last executing test programs: 6m41.208159255s ago: executing program 32 (id=30): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b4050000000000007910b8000000000015000000000000009500000000000000c2f097135b53a6dd00f1ea9dfa15c55cfba18cad01b774b6a517a14ebfcbee4230c033eca882596a728ec16bea148b3f77319feb6fb1c4f51c32bf81735fa3db9271db90ef74056461b9bcffc4f97d490d17d60d6ff0af05ec861a96"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6m40.367269s ago: executing program 33 (id=44): mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000003, 0x10010, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0001000000969171e7e11cf9918cb36c3e39b0824146cf9b21f96317", @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000300000000000000"], 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000540)=0x1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) shutdown(r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) 6m30.74415062s ago: executing program 34 (id=151): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r0, &(0x7f0000000740)=[{&(0x7f0000000640)="f956937045c5e1d17156e17c5948af8c55f104027f07a4747d52f99d41e2f7517f4c21275b3844accdebcbd89bba873c7f704c92a542d855dc845dadde75ac21f07238ca1a87b2ee86d94c77d1f98fea2eb5443a", 0x54}], 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000002040), &(0x7f0000002080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r2, 0x2340000) keyctl$describe(0x6, r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xe, &(0x7f00000020c0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c", @ANYRES16=r0, @ANYRES32=r0, @ANYRESDEC=r1, @ANYRES32=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xe7, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x700, &(0x7f0000000240)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7f}}, {@nolazytime}, {@noload}, {@nombcache}, {@acl}]}, 0x6, 0x56a, &(0x7f00000015c0)="$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") mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffe, 0x4002011, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x81000f4) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) 6m27.615132836s ago: executing program 5 (id=172): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) waitid$P_PIDFD(0x3, r3, 0x0, 0x4, 0x0) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r4, r4, 0x0, 0x800000009) 6m27.209065458s ago: executing program 5 (id=176): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x4040850) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x300, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 6m26.83205705s ago: executing program 5 (id=182): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x20000000}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000180)=""/73, 0x49, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000280)={[{@inlinecrypt}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@nombcache}, {@init_itable_val={'init_itable', 0x3d, 0x5ff}}, {@resuid}]}, 0xfe, 0x47a, &(0x7f0000000440)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2000000}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') (async) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x20000000}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) (async) pread64(r5, &(0x7f0000000180)=""/73, 0x49, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000280)={[{@inlinecrypt}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@nombcache}, {@init_itable_val={'init_itable', 0x3d, 0x5ff}}, {@resuid}]}, 0xfe, 0x47a, &(0x7f0000000440)="$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") (async) 6m26.254054873s ago: executing program 5 (id=189): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x36, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10001}, @tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @alu={0x4, 0x0, 0x8, 0x1, 0xa, 0x100, 0x1}, @alu={0x4, 0x0, 0x4, 0x3, 0xa, 0x1, 0xf}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @tail_call, @alu={0x4, 0x0, 0x0, 0x0, 0x3, 0x30, 0x10}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000440)='btrfs_find_cluster\x00', r0}, 0x18) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r2}, 0x11) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000180)=0xfffffff8) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ptrace(0x10, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, r3) sendmsg$IEEE802154_LIST_PHY(r3, 0x0, 0x40000) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') preadv(r5, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/152, 0x98}, {&(0x7f0000000580)=""/142, 0x2000060e}], 0x2, 0x0, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0\x00') r6 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r6, r6, 0x25) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 6m25.562376396s ago: executing program 5 (id=191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setresuid(0x0, 0x0, 0xee00) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x5, 0x0, 0xb, 0x7ffbfffe}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usbip_server_init(0x4) syz_usbip_server_init(0x4) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000800000004000000b47c000000000000", @ANYRES32, @ANYBLOB="0000000000000000070000000004000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"], 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x802, &(0x7f00000003c0), 0x1, 0x79c, &(0x7f0000001400)="$eJzs3c9rXNUeAPDvnSRNmva95sHjveqmWWmhdNLW2CoIprgQwUJB17ZhMg01k0zJTEoTsrCIIIigxYWgG9f+qDu3omv/Bjci0lI1LVZcyMidH8k0mUySNpNpm88HbnLOvefOOd85d849M/cyE8CuNZz+yUQ8EREfJBEH6uuTiOirpnojxmrl7i4t5tIliUrltd+Sapk7S4u5aNonta+eORgR370TcSSztt7S/MLUeKGQn63nR8rTl0ZK8wtHL06PT+Yn8zMnj4+Onjj17KmT2xfrHz8s7L/54ctPfzX219v/v/7+90mMxf76tuY4tklPLD8nfelTeI+Xtrmybku63QDuS6Z+oPZGOgYciJ5qCgB4nKXn/woAsMskzv8AsMs0Pge4s7SYayzd/URiZ906HREDtfgb1zdrW3rr1+wGqtdBB+8k0Vu/IhrbeL1rOCI+/eaNL9IlOnMdEqClt65GxPmh4bXjf7LmnoWtOraJMsOr8sY/2DnfpvOf51rN/zLL859Ynv+s6G/x2r0fwxF7mvNrX/+ZGy13fHEbKq/P/16o3duWBto0/1u+aW2op577V5o5lA6ahXw6tv07Ig5HX/+Fi4X88TZ1HL799+31tjXP/36/9ubnaf3p/5USmRu9/ffuMzFeHn+QmJvduhrxZO/KvX1314z/A9W57ur+T9edbffAh1aSrzz/7ifrFUvjT+NtLGvj76zKZxFPRev4G5K29yeOpN1/rPa3dR1f//Tx4Hr1N/d/uqT1N94L7IS0/wfbxz+UNN+vWdre+jeOv/Xxvyd5vZpuDB5Xxsvl2eMRe5JX164/sbJvI98on8Zfi3R1/Jm2x3/6TvD8JmPsvfnrl623nP5f7X93+39iS/2/9cT1u1M969W/uf4fraYO19dsZvzbbAMf5LkDAAAAAAAAAAAAAAAAAAAAAAAAgM3KRMT+SDLZ5XQmk83WfsP7vzGYKRRL5SMXinMzE1H9reyh6Ms0vuryQC2fNL7/dKgpf2JV/pmI+E9EfNS/t5rP5oqFiW4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1+9b5/f/UL/3dbh0A0DEDG5a4nb8nW6lUKh1sDwDQeRuf/wGAx02b8//enWwHALBzvP8HgN3H+R8Adh/nfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrs7Jkz6VL5c2kxl+YnLs/PTRUvH53Il6ay03O5bK44eyk7WSxOFvLZXHF6o8crFIuXRmNm7spIOV8qj5TmF85NF+dmyucuTo9P5s/l+3YkKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYmtL8wtR4oZCffSwS70XEQ9CMTiSSeCia0ZXEz0d/PNiuzLUNDuOxhyKKRyzR7ZEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NHwTwAAAP//MS4kYw==") 6m25.198333959s ago: executing program 5 (id=193): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001a00010000000000fcdbdf25021400000000000010200000080001007f"], 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x0) (fail_nth: 3) 6m25.160135959s ago: executing program 35 (id=193): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001a00010000000000fcdbdf25021400000000000010200000080001007f"], 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x0) (fail_nth: 3) 6m13.710912988s ago: executing program 4 (id=274): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe4627213a135f8de, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_request_inode\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='ufshcd_uic_command\x00', r0}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200", 0x2c}], 0x1}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r1 = socket(0x15, 0x5, 0x0) recvmsg$can_raw(r1, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001800"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='percpu_free_percpu\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000018000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='sys_enter\x00', r4}, 0x10) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 6m13.189899331s ago: executing program 4 (id=281): socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) msgsnd(0x0, 0x0, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x0) 6m12.270376186s ago: executing program 4 (id=290): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000000000000000000007166cc1f83000000", @ANYRES32=r2, @ANYBLOB="08000600", @ANYRES32=r4, @ANYBLOB], 0x24}}, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000001d7a00"/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) unshare(0x20000400) open_by_handle_at(0xffffffffffffffff, 0x0, 0x513300) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000b794d8fe78795fc70d9b977a5f4062a24848426eb3e5a1fec111ad25bf7d7791af17fc173e4e955ddbc233b416cab165130fde9f2bb7240ae5db3cd3540f612194cb6fdbc1d0cf2cde40a6f6953f13608851b93f29c839d95c4f23ea547f81cae2ee41ab8628deb6967a1733e9f74f07c27b439969a79a4c3005b1b6a9ee0254fee83de59da4000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=ANY=[@ANYBLOB="180000000000bf49000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r8}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x4, 0x6000, @fd=r9, 0x1, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) 6m11.953939577s ago: executing program 4 (id=294): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x36, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10001}, @tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @alu={0x4, 0x0, 0x8, 0x1, 0xa, 0x100, 0x1}, @alu={0x4, 0x0, 0x4, 0x3, 0xa, 0x1, 0xf}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @tail_call, @alu={0x4, 0x0, 0x0, 0x0, 0x3, 0x30, 0x10}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000440)='btrfs_find_cluster\x00', r0}, 0x18) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r2}, 0x11) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000180)=0xfffffff8) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, r4) sendmsg$IEEE802154_LIST_PHY(r4, 0x0, 0x40000) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') preadv(r6, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/152, 0x98}, {&(0x7f0000000580)=""/142, 0x2000060e}], 0x2, 0x0, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0\x00') r7 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r7, r7, 0x25) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 6m11.889797608s ago: executing program 4 (id=295): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x5, 0x5, 0x99, 0x1b, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_open_dev$vcsn(&(0x7f0000000340), 0x8, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0xa3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r6 = epoll_create1(0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x124) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, 0x0, &(0x7f00000002c0)=r9}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0xe000001a}) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1a) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r0, @ANYBLOB, @ANYRES32=r11, @ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r13}, 0x10) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r14}, 0x10) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r15) 6m11.513967819s ago: executing program 4 (id=304): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) 6m11.50238992s ago: executing program 36 (id=304): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="2800000021002101000000f3000000000a00000000000000000000000c0018007bc65ed7f46b98b2c1ee7343e608b15366f487863d1a52e7509ae2b1c68806353e2b4a7a4412616b09c59de365a8aa38eb90893ca063e11e1bfd2cc6191276a5893dc0519274b4766f657e5297f548455519665125a6f6725cd6031bd702445bfc275c3bea4d84df22d102656e9604f936a34504a8198ce880b32f0ea211375961ed75837fac4d66cab03d1e669be4f862f76399e0158d7097f6207e3339d3936d8fa831aa8e7d3c943b30dc72d0fb5ab82007a594dc3aafb782007948d4800fcb1c974e48c34414e3c67c9fa58f7622cfabd21821c1e6379c72feb593646c651efb55b7620656300b1e5c8dfca92d06638b1b69fe71f9377d79cc54a4d92f2bfedab610b4941b295ef4cb4f889b3a41994d3c78092236e6d3059f6b9a9cb510353b7d3461d23c4200000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) 5m20.025529366s ago: executing program 9 (id=964): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0xf}}]}, 0x64, 0x516, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 5m19.764539498s ago: executing program 9 (id=967): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x5, 0x5, 0x99, 0x1b, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_open_dev$vcsn(&(0x7f0000000340), 0x8, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r5 = epoll_create1(0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x124) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, 0x0, &(0x7f00000002c0)=r8}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r9}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)={0xe000001a}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000040)) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1a) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r0, @ANYBLOB, @ANYRES32=r10, @ANYRES16=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r12}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r13}, 0x10) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r14) 5m19.38527806s ago: executing program 9 (id=972): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4ec, &(0x7f0000000380)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usbip_server_init(0x5) syz_clone(0x4023480, 0x0, 0x8637, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) read(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) vmsplice(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x3}, 0x18) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) io_uring_setup(0x2e34, &(0x7f0000000180)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000900)="9e7fd212a3d6a185c77ab43c371b091948040ea53ae8f100c5bae9e50d93cc1180e5a2feaa94217ba2d99fb6ec71b4ae0c48594a35bd33f0837dd4710a79702c0e5e7bac94000f", 0x47, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x8, @loopback}, 0x1c) sendmsg$inet6(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x30400}], 0x1}, 0x0) sendmmsg$sock(r1, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)="b4", 0x1}], 0x1}}], 0x1, 0x40080) shutdown(r1, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000700009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x18) 5m17.835187458s ago: executing program 9 (id=988): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000000085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x30, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x7}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0) 5m17.52237631s ago: executing program 9 (id=990): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = io_uring_setup(0x253c, &(0x7f0000000080)={0x0, 0x953e, 0x0, 0xfffffffd, 0x40000000}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) socket$tipc(0x1e, 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 5m16.181260156s ago: executing program 9 (id=1003): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x200, 0x4) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x200, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b041000e0ff020002004788aa96a13bb1000000000088641100", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) (async) sendto$packet(r1, &(0x7f0000000180)="0b041000e0ff020002004788aa96a13bb1000000000088641100", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRES8=r1, @ANYRES64=r0, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRESOCT=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESHEX=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESHEX=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x63, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd67d4c1d8002d0000002800000000000001ff0200000000000000000000000000017300002000000000000000000000000000000000000000030000030000004e210000000b0000000100"/99], 0x0) (async) syz_emit_ethernet(0x63, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd67d4c1d8002d0000002800000000000001ff0200000000000000000000000000017300002000000000000000000000000000000000000000030000030000004e210000000b0000000100"/99], 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in6, @in=@multicast2}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in6, @in=@multicast2}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0xf00}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) (async) r12 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r12, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4e6801, 0x92) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4e6801, 0x92) 5m1.159586764s ago: executing program 37 (id=1003): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x200, 