T11780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.132163][T11780] RIP: 0033:0x7f75eae9f6c9 [ 713.132212][T11780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.132236][T11780] RSP: 002b:00007f75e9907038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 713.132259][T11780] RAX: ffffffffffffffda RBX: 00007f75eb0f5fa0 RCX: 00007f75eae9f6c9 [ 713.132272][T11780] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 713.132285][T11780] RBP: 00007f75e9907090 R08: 0000000000000020 R09: 0000000000000000 [ 713.132299][T11780] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 713.132315][T11780] R13: 00007f75eb0f6038 R14: 00007f75eb0f5fa0 R15: 00007ffc0246fd38 [ 713.132376][T11780] [ 713.614711][T11799] loop5: detected capacity change from 0 to 512 [ 713.663073][T11799] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.11947: couldn't read orphan inode 26 (err -116) [ 713.709129][T11799] EXT4-fs (loop5): Remounting filesystem read-only [ 713.729853][ T29] kauditd_printk_skb: 381 callbacks suppressed [ 713.729872][ T29] audit: type=1326 audit(1762222437.373:105790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11807 comm="syz.4.11950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 713.760015][ T29] audit: type=1326 audit(1762222437.373:105791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11807 comm="syz.4.11950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 713.783980][ T29] audit: type=1326 audit(1762222437.373:105792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11807 comm="syz.4.11950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 713.807875][ T29] audit: type=1326 audit(1762222437.373:105793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11807 comm="syz.4.11950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 713.808361][T11799] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 713.831648][ T29] audit: type=1326 audit(1762222437.373:105794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11807 comm="syz.4.11950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 713.884597][ T29] audit: type=1326 audit(1762222437.373:105795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11807 comm="syz.4.11950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 713.908426][ T29] audit: type=1326 audit(1762222437.373:105796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11807 comm="syz.4.11950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 713.932251][ T29] audit: type=1326 audit(1762222437.373:105797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11807 comm="syz.4.11950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 713.956072][ T29] audit: type=1326 audit(1762222437.373:105798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11807 comm="syz.4.11950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 713.979816][ T29] audit: type=1326 audit(1762222437.373:105799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11807 comm="syz.4.11950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 713.988560][T11799] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 714.018800][T11810] netlink: 'syz.4.11951': attribute type 12 has an invalid length. [ 714.051037][T11428] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.179739][T11823] loop5: detected capacity change from 0 to 1024 [ 714.224002][T11823] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 714.336383][T11832] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 714.423721][ T4084] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.492157][ T4084] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.569536][T11841] netlink: 'syz.4.11966': attribute type 12 has an invalid length. [ 714.593700][ T4084] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.665495][ T4084] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.808075][ T4084] bridge_slave_1: left allmulticast mode [ 714.813835][ T4084] bridge_slave_1: left promiscuous mode [ 714.819614][ T4084] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.850188][ T4084] bridge_slave_0: left allmulticast mode [ 714.855890][ T4084] bridge_slave_0: left promiscuous mode [ 714.862453][ T4084] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.022219][ T4084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.050735][ T4084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.074608][ T4084] bond0 (unregistering): Released all slaves [ 715.100708][T11842] lo speed is unknown, defaulting to 1000 [ 715.195754][ T4084] hsr_slave_0: left promiscuous mode [ 715.203460][ T4084] hsr_slave_1: left promiscuous mode [ 715.232155][ T4084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.239789][ T4084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.254963][ T4084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 715.263541][ T4084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.289242][ T4084] veth1_macvtap: left promiscuous mode [ 715.294834][ T4084] veth0_macvtap: left promiscuous mode [ 715.302435][ T4084] veth1_vlan: left promiscuous mode [ 715.309871][ T4084] veth0_vlan: left promiscuous mode [ 715.465828][ T4084] team0 (unregistering): Port device team_slave_1 removed [ 715.480112][ T4084] team0 (unregistering): Port device team_slave_0 removed [ 715.585437][T11876] netlink: 'syz.2.11977': attribute type 12 has an invalid length. [ 715.652499][T11842] chnl_net:caif_netlink_parms(): no params data found [ 715.719748][T11910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11910 comm=syz.2.11989 [ 715.749537][T11911] siw: device registration error -23 [ 715.804854][T11842] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.812073][T11842] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.875164][T11842] bridge_slave_0: entered allmulticast mode [ 715.882112][T11842] bridge_slave_0: entered promiscuous mode [ 715.889933][T11910] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 715.898158][T11910] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 715.908314][T11842] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.915428][T11842] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.923845][T11842] bridge_slave_1: entered allmulticast mode [ 715.931765][T11842] bridge_slave_1: entered promiscuous mode [ 715.982261][T11842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.013338][T11842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.082899][T11842] team0: Port device team_slave_0 added [ 716.094639][T11842] team0: Port device team_slave_1 added [ 716.177445][T11842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 716.184603][T11842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.211422][T11842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.260602][T11842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 716.268328][T11842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.294500][T11842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.339134][T11928] netlink: 'syz.2.11996': attribute type 12 has an invalid length. [ 716.383176][T11842] hsr_slave_0: entered promiscuous mode [ 716.394121][T11842] hsr_slave_1: entered promiscuous mode [ 716.422942][T11842] debugfs: 'hsr0' already exists in 'hsr' [ 716.428786][T11842] Cannot create hsr debugfs directory [ 716.587533][T11945] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 716.604368][T11842] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 716.623806][T11842] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 716.643920][T11842] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 716.666381][T11842] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 716.741892][T11842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.759313][T11842] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.769533][ T4084] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.776632][ T4084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.785654][T11938] __nla_validate_parse: 3 callbacks suppressed [ 716.785669][T11938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12001'. [ 716.810099][ T7131] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.817205][ T7131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.962673][T11842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.097154][T11842] veth0_vlan: entered promiscuous mode [ 717.106962][T11842] veth1_vlan: entered promiscuous mode [ 717.126696][T11842] veth0_macvtap: entered promiscuous mode [ 717.137017][T11842] veth1_macvtap: entered promiscuous mode [ 717.151744][T11842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.164329][T11842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.177157][ T4057] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.186142][ T4057] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.206360][ T4057] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.217639][ T4057] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.297452][T11983] loop6: detected capacity change from 0 to 2048 [ 717.328442][T11983] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 717.372992][T11842] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.517223][T11997] loop6: detected capacity change from 0 to 1024 [ 717.533170][T11997] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 717.636989][T12008] netlink: 'syz.1.12018': attribute type 12 has an invalid length. [ 717.988005][T12035] netlink: 'syz.1.12031': attribute type 12 has an invalid length. [ 718.474184][T12041] lo speed is unknown, defaulting to 1000 [ 718.573407][T12053] siw: device registration error -23 [ 718.879964][ T4084] .` (unregistering): Released all slaves [ 718.970115][ T4084] tipc: Disabling bearer [ 718.975474][ T4084] tipc: Left network mode [ 719.019753][ T4084] hsr_slave_0: left promiscuous mode [ 719.036008][ T4084] hsr_slave_1: left promiscuous mode [ 719.119842][ T29] kauditd_printk_skb: 394 callbacks suppressed [ 719.119857][ T29] audit: type=1326 audit(1762222442.763:106194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12064 comm="syz.0.12039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4132af6c9 code=0x7ffc0000 [ 719.203412][ T29] audit: type=1326 audit(1762222442.793:106195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12064 comm="syz.0.12039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4132af6c9 code=0x7ffc0000 [ 719.227479][ T29] audit: type=1326 audit(1762222442.793:106196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12064 comm="syz.0.12039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4132af6c9 code=0x7ffc0000 [ 719.251271][ T29] audit: type=1326 audit(1762222442.793:106197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12064 comm="syz.0.12039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4132af6c9 code=0x7ffc0000 [ 719.275033][ T29] audit: type=1326 audit(1762222442.793:106198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12064 comm="syz.0.12039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4132af6c9 code=0x7ffc0000 [ 719.298792][ T29] audit: type=1326 audit(1762222442.793:106199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12064 comm="syz.0.12039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4132af6c9 code=0x7ffc0000 [ 719.322638][ T29] audit: type=1326 audit(1762222442.793:106200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12064 comm="syz.0.12039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4132af6c9 code=0x7ffc0000 [ 719.346513][ T29] audit: type=1326 audit(1762222442.793:106201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12064 comm="syz.0.12039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4132af6c9 code=0x7ffc0000 [ 719.370277][ T29] audit: type=1326 audit(1762222442.793:106202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12064 comm="syz.0.12039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4132af6c9 code=0x7ffc0000 [ 719.394067][ T29] audit: type=1326 audit(1762222442.793:106203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12064 comm="syz.0.12039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4132af6c9 code=0x7ffc0000 [ 719.557230][T12041] chnl_net:caif_netlink_parms(): no params data found [ 