0x4) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x200, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b041000e0ff020002004788aa96a13bb1000000000088641100", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) (async) sendto$packet(r1, &(0x7f0000000180)="0b041000e0ff020002004788aa96a13bb1000000000088641100", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRES8=r1, @ANYRES64=r0, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRESOCT=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESHEX=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESHEX=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x63, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd67d4c1d8002d0000002800000000000001ff0200000000000000000000000000017300002000000000000000000000000000000000000000030000030000004e210000000b0000000100"/99], 0x0) (async) syz_emit_ethernet(0x63, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd67d4c1d8002d0000002800000000000001ff0200000000000000000000000000017300002000000000000000000000000000000000000000030000030000004e210000000b0000000100"/99], 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in6, @in=@multicast2}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in6, @in=@multicast2}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0xf00}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) (async) r12 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r12, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4e6801, 0x92) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4e6801, 0x92) 4m24.576211694s ago: executing program 8 (id=1786): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x300, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_io_uring_submit(r0, 0x0, 0x0) 4m24.453778055s ago: executing program 8 (id=1787): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 4m24.183265036s ago: executing program 8 (id=1790): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x33, &(0x7f0000000200)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYRES32=0xffffffffffffffff, @ANYRES64, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x78, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r2 = syz_mount_image$ext4(&(0x7f00000002c0)='ext3\x00', &(0x7f0000000180)='./bus\x00', 0x200000, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@nodioread_nolock}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES64=r3, @ANYRES64=r0, @ANYBLOB="e63dd1a8818da7c6461510ed44518ed193e4942b4c684d6c8b48ddb44f518d49dbc9575b98fee166d15d5e36876aa229b26a87a3234ba19b56ac7c3dc38e8face2a0d772a99c92a1b94bbadd3a80000000000000005aa7ba3e98cd0f53898b5c6acbda2ad0356dd6ac64dc026ef3ccf6a453060c6b57250e482ad560da3904b33287fb096492c4b179da930b", @ANYRESOCT=r3, @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="01f53dd44df1d4ba5bc552eb9ee32637103a04d08fe62668405bd89120b4f2eaf4449d9d526062bf6d6e79d5567ad5748cbae0f0f985a79f246ff234542788adc4f5dd33d4e2b149a68dfc3f9018098540444ea2d8fb3b07015ad4064019525d8040ededb1717c814cd06e6bc09a0f4b9149c37bcec0af10d7f6288b6b256e27fb11e5cb79e4698c5f5e3714e4e8dd1129953c824ecbf11a25edf09476bf548289bf24ee429912d93febbddf9fe976a8fc6cf8cee0cdd1b7684dbb8fd3b2e1c32fbfb1f511b8e96c6a1a97eac1482a853e7be0bd4c4754cea9cd65a47deea6f4562fffb3bac43d4bb76bee25b1e9cd317a2424f5c5360cac56"], 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x1}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0xd0, &(0x7f0000000540), 0x4) listen(r5, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000500)={0x0, 0x3}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x2000000, 0x0, 0x0, 0xf, "ff00f7000000000000000000af88008300"}) r9 = syz_open_pts(r4, 0x141601) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) read(0xffffffffffffffff, &(0x7f00000006c0)=""/116, 0x74) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r9, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) close(0xffffffffffffffff) 4m23.180058141s ago: executing program 8 (id=1794): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x3a, @multicast2, 0x4e23, 0x4, 'rr\x00', 0xa, 0x0, 0x47}, 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b000000d54cfca71132b300001d02000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000fb00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000027d70000379da1af891fad970000000000000002316484971d01d4721bad8a7ba441ad7142fd5822c7e2abf965864feafef700000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) connect$unix(r2, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept(r3, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x1a, &(0x7f0000000680)={{0x0, @dev={0xac, 0x14, 0x14, 0x1f}, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x81, 0x4f}, {@rand_addr=0x64010102, 0x4e23, 0x2000000, 0xcb, 0x12d5f, 0x12d5c}}, 0x44) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x2, 0x52e, &(0x7f0000000f00)="$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") move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x698f, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) 4m22.002337717s ago: executing program 8 (id=1805): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x33, &(0x7f0000000200)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYRES32=0xffffffffffffffff, @ANYRES64, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x78, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r2 = syz_mount_image$ext4(&(0x7f00000002c0)='ext3\x00', &(0x7f0000000180)='./bus\x00', 0x200000, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@nodioread_nolock}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES64=r3, @ANYRES64=r0, @ANYBLOB="e63dd1a8818da7c6461510ed44518ed193e4942b4c684d6c8b48ddb44f518d49dbc9575b98fee166d15d5e36876aa229b26a87a3234ba19b56ac7c3dc38e8face2a0d772a99c92a1b94bbadd3a80000000000000005aa7ba3e98cd0f53898b5c6acbda2ad0356dd6ac64dc026ef3ccf6a453060c6b57250e482ad560da3904b33287fb096492c4b179da930b", @ANYRESOCT=r3, @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="01f53dd44df1d4ba5bc552eb9ee32637103a04d08fe62668405bd89120b4f2eaf4449d9d526062bf6d6e79d5567ad5748cbae0f0f985a79f246ff234542788adc4f5dd33d4e2b149a68dfc3f9018098540444ea2d8fb3b07015ad4064019525d8040ededb1717c814cd06e6bc09a0f4b9149c37bcec0af10d7f6288b6b256e27fb11e5cb79e4698c5f5e3714e4e8dd1129953c824ecbf11a25edf09476bf548289bf24ee429912d93febbddf9fe976a8fc6cf8cee0cdd1b7684dbb8fd3b2e1c32fbfb1f511b8e96c6a1a97eac1482a853e7be0bd4c4754cea9cd65a47deea6f4562fffb3bac43d4bb76bee25b1e9cd317a2424f5c5360cac56"], 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x1}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0xd0, &(0x7f0000000540), 0x4) listen(r5, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000500)={0x0, 0x3}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x2000000, 0x0, 0x0, 0xf, "ff00f7000000000000000000af88008300"}) r9 = syz_open_pts(r4, 0x141601) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) read(0xffffffffffffffff, &(0x7f00000006c0)=""/116, 0x74) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r9, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) close(0xffffffffffffffff) 4m21.343660591s ago: executing program 8 (id=1808): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000030000000900010073797a310000000020000000020a01040000000000000000000000000900010073797a3000000000340000001f0a030000000000000000000300000008000340000000000900010073797a3100000000090002"], 0x9c}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) modify_ldt$write(0x1, &(0x7f0000000000)={0x4c}, 0x10) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) 4m21.315619791s ago: executing program 38 (id=1808): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000030000000900010073797a310000000020000000020a01040000000000000000000000000900010073797a3000000000340000001f0a030000000000000000000300000008000340000000000900010073797a3100000000090002"], 0x9c}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) modify_ldt$write(0x1, &(0x7f0000000000)={0x4c}, 0x10) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) 4m9.79255994s ago: executing program 0 (id=1929): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x9, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r4 = io_uring_setup(0x79bf, &(0x7f0000000180)) (async) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000080), 0x10) (async) listen(r5, 0x0) accept4$llc(r5, 0x0, 0x0, 0x0) (async) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) (async, rerun: 32) sendto$inet6(r3, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) (async, rerun: 32) shutdown(r3, 0x1) sendfile(r0, r0, 0x0, 0x7a680000) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x8, 0xc, 0xf, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000280)={0xfffffffe, 0x5}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000007c0)="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", 0x10005, r6}, 0x38) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x17, 0x0, 0x800, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) (async, rerun: 32) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}, 0x1, 0x0, 0x0, 0x44}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) 4m9.654083841s ago: executing program 0 (id=1931): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000006c0), 0x5}, 0x38) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x2}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4m8.718232656s ago: executing program 0 (id=1945): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000ff0f00000d00000000000000", @ANYRES32, @ANYBLOB="000000000000000000000600f2ed53fb000000007f52c4ecbff059719e7231f3fff737f87b93583512b135131c3a1b851914698b53b8e04dbdca4ad0865966", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 4m8.622661257s ago: executing program 0 (id=1947): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x3a, @multicast2, 0x4e23, 0x4, 'rr\x00', 0xa, 0x0, 0x47}, 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b000000d54cfca71132b300001d02000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000fb00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000027d70000379da1af891fad970000000000000002316484971d01d4721bad8a7ba441ad7142fd5822c7e2abf965864feafef700000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) connect$unix(r2, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept(r3, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x1a, &(0x7f0000000680)={{0x0, @dev={0xac, 0x14, 0x14, 0x1f}, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x81, 0x4f}, {@rand_addr=0x64010102, 0x4e23, 0x2000000, 0xcb, 0x12d5f, 0x12d5c}}, 0x44) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x2, 0x52e, &(0x7f0000000f00)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ////8+wKHhUtID7hAOjFcXV2f8+nMsBIBLl3r/n+/A3mcLMBIKfY1AhAYZf/3/f9zpelDJQQAAAzcdGtKCqXs673pKBRKpYibrZ8FKCZrG9XKfEQ8ERG/nSlea9YXWlsm514zAAAAAAAAAAAAAAAAAAAAAAAAAABtaZpECgAAAIy0iMKfkl+2n+U/N/P8dPf3AxPJv1o/CTwREW/98I3v311uNHYXmsv/drS88YNs+YvD+AYDAAAA6Na5Tm/N/znsbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNe89eHulM/Xx8qlBxf3LFyJiNi/+eEy25pNRjIjrf09i/MR2SUSMDSD+4b2I+Ghe/KSZ1lHIvPiDeBPOiR+z2buQF//GAOLDVXa/efx5La//FeLZ1jy//41H/E/9g+p9/Iuj499Yj/5/s88YT73zs3LP+PcinhrPP/504ic94j/XZ/yvf+3goNe69EcRc53Pn9YR72SE41K5sbVTru8f3N7YWl6vrFe2FxcXXl56Zemlpfny2ka1kv2bG+M7T//8/bPafz338y/Jsund/udz9pf3mfSfd+4++HCncng6/q3ncuL/6sfZK07HL2RxPpWVm+vnOuXDdvmkZ376m2fOav/qcfuLD/P/f6vXTrud6ihP9/unAwBcgPr+weZytVrZHdlC8yr9EUhD4REsfGugO0zTNG32qZxV9yOin/0kMeCWFvLzOS70PAIM+8gEAAAM2vFJ/7AzAQAAAAAAAAAAAAAAAAAAgKvrMp6y1h3z+BHIySAeoQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBD/DQAA///dpdP7") move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r9) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r10 = syz_open_procfs(r8, &(0x7f0000000040)='cgroup\x00') lseek(r10, 0x698f, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x20000}, 0x20) 4m8.107435159s ago: executing program 0 (id=1950): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$phonet_pipe(0x23, 0x5, 0x2) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x300, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0], 0x0, 0xa5, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xac, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000411cfd43f0de5ec3ea11694b48f10ab851a33dc90080e677766105c5028462e57e3952630b53893d07041b0db7356c93e02a432e0fffa6f30b76cf991cc4bd7faac310cf69bbf000451a0fd019c8210000124c14a6e8bd8b61080ec95aedd374744c8c8c4f14b3f81496d83b07ea81152ad2ca2dcf70976608000000e4e148a0b3707f41c6b37ec8a35fa57dae61", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000f0b4629b0000000000f400000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000b00000085000000060000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r10, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000000000000000009dc9000000", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) clock_settime(0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sctp_probe_path\x00', r12}, 0x7) syz_io_uring_submit(r11, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) 4m7.586309062s ago: executing program 0 (id=1957): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b002000000000000000000c0020e00735e6648408b7de0fe1e3006a63cb8c489ee61d9720eeef1afafd2d48ddddab23ecf260e1680a7618a2d2cd86ac267e07eb9c04434572773628056f7def69e635cd76945679f0525286026906377fe21fff876933a490bbd48a40d10451d585d8ab2fa7593e9d663fe27280e9be85f05ffac638482ffe0a8b1fe5514b97dc4204a12725eeba017186", @ANYRESHEX], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x3920, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 4m7.575025783s ago: executing program 39 (id=1957): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b002000000000000000000c0020e00735e6648408b7de0fe1e3006a63cb8c489ee61d9720eeef1afafd2d48ddddab23ecf260e1680a7618a2d2cd86ac267e07eb9c04434572773628056f7def69e635cd76945679f0525286026906377fe21fff876933a490bbd48a40d10451d585d8ab2fa7593e9d663fe27280e9be85f05ffac638482ffe0a8b1fe5514b97dc4204a12725eeba017186", @ANYRESHEX], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x3920, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2.852629125s ago: executing program 1 (id=4773): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f0000001940)=[{r4, 0x1}, {r4, 0x2}], 0x2, 0x0, 0x0, 0x0) signalfd4(r4, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x608, 0x360, 0x11, 0x148, 0x360, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x66d) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x4040850) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB, @ANYBLOB='\x00'/20], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 1.96119918s ago: executing program 1 (id=4796): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x8, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000140)=""/42, 0x2a}], 0x1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf38, @void, @value}, 0x94) r4 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200eef7ffffffb7030000feffffffb704000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.682316791s ago: executing program 1 (id=4803): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e0000000000000000007c80000040000000000000000000000000f8000000000000000038000100000000000000030000000000000023000000000000000000000000000000006be1982d1976e95b"], 0x78) write$tun(r6, &(0x7f0000000180)=ANY=[], 0x26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f00000007c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800c0001006d6163766c616e002400028008000100100000000400058008000300030000000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r5, @ANYBLOB="b0e45817e309edd8135850eefcc24257f7707fdfe7dde7a8137a9c607c453da99a22f39a6fbe62db013556044334bd6ef58aac9b61d3242172d04b189123a364eb2100702a819b14f261e3c84f13f3b618d038d5729145062b2101594fd5b09661861ee31e69ca4f33a3c7f9d044e1b611524aae72ba5b08177f9113b1b0bb3c65c748b24bfbe2a467c5aa266136704e199269e6a66947e1ba4bc3686e102d8d7b13c229de6022115900d0542a7248d98d6c34bf7f19bf90314732c3a8995a86b02b59a0bcc727f7d7d512274562c9a84564a2fc9a"], 0x5c}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="380100001000330601000000ffdbdf25fc000000000000000000000000000001ac1414bb00000000000000000000000000004000000080010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000011000000003200000000000000000000000000ffffac1414bb54aa0000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000020000000000000000000000000000000000000029bd7000000000000a000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000008000"/240], 0x138}, 0x1, 0x0, 0x0, 0x5850}, 0x0) 1.666463531s ago: executing program 3 (id=4805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setresuid(0x0, 0x0, 0xee00) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usbip_server_init(0x4) syz_usbip_server_init(0x4) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r6, &(0x7f00000004c0)={'#! ', './file1'}, 0xb) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.312407943s ago: executing program 1 (id=4807): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf38, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000930a000004"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 1.054916254s ago: executing program 7 (id=4809): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x8, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000140)=""/42, 0x2a}], 0x1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf38, @void, @value}, 