719.688762][T12041] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.695854][T12041] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.704973][T12041] bridge_slave_0: entered allmulticast mode [ 719.711797][T12041] bridge_slave_0: entered promiscuous mode [ 719.719743][T12041] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.726860][T12041] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.734059][T12041] bridge_slave_1: entered allmulticast mode [ 719.740750][T12041] bridge_slave_1: entered promiscuous mode [ 719.768448][T12041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.810661][T12098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12098 comm=syz.1.12048 [ 719.811286][T12041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.879547][T12098] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 719.881754][T12041] team0: Port device team_slave_0 added [ 719.887787][T12098] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 719.903374][T12041] team0: Port device team_slave_1 added [ 719.955730][T12041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.963386][T12041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.990186][T12041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.045854][T12041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.053645][T12041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.080266][T12041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.130134][ T4084] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.199882][T12041] hsr_slave_0: entered promiscuous mode [ 720.206164][T12041] hsr_slave_1: entered promiscuous mode [ 720.212282][T12041] debugfs: 'hsr0' already exists in 'hsr' [ 720.218095][T12041] Cannot create hsr debugfs directory [ 720.226083][T12077] chnl_net:caif_netlink_parms(): no params data found [ 720.361509][T12077] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.368653][T12077] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.375938][T12077] bridge_slave_0: entered allmulticast mode [ 720.383147][T12077] bridge_slave_0: entered promiscuous mode [ 720.392648][T12077] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.399833][T12077] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.415366][T12077] bridge_slave_1: entered allmulticast mode [ 720.421970][T12077] bridge_slave_1: entered promiscuous mode [ 720.450909][T12077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.462029][T12077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.489559][T12077] team0: Port device team_slave_0 added [ 720.498950][T12077] team0: Port device team_slave_1 added [ 720.515055][T12077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.522139][T12077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.548562][T12077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.560020][T12077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.566957][T12077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.593435][T12077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.622093][T12121] netlink: 68 bytes leftover after parsing attributes in process `syz.0.12055'. [ 720.635744][T12077] hsr_slave_0: entered promiscuous mode [ 720.642144][T12077] hsr_slave_1: entered promiscuous mode [ 720.649239][T12077] debugfs: 'hsr0' already exists in 'hsr' [ 720.655079][T12077] Cannot create hsr debugfs directory [ 720.668547][ T4084] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.764779][ T4084] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.824811][T12041] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 720.836192][T12041] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 720.847083][ T4084] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.859090][T12041] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 720.867990][T12041] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 720.884024][T12077] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 720.896284][T12077] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 720.914561][T12143] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 720.922448][T12077] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 720.943814][T12077] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 720.993931][ T4084] bridge_slave_1: left allmulticast mode [ 720.999649][ T4084] bridge_slave_1: left promiscuous mode [ 721.005471][ T4084] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.014060][ T4084] bridge_slave_0: left allmulticast mode [ 721.019741][ T4084] bridge_slave_0: left promiscuous mode [ 721.025512][ T4084] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.100669][ T4084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 721.110628][ T4084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 721.120692][ T4084] bond0 (unregistering): Released all slaves [ 721.140000][T12041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.152467][T12041] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.165382][ T4083] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.172485][ T4083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.186553][ T7131] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.193735][ T7131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.221043][ T4084] hsr_slave_0: left promiscuous mode [ 721.233519][ T4084] hsr_slave_1: left promiscuous mode [ 721.244202][ T4084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 721.251676][ T4084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.260562][ T4084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 721.268126][ T4084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 721.278696][ T4084] veth1_macvtap: left promiscuous mode [ 721.284189][ T4084] veth0_macvtap: left promiscuous mode [ 721.290407][ T4084] veth1_vlan: left promiscuous mode [ 721.295639][ T4084] veth0_vlan: left promiscuous mode [ 721.367142][ T4084] team0 (unregistering): Port device team_slave_1 removed [ 721.378996][ T4084] team0 (unregistering): Port device team_slave_0 removed [ 721.423905][T12041] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 721.434341][T12041] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 