0x94) r4 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0, &(0x7f0000000000)=0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x480500, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4000054) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = io_uring_setup(0x4724, 0x0) listen(0xffffffffffffffff, 0x3) close_range(r5, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="000000105c00000070020000ffffffffc603000004000000000000000000000038fb02265c708206d5292f9320c4de50c1cdfffd670481344ea2aef4c703333bba616938c0fb74426c3368ec0e7ff9d5c65a2fa30637713ea3145f669ed0e4a9fd5c09967f86e74c8441e62103d9783ff6a21cbdab7d4daee217167d2342f541171bfa7d3f720a0592377af4e681ff74b945ecbf92a8c7787f8524d425cbeb9fc8614bd0665ebaa9050ec2072d3d451e9ba6025995ac942b019cada40e5d52dff5e6b79e03c6f6fc992cf527ae2d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00"/628], 0x4ce) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000f0500000001000000000000000300000004000000040000000300008000000000000000002e"], &(0x7f0000000280)=""/266, 0x46, 0x10a, 0x6, 0x0, 0x0, @void, @value}, 0x28) 1.009425475s ago: executing program 1 (id=4811): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x40, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}], 0x1}}], 0x48}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x0, 0x52e, &(0x7f0000000f00)="$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") sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) 985.176405ms ago: executing program 6 (id=4812): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002340)=ANY=[@ANYBLOB="170000000000000004000000fe"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYBLOB="00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000009500000000000000000067a0282600"], 0x0, 0x70a, 0x0, 0x0, 0x41100, 0x75, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f0000000640)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x4048004}, 0x800) memfd_secret(0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x2000000, 0x3, 0x0, 0xf, "ff0006010000000000000000af5e008300"}) syz_open_pts(r4, 0x141601) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) write$cgroup_int(r5, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) socket$kcm(0x10, 0x2, 0x0) recvmsg$can_raw(r5, &(0x7f0000000380)={&(0x7f0000000300)=@generic, 0x80, &(0x7f0000000100)}, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}, 0x1, 0x0, 0x0, 0x30044141}, 0x0) 912.450845ms ago: executing program 7 (id=4813): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1100000000000000040000000b00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) syz_open_dev$usbmon(&(0x7f00000000c0), 0x80000, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) syz_io_uring_setup(0x690a, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) 912.013545ms ago: executing program 6 (id=4814): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000000380)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@dioread_nolock}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@delalloc}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbZdnamc8HbnvOvTc995t7v6fn5iQkgKE1kf0oRLwcEd8kEQfbto1GvnFibb/V+1dnsyWJRuPTv5JI8nWt/ZP89/688lJE/PZVxPHCxnZryysLpXI5Xczrk/XKpcna8sqJC5XSfDqfXpyemTn19sz0e+++M7BY3zj7z/ef3P7w1NdHV7/75e6hm0mcjgP5tvY4nsC19spETOTPyVicfmTHqQE0tpMk230A9GUkz/OxyPqAgzGSZz3w//dlRDSAIZXIfxhSrXFA695+QPfBz417H6zdAG2Mf3TttZHY07w32reaPHRnlN3vjg+g/ayNX/+8dTNbYnCvQwBs6dr1iDg5Orqx/0vy/q9/J3vY59E29H/w7NzOxj9vdhr/FNbHP9Fh/LO/Q+72Y+v8L9wdQDNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq19/JctWfutsWB+HHdHdz/8mLlSvfQkMbe7dz3ilY7j32T9/Ccdzn/2fJztsY0j6a3Xum3bOv6nq/FTxOsdz/+DGa1k8/nJyeb1MNm6Kjb6+8aR37u1v93xZ+d/3+bxjyft87W1x2/jxz3/pt229Xv970o+a5Z35euulOr1xamIXcnHG9dPP3hsq97aP4v/2NHN+79O1//eiPi8x/hvHP751f7jf7qy+Oce6/w/fuHOR1/80K393s7/W83SsXxNL/1frwf4JM8dAAAAAAAA7DSFiDgQSaG4Xi4UisW193ccjn2FcrVWP36+unRxLpqflR2PsUJrpvtg2/shpvL3w7bq04/UZyLiUER8O7K3WS/OVstz2x08AAAAAAAAAAAAAAAAAAAA7BD7u3z+P/PHyHYfHfDU+cpvGF5b5v8gvukJ2JH8/4fhJf9heMl/GF7yH4aX/IfhJf9heMl/GF7yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbq7Jkz2dJYvX91NqvPXV5eWqhePjGX1haKlaXZ4mx18VJxvlqdL6fF2Wplq79XrlYvTU3H0pXJelqrT9aWV85VqksX6+cuVErz6bl07JlEBQAAAAAAAAAAAAAAAAAAAM+X2vLKQqlcThcVFPoqjO6Mw1AYcGG7eyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOC/AAAA///ktDiZ") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x800, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff00001142"], 0x0) 884.687625ms ago: executing program 2 (id=4815): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200eef7ffffffb7030000feffffffb704000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 822.241816ms ago: executing program 6 (id=4816): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_user(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a70746d785fab3a733020726f6f7400"], 0x21) 683.071156ms ago: executing program 6 (id=4817): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$vcsu(&(0x7f00000002c0), 0xfffffffffffffffd, 0x416500) readv(r1, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/8, 0x8}, {&(0x7f0000000200)=""/54, 0x36}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e00000004000000000800000100000000620000541fed82d5a607cd1653fdfe8e2a6f2fe537630e2b76854e9adf9c2a15202d69607c13b1498a880ac834eb9f973f993ebfb448d1def15cbacc76152673a8d53c978ea76a9a4cfc28c6fa77802d74945a00a2c5e695effc7bd304c1c81b8c857912adb310d235289b3ce64348baaec873a5365b389977c91f2b3354ee4d230064f6202ea01cf5165bb4f991a7ca65155e879c2af6484f79964676d8a9fe53c57b6b1402c63ea55a4f", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0400000003000000050000000a00"/28], 0x50) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x120480d, &(0x7f0000000440)=ANY=[], 0x2, 0x551, &(0x7f0000000580)="$eJzs3V1v01gawPHHpV2qrIRWywqhqsCh7EpFKsFxoCjiyuucpId17Mh2UHuFKpqiihRWlJW2vZgZbhiNNHM3X4Db+QRzNV9ohOYjzMgvKS1tEkpfgjr/XwTnxD72eU5q+ZHb+FgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBYXt22K5b4Jugsq8G8ehS2Prwttj6wQG7vK4b0K2Kl/2R6Wq7mi67+48PqK+l/czKbv5uV6bSYlp2/Xvnbw8uTE/3thwR8Jra2d56v9nrdV+MO5BRdu3j48gmlVFMHJg5Ny21qZeLwRxGx7y41YtUwvo5X4kS3lBdpNwkjNe/dVpVarap0eSXsBM266+v+wgd3HNteVI/Kbe1GcRjcfVSOvSXj+yZoZm3S1WmbB+mBaJlEJdptKbW+0etWRw0gbVT5lEbOqEaO7TiViuNUFu/X7j+w7ckDC+yPyIEW4z9oMV4nePYGjmeiyP/ii5FAOrIs6tCXJ3WJJJTWgPWFfv7/1109tN+9+b+f5a9+WD0jWf6/nr+7Pij/D4jl7F5bsi078lxWpSc96cqrsUd0tq+maAnESCyhGGmJmy1RxRIlNVmURbHliSxJQ2JR0hAjvmiJZUViSURnR5QnkWhxJZFQIlEyL57cFiUVqUlNqqJES1lWJJSOBNKUurjZXtZlI/vcq6KsQTHuNqoMHEZJRCbTQ6wrzpDRnmT+v1Ac6ePORjhrJ3r+Bo7j937+BwAAAAAA55aV/fY9vf6fkmtZrWF8bY87LAAAAAAAcIKyv/zPpsVUWrsmFtf/AAAAAACcN1Z2j50lIiW5kdfWxcpul+KXAAAAAAAAnBPZ3/+vp0Uprd0Qa3e6FK7/AQAAAAA4J776uagMnGM/bl+0fvlNomjKetNe/qe16abt3M1iAtMLH+8xacxYl4qdZMViXkxOenrWms4b7U6C+b4o1kfN9W8dFsA3Rwng8qR8LzfzNjfX8nKtvybvpdQwvi57of+wIq57aSLRy8n/Xmz8X7Lhfxe0LlmyvtHrlp++7K1lsbxJ9/Jms5hA8cA8ikNieZ3Nt5Ddc3HoiKeyGzGKfkt5v/be8U/km08coc+3Mpe3mSvlZWn/+KfTPivlQaMvoqgcc+Rv5Vbe5tb8rbw4JApnVBTO3ig+67P4hCiqo6KoHjMKABiX9RFZyDqY+D/jLLcus1Zxp+ERsrscMbu/lfm8zfxMdmKdnDnkjG6POqPbx8xuPx14BtKgHJv2+8NHWfVdusG7gf3GvmOlH+GF15v/lStb2zt3NjZXn3WfdV84TnXRvmfb9x2ZyoZRFHsjvUjuAQDkRj9jZ2QL696Iq+q/736loCxP5aX0ZE0WsrsNsm8cHLrX0p6vISyMuGotZWkyf8LLwpCrur9kdzn09+sMbbs/hurp/yAAADhDc1ke/nVgHv6U/L8w4rp7fy4ffnVc2vO0NgAAcDp09N4qJd9aUWTaTyq1WsVNlrSKQu8/KjL1plYmSHTkLblBU6t2FCahF/pp5bGp61jFnXY7jBLVCCPVDmOznD35XRWPfo91yw0S48VtX7uxVl4YJK6XqLqJPdXu/Ns38ZKOso3jtvZMw3huYsJAxWEn8nRZqVjrPQ1NXQeJaZi0Gqh2ZFputKIeh36npVVdx15k2kmY77DflwkaYdTKdlse94cNAMAXYmt75/lqr9d9dYqVcY8RAADsR5YGAAAAAAAAAAAAAAAAAAAAAODLdxb3/1E555X+VNCn3ZeScY/0T1QZeer4+tRPTgBO1R8BAAD//w2WTjM=") close(r4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x40, 0x7800, 0x0, 0xaa46, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x64, 0x0, 0x2, 0x29, 0x0, @multicast2, @rand_addr=0x64010102}}}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='afs_sent_data\x00', r0}, 0x48) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x200000, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$evdev(0x0, 0x3, 0x101142) ioctl$FS_IOC_RESVSP(r6, 0x40044591, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="7472610800000000000000a36e6f9c", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x8, 0x2, 0xd, 0x5, 0x0, 0x1, 0x15824, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x100050, 0x7, 0x80, 0x433e6061afcea810, 0x5, 0x1, 0xfff, 0x0, 0xb8, 0x0, 0x5}, r3, 0x6, r4, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 675.860746ms ago: executing program 2 (id=4818): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, 0x0, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x98, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6c, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_LIMIT_UNIT={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x11c}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 647.453116ms ago: executing program 7 (id=4819): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x110, 0x110, 0xffffffff, 0x300, 0x300, 0x3f8, 0x3f8, 0xffffffff, 0x3f8, 0x3f8, 0x5, &(0x7f0000000000), {[{{@ip={@private=0xa010101, @private=0xa010100, 0x0, 0xffffff00, 'netpci0\x00', 'wg2\x00', {0xff}, {}, 0x11, 0x0, 0x1}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x6, 0x0, 0x2, 0x0, 0x1, 0x6], 0x5, 0x4}}}, @common=@icmp={{0x28}, {0x6ecbca194528a4f4, "dff4"}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1, @remote, @multicast1, @port=0x4e24, @gre_key=0x3}}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x2}, @common=@set={{0x40}, {{0x1, [0x0, 0x2, 0x1, 0x2, 0x2], 0x1, 0x3}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @broadcast, @port=0x4e20, @icmp_id=0x64}}}}, {{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'ip6gre0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x0, 0x0, 0x10}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xeb1f50407da794db, "2ef6"}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x14, @ipv4=@loopback, @ipv4=@multicast2, @icmp_id=0x64, @icmp_id=0x64}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0xff000000, 0xff000000, 'pim6reg0\x00', 'dummy0\x00', {0xff}, {}, 0x32, 0x1, 0x1}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x2, 0x1, 0x4, 0x4, 0x6], 0x3}, {0x2, [0x2, 0x1, 0x1, 0x4, 0x1, 0x1], 0x6, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f0) 617.895487ms ago: executing program 7 (id=4820): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffd, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00011000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@dellink={0x20, 0x11, 0x1, 0x1070bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x0, 0x10201}}, 0x20}}, 0x0) 582.517927ms ago: executing program 2 (id=4821): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000930a000004"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 475.655497ms ago: executing program 2 (id=4822): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000c00038005000200"], 0x38}}, 0x0) 385.815328ms ago: executing program 6 (id=4823): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000930a000004"], 0x48) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 385.383648ms ago: executing program 7 (id=4824): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x8, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000140)=""/42, 0x2a}], 0x1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf38, @void, @value}, 0x94) r4 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0, &(0x7f0000000000)=0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x480500, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4000054) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = io_uring_setup(0x4724, 0x0) listen(0xffffffffffffffff, 0x3) close_range(r5, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="000000105c00000070020000ffffffffc603000004000000000000000000000038fb02265c708206d5292f9320c4de50c1cdfffd670481344ea2aef4c703333bba616938c0fb74426c3368ec0e7ff9d5c65a2fa30637713ea3145f669ed0e4a9fd5c09967f86e74c8441e62103d9783ff6a21cbdab7d4daee217167d2342f541171bfa7d3f720a0592377af4e681ff74b945ecbf92a8c7787f8524d425cbeb9fc8614bd0665ebaa9050ec2072d3d451e9ba6025995ac942b019cada40e5d52dff5e6b79e03c6f6fc992cf527ae2d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00"/624], 0x4ce) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000f0500000001000000000000000300000004000000040000000300008000000000000000002e"], &(0x7f0000000280)=""/266, 0x46, 0x10a, 0x6, 0x0, 0x0, @void, @value}, 0x28) 249.391639ms ago: executing program 3 (id=4826): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 222.148068ms ago: executing program 7 (id=4827): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_user(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a70746d785fab3a733020726f6f7400"], 0x21) 161.583449ms ago: executing program 3 (id=4828): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200eef7ffffffb7030000feffffffb704000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 3 (id=4829): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002004007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) (async) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x6fd, &(0x7f0000000c40)="$eJzs3V2P21gZB/D/STJJJoWqAlStqm7ndMpKUzGkTmabKipIGOckY0jiyPbAjIS0KnRmNWqmQFskmpt2bniRli/A3d5wwYdYiQuu9lvAFUgrEDesQMjIx3ZeJk5m0knb7e7/N9qNYz8+5/Gx61N37GMQERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERhNUwjIpA2+7u7MrZrIbrdJIvWUwtj0pbwc1o4ua8OlfCegER/odiEW9Fs9/62ijkcvi/dVyNvl1FMfwoYnDh8qW7X81lkvXnJPwisGiBj58OHtzr9/cfnSE2i4WLf52QOUNQS3Vtz7E7ZktJ23NkvVYzbm03Pdm028rb83zVkZarMr7jyg3rpqzU61tSlfecnW6rYbZVMvPON6uGUZPfK0Q7GkDZs7btdtvutnRMuDiMuSM/+FEUoMyOlAeH/f2tsXyepbVxGFRJST4zHhwGVU/b3KpRrVYq1Wqldrt++45h5KZmGCFhDGEqYukHLb1hlnsCJzqHjNX4r/EXAbRRRBc72IVM/bHQgAsHnRnLY0n//84tNbfe8f4/6eVXRouvQPf/16Jv12b1/zNykZB6hbQlYsb8xX5WdEYSj/EUAzzAPfTRxz4eLaFsCbl27hLyRtySS8ln5k8LCl3Y8ODARgcmWvgyZDxHoo4aajDwHrbRhAeJJmy0oeBhDx58qPCIyoeZKpjw4cCFxAYs3IREBXXUsQUJhTL24GAHXbTQgIl/B0FwgEPd7ltxPs9TthpJUGXGRhSQS467fVTnbO2s/v/Hz6K14/7fYP//RRUdB4Xo4+N5MUSfAUF8/b+gtZeTDRERERERERG9DEL/67vQv5V/G0CApt1WxkRM4bVlR0RERERERETLIBAUcBUiuisfb0NMX/8TERERERER0ZtN6GfsBICSvqlfjB6XOss/AmRfQYpEREREREREdE76yf9reSDQd/mvQSx0/U9EREREREREb4DfjI2xn8vGY+wGya/1MwDW/loQH/2jAHdFHPd2vy6OzHCJeRTHTN0B4DeviIvxQL36Iw9Af7PUVRHXFg+CORx38JOD9LH+nwcRIYR7IoF8dryAGQmIsOZaLv6GD3A9WuV6PM78/UEGekk0onCpabdV2XLadyswzYsZX+36v3h4+EvAHW7nwWF/v/yTn/bv61yOw1nHR2GhzybSyaQ3xiiXJ3q8Bf3MRdroxqtoJlX+ttspCV2vkWx/FuZRZryieTugtgpEW/krrEf7bD2IYkuD4Yj7AljTgz9UynqXTWy9uyJGWVRObnnajpix5UWdxY0o5sbGjegjaZOwnIwofiMLVMvT+2Aii+p4Fqe3hfjnifafnwVEMWyLrTCLP4UFncjihx9FK2/1dpPhMc6SxdRRQET0uhyMeiE9iPnUGPtJ95Cc1M7e7yAHxGe5Gb37qJYg7j+S3v3J74Ooh8oCufh3E+m1JP0KwjP6htDl5KMB3XNXUs7oRvnTIAjMi0WMn9H/F/89Y9jHnq13Ow6C4OQZ/Y+jdyDFaU9l8Z8gCO5WdE/yuxO96ofhCh/OrNdrV7NhE956cvQzPQB+6P399/cfVqtbNeNdw7hdxYr+q0L8kQX7HiIimnL6O3Z0RGZOhHgX16Myrt//+zvR1ESP95X4lgLtFtDHfWwmrxBYSy+1hAN8+1/RbQib0VUrsF6KPksDefnS3fCqdhh7KHL6DS+bM6/qdF8axerbG6rD2OS9QyevAEexWy95LxAREb1a6zP6YWCi/8dk/1+c6P83sRFFbFxJve4ujd1SuJlcHQ8v6QcXjlNjK6cn/50lNwYREdEXhHI/ESX/18J17d57lXq9YvrbSrqO9X3p2o2WknbXV661bXZbSvZcx3cspy17Lgr2qvKkt9PrOa4vm44re45n7+o3v8v41e+e6phd37a8XluZnpKW0/VNy5cN27Nkb+e7bdvbVq5e2espy27alunbTld6zo5rqbKUnlJjgXZDdX27aYeTXdlz7Y7p7skfOO2djpIN5Vmu3fOdqMCkLrvbdNyOLraMYOEXHRIREX0ePX46eHCv399/dHJiNbw0j+YcY0bM9EQ+pUCOEURERPQZM+quF1ip+BITIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiKiKac/0rfgxEraw4LAcM7PL8Zz8ByjRwynyhE4bz6fun/WA/u9yOqZRStNHokYPPh4TvDqcE7S/OMxx4tUikvAC7fP374EXNBzEM3JLfEAmH5+dOnHWNrEtw6iFp0VoxemLioM90Vu+X8cwomHf5heJMKWD4IgmL96YbIN82c/nnMAHuXPsQte9ZmIiF61/wcAAP//iYxA9A==") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) (async) creat(&(0x7f0000000040)='./bus\x00', 0x140) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_9p2000}], [], 0x6b}}) kernel console output (not intermixed with test programs): entered promiscuous mode [ 390.603724][T11342] vhci_hcd: disconnect device [ 390.630822][T20671] bond1 (unregistering): Released all slaves [ 390.797858][T11342] vhci_hcd: stop threads [ 390.802317][T11342] vhci_hcd: release socket [ 390.806772][T11342] vhci_hcd: disconnect device [ 390.874422][T20676] netlink: 'syz.3.4050': attribute type 2 has an invalid length. [ 390.925708][T19862] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.311908][T20684] loop2: detected capacity change from 0 to 512 [ 391.385041][T20684] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 391.402157][T20686] loop7: detected capacity change from 0 to 164 [ 391.548011][T20684] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 391.589101][T20684] EXT4-fs (loop2): 1 truncate cleaned up [ 391.649503][T20684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.687628][T20694] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4056'. [ 391.760826][T20694] bond1: entered promiscuous mode [ 391.788566][T20697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4057'. [ 391.809620][T20699] bond1 (unregistering): Released all slaves [ 391.848146][T12332] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.910011][T20697] bond1: entered promiscuous mode [ 391.974391][T20705] loop6: detected capacity change from 0 to 764 [ 392.019802][T20705] rock: directory entry would overflow storage [ 392.026013][T20705] rock: sig=0x4654, size=5, remaining=4 [ 392.052977][T16645] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.072570][T20709] SELinux: syz.1.4060 (20709) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 392.135585][T20715] loop1: detected capacity change from 0 to 128 [ 392.489297][T20737] loop2: detected capacity change from 0 to 164 [ 392.553299][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 392.553318][ T29] audit: type=1326 audit(1732458598.596:14271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20747 comm="syz.6.