721.453398][T12163] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 721.510664][T12077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.524813][T12077] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.534944][ T4083] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.542048][ T4083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.554643][T12041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.566720][ T4083] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.573852][ T4083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.584615][T12170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12067'. [ 721.606614][T12077] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 721.617169][T12077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 721.702417][T12077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.723711][T12041] veth0_vlan: entered promiscuous mode [ 721.735740][T12041] veth1_vlan: entered promiscuous mode [ 721.778288][T12041] veth0_macvtap: entered promiscuous mode [ 721.786104][T12041] veth1_macvtap: entered promiscuous mode [ 721.803315][T12041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.819680][T12041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.831795][ T4083] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.855701][ T4083] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.865164][ T4083] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.875343][ T4083] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.928360][T12077] veth0_vlan: entered promiscuous mode [ 721.936025][T12077] veth1_vlan: entered promiscuous mode [ 721.951127][T12077] veth0_macvtap: entered promiscuous mode [ 721.958981][T12077] veth1_macvtap: entered promiscuous mode [ 721.970824][T12077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.981544][T12077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.992142][ T7131] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.001057][ T7131] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.012396][ T7131] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.021803][ T7131] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.059631][T12201] netlink: 68 bytes leftover after parsing attributes in process `syz.1.12072'. [ 722.181466][T12215] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12073'. [ 722.190923][T12215] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12073'. [ 722.225713][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12043'. [ 722.756783][T12237] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 723.192734][T12252] netlink: 68 bytes leftover after parsing attributes in process `syz.2.12085'. [ 723.398557][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12096'. [ 723.666180][T12301] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 723.684462][T12301] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12105'. [ 723.695953][T12301] netlink: 'syz.4.12105': attribute type 10 has an invalid length. [ 723.704026][T12301] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12105'. [ 723.723062][T12301] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 723.865369][T12314] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 723.945463][T12317] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 724.354620][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 724.354654][ T29] audit: type=1326 audit(1762222447.993:106495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12324 comm="syz.0.12113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4132af6c9 code=0x7ffc0000 [ 724.385401][ T29] audit: type=1326 audit(1762222447.993:106496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12324 comm="syz.0.12113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4132af6c9 code=0x7ffc0000 [ 724.409774][ T29] audit: type=1326 audit(1762222448.033:106497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12324 comm="syz.0.12113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4132af6c9 code=0x7ffc0000 [ 724.433682][ T29] audit: type=1326 audit(1762222448.033:106498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12324 comm="syz.0.12113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4132af6c9 code=0x7ffc0000 [ 724.457488][ T29] audit: type=1326 audit(1762222448.033:106499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12324 comm="syz.0.12113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4132af6c9 code=0x7ffc0000 [ 724.483807][ T29] audit: type=1326 audit(1762222448.053:106500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12324 comm="syz.0.12113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4132af6c9 code=0x7ffc0000 [ 724.507623][ T29] audit: type=1326 audit(1762222448.053:106501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12324 comm="syz.0.12113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4132af6c9 code=0x7ffc0000 [ 724.531418][ T29] audit: type=1326 audit(1762222448.053:106502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12324 comm="syz.0.12113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4132af6c9 code=0x7ffc0000 [ 724.555245][ T29] audit: type=1326 audit(1762222448.053:106503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12324 comm="syz.0.12113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4132af6c9 code=0x7ffc0000 [ 724.579211][ T29] audit: type=1326 audit(1762222448.053:106504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12324 comm="syz.0.12113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4132af6c9 code=0x7ffc0000 [ 724.831304][T12333] netlink: 68 bytes leftover after parsing attributes in process `syz.2.12117'. [ 724.911422][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12125'. [ 725.057183][T12380] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 725.097377][T12383] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 725.152855][T12387] loop7: detected capacity change from 0 to 2048 [ 725.171977][T12387] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 725.389219][T12392] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 725.404192][T12387] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 725.416715][T12387] EXT4-fs (loop7): This should not happen!! Data will be lost [ 725.416715][T12387] [ 725.426420][T12387] EXT4-fs (loop7): Total free blocks count 0 [ 725.433089][T12387] EXT4-fs (loop7): Free/Dirty block details [ 725.439021][T12387] EXT4-fs (loop7): free_blocks=2415919104 [ 725.444740][T12387] EXT4-fs (loop7): dirty_blocks=8208 [ 725.450075][T12387] EXT4-fs (loop7): Block reservation details [ 725.456050][T12387] EXT4-fs (loop7): i_reserved_data_blocks=513 [ 725.514097][ T4084] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 725.630417][T12401] bridge_slave_0: left allmulticast mode [ 725.636154][T12401] bridge_slave_0: left promiscuous mode [ 725.642619][T12401] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.658112][T12401] bridge_slave_1: left allmulticast mode [ 725.663812][T12401] bridge_slave_1: left promiscuous mode [ 725.670262][T12401] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.673900][T12407] netlink: 'syz.7.12139': attribute type 10 has an invalid length. [ 725.688882][T12401] bond0: (slave bond_slave_0): Releasing backup interface [ 725.705586][T12401] bond0: (slave bond_slave_1): Releasing backup interface [ 725.723759][T12401] team0: Port device team_slave_0 removed [ 725.748543][T12401] team0: Port device team_slave_1 removed [ 725.760404][T12401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 725.768198][T12401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.778055][T12401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.785509][T12401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.798640][T12401] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 725.827281][T12407] batman_adv: batadv0: Adding interface: veth1_vlan [ 725.833946][T12407] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.860810][T12407] batman_adv: batadv0: Interface activated: veth1_vlan [ 726.122257][T12433] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 726.279190][T12451] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 726.300648][T12454] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 726.404614][T12458] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 726.730457][T12467] siw: device registration error -23 [ 727.421260][T12477] __nla_validate_parse: 2 callbacks suppressed [ 727.421278][T12477] netlink: 68 bytes leftover after parsing attributes in process `syz.7.12169'. [ 728.134722][ T7131] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.145074][ T7131] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.160150][T12505] chnl_net:caif_netlink_parms(): no params data found [ 728.228385][T12542] siw: device registration error -23 [ 728.229190][ T7131] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.244084][ T7131] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.352118][T12546] bridge_slave_0: left allmulticast mode [ 728.357874][T12546] bridge_slave_0: left promiscuous mode [ 728.363547][T12546] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.372133][T12549] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12190'. [ 728.382138][T12549] netlink: 'syz.2.12190': attribute type 10 has an invalid length. [ 728.390148][T12549] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12190'. [ 728.400968][T12546] bridge_slave_1: left allmulticast mode [ 728.406644][T12546] bridge_slave_1: left promiscuous mode [ 728.412355][T12546] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.423110][T12546] bond0: (slave bond_slave_0): Releasing backup interface [ 728.442871][T12546] bond0: (slave bond_slave_1): Releasing backup interface [ 728.469912][T12546] team0: Port device team_slave_0 removed [ 728.502201][T12546] team0: Port device team_slave_1 removed [ 728.514447][T12546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 728.521997][T12546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 728.531545][T12546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 728.539122][T12546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 728.549756][T12546] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 728.572443][ T7131] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.583409][ T7131] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.609690][T12549] batman_adv: batadv0: Adding interface: veth1_vlan [ 728.616365][T12549] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.642775][T12549] batman_adv: batadv0: Interface activated: veth1_vlan [ 728.679863][T12505] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.687008][T12505] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.706615][T12505] bridge_slave_0: entered allmulticast mode [ 728.714304][T12505] bridge_slave_0: entered promiscuous mode [ 728.724367][ T7131] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.734803][ T7131] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.747861][T12505] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.754983][T12505] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.770267][T12558] netlink: 'syz.2.12193': attribute type 4 has an invalid length. [ 728.771029][T12505] bridge_slave_1: entered allmulticast mode [ 728.778186][T12558] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12193'. [ 728.784892][T12505] bridge_slave_1: entered promiscuous mode [ 728.829222][T12558] .