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 392.640960][ T29] audit: type=1326 audit(1732458598.596:14272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20747 comm="syz.6.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 392.664782][ T29] audit: type=1326 audit(1732458598.596:14273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20747 comm="syz.6.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 392.688429][ T29] audit: type=1326 audit(1732458598.596:14274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20747 comm="syz.6.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 392.712100][ T29] audit: type=1326 audit(1732458598.596:14275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20747 comm="syz.6.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 392.735923][ T29] audit: type=1326 audit(1732458598.596:14276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20747 comm="syz.6.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 392.771421][ T3395] usb 13-1: enqueue for inactive port 0 [ 392.777018][ T3395] usb 13-1: enqueue for inactive port 0 [ 392.785690][T20761] loop2: detected capacity change from 0 to 764 [ 392.814323][ T29] audit: type=1326 audit(1732458598.776:14277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20747 comm="syz.6.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 392.816832][T20761] rock: directory entry would overflow storage [ 392.838085][ T29] audit: type=1326 audit(1732458598.826:14278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20747 comm="syz.6.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 392.844293][T20761] rock: sig=0x4654, size=5, remaining=4 [ 392.868709][ T3395] vhci_hcd: vhci_device speed not set [ 392.889217][T20766] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4063'. [ 392.913059][T20764] netlink: 100 bytes leftover after parsing attributes in process `syz.7.4073'. [ 392.920646][ T29] audit: type=1326 audit(1732458598.946:14279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20747 comm="syz.6.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 392.945865][ T29] audit: type=1326 audit(1732458598.946:14280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20747 comm="syz.6.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 393.036978][T20775] loop6: detected capacity change from 0 to 512 [ 393.094839][T20781] vlan2: entered allmulticast mode [ 393.100053][T20781] veth1_macvtap: entered allmulticast mode [ 393.162401][T20781] veth1_macvtap: left allmulticast mode [ 393.176151][T20786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4080'. [ 393.280129][T20786] bond2: entered promiscuous mode [ 393.302813][T20797] bond2 (unregistering): Released all slaves [ 393.397171][T20804] vlan2: entered allmulticast mode [ 393.402499][T20804] veth1_macvtap: entered allmulticast mode [ 393.434398][T20809] loop1: detected capacity change from 0 to 512 [ 393.444123][T20799] netlink: 100 bytes leftover after parsing attributes in process `syz.7.4085'. [ 393.446773][T20804] veth1_macvtap: left allmulticast mode [ 393.590226][T20815] SELinux: syz.6.4091 (20815) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 393.591760][T20817] loop1: detected capacity change from 0 to 764 [ 393.641406][T20819] Cannot find del_set index 0 as target [ 393.659963][T20817] rock: directory entry would overflow storage [ 393.666207][T20817] rock: sig=0x4654, size=5, remaining=4 [ 393.673728][T20815] loop6: detected capacity change from 0 to 128 [ 393.783568][T20828] loop6: detected capacity change from 0 to 512 [ 393.801183][T20829] netlink: 'syz.3.4094': attribute type 10 has an invalid length. [ 393.813867][T20829] bridge0: port 3(team0) entered disabled state [ 393.826773][T20829] team0: left allmulticast mode [ 393.831720][T20829] team_slave_0: left allmulticast mode [ 393.837269][T20829] team_slave_1: left allmulticast mode [ 393.842856][T20829] team0: left promiscuous mode [ 393.847666][T20829] team_slave_0: left promiscuous mode [ 393.853172][T20829] team_slave_1: left promiscuous mode [ 393.858826][T20829] bridge0: port 3(team0) entered disabled state [ 393.871716][T20833] netlink: 'syz.3.4094': attribute type 10 has an invalid length. [ 393.879581][T20833] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4094'. [ 393.888407][T20832] loop1: detected capacity change from 0 to 512 [ 393.898150][T20829] batman_adv: batadv0: Adding interface: team0 [ 393.904466][T20829] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.916352][T20832] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 393.929626][T20829] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 393.957159][T20832] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 393.958693][T20826] vlan2: entered allmulticast mode [ 393.975702][T20832] EXT4-fs (loop1): 1 truncate cleaned up [ 393.976746][T20826] veth1_macvtap: entered allmulticast mode [ 393.986806][T20832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.005034][T20826] veth1_macvtap: left allmulticast mode [ 394.015782][T20833] team0: entered promiscuous mode [ 394.020911][T20833] team_slave_0: entered promiscuous mode [ 394.026690][T20833] team_slave_1: entered promiscuous mode [ 394.039436][T20833] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.046747][T20833] batman_adv: batadv0: Interface activated: team0 [ 394.053297][T20833] batman_adv: batadv0: Interface deactivated: team0 [ 394.059981][T20833] batman_adv: batadv0: Removing interface: team0 [ 394.067655][T20833] bridge0: port 3(team0) entered blocking state [ 394.074106][T20833] bridge0: port 3(team0) entered disabled state [ 394.081067][T20833] team0: entered allmulticast mode [ 394.086275][T20833] team_slave_0: entered allmulticast mode [ 394.092069][T20833] team_slave_1: entered allmulticast mode [ 394.099073][T20833] bridge0: port 3(team0) entered blocking state [ 394.105526][T20833] bridge0: port 3(team0) entered forwarding state [ 394.199741][T20840] loop2: detected capacity change from 0 to 512 [ 394.244422][T20840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.307851][T16645] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.361949][T19862] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.392034][T20861] loop1: detected capacity change from 0 to 512 [ 394.542748][T20870] vlan2: entered allmulticast mode [ 394.547990][T20870] veth1_macvtap: entered allmulticast mode [ 394.549657][T20869] loop3: detected capacity change from 0 to 512 [ 394.566092][T20874] Cannot find del_set index 0 as target [ 394.582810][T20869] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 394.600508][T20870] veth1_macvtap: left allmulticast mode [ 394.650954][T20869] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 394.684317][T20869] EXT4-fs (loop3): 1 truncate cleaned up [ 394.700562][T20869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.920366][T15884] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.932512][T20908] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 395.019279][T20917] loop1: detected capacity change from 0 to 512 [ 395.048483][T20917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.083540][ T9050] usb 3-1: enqueue for inactive port 0 [ 395.106420][T19862] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.149669][ T9050] usb 3-1: enqueue for inactive port 0 [ 395.168311][T20927] loop6: detected capacity change from 0 to 512 [ 395.200844][T20931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4118'. [ 395.256933][T20931] bond1: entered promiscuous mode [ 395.290682][ T9050] vhci_hcd: vhci_device speed not set [ 395.299658][T20940] bond1 (unregistering): Released all slaves [ 395.439450][T20967] loop2: detected capacity change from 0 to 764 [ 395.456705][T20967] rock: directory entry would overflow storage [ 395.462949][T20967] rock: sig=0x4654, size=5, remaining=4 [ 395.586395][T20978] loop3: detected capacity change from 0 to 512 [ 395.751565][ T3392] usb usb6-port1: attempt power cycle [ 395.763634][T20999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4138'. [ 395.793042][T20953] loop1: detected capacity change from 0 to 1024 [ 395.794046][T20999] bond1: entered promiscuous mode [ 395.808660][T20999] bond1 (unregistering): Released all slaves [ 395.828162][T20953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.902042][T20980] loop7: detected capacity change from 0 to 164 [ 395.984168][T21008] loop2: detected capacity change from 0 to 764 [ 396.036695][T21008] rock: directory entry would overflow storage [ 396.043009][T21008] rock: sig=0x4654, size=5, remaining=4 [ 396.079198][T21017] Cannot find del_set index 0 as target [ 396.153650][T21021] loop3: detected capacity change from 0 to 512 [ 396.270532][T21030] loop2: detected capacity change from 0 to 512 [ 396.294252][T20953] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.326442][T21035] loop7: detected capacity change from 0 to 1024 [ 396.342109][T21030] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 396.365430][T21035] ext4: Bad value for 'journal_dev' [ 396.398164][T21030] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 396.432578][T21030] EXT4-fs (loop2): 1 truncate cleaned up [ 396.440010][T21030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.474598][T21045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4153'. [ 396.515887][T21045] bond2: entered promiscuous mode [ 396.572911][T21052] bond2 (unregistering): Released all slaves [ 396.624910][T16645] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.644095][T21056] SELinux: syz.3.4157 (21056) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 396.705856][T21061] loop1: detected capacity change from 0 to 512 [ 396.743229][T21065] loop3: detected capacity change from 0 to 512 [ 396.774093][T21069] loop6: detected capacity change from 0 to 512 [ 396.785150][T21065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.872823][T15884] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.910374][T21088] netlink: 'syz.2.4164': attribute type 10 has an invalid length. [ 396.932811][T21088] bridge0: port 3(team0) entered disabled state [ 396.939945][T21088] team0: left allmulticast mode [ 396.945004][T21088] team_slave_0: left allmulticast mode [ 396.950509][T21088] team_slave_1: left allmulticast mode [ 396.956075][T21088] team0: left promiscuous mode [ 396.960872][T21088] team_slave_0: left promiscuous mode [ 396.963690][T21092] netlink: 'syz.2.4164': attribute type 10 has an invalid length. [ 396.966430][T21088] team_slave_1: left promiscuous mode [ 396.974096][T21092] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4164'. [ 396.979621][T21088] bridge0: port 3(team0) entered disabled state [ 397.066252][T21088] batman_adv: batadv0: Adding interface: team0 [ 397.072556][T21088] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.097953][T21088] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 397.163096][T21092] team0: entered promiscuous mode [ 397.168251][T21092] team_slave_0: entered promiscuous mode [ 397.174032][T21092] team_slave_1: entered promiscuous mode [ 397.241555][T21092] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.274956][T21092] batman_adv: batadv0: Interface activated: team0 [ 397.281657][T21092] batman_adv: batadv0: Interface deactivated: team0 [ 397.288278][T21092] batman_adv: batadv0: Removing interface: team0 [ 397.305233][T21092] bridge0: port 3(team0) entered blocking state [ 397.311660][T21092] bridge0: port 3(team0) entered disabled state [ 397.334332][T21092] team0: entered allmulticast mode [ 397.339564][T21092] team_slave_0: entered allmulticast mode [ 397.345470][T21092] team_slave_1: entered allmulticast mode [ 397.359657][T21092] bridge0: port 3(team0) entered blocking state [ 397.366020][T21092] bridge0: port 3(team0) entered forwarding state [ 397.449238][T21130] loop3: detected capacity change from 0 to 128 [ 397.549222][T21137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4172'. [ 397.597001][T21137] bond1: entered promiscuous mode [ 397.613062][ T29] kauditd_printk_skb: 353 callbacks suppressed [ 397.613079][ T29] audit: type=1326 audit(1732458603.654:14634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21141 comm="syz.1.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177bb3e819 code=0x7ffc0000 [ 397.622233][ T3392] usb usb6-port1: unable to enumerate USB device [ 397.651425][T21149] 9pnet_fd: Insufficient options for proto=fd [ 397.661260][T21148] bond1 (unregistering): Released all slaves [ 397.677450][T21150] loop1: detected capacity change from 0 to 1024 [ 397.719455][T21155] SELinux: syz.2.4175 (21155) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 397.755980][ T29] audit: type=1326 audit(1732458603.694:14635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21141 comm="syz.1.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f177bb3e819 code=0x7ffc0000 [ 397.779544][ T29] audit: type=1326 audit(1732458603.694:14636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21141 comm="syz.1.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177bb3e819 code=0x7ffc0000 [ 397.803326][ T29] audit: type=1326 audit(1732458603.694:14637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21141 comm="syz.1.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177bb3e819 code=0x7ffc0000 [ 397.827142][ T29] audit: type=1326 audit(1732458603.694:14638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21141 comm="syz.1.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f177bb3e819 code=0x7ffc0000 [ 397.850744][ T29] audit: type=1326 audit(1732458603.694:14639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21141 comm="syz.1.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177bb3e819 code=0x7ffc0000 [ 397.874478][ T29] audit: type=1326 audit(1732458603.694:14640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21141 comm="syz.1.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177bb3e819 code=0x7ffc0000 [ 397.898287][ T29] audit: type=1326 audit(1732458603.694:14641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21141 comm="syz.1.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f177bb3e819 code=0x7ffc0000 [ 397.921896][ T29] audit: type=1326 audit(1732458603.694:14642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21141 comm="syz.1.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177bb3e819 code=0x7ffc0000 [ 397.945604][ T29] audit: type=1326 audit(1732458603.694:14643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21141 comm="syz.1.