`: renamed from bond0 (while UP) [ 728.877452][T12505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.937862][T12505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.947850][ T7131] bridge_slave_1: left allmulticast mode [ 728.953511][ T7131] bridge_slave_1: left promiscuous mode [ 728.959191][ T7131] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.967118][ T7131] bridge_slave_0: left allmulticast mode [ 728.972863][ T7131] bridge_slave_0: left promiscuous mode [ 728.978606][ T7131] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.120719][ T7131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 729.135982][ T7131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 729.148790][ T7131] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 729.158054][ T7131] bond0 (unregistering): Released all slaves [ 729.166065][T12570] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 729.178710][T12573] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 729.192913][T12505] team0: Port device team_slave_0 added [ 729.198989][ T7131] tipc: Disabling bearer [ 729.204287][ T7131] tipc: Left network mode [ 729.209740][T12505] team0: Port device team_slave_1 added [ 729.238342][ T7131] hsr_slave_0: left promiscuous mode [ 729.244000][ T7131] hsr_slave_1: left promiscuous mode [ 729.252106][ T7131] veth0_macvtap: left allmulticast mode [ 729.257717][ T7131] veth1_macvtap: left promiscuous mode [ 729.263283][ T7131] veth0_macvtap: left promiscuous mode [ 729.269170][ T7131] veth1_vlan: left promiscuous mode [ 729.274391][ T7131] veth0_vlan: left promiscuous mode [ 729.398470][ T7131] team0 (unregistering): Port device team_slave_1 removed [ 729.408607][ T7131] team0 (unregistering): Port device team_slave_0 removed [ 729.449177][T12505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.456153][T12505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.482226][T12505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.497197][T11562] infiniband syz1: ib_query_port failed (-19) [ 729.504358][T12505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.511371][T12505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.537413][T12505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.571480][T12505] hsr_slave_0: entered promiscuous mode [ 729.577809][T12505] hsr_slave_1: entered promiscuous mode [ 729.599892][T12505] debugfs: 'hsr0' already exists in 'hsr' [ 729.605684][T12505] Cannot create hsr debugfs directory [ 729.611511][ T29] kauditd_printk_skb: 549 callbacks suppressed [ 729.611527][ T29] audit: type=1326 audit(1762222453.243:107054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.4.12205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 729.641891][ T29] audit: type=1326 audit(1762222453.243:107055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.4.12205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 729.665881][ T29] audit: type=1326 audit(1762222453.243:107056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.4.12205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 729.689682][ T29] audit: type=1326 audit(1762222453.243:107057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.4.12205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 729.713820][ T29] audit: type=1326 audit(1762222453.243:107058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.4.12205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 729.737776][ T29] audit: type=1326 audit(1762222453.243:107059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.4.12205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 729.761635][ T29] audit: type=1326 audit(1762222453.243:107060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.4.12205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 729.785675][ T29] audit: type=1326 audit(1762222453.243:107061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.4.12205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 729.809535][ T29] audit: type=1326 audit(1762222453.243:107062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.4.12205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 729.833700][ T29] audit: type=1326 audit(1762222453.243:107063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.4.12205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5a147f6c9 code=0x7ffc0000 [ 730.132924][T12629] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 730.278333][T12648] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 730.375286][T12505] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 730.395292][T12505] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 730.410164][T12505] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 730.417252][T12652] loop2: detected capacity change from 0 to 164 [ 730.420229][T12505] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 730.448730][T12652] syz.2.12228: attempt to access beyond end of device [ 730.448730][T12652] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 730.509929][T12652] syz.2.12228: attempt to access beyond end of device [ 730.509929][T12652] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 730.550320][T12505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.585110][T12505] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.604822][ T4095] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.611928][ T4095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.663863][ T4095] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.671121][ T4095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.840939][T12505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.973685][T12505] veth0_vlan: entered promiscuous mode [ 730.994791][T12505] veth1_vlan: entered promiscuous mode [ 731.037294][T12505] veth0_macvtap: entered promiscuous mode [ 731.053649][T12505] veth1_macvtap: entered promiscuous mode [ 731.068609][T12505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.097025][T12505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.111713][ T4095] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.136595][ T4095] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.145127][T12701] SELinux: security_context_str_to_sid (O*3!L;(x?8>${S7#!g.&[n٦9P9\ETWq3H*8YYLGR!I*' CDX [ 731.145127][T12701] s0dnph5L0|qD81A{ꈆnK P) failed with errno=-22 [ 731.170565][T12694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12237'. [ 731.184537][T12701] loop7: detected capacity change from 0 to 512 [ 731.190830][ T4095] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.190885][ T4095] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.258757][T12701] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 731.284431][T12701] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 731.332328][T12701] EXT4-fs (loop7): shut down requested (1) [ 731.343227][T12701] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 731.356615][T12720] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 731.380650][T12077] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 731.472896][T12730] loop7: detected capacity change from 0 to 1024 [ 731.485469][T12730] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 731.584363][T12716] loop2: detected capacity change from 0 to 1024 [ 731.611083][T12716] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 731.829477][ T4083] $H (unregistering): Released all slaves [ 731.848175][T12717] chnl_net:caif_netlink_parms(): no params data found [ 731.892176][ T4083] hsr_slave_0: left promiscuous mode [ 731.898076][ T4083] hsr_slave_1: left promiscuous mode [ 731.995438][T12717] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.002673][T12717] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.009957][T12717] bridge_slave_0: entered allmulticast mode [ 732.016624][T12717] bridge_slave_0: entered promiscuous mode [ 732.026423][T12717] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.033611][T12717] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.042944][T12717] bridge_slave_1: entered allmulticast mode [ 732.063090][T12717] bridge_slave_1: entered promiscuous mode [ 732.112074][T12717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.129938][T12717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.152461][T12754] loop0: detected capacity change from 0 to 1024 [ 732.168202][T12754] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 732.190040][T12717] team0: Port device team_slave_0 added [ 732.214614][T12717] team0: Port device team_slave_1 added [ 732.261694][T12717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.268722][T12717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.294704][T12717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.306086][T12717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.313064][T12717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.339108][T12717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.374069][T12717] hsr_slave_0: entered promiscuous mode [ 732.380229][T12717] hsr_slave_1: entered promiscuous mode [ 732.490367][T12734] chnl_net:caif_netlink_parms(): no params data found [ 732.509031][ T4083] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.566262][T12734] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.573537][T12734] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.580911][T12734] bridge_slave_0: entered allmulticast mode [ 732.587363][T12734] bridge_slave_0: entered promiscuous mode [ 732.596095][T12755] chnl_net:caif_netlink_parms(): no params data found [ 732.616725][T12734] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.623956][T12734] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.631627][T12734] bridge_slave_1: entered allmulticast mode [ 732.638284][T12734] bridge_slave_1: entered promiscuous mode [ 732.650231][ T4083] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.684741][T12734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.695458][T12734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.723062][ T4083] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.739545][T12755] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.746665][T12755] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.754149][T12755] bridge_slave_0: entered allmulticast mode [ 732.760796][T12755] bridge_slave_0: entered promiscuous mode [ 732.768165][T12734] team0: Port device team_slave_0 added [ 732.775364][ T3003] ================================================================== [ 732.783461][ T3003] BUG: KCSAN: data-race in set_nlink / set_nlink [ 732.789795][ T3003] [ 732.792111][ T3003] write to 0xffff88811a1d5d28 of 4 bytes by task 11465 on cpu 1: [ 732.799828][ T3003] set_nlink+0x99/0xb0 [ 732.803904][ T3003] kernfs_iop_permission+0x1e2/0x220 [ 732.809203][ T3003] inode_permission+0x1ca/0x310 [ 732.814072][ T3003] link_path_walk+0x162/0x900 [ 732.818759][ T3003] path_openat+0x1de/0x2170 [ 732.823271][ T3003] do_filp_open+0x109/0x230 [ 732.827778][ T3003] do_sys_openat2+0xa6/0x110 [ 732.832367][ T3003] __x64_sys_openat+0xf2/0x120 [ 732.837132][ T3003] x64_sys_call+0x2eab/0x3000 [ 732.841817][ T3003] do_syscall_64+0xd2/0x200 [ 732.846345][ T3003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.852257][ T3003] [ 732.854589][ T3003] read to 0xffff88811a1d5d28 of 4 bytes by task 3003 on cpu 0: [ 732.862136][ T3003] set_nlink+0x29/0xb0 [ 732.866225][ T3003] kernfs_iop_permission+0x1e2/0x220 [ 732.871527][ T3003] inode_permission+0x1ca/0x310 [ 732.876407][ T3003] link_path_walk+0x162/0x900 [ 732.881117][ T3003] path_openat+0x1de/0x2170 [ 732.885642][ T3003] do_filp_open+0x109/0x230 [ 732.890147][ T3003] do_sys_openat2+0xa6/0x110 [ 732.894741][ T3003] __x64_sys_openat+0xf2/0x120 [ 732.899527][ T3003] x64_sys_call+0x2eab/0x3000 [ 732.904235][ T3003] do_syscall_64+0xd2/0x200 [ 732.908749][ T3003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.914667][ T3003] [ 732.916989][ T3003] value changed: 0x00000005 -> 0x00000003 [ 732.922708][ T3003] [ 732.925032][ T3003] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 732.931187][ T3003] CPU: 0 UID: 0 PID: 3003 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 732.942045][ T3003] Tainted: [W]=WARN [ 732.945847][ T3003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 732.955905][ T3003] ================================================================== [ 732.968120][T12755] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.975240][T12755] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.013196][T12755] bridge_slave_1: entered allmulticast mode [ 733.028202][T12755] bridge_slave_1: entered promiscuous mode [ 733.045021][T12734] team0: Port device team_slave_1 added [ 733.092017][ T4083] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.189851][ T4083] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.231211][ T4083] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.310428][ T4083] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.351344][ T4083] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.559165][ T4083] .