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177bb3e819 code=0x7ffc0000 [ 398.013081][T21150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.124835][T21182] vlan2: entered allmulticast mode [ 398.130036][T21182] veth1_macvtap: entered allmulticast mode [ 398.140006][T21181] loop6: detected capacity change from 0 to 512 [ 398.150390][T21169] loop2: detected capacity change from 0 to 164 [ 398.183705][T21182] veth1_macvtap: left allmulticast mode [ 398.302405][T21185] loop2: detected capacity change from 0 to 164 [ 398.406029][T21189] 9pnet_fd: Insufficient options for proto=fd [ 398.448856][T21191] SELinux: syz.7.4187 (21191) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 398.467610][T19862] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.837793][T21225] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 398.844346][T21225] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 398.851815][T21225] vhci_hcd vhci_hcd.0: Device attached [ 398.875377][T21225] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 398.881925][T21225] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 398.889479][T21225] vhci_hcd vhci_hcd.0: Device attached [ 398.897092][T21225] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(12) [ 398.903805][T21225] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 398.911354][T21225] vhci_hcd vhci_hcd.0: Device attached [ 398.954316][T21236] loop1: detected capacity change from 0 to 164 [ 398.978858][T21227] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(8) [ 398.985407][T21227] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 398.992861][T21227] vhci_hcd vhci_hcd.0: Device attached [ 399.074430][ T3392] vhci_hcd: vhci_device speed not set [ 399.154424][ T3392] usb 7-1: new full-speed USB device number 15 using vhci_hcd [ 399.407737][T21240] loop2: detected capacity change from 0 to 1024 [ 399.414896][T21240] ext4: Bad value for 'journal_dev' [ 399.453823][T21250] loop6: detected capacity change from 0 to 164 [ 399.527595][T21226] vhci_hcd: connection reset by peer [ 399.532950][T21228] vhci_hcd: connection closed [ 399.533256][T21232] vhci_hcd: connection closed [ 399.538097][T21234] vhci_hcd: connection closed [ 399.543700][T11369] vhci_hcd: stop threads [ 399.552785][T11369] vhci_hcd: release socket [ 399.555981][T21256] SELinux: syz.1.4200 (21256) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 399.557204][T11369] vhci_hcd: disconnect device [ 399.574421][T11369] vhci_hcd: stop threads [ 399.580027][T11369] vhci_hcd: release socket [ 399.584494][T11369] vhci_hcd: disconnect device [ 399.612417][T11369] vhci_hcd: stop threads [ 399.616735][T11369] vhci_hcd: release socket [ 399.621196][T11369] vhci_hcd: disconnect device [ 399.651452][T11369] vhci_hcd: stop threads [ 399.655799][T11369] vhci_hcd: release socket [ 399.660270][T11369] vhci_hcd: disconnect device [ 399.690058][T21255] loop7: detected capacity change from 0 to 1024 [ 399.732688][T21255] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.929165][T21273] syz.6.4206[21273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 399.929373][T21273] syz.6.4206[21273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 399.943091][T21273] syz.6.4206[21273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.033131][T21273] loop6: detected capacity change from 0 to 2048 [ 400.118632][T21285] netlink: 'syz.1.4207': attribute type 10 has an invalid length. [ 400.129853][T21285] batman_adv: batadv0: Adding interface: team0 [ 400.136079][T21285] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.161321][T21285] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 400.217819][T21273] Alternate GPT is invalid, using primary GPT. [ 400.224268][T21273] loop6: p2 p3 p7 [ 400.288861][T21290] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10) [ 400.295654][T21290] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 400.303172][T21290] vhci_hcd vhci_hcd.0: Device attached [ 400.322390][T21294] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(13) [ 400.329013][T21294] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 400.336457][T21294] vhci_hcd vhci_hcd.0: Device attached [ 400.344805][T21290] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(12) [ 400.351419][T21290] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 400.359311][T21290] vhci_hcd vhci_hcd.0: Device attached [ 400.377089][T21290] loop3: detected capacity change from 0 to 2048 [ 400.423228][T21288] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 400.429788][T21288] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 400.437357][T21288] vhci_hcd vhci_hcd.0: Device attached [ 400.449184][T21290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.467154][T21288] EXT4-fs error (device loop3): ext4_find_extent:938: inode #2: comm syz.3.4208: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 400.711092][T21306] netlink: 'syz.1.4207': attribute type 10 has an invalid length. [ 400.718991][T21306] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4207'. [ 400.801886][T21309] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4210'. [ 400.839534][T21306] team0: entered promiscuous mode [ 400.844709][T21306] team_slave_0: entered promiscuous mode [ 400.850522][T21306] team_slave_1: entered promiscuous mode [ 400.871015][T21306] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.878445][T21306] batman_adv: batadv0: Interface activated: team0 [ 400.885045][T21306] batman_adv: batadv0: Interface deactivated: team0 [ 400.891744][T21306] batman_adv: batadv0: Removing interface: team0 [ 400.903993][T21306] bridge0: port 3(team0) entered blocking state [ 400.910384][T21306] bridge0: port 3(team0) entered disabled state [ 400.928256][T21291] vhci_hcd: connection closed [ 400.928516][T21289] vhci_hcd: connection closed [ 400.933399][T11314] vhci_hcd: stop threads [ 400.934052][T21295] vhci_hcd: connection closed [ 400.938137][T11314] vhci_hcd: release socket [ 400.942549][T21297] vhci_hcd: connection closed [ 400.947047][T11314] vhci_hcd: disconnect device [ 400.961051][T11314] vhci_hcd: stop threads [ 400.965369][T11314] vhci_hcd: release socket [ 400.969867][T11314] vhci_hcd: disconnect device [ 400.974989][T21255] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.982808][T21306] team0: entered allmulticast mode [ 400.984579][T11314] vhci_hcd: stop threads [ 400.989141][T21306] team_slave_0: entered allmulticast mode [ 400.993340][T11314] vhci_hcd: release socket [ 400.993384][T11314] vhci_hcd: disconnect device [ 400.999105][T21306] team_slave_1: entered allmulticast mode [ 401.015578][T21306] bridge0: port 3(team0) entered blocking state [ 401.021914][T21306] bridge0: port 3(team0) entered forwarding state [ 401.032704][T11314] vhci_hcd: stop threads [ 401.036236][T21309] bond1: entered promiscuous mode [ 401.037066][T11314] vhci_hcd: release socket [ 401.046463][T11314] vhci_hcd: disconnect device [ 401.090435][T21322] SELinux: syz.2.4212 (21322) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 401.127247][T21329] loop6: detected capacity change from 0 to 764 [ 401.204350][T21332] loop1: detected capacity change from 0 to 128 [ 401.215737][T21334] loop7: detected capacity change from 0 to 1024 [ 401.219944][T21329] rock: directory entry would overflow storage [ 401.222807][T21334] ext4: Bad value for 'journal_dev' [ 401.228341][T21329] rock: sig=0x4654, size=5, remaining=4 [ 401.331576][T21342] vlan0: entered allmulticast mode [ 401.336795][T21342] veth1_macvtap: entered allmulticast mode [ 401.361238][T21342] veth1_macvtap: left allmulticast mode [ 401.429952][T21350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4225'. [ 401.467533][T15884] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.496390][T21350] bond1: entered promiscuous mode [ 401.511622][T21351] netlink: 'syz.6.4224': attribute type 10 has an invalid length. [ 401.521250][T21357] SELinux: syz.1.4227 (21357) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 401.537222][T21351] bridge0: port 3(team0) entered disabled state [ 401.581734][T21351] team0: left allmulticast mode [ 401.586674][T21351] team_slave_0: left allmulticast mode [ 401.592209][T21351] team_slave_1: left allmulticast mode [ 401.597804][T21351] team0: left promiscuous mode [ 401.602611][T21351] team_slave_0: left promiscuous mode [ 401.608094][T21351] team_slave_1: left promiscuous mode [ 401.613676][T21351] bridge0: port 3(team0) entered disabled state [ 401.614964][T21360] netlink: 'syz.6.4224': attribute type 10 has an invalid length. [ 401.627776][T21360] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4224'. [ 401.639280][T21351] batman_adv: batadv0: Adding interface: team0 [ 401.645619][T21351] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.646017][T21356] loop3: detected capacity change from 0 to 1024 [ 401.671005][T21351] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 401.698608][T21352] bond1 (unregistering): Released all slaves [ 401.715213][T21360] team0: entered promiscuous mode [ 401.720299][T21360] team_slave_0: entered promiscuous mode [ 401.726303][T21360] team_slave_1: entered promiscuous mode [ 401.738798][T21360] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.769460][T21356] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.783687][T21366] 9pnet_fd: Insufficient options for proto=fd [ 401.789057][T21360] batman_adv: batadv0: Interface activated: team0 [ 401.796355][T21360] batman_adv: batadv0: Interface deactivated: team0 [ 401.803062][T21360] batman_adv: batadv0: Removing interface: team0 [ 401.814404][T21360] bridge0: port 3(team0) entered blocking state [ 401.820812][T21360] bridge0: port 3(team0) entered disabled state [ 401.850521][T21368] loop2: detected capacity change from 0 to 128 [ 401.863793][T21360] team0: entered allmulticast mode [ 401.869024][T21360] team_slave_0: entered allmulticast mode [ 401.874891][T21360] team_slave_1: entered allmulticast mode [ 401.902159][T21360] bridge0: port 3(team0) entered blocking state [ 401.908480][T21360] bridge0: port 3(team0) entered forwarding state [ 401.940396][T21374] loop2: detected capacity change from 0 to 128 [ 402.238348][T21385] SELinux: syz.2.4238 (21385) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 402.406610][T21356] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.450794][T21394] loop6: detected capacity change from 0 to 764 [ 402.459245][T21397] 9pnet_fd: Insufficient options for proto=fd [ 402.496154][T21394] rock: directory entry would overflow storage [ 402.502336][T21394] rock: sig=0x4654, size=5, remaining=4 [ 402.548851][T21399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 402.675454][ T29] kauditd_printk_skb: 289 callbacks suppressed [ 402.675469][ T29] audit: type=1326 audit(1732458608.721:14933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21415 comm="syz.6.4250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 402.739856][ T29] audit: type=1326 audit(1732458608.751:14934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21415 comm="syz.6.4250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 402.763595][ T29] audit: type=1326 audit(1732458608.751:14935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21415 comm="syz.6.4250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 402.787240][ T29] audit: type=1326 audit(1732458608.761:14936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21415 comm="syz.6.4250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 402.810935][ T29] audit: type=1326 audit(1732458608.761:14937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21415 comm="syz.6.4250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 402.834611][ T29] audit: type=1326 audit(1732458608.761:14938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21415 comm="syz.6.4250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 402.858308][ T29] audit: type=1326 audit(1732458608.761:14939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21415 comm="syz.6.4250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 402.881949][ T29] audit: type=1326 audit(1732458608.761:14940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21415 comm="syz.6.4250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 402.905778][ T29] audit: type=1326 audit(1732458608.761:14941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21415 comm="syz.6.4250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 402.929416][ T29] audit: type=1326 audit(1732458608.761:14942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21415 comm="syz.6.4250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 403.034715][T21444] 9pnet_fd: Insufficient options for proto=fd [ 403.138108][T21450] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 403.144750][T21450] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 403.152205][T21450] vhci_hcd vhci_hcd.0: Device attached [ 403.167456][T21450] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7) [ 403.174075][T21450] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 403.181563][T21450] vhci_hcd vhci_hcd.0: Device attached [ 403.191252][T21450] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(9) [ 403.197873][T21450] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 403.205420][T21450] vhci_hcd vhci_hcd.0: Device attached [ 403.214700][T21450] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(11) [ 403.221394][T21450] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 403.229026][T21450] vhci_hcd vhci_hcd.0: Device attached [ 403.631272][T21472] loop6: detected capacity change from 0 to 512 [ 403.680404][T21472] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.700205][T21478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4262'. [ 403.747957][T12332] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.759898][T21483] vlan2: entered allmulticast mode [ 403.765098][T21483] veth1_macvtap: entered allmulticast mode [ 403.774787][T21483] veth1_macvtap: left allmulticast mode [ 403.884396][T21487] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 403.890978][T21487] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 403.898505][T21487] vhci_hcd vhci_hcd.0: Device attached [ 403.904311][T21451] vhci_hcd: connection closed [ 403.904541][T21453] vhci_hcd: connection closed [ 403.909432][T21455] vhci_hcd: connection closed [ 403.910885][T11314] vhci_hcd: stop threads [ 403.914618][T21457] vhci_hcd: connection closed [ 403.918849][T11314] vhci_hcd: release socket [ 403.932253][T11314] vhci_hcd: disconnect device [ 403.958956][T11314] vhci_hcd: stop threads [ 403.963250][T11314] vhci_hcd: release socket [ 403.967757][T11314] vhci_hcd: disconnect device [ 403.986035][T11314] vhci_hcd: stop threads [ 403.990348][T11314] vhci_hcd: release socket [ 403.994893][T11314] vhci_hcd: disconnect device [ 404.003241][T21487] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(12) [ 404.009900][T21487] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 404.017480][T21487] vhci_hcd vhci_hcd.0: Device attached [ 404.088671][T21498] loop1: detected capacity change from 0 to 2048 [ 404.118386][T21500] Cannot find del_set index 0 as target [ 404.124626][T11314] vhci_hcd: stop threads [ 404.128926][T11314] vhci_hcd: release socket [ 404.133421][T11314] vhci_hcd: disconnect device [ 404.139143][T21487] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(14) [ 404.145763][T21487] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 404.153287][T21487] vhci_hcd vhci_hcd.0: Device attached [ 404.185129][ T4773] vhci_hcd: vhci_device speed not set [ 404.200303][T21498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.218005][T21487] EXT4-fs error (device loop1): ext4_find_extent:938: inode #2: comm syz.1.4264: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 404.284527][T21492] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9) [ 404.291090][T21492] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 404.298640][T21492] vhci_hcd vhci_hcd.0: Device attached [ 404.308398][ T4773] usb 3-1: new full-speed USB device number 14 using vhci_hcd [ 404.316359][ T3392] usb 7-1: enqueue for inactive port 0 [ 404.387248][ T3392] usb 7-1: enqueue for inactive port 0 [ 404.455306][ T3392] vhci_hcd: vhci_device speed not set [ 404.493828][T21512] loop2: detected capacity change from 0 to 512 [ 404.541638][T21512] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.4269: Failed to acquire dquot type 1 [ 404.715847][T21488] vhci_hcd: connection reset by peer [ 404.721377][T21494] vhci_hcd: connection closed [ 404.721486][T21496] vhci_hcd: connection closed [ 404.726812][T21493] vhci_hcd: connection closed [ 404.742961][T21531] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(13) [ 404.754345][T21531] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 404.761819][T21531] vhci_hcd vhci_hcd.0: Device attached [ 404.787338][T21531] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(15) [ 404.794139][T21531] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 404.801711][T21531] vhci_hcd vhci_hcd.0: Device attached [ 404.819089][T21531] loop7: detected capacity change from 0 to 2048 [ 404.828137][T21527] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(10) [ 404.834757][T21527] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 404.842278][T21527] vhci_hcd vhci_hcd.0: Device attached [ 404.887476][T11314] vhci_hcd: stop threads [ 404.891810][T11314] vhci_hcd: release socket [ 404.896313][T11314] vhci_hcd: disconnect device [ 404.912626][T11314] vhci_hcd: stop threads [ 404.917034][T11314] vhci_hcd: release socket [ 404.921467][T11314] vhci_hcd: disconnect device [ 404.936471][T21525] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 404.943027][T21525] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 404.950471][T21525] vhci_hcd vhci_hcd.0: Device attached [ 404.996344][T21512] EXT4-fs (loop2): 1 truncate cleaned up [ 405.016396][T21512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.029121][ T5767] vhci_hcd: vhci_device speed not set [ 405.036220][T21531] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.088162][T21512] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.094760][T11314] vhci_hcd: stop threads [ 405.102985][T11314] vhci_hcd: release socket [ 405.106911][ T5767] usb 15-3: new full-speed USB device number 21 using vhci_hcd [ 405.107425][T11314] vhci_hcd: disconnect device [ 405.122221][T21524] EXT4-fs error (device loop7): ext4_find_extent:938: inode #2: comm syz.7.4271: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 405.136320][T11314] vhci_hcd: stop threads [ 405.142916][T11314] vhci_hcd: release socket [ 405.147406][T11314] vhci_hcd: disconnect device [ 405.292900][T19862] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.413224][T21528] vhci_hcd: connection closed [ 405.413343][T21526] vhci_hcd: connection closed [ 405.427826][T21532] vhci_hcd: connection reset by peer [ 405.437950][T21534] vhci_hcd: connection closed [ 405.438696][T11314] vhci_hcd: stop threads [ 405.447828][T11314] vhci_hcd: release socket [ 405.452343][T11314] vhci_hcd: disconnect device [ 405.504015][T11314] vhci_hcd: stop threads [ 405.508435][T11314] vhci_hcd: release socket [ 405.511069][T21557] loop1: detected capacity change from 0 to 164 [ 405.512870][T11314] vhci_hcd: disconnect device [ 405.590869][T11314] vhci_hcd: stop threads [ 405.595162][T11314] vhci_hcd: release socket [ 405.599697][T11314] vhci_hcd: disconnect device [ 405.666028][T11314] vhci_hcd: stop threads [ 405.670334][T11314] vhci_hcd: release socket [ 405.674798][T11314] vhci_hcd: disconnect device [ 405.905818][T16645] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.990181][T21585] loop1: detected capacity change from 0 to 1024 [ 406.012877][T21585] ext4: Bad value for 'journal_dev' [ 406.083481][T21594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4287'. [ 406.122607][T21596] loop6: detected capacity change from 0 to 512 [ 406.136318][T21594] bond1: entered promiscuous mode [ 406.170818][T21594] bond1 (unregistering): Released all slaves [ 406.199544][T21596] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.4288: Failed to acquire dquot type 1 [ 406.259988][T21596] EXT4-fs (loop6): 1 truncate cleaned up [ 406.274618][T21596] ext4 filesystem being mounted at /429/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.352447][T21611] loop7: detected capacity change from 0 to 512 [ 406.578887][T21626] vlan2: entered allmulticast mode [ 406.584212][T21626] veth1_macvtap: entered allmulticast mode [ 406.655851][T21626] veth1_macvtap: left allmulticast mode [ 406.710793][T21632] loop2: detected capacity change from 0 to 512 [ 406.831208][T21632] ext4 filesystem being mounted at /284/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 406.912985][T21632] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4296'. [ 406.948953][T21629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 406.971769][T21646] netlink: 'syz.1.4297': attribute type 10 has an invalid length. [ 406.983074][T21646] bridge0: port 3(team0) entered disabled state [ 406.989976][T21646] team0: left allmulticast mode [ 406.994866][T21646] team_slave_0: left allmulticast mode [ 407.000465][T21646] team_slave_1: left allmulticast mode [ 407.006025][T21646] team0: left promiscuous mode [ 407.010854][T21646] team_slave_0: left promiscuous mode [ 407.016303][T21646] team_slave_1: left promiscuous mode [ 407.021918][T21646] bridge0: port 3(team0) entered disabled state [ 407.034629][T21650] netlink: 'syz.1.4297': attribute type 10 has an invalid length. [ 407.042515][T21650] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4297'. [ 407.058096][T21646] batman_adv: batadv0: Adding interface: team0 [ 407.064393][T21646] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.089657][T21646] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 407.136822][T21650] team0: entered promiscuous mode [ 407.141905][T21650] team_slave_0: entered promiscuous mode [ 407.147745][T21650] team_slave_1: entered promiscuous mode [ 407.181654][T21651] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 407.205684][T21650] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.241235][T21650] batman_adv: batadv0: Interface activated: team0 [ 407.247875][T21650] batman_adv: batadv0: Interface deactivated: team0 [ 407.254603][T21650] batman_adv: batadv0: Removing interface: team0 [ 407.276262][T21658] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4303'. [ 407.314855][T21650] bridge0: port 3(team0) entered blocking state [ 407.321378][T21650] bridge0: port 3(team0) entered disabled state [ 407.336782][T21650] team0: entered allmulticast mode [ 407.342014][T21650] team_slave_0: entered allmulticast mode [ 407.347832][T21650] team_slave_1: entered allmulticast mode [ 407.375026][T21650] bridge0: port 3(team0) entered blocking state [ 407.381406][T21650] bridge0: port 3(team0) entered forwarding state [ 407.404463][T21672] SELinux: syz.3.4308 (21672) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 407.421396][T21658] bond1: entered promiscuous mode [ 407.430077][T21670] loop2: detected capacity change from 0 to 512 [ 407.438956][T21664] bond1 (unregistering): Released all slaves [ 407.441146][T21670] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 407.459073][T21670] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 407.560281][T21675] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 407.566839][T21675] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 407.574337][T21675] vhci_hcd vhci_hcd.0: Device attached [ 407.585178][T21677] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(8) [ 407.591767][T21677] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 407.599204][T21677] vhci_hcd vhci_hcd.0: Device attached [ 407.624790][T21670] EXT4-fs (loop2): 1 truncate cleaned up [ 407.656651][T21677] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(12) [ 407.663331][T21677] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 407.670868][T21677] vhci_hcd vhci_hcd.0: Device attached [ 407.717029][T21675] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(7) [ 407.723578][T21675] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 407.731087][T21675] vhci_hcd vhci_hcd.0: Device attached [ 407.817450][ T9] vhci_hcd: vhci_device speed not set [ 407.876988][ T9] usb 13-1: new full-speed USB device number 12 using vhci_hcd [ 408.000351][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 408.000386][ T29] audit: type=1326 audit(1732458614.019:15115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21694 comm="syz.1.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177bb3e819 code=0x7ffc0000 [ 408.030268][ T29] audit: type=1326 audit(1732458614.019:15116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21694 comm="syz.1.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177bb3e819 code=0x7ffc0000 [ 408.053911][ T29] audit: type=1326 audit(1732458614.019:15117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21694 comm="syz.1.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f177bb3e819 code=0x7ffc0000 [ 408.077557][ T29] audit: type=1326 audit(1732458614.019:15118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21694 comm="syz.1.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177bb3e819 code=0x7ffc0000 [ 408.101201][ T29] audit: type=1326 audit(1732458614.019:15119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21694 comm="syz.1.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f177bb3e819 code=0x7ffc0000 [ 408.124734][ T29] audit: type=1326 audit(1732458614.019:15120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21694 comm="syz.1.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177bb3e819 code=0x7ffc0000 [ 408.148421][ T29] audit: type=1326 audit(1732458614.019:15121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21694 comm="syz.1.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f177bb3e819 code=0x7ffc0000 [ 408.171977][ T29] audit: type=1326 audit(1732458614.019:15122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21694 comm="syz.1.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177bb3e819 code=0x7ffc0000 [ 408.188393][T21704] vlan2: entered allmulticast mode [ 408.195687][ T29] audit: type=1326 audit(1732458614.019:15123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21694 comm="syz.1.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f177bb3e819 code=0x7ffc0000 [ 408.195717][ T29] audit: type=1326 audit(1732458614.019:15124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21694 comm="syz.1.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177bb3e819 code=0x7ffc0000 [ 408.200906][T21704] veth1_macvtap: entered allmulticast mode [ 408.233193][T21676] vhci_hcd: connection reset by peer [ 408.259690][T21683] vhci_hcd: connection closed [ 408.259942][T21681] vhci_hcd: connection closed [ 408.264745][T21679] vhci_hcd: connection closed [ 408.280683][ T3402] vhci_hcd: stop threads [ 408.289823][ T3402] vhci_hcd: release socket [ 408.294246][ T3402] vhci_hcd: disconnect device [ 408.327285][ T3402] vhci_hcd: stop threads [ 408.331662][ T3402] vhci_hcd: release socket [ 408.336108][ T3402] vhci_hcd: disconnect device [ 408.385447][ T3402] vhci_hcd: stop threads [ 408.389786][ T3402] vhci_hcd: release socket [ 408.394284][ T3402] vhci_hcd: disconnect device [ 408.420322][T21713] loop3: detected capacity change from 0 to 128 [ 408.446551][T21708] loop1: detected capacity change from 0 to 1024 [ 408.478014][T21704] veth1_macvtap: left allmulticast mode [ 408.511500][T21721] loop3: detected capacity change from 0 to 512 [ 408.520009][ T3402] vhci_hcd: stop threads [ 408.524319][ T3402] vhci_hcd: release socket [ 408.528971][ T3402] vhci_hcd: disconnect device [ 408.779092][T21739] loop6: detected capacity change from 0 to 128 [ 408.891467][T21750] SELinux: syz.6.4326 (21750) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 408.893973][T21753] ip6t_rpfilter: unknown options [ 408.963522][T21758] loop2: detected capacity change from 0 to 512 [ 409.021500][T21765] loop6: detected capacity change from 0 to 512 [ 409.058765][T21765] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 409.103306][T21765] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 409.140105][T21765] EXT4-fs (loop6): 1 truncate cleaned up [ 409.168001][T21772] vlan2: entered allmulticast mode [ 409.173172][T21772] veth1_macvtap: entered allmulticast mode [ 409.181792][T21772] veth1_macvtap: left allmulticast mode [ 409.350102][T21785] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(8) [ 409.356685][T21785] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 409.364223][T21785] vhci_hcd vhci_hcd.0: Device attached [ 409.375201][T21785] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(10) [ 409.381854][T21785] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 409.389324][T21785] vhci_hcd vhci_hcd.0: Device attached [ 409.403630][T21785] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(12) [ 409.410272][T21785] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 409.417996][T21785] vhci_hcd vhci_hcd.0: Device attached [ 409.433751][T21778] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 409.440295][T21778] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 409.447884][T21778] vhci_hcd vhci_hcd.0: Device attached [ 409.631711][T21793] loop2: detected capacity change from 0 to 512 [ 409.681886][T21793] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 409.720583][ T4773] usb 3-1: enqueue for inactive port 0 [ 409.726159][ T4773] usb 3-1: enqueue for inactive port 0 [ 409.797879][ T4773] vhci_hcd: vhci_device speed not set [ 409.800208][T21793] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 409.856531][T21793] EXT4-fs (loop2): 1 truncate cleaned up [ 409.866318][T21812] loop3: detected capacity change from 0 to 128 [ 409.962428][T21824] loop1: detected capacity change from 0 to 512 [ 409.989885][T21786] vhci_hcd: connection closed [ 409.989986][T21781] vhci_hcd: connection closed [ 409.994811][T21788] vhci_hcd: connection closed [ 409.999714][T21790] vhci_hcd: connection closed [ 410.000054][T11321] vhci_hcd: stop threads [ 410.006657][T21816] loop6: detected capacity change from 0 to 164 [ 410.009107][T11321] vhci_hcd: release socket [ 410.024060][T11321] vhci_hcd: disconnect device [ 410.050902][T11321] vhci_hcd: stop threads [ 410.055194][T11321] vhci_hcd: release socket [ 410.059672][T11321] vhci_hcd: disconnect device [ 410.069530][T11321] vhci_hcd: stop threads [ 410.073798][T11321] vhci_hcd: release socket [ 410.078272][T11321] vhci_hcd: disconnect device [ 410.084125][T11321] vhci_hcd: stop threads [ 410.088457][T11321] vhci_hcd: release socket [ 410.092896][T11321] vhci_hcd: disconnect device [ 410.119629][T21829] netlink: 'syz.3.4340': attribute type 10 has an invalid length. [ 410.131484][T21829] bridge0: port 3(team0) entered disabled state [ 410.139537][T21829] team0: left allmulticast mode [ 410.144451][T21829] team_slave_0: left allmulticast mode [ 410.149973][T21829] team_slave_1: left allmulticast mode [ 410.155452][T21829] team0: left promiscuous mode [ 410.160291][T21829] team_slave_0: left promiscuous mode [ 410.165830][T21829] team_slave_1: left promiscuous mode [ 410.171438][T21829] bridge0: port 3(team0) entered disabled state [ 410.208131][ T5767] usb 15-3: enqueue for inactive port 2 [ 410.213783][ T5767] usb 15-3: enqueue for inactive port 2 [ 410.216783][T21835] netlink: 'syz.3.4340': attribute type 10 has an invalid length. [ 410.227258][T21835] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4340'. [ 410.263666][T21829] batman_adv: batadv0: Adding interface: team0 [ 410.269929][T21829] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.277647][T21843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4347'. [ 410.295202][T21829] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 410.299345][ T5767] vhci_hcd: vhci_device speed not set [ 410.362461][T21835] team0: entered promiscuous mode [ 410.367614][T21835] team_slave_0: entered promiscuous mode [ 410.373593][T21835] team_slave_1: entered promiscuous mode [ 410.444931][T21835] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.471832][T21835] batman_adv: batadv0: Interface activated: team0 [ 410.478446][T21835] batman_adv: batadv0: Interface deactivated: team0 [ 410.485061][T21835] batman_adv: batadv0: Removing interface: team0 [ 410.534968][T21835] bridge0: port 3(team0) entered blocking state [ 410.541540][T21835] bridge0: port 3(team0) entered disabled state [ 410.555781][T21835] team0: entered allmulticast mode [ 410.561025][T21835] team_slave_0: entered allmulticast mode [ 410.566833][T21835] team_slave_1: entered allmulticast mode [ 410.587984][T21835] bridge0: port 3(team0) entered blocking state [ 410.594332][T21835] bridge0: port 3(team0) entered forwarding state [ 410.606340][T21843] bond2: entered promiscuous mode [ 410.616387][T21853] bond2 (unregistering): Released all slaves [ 410.668884][T21874] ip6t_rpfilter: unknown options [ 410.714117][T21882] 9pnet_fd: Insufficient options for proto=fd [ 410.919821][T21886] loop7: detected capacity change from 0 to 164 [ 411.008269][T21910] loop2: detected capacity change from 0 to 512 [ 411.071092][T21910] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 411.086450][T21916] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10) [ 411.093065][T21916] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 411.100519][T21916] vhci_hcd vhci_hcd.0: Device attached [ 411.107947][T21916] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(12) [ 411.114624][T21916] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 411.122209][T21916] vhci_hcd vhci_hcd.0: Device attached [ 411.140694][T21916] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(14) [ 411.147390][T21916] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 411.154906][T21916] vhci_hcd vhci_hcd.0: Device attached [ 411.171966][T21916] loop3: detected capacity change from 0 to 2048 [ 411.191773][T21916] EXT4-fs mount: 15 callbacks suppressed [ 411.191788][T21916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.214034][T21916] EXT4-fs error (device loop3): ext4_find_extent:938: inode #2: comm syz.3.4360: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 411.294647][T21929] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4365'. [ 411.303779][ T9050] vhci_hcd: vhci_device speed not set [ 411.311534][T21912] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 411.318074][T21912] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 411.325557][T21912] vhci_hcd vhci_hcd.0: Device attached [ 411.368917][ T9050] usb 7-2: new full-speed USB device number 16 using vhci_hcd [ 411.413366][T21932] 9pnet_fd: Insufficient options for proto=fd [ 411.426108][T21910] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 411.468530][T21929] bond1: entered promiscuous mode [ 411.530101][T21910] EXT4-fs (loop2): 1 truncate cleaned up [ 411.543300][T21936] bond1 (unregistering): Released all slaves [ 411.563582][T21910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.644283][T21946] netlink: 'syz.6.4368': attribute type 10 has an invalid length. [ 411.678603][T21946] bridge0: port 3(team0) entered disabled state [ 411.696395][T21950] netlink: 'syz.6.4368': attribute type 10 has an invalid length. [ 411.704325][T21950] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4368'. [ 411.715550][T21946] team0: left allmulticast mode [ 411.720557][T21946] team_slave_0: left allmulticast mode [ 411.726081][T21946] team_slave_1: left allmulticast mode [ 411.731646][T21946] team0: left promiscuous mode [ 411.736487][T21946] team_slave_0: left promiscuous mode [ 411.742035][T21946] team_slave_1: left promiscuous mode [ 411.747643][T21946] bridge0: port 3(team0) entered disabled state [ 411.763053][T21917] vhci_hcd: connection reset by peer [ 411.768595][T21913] vhci_hcd: connection closed [ 411.769091][T21919] vhci_hcd: connection closed [ 411.769404][T21946] batman_adv: batadv0: Adding interface: team0 [ 411.777376][T21921] vhci_hcd: connection closed [ 