` (unregistering): Released all slaves [ 733.630285][ T4083] bond0 (unregistering): Released all slaves [ 733.712813][ T4083] hsr_slave_0: left promiscuous mode [ 733.718561][ T4083] hsr_slave_1: left promiscuous mode [ 733.724163][ T4083] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 733.731228][ T4083] batman_adv: batadv0: Removing interface: veth1_vlan [ 733.740216][ T4083] hsr_slave_0: left promiscuous mode [ 733.745829][ T4083] hsr_slave_1: left promiscuous mode [ 733.751506][ T4083] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 733.758632][ T4083] batman_adv: batadv0: Removing interface: veth1_vlan [ 733.771612][ T4083] veth1_macvtap: left promiscuous mode [ 733.777085][ T4083] veth0_macvtap: left promiscuous mode [ 733.782633][ T4083] veth1_vlan: left promiscuous mode [ 733.787912][ T4083] veth0_vlan: left promiscuous mode [ 733.793599][ T4083] veth1_macvtap: left promiscuous mode [ 733.799091][ T4083] veth0_macvtap: left promiscuous mode [ 733.804618][ T4083] veth1_vlan: left promiscuous mode [ 733.809963][ T4083] veth0_vlan: left promiscuous mode [ 733.975555][ T3389] infiniband syz1: ib_query_port failed (-19) [ 734.421602][ T4083] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.431997][ T4083] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.480580][ T4083] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.490930][ T4083] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.530109][ T4083] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.540495][ T4083] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.590175][ T4083] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.600550][ T4083] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.685381][ T4083] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.720089][ T4083] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.790643][ T4083] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.860776][ T4083] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.916795][ T4083] bridge_slave_1: left allmulticast mode [ 734.922476][ T4083] bridge_slave_1: left promiscuous mode [ 734.928108][ T4083] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.936037][ T4083] bridge_slave_0: left allmulticast mode [ 734.941715][ T4083] bridge_slave_0: left promiscuous mode [ 734.947344][ T4083] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.955680][ T4083] bridge_slave_1: left allmulticast mode [ 734.961376][ T4083] bridge_slave_1: left promiscuous mode [ 734.967084][ T4083] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.974633][ T4083] bridge_slave_0: left allmulticast mode [ 734.980298][ T4083] bridge_slave_0: left promiscuous mode [ 734.985969][ T4083] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.994080][ T4083] bridge_slave_1: left allmulticast mode [ 734.999824][ T4083] bridge_slave_1: left promiscuous mode [ 735.005450][ T4083] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.013168][ T4083] bridge_slave_0: left allmulticast mode [ 735.018869][ T4083] bridge_slave_0: left promiscuous mode [ 735.024481][ T4083] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.032451][ T4083] bridge_slave_1: left allmulticast mode [ 735.038109][ T4083] bridge_slave_1: left promiscuous mode [ 735.043791][ T4083] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.051462][ T4083] bridge_slave_0: left allmulticast mode [ 735.057151][ T4083] bridge_slave_0: left promiscuous mode [ 735.062813][ T4083] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.329146][ T4083] .` (unregistering): Released all slaves [ 735.429580][ T4083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 735.439492][ T4083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 735.449242][ T4083] bond0 (unregistering): Released all slaves [ 735.509860][ T4083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 735.519460][ T4083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 735.528815][ T4083] bond0 (unregistering): Released all slaves [ 735.589624][ T4083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 735.599157][ T4083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 735.608890][ T4083] bond0 (unregistering): Released all slaves [ 735.649071][ T4083] bond0 (unregistering): Released all slaves [ 735.701903][ T4083] tipc: Disabling bearer [ 735.707132][ T4083] tipc: Left network mode [ 735.718387][ T4083] hsr_slave_0: left promiscuous mode [ 735.723991][ T4083] hsr_slave_1: left promiscuous mode [ 735.731214][ T4083] hsr_slave_0: left promiscuous mode [ 735.736680][ T4083] hsr_slave_1: left promiscuous mode [ 735.742310][ T4083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 735.749760][ T4083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.757317][ T4083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 735.764768][ T4083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 735.774019][ T4083] hsr_slave_0: left promiscuous mode [ 735.779716][ T4083] hsr_slave_1: left promiscuous mode [ 735.785380][ T4083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.792935][ T4083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 735.804797][ T4083] veth0_macvtap: left allmulticast mode [ 735.810395][ T4083] veth0_macvtap: left promiscuous mode [ 735.815864][ T4083] veth1_macvtap: left promiscuous mode [ 735.821462][ T4083] veth1_vlan: left promiscuous mode [ 735.826666][ T4083] veth0_vlan: left promiscuous mode [ 735.832236][ T4083] veth1_macvtap: left promiscuous mode [ 735.837777][ T4083] veth0_macvtap: left promiscuous mode [ 735.843318][ T4083] veth1_vlan: left promiscuous mode [ 735.848640][ T4083] veth0_vlan: left promiscuous mode [ 735.990478][ T4083] team0 (unregistering): Port device team_slave_1 removed [ 735.999828][ T4083] team0 (unregistering): Port device team_slave_0 removed [ 736.051235][ T4083] team0 (unregistering): Port device team_slave_1 removed [ 736.060726][ T4083] team0 (unregistering): Port device team_slave_0 removed [ 736.089618][ T4083] team0 (unregistering): Port device team_slave_1 removed [ 736.099237][ T4083] team0 (unregistering): Port device team_slave_0 removed