411.778581][T21946] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.814803][T21946] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 411.847816][ T28] vhci_hcd: stop threads [ 411.847826][ T28] vhci_hcd: release socket [ 411.847840][ T28] vhci_hcd: disconnect device [ 411.848084][T21955] loop7: detected capacity change from 0 to 512 [ 411.856721][ T28] vhci_hcd: stop threads [ 411.856731][ T28] vhci_hcd: release socket [ 411.856743][ T28] vhci_hcd: disconnect device [ 411.857782][ T28] vhci_hcd: stop threads [ 411.857806][ T28] vhci_hcd: release socket [ 411.857816][ T28] vhci_hcd: disconnect device [ 411.862949][T16645] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.872291][ T28] vhci_hcd: stop threads [ 411.872300][ T28] vhci_hcd: release socket [ 411.872311][ T28] vhci_hcd: disconnect device [ 411.906324][T21950] team0: entered promiscuous mode [ 411.906347][T21950] team_slave_0: entered promiscuous mode [ 411.906471][T21950] team_slave_1: entered promiscuous mode [ 411.907583][T21950] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.912108][T21950] batman_adv: batadv0: Interface activated: team0 [ 411.912232][T21950] batman_adv: batadv0: Interface deactivated: team0 [ 411.912261][T21950] batman_adv: batadv0: Removing interface: team0 [ 411.927105][T21961] loop7: detected capacity change from 0 to 512 [ 411.957880][T21961] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.959155][T21950] bridge0: port 3(team0) entered blocking state [ 411.959190][T21950] bridge0: port 3(team0) entered disabled state [ 411.959270][T21950] team0: entered allmulticast mode [ 411.959286][T21950] team_slave_0: entered allmulticast mode [ 411.959303][T21950] team_slave_1: entered allmulticast mode [ 411.960175][T21950] bridge0: port 3(team0) entered blocking state [ 411.960220][T21950] bridge0: port 3(team0) entered forwarding state [ 412.036749][T17583] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.050103][T21971] loop2: detected capacity change from 0 to 1024 [ 412.230873][T21971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.233541][T21971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4376'. [ 412.233574][T21971] netlink: 'syz.2.4376': attribute type 7 has an invalid length. [ 412.233588][T21971] netlink: 'syz.2.4376': attribute type 8 has an invalid length. [ 412.233634][T21971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4376'. [ 412.280223][T16645] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.363267][T15884] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.391488][T21993] FAULT_INJECTION: forcing a failure. [ 412.391488][T21993] name failslab, interval 1, probability 0, space 0, times 0 [ 412.391546][T21993] CPU: 0 UID: 0 PID: 21993 Comm: syz.3.4380 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 412.391599][T21993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 412.391726][T21993] Call Trace: [ 412.391735][T21993] [ 412.391744][T21993] dump_stack_lvl+0xf2/0x150 [ 412.391785][T21993] dump_stack+0x15/0x20 [ 412.391877][T21993] should_fail_ex+0x223/0x230 [ 412.391914][T21993] ? swevent_hlist_get+0x115/0x2f0 [ 412.391961][T21993] should_failslab+0x8f/0xb0 [ 412.391983][T21993] __kmalloc_cache_noprof+0x4b/0x2a0 [ 412.392028][T21993] swevent_hlist_get+0x115/0x2f0 [ 412.392062][T21993] perf_swevent_init+0x133/0x190 [ 412.392090][T21993] perf_try_init_event+0xcb/0x4f0 [ 412.392164][T21993] ? perf_event_alloc+0xac6/0x12e0 [ 412.392196][T21993] perf_event_alloc+0xad1/0x12e0 [ 412.392231][T21993] __se_sys_perf_event_open+0x7f2/0x2230 [ 412.392304][T21993] ? vfs_write+0x596/0x920 [ 412.392337][T21993] ? putname+0xcf/0xf0 [ 412.392373][T21993] __x64_sys_perf_event_open+0x67/0x80 [ 412.392475][T21993] x64_sys_call+0x1deb/0x2dc0 [ 412.392503][T21993] do_syscall_64+0xc9/0x1c0 [ 412.392541][T21993] ? clear_bhb_loop+0x55/0xb0 [ 412.392641][T21993] ? clear_bhb_loop+0x55/0xb0 [ 412.392679][T21993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.392726][T21993] RIP: 0033:0x7fcefd24e819 [ 412.392745][T21993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.392787][T21993] RSP: 002b:00007fcefb8c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 412.392810][T21993] RAX: ffffffffffffffda RBX: 00007fcefd405fa0 RCX: 00007fcefd24e819 [ 412.392830][T21993] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00000000200012c0 [ 412.392906][T21993] RBP: 00007fcefb8c7090 R08: 0000000000000000 R09: 0000000000000000 [ 412.392919][T21993] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 412.392932][T21993] R13: 0000000000000000 R14: 00007fcefd405fa0 R15: 00007fff52a84458 [ 412.392957][T21993] [ 412.506236][T22005] FAULT_INJECTION: forcing a failure. [ 412.506236][T22005] name failslab, interval 1, probability 0, space 0, times 0 [ 412.506265][T22005] CPU: 0 UID: 0 PID: 22005 Comm: syz.2.4383 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 412.506294][T22005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 412.506321][T22005] Call Trace: [ 412.506328][T22005] [ 412.506336][T22005] dump_stack_lvl+0xf2/0x150 [ 412.506375][T22005] dump_stack+0x15/0x20 [ 412.506436][T22005] should_fail_ex+0x223/0x230 [ 412.506469][T22005] ? skb_clone+0x154/0x1f0 [ 412.506496][T22005] should_failslab+0x8f/0xb0 [ 412.506599][T22005] kmem_cache_alloc_noprof+0x4c/0x290 [ 412.506633][T22005] skb_clone+0x154/0x1f0 [ 412.506657][T22005] __netlink_deliver_tap+0x2bd/0x4f0 [ 412.506689][T22005] netlink_unicast+0x64a/0x670 [ 412.506715][T22005] netlink_sendmsg+0x5cc/0x6e0 [ 412.506799][T22005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.506826][T22005] __sock_sendmsg+0x140/0x180 [ 412.506858][T22005] ____sys_sendmsg+0x312/0x410 [ 412.506921][T22005] __sys_sendmsg+0x19d/0x230 [ 412.507075][T22005] __x64_sys_sendmsg+0x46/0x50 [ 412.507096][T22005] x64_sys_call+0x2734/0x2dc0 [ 412.507205][T22005] do_syscall_64+0xc9/0x1c0 [ 412.507302][T22005] ? clear_bhb_loop+0x55/0xb0 [ 412.507333][T22005] ? clear_bhb_loop+0x55/0xb0 [ 412.507417][T22005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.507449][T22005] RIP: 0033:0x7f92b09ee819 [ 412.507468][T22005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.507491][T22005] RSP: 002b:00007f92af067038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.507516][T22005] RAX: ffffffffffffffda RBX: 00007f92b0ba5fa0 RCX: 00007f92b09ee819 [ 412.507585][T22005] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000006 [ 412.507598][T22005] RBP: 00007f92af067090 R08: 0000000000000000 R09: 0000000000000000 [ 412.507610][T22005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.507622][T22005] R13: 0000000000000000 R14: 00007f92b0ba5fa0 R15: 00007ffde88bd408 [ 412.507642][T22005] [ 412.508355][T22003] Cannot find del_set index 0 as target [ 412.602601][T22014] loop7: detected capacity change from 0 to 128 [ 412.605828][T22012] loop2: detected capacity change from 0 to 512 [ 412.697502][T22017] loop2: detected capacity change from 0 to 1024 [ 412.875505][T22021] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4391'. [ 412.929478][ T9] usb 13-1: enqueue for inactive port 0 [ 413.013451][T22021] bond2: entered promiscuous mode [ 413.141950][T22017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.158045][T22029] SELinux: syz.7.4392 (22029) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 413.194894][T22026] bond2 (unregistering): Released all slaves [ 413.203896][T22032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4393'. [ 413.222359][T22017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4389'. [ 413.231535][T22017] netlink: 'syz.2.4389': attribute type 7 has an invalid length. [ 413.239274][T22017] netlink: 'syz.2.4389': attribute type 8 has an invalid length. [ 413.247099][T22017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4389'. [ 413.247786][ T9] usb 13-1: enqueue for inactive port 0 [ 413.267279][T22032] bond2: entered promiscuous mode [ 413.321317][T22034] bond2 (unregistering): Released all slaves [ 413.349663][ T9] vhci_hcd: vhci_device speed not set [ 413.422873][T16645] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.478726][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 413.478742][ T29] audit: type=1326 audit(1732458619.506:15284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22039 comm="syz.2.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b09ee819 code=0x7ffc0000 [ 413.508652][ T29] audit: type=1326 audit(1732458619.506:15285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22039 comm="syz.2.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b09ee819 code=0x7ffc0000 [ 413.532415][ T29] audit: type=1326 audit(1732458619.506:15286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22039 comm="syz.2.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f92b09ee819 code=0x7ffc0000 [ 413.556051][ T29] audit: type=1326 audit(1732458619.506:15287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22039 comm="syz.2.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b09ee819 code=0x7ffc0000 [ 413.579678][ T29] audit: type=1326 audit(1732458619.506:15288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22039 comm="syz.2.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b09ee819 code=0x7ffc0000 [ 413.603271][ T29] audit: type=1326 audit(1732458619.506:15289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22039 comm="syz.2.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f92b09ee819 code=0x7ffc0000 [ 413.615845][T22044] loop6: detected capacity change from 0 to 164 [ 413.626763][ T29] audit: type=1326 audit(1732458619.506:15290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22039 comm="syz.2.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b09ee819 code=0x7ffc0000 [ 413.626802][ T29] audit: type=1326 audit(1732458619.506:15291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22039 comm="syz.2.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f92b09ee819 code=0x7ffc0000 [ 413.749271][T22045] Cannot find del_set index 0 as target [ 413.829510][T22050] loop6: detected capacity change from 0 to 512 [ 413.835277][T22052] loop2: detected capacity change from 0 to 128 [ 413.906555][ T29] audit: type=1326 audit(1732458619.736:15292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22039 comm="syz.2.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b09ee819 code=0x7ffc0000 [ 413.930287][ T29] audit: type=1326 audit(1732458619.736:15293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22039 comm="syz.2.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b09ee819 code=0x7ffc0000 [ 414.037930][T22062] loop6: detected capacity change from 0 to 1024 [ 414.144298][T22062] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.159127][T22055] netlink: 'syz.7.4403': attribute type 2 has an invalid length. [ 414.167169][ T11] team0: left allmulticast mode [ 414.172142][ T11] team_slave_0: left allmulticast mode [ 414.177606][ T11] team_slave_1: left allmulticast mode [ 414.183206][ T11] bridge0: port 3(team0) entered disabled state [ 414.206661][T22062] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4405'. [ 414.215828][T22062] netlink: 'syz.6.4405': attribute type 7 has an invalid length. [ 414.223653][T22062] netlink: 'syz.6.4405': attribute type 8 has an invalid length. [ 414.231431][T22062] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4405'. [ 414.249169][ T11] bridge_slave_1: left allmulticast mode [ 414.254985][ T11] bridge_slave_1: left promiscuous mode [ 414.260743][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.275359][ T11] bridge_slave_0: left allmulticast mode [ 414.281068][ T11] bridge_slave_0: left promiscuous mode [ 414.286707][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.480464][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.500320][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.518891][ T11] bond0 (unregistering): Released all slaves [ 414.543734][ T11] bond1 (unregistering): Released all slaves [ 414.563446][ T11] bond2 (unregistering): Released all slaves [ 414.641095][T22077] SELinux: syz.2.4410 (22077) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 414.988257][T12332] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.079386][T22083] loop6: detected capacity change from 0 to 128 [ 415.211071][T22075] vlan2: entered allmulticast mode [ 415.216294][T22075] veth1_macvtap: entered allmulticast mode [ 415.247189][ T11] hsr_slave_0: left promiscuous mode [ 415.259604][ T11] hsr_slave_1: left promiscuous mode [ 415.272224][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.275298][T22087] loop6: detected capacity change from 0 to 512 [ 415.279658][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.318539][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.326255][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.339546][ T11] veth1_macvtap: left promiscuous mode [ 415.345140][ T11] veth0_macvtap: left promiscuous mode [ 415.350661][ T11] veth1_vlan: left promiscuous mode [ 415.356038][ T11] veth0_vlan: left promiscuous mode [ 415.452661][T22094] loop7: detected capacity change from 0 to 128 [ 415.468033][T22094] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 415.480619][T22094] ext4 filesystem being mounted at /196/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 415.518505][ T11] team_slave_1 (unregistering): left promiscuous mode [ 415.527055][ T11] team0 (unregistering): Port device team_slave_1 removed [ 415.537187][ T11] team_slave_0 (unregistering): left promiscuous mode [ 415.548484][ T11] team0 (unregistering): Port device team_slave_0 removed [ 415.567285][T22102] netlink: 'syz.6.4420': attribute type 10 has an invalid length. [ 415.579765][T22091] netlink: 'syz.7.4416': attribute type 10 has an invalid length. [ 415.583517][T22101] SELinux: syz.1.4419 (22101) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 415.626542][T22104] netlink: 'syz.6.4420': attribute type 10 has an invalid length. [ 415.668950][T22106] SELinux: syz.2.4421 (22106) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 415.730318][T22102] bridge0: port 3(team0) entered disabled state [ 415.741145][T22102] team0: left allmulticast mode [ 415.746165][T22102] team_slave_0: left allmulticast mode [ 415.751675][T22102] team_slave_1: left allmulticast mode [ 415.757195][T22102] team0: left promiscuous mode [ 415.761983][T22102] team_slave_0: left promiscuous mode [ 415.767464][T22102] team_slave_1: left promiscuous mode [ 415.773150][T22102] bridge0: port 3(team0) entered disabled state [ 415.789190][T22102] batman_adv: batadv0: Adding interface: team0 [ 415.795427][T22102] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.820615][T22102] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 415.862666][T22104] team0: entered promiscuous mode [ 415.867748][T22104] team_slave_0: entered promiscuous mode [ 415.873573][T22104] team_slave_1: entered promiscuous mode [ 415.882194][T22104] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.909015][T22104] batman_adv: batadv0: Interface activated: team0 [ 415.915616][T22104] batman_adv: batadv0: Interface deactivated: team0 [ 415.922393][T22104] batman_adv: batadv0: Removing interface: team0 [ 415.941726][T22104] bridge0: port 3(team0) entered blocking state [ 415.948044][T22104] bridge0: port 3(team0) entered disabled state [ 415.958382][T17583] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 415.968079][T22104] team0: entered allmulticast mode [ 415.973273][T22104] team_slave_0: entered allmulticast mode [ 415.979026][T22104] team_slave_1: entered allmulticast mode [ 415.993993][T22104] bridge0: port 3(team0) entered blocking state [ 416.000567][T22104] bridge0: port 3(team0) entered forwarding state [ 416.534860][ T9050] usb 7-2: enqueue for inactive port 1 [ 416.540384][ T9050] usb 7-2: enqueue for inactive port 1 [ 416.671188][T22155] loop6: detected capacity change from 0 to 512 [ 416.672230][ T9050] vhci_hcd: vhci_device speed not set [ 416.689156][T22155] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 416.692093][T22157] loop7: detected capacity change from 0 to 512 [ 416.718470][T22159] 9pnet_fd: Insufficient options for proto=fd [ 416.740986][T22155] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 416.767536][T22155] EXT4-fs (loop6): 1 truncate cleaned up [ 416.774012][T22155] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.219424][T22174] bridge0: port 3(team0) entered disabled state [ 417.256784][T22174] team0: left allmulticast mode [ 417.261717][T22174] team_slave_0: left allmulticast mode [ 417.267368][T22174] team_slave_1: left allmulticast mode [ 417.272925][T22174] team0: left promiscuous mode [ 417.277694][T22174] team_slave_0: left promiscuous mode [ 417.283326][T22174] team_slave_1: left promiscuous mode [ 417.288978][T22174] bridge0: port 3(team0) entered disabled state [ 417.313339][T22174] batman_adv: batadv0: Adding interface: team0 [ 417.319540][T22174] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.344902][T22174] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 417.394935][T12332] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.752493][T22194] __nla_validate_parse: 6 callbacks suppressed [ 417.752508][T22194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4451'. [ 417.816630][T22178] validate_nla: 3 callbacks suppressed [ 417.816645][T22178] netlink: 'syz.7.4447': attribute type 10 has an invalid length. [ 417.830408][T22178] netlink: 2 bytes leftover after parsing attributes in process `syz.7.4447'. [ 417.846120][T22194] vlan2: entered allmulticast mode [ 417.851294][T22194] veth1_macvtap: entered allmulticast mode [ 417.903602][T22200] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 417.910227][T22200] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 417.917673][T22200] vhci_hcd vhci_hcd.0: Device attached [ 417.947407][T22200] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(9) [ 417.953985][T22200] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 417.961431][T22200] vhci_hcd vhci_hcd.0: Device attached [ 417.986668][T22205] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(10) [ 417.993400][T22205] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 418.000833][T22205] vhci_hcd vhci_hcd.0: Device attached [ 418.012283][T22200] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(14) [ 418.018893][T22200] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 418.026620][T22200] vhci_hcd vhci_hcd.0: Device attached [ 418.044167][T22205] loop6: detected capacity change from 0 to 2048 [ 418.070647][T22205] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.086213][T22200] EXT4-fs error (device loop6): ext4_find_extent:938: inode #2: comm syz.6.4448: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 418.112127][ T4602] vhci_hcd: vhci_device speed not set [ 418.144714][T22178] team0: entered promiscuous mode [ 418.149803][T22178] team_slave_0: entered promiscuous mode [ 418.155526][T22178] team_slave_1: entered promiscuous mode [ 418.172225][ T4602] usb 13-1: new full-speed USB device number 13 using vhci_hcd [ 418.195340][T22178] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.313984][T22178] batman_adv: batadv0: Interface activated: team0 [ 418.320605][T22178] batman_adv: batadv0: Interface deactivated: team0 [ 418.327448][T22178] batman_adv: batadv0: Removing interface: team0 [ 418.366813][T22178] bridge0: port 3(team0) entered blocking state [ 418.373321][T22178] bridge0: port 3(team0) entered disabled state [ 418.392306][T22178] team0: entered allmulticast mode [ 418.397559][T22178] team_slave_0: entered allmulticast mode [ 418.403437][T22178] team_slave_1: entered allmulticast mode [ 418.421727][T22178] bridge0: port 3(team0) entered blocking state [ 418.428127][T22178] bridge0: port 3(team0) entered forwarding state [ 418.447745][T22231] FAULT_INJECTION: forcing a failure. [ 418.447745][T22231] name failslab, interval 1, probability 0, space 0, times 0 [ 418.460420][T22231] CPU: 0 UID: 0 PID: 22231 Comm: syz.2.4457 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 418.470872][T22231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 418.481019][T22231] Call Trace: [ 418.484311][T22231] [ 418.487299][T22231] dump_stack_lvl+0xf2/0x150 [ 418.491943][T22231] dump_stack+0x15/0x20 [ 418.496168][T22231] should_fail_ex+0x223/0x230 [ 418.500944][T22231] ? skb_clone+0x154/0x1f0 [ 418.505383][T22231] should_failslab+0x8f/0xb0 [ 418.510017][T22231] kmem_cache_alloc_noprof+0x4c/0x290 [ 418.515492][T22231] skb_clone+0x154/0x1f0 [ 418.519794][T22231] __netlink_deliver_tap+0x2bd/0x4f0 [ 418.525106][T22231] netlink_unicast+0x64a/0x670 [ 418.529896][T22231] netlink_sendmsg+0x5cc/0x6e0 [ 418.534690][T22231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.540071][T22231] __sock_sendmsg+0x140/0x180 [ 418.544818][T22231] ____sys_sendmsg+0x312/0x410 [ 418.549608][T22231] __sys_sendmsg+0x19d/0x230 [ 418.554221][T22231] __x64_sys_sendmsg+0x46/0x50 [ 418.558995][T22231] x64_sys_call+0x2734/0x2dc0 [ 418.563695][T22231] do_syscall_64+0xc9/0x1c0 [ 418.568283][T22231] ? clear_bhb_loop+0x55/0xb0 [ 418.572984][T22231] ? clear_bhb_loop+0x55/0xb0 [ 418.577676][T22231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.583648][T22231] RIP: 0033:0x7f92b09ee819 [ 418.588061][T22231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.607668][T22231] RSP: 002b:00007f92af067038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.616107][T22231] RAX: ffffffffffffffda RBX: 00007f92b0ba5fa0 RCX: 00007f92b09ee819 [ 418.624077][T22231] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 418.632065][T22231] RBP: 00007f92af067090 R08: 0000000000000000 R09: 0000000000000000 [ 418.640036][T22231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.648083][T22231] R13: 0000000000000000 R14: 00007f92b0ba5fa0 R15: 00007ffde88bd408 [ 418.656084][T22231] [ 418.672419][T22201] vhci_hcd: connection reset by peer [ 418.677768][T22207] vhci_hcd: connection closed [ 418.677942][T22206] vhci_hcd: connection closed [ 418.682368][T22209] vhci_hcd: connection closed [ 418.687410][ T11] vhci_hcd: stop threads [ 418.696360][ T11] vhci_hcd: release socket [ 418.700784][ T11] vhci_hcd: disconnect device [ 418.709326][ T11] vhci_hcd: stop threads [ 418.713708][ T11] vhci_hcd: release socket [ 418.718136][ T11] vhci_hcd: disconnect device [ 418.732838][T22234] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 418.847551][ T11] vhci_hcd: stop threads [ 418.851869][ T11] vhci_hcd: release socket [ 418.856440][ T11] vhci_hcd: disconnect device [ 418.879978][ T11] vhci_hcd: stop threads [ 418.884401][ T11] vhci_hcd: release socket [ 418.888866][ T11] vhci_hcd: disconnect device [ 418.909632][T22254] 9pnet_fd: Insufficient options for proto=fd [ 419.187612][T12332] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.279251][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 419.279267][ T29] audit: type=1326 audit(1732458625.313:15359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22270 comm="syz.6.4468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 419.279661][T22273] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4467'. [ 419.285468][ T29] audit: type=1326 audit(1732458625.313:15360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22270 comm="syz.6.4468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 419.341521][ T29] audit: type=1326 audit(1732458625.313:15361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22270 comm="syz.6.4468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 419.405318][T22273] bond1: entered promiscuous mode [ 419.422025][T22275] bond1 (unregistering): Released all slaves [ 419.524438][ T29] audit: type=1326 audit(1732458625.343:15362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22270 comm="syz.6.4468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 419.548040][ T29] audit: type=1326 audit(1732458625.343:15363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22270 comm="syz.6.4468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 419.571663][ T29] audit: type=1326 audit(1732458625.343:15364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22270 comm="syz.6.4468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 419.595172][ T29] audit: type=1326 audit(1732458625.343:15365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22270 comm="syz.6.4468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 419.618850][ T29] audit: type=1326 audit(1732458625.343:15366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22270 comm="syz.6.4468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 419.642423][ T29] audit: type=1326 audit(1732458625.343:15367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22270 comm="syz.6.4468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 419.666024][ T29] audit: type=1326 audit(1732458625.353:15368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22270 comm="syz.6.4468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 419.731522][T22284] 9pnet_fd: Insufficient options for proto=fd [ 420.044485][T22297] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 420.148404][T22296] SELinux: policydb table sizes (0,0) do not match mine (6,6) [ 420.175348][T22296] SELinux: failed to load policy [ 420.236063][T22311] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 420.421743][T22320] 9pnet_fd: Insufficient options for proto=fd [ 420.474536][T22330] 9pnet_fd: Insufficient options for proto=fd [ 420.601695][T22338] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 420.693362][T22344] SELinux: syz.7.4493 (22344) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 420.979990][T22370] x_tables: duplicate underflow at hook 1 [ 421.067760][T22379] Cannot find del_set index 0 as target [ 421.082175][T22381] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 421.342131][T22404] x_tables: duplicate underflow at hook 1 [ 421.388733][T22410] Cannot find del_set index 0 as target [ 421.419138][T22417] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20003 [ 421.467082][T22420] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 421.819627][T22441] x_tables: duplicate underflow at hook 1 [ 421.828941][T22444] SELinux: syz.1.4531 (22444) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 421.847499][T22445] loop6: detected capacity change from 0 to 512 [ 421.960113][T22456] loop6: detected capacity change from 0 to 164 [ 422.010810][T22455] netlink: 'syz.7.4533': attribute type 10 has an invalid length. [ 422.031276][T22455] bridge0: port 3(team0) entered disabled state [ 422.047735][T22455] team0: left allmulticast mode [ 422.052657][T22455] team_slave_0: left allmulticast mode [ 422.058258][T22455] team_slave_1: left allmulticast mode [ 422.063740][T22455] team0: left promiscuous mode [ 422.068632][T22455] team_slave_0: left promiscuous mode [ 422.074090][T22455] team_slave_1: left promiscuous mode [ 422.079724][T22455] bridge0: port 3(team0) entered disabled state [ 422.087638][T22460] loop6: detected capacity change from 0 to 512 [ 422.101669][T22460] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 422.137123][T22460] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 422.175913][T22463] netlink: 'syz.7.4533': attribute type 10 has an invalid length. [ 422.183853][T22463] netlink: 2 bytes leftover after parsing attributes in process `syz.7.4533'. [ 422.208455][T22460] EXT4-fs (loop6): 1 truncate cleaned up [ 422.232669][T22455] batman_adv: batadv0: Adding interface: team0 [ 422.238931][T22455] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.264405][T22455] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 422.279795][T22460] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.302673][T22463] team0: entered promiscuous mode [ 422.307947][T22463] team_slave_0: entered promiscuous mode [ 422.313913][T22463] team_slave_1: entered promiscuous mode [ 422.334196][T22463] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.341453][T22463] batman_adv: batadv0: Interface activated: team0 [ 422.348073][T22463] batman_adv: batadv0: Interface deactivated: team0 [ 422.354904][T22463] batman_adv: batadv0: Removing interface: team0 [ 422.376373][T22463] bridge0: port 3(team0) entered blocking state [ 422.382956][T22463] bridge0: port 3(team0) entered disabled state [ 422.403897][T12332] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.437305][T22463] team0: entered allmulticast mode [ 422.442562][T22463] team_slave_0: entered allmulticast mode [ 422.448394][T22463] team_slave_1: entered allmulticast mode [ 422.507284][T22463] bridge0: port 3(team0) entered blocking state [ 422.513756][T22463] bridge0: port 3(team0) entered forwarding state [ 422.573316][T22484] SELinux: syz.1.4545 (22484) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 422.619221][T22488] loop6: detected capacity change from 0 to 512 [ 422.705577][T22488] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.4546: Failed to acquire dquot type 1 [ 422.746119][T22488] EXT4-fs (loop6): 1 truncate cleaned up [ 422.770428][T22488] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.839703][T22488] ext4 filesystem being mounted at /484/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.844523][T22506] usb usb8: usbfs: process 22506 (syz.3.4553) did not claim interface 0 before use [ 423.254926][ T4602] usb 13-1: enqueue for inactive port 0 [ 423.266153][ T4602] usb 13-1: enqueue for inactive port 0 [ 423.278603][T22523] SELinux: syz.3.4560 (22523) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 423.344672][ T4602] vhci_hcd: vhci_device speed not set [ 423.391769][T22525] SELinux: syz.3.4561 (22525) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 423.774334][T22531] vlan0: entered allmulticast mode [ 423.779564][T22531] veth1_macvtap: entered allmulticast mode [ 423.829829][T22531] veth1_macvtap: left allmulticast mode [ 423.849838][T22535] SELinux: syz.2.4567 (22535) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 423.874056][T22537] SELinux: syz.3.4566 (22537) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 423.906139][T12332] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.985064][T22547] SELinux: syz.7.4572 (22547) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 424.171273][T22558] SELinux: syz.7.4575 (22558) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 424.229452][T22563] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4576'. [ 424.238525][T22563] netlink: 'syz.1.4576': attribute type 7 has an invalid length. [ 424.246475][T22563] netlink: 'syz.1.4576': attribute type 8 has an invalid length. [ 424.254307][T22563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4576'. [ 424.379240][T22573] SELinux: syz.1.4581 (22573) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 424.393665][T22571] netlink: 'syz.2.4579': attribute type 10 has an invalid length. [ 424.436763][T22571] bridge0: port 3(team0) entered disabled state [ 424.465615][ T29] kauditd_printk_skb: 392 callbacks suppressed [ 424.465630][ T29] audit: type=1326 audit(1732458630.500:15759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22578 comm="syz.3.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefd24e819 code=0x7ffc0000 [ 424.506653][T22571] team0: left allmulticast mode [ 424.511574][T22571] team_slave_0: left allmulticast mode [ 424.517121][T22571] team_slave_1: left allmulticast mode [ 424.518956][T22582] netlink: 'syz.2.4579': attribute type 10 has an invalid length. [ 424.522624][T22571] team0: left promiscuous mode [ 424.522642][T22571] team_slave_0: left promiscuous mode [ 424.530488][T22582] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4579'. [ 424.535367][T22571] team_slave_1: left promiscuous mode [ 424.555113][T22571] bridge0: port 3(team0) entered disabled state [ 424.586097][ T29] audit: type=1326 audit(1732458630.530:15760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22578 comm="syz.3.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcefd24e819 code=0x7ffc0000 [ 424.609727][ T29] audit: type=1326 audit(1732458630.530:15761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22578 comm="syz.3.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefd24e819 code=0x7ffc0000 [ 424.633540][ T29] audit: type=1326 audit(1732458630.530:15762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22578 comm="syz.3.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefd24e819 code=0x7ffc0000 [ 424.657369][ T29] audit: type=1326 audit(1732458630.530:15763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22578 comm="syz.3.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcefd24e819 code=0x7ffc0000 [ 424.680943][ T29] audit: type=1326 audit(1732458630.530:15764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22578 comm="syz.3.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefd24e819 code=0x7ffc0000 [ 424.704712][ T29] audit: type=1326 audit(1732458630.530:15765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22578 comm="syz.3.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefd24e819 code=0x7ffc0000 [ 424.728351][ T29] audit: type=1326 audit(1732458630.530:15766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22578 comm="syz.3.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcefd24e819 code=0x7ffc0000 [ 424.751927][ T29] audit: type=1326 audit(1732458630.590:15767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22576 comm="syz.6.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 424.775644][ T29] audit: type=1326 audit(1732458630.590:15768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22576 comm="syz.6.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23d073e819 code=0x7ffc0000 [ 424.800334][T22571] batman_adv: batadv0: Adding interface: team0 [ 424.806575][T22571] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.831927][T22571] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 424.847924][T22588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4586'. [ 424.857742][T22582] team0: entered promiscuous mode [ 424.862829][T22582] team_slave_0: entered promiscuous mode [ 424.868636][T22582] team_slave_1: entered promiscuous mode [ 424.875530][T22582] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.882673][T22582] batman_adv: batadv0: Interface activated: team0 [ 424.889294][T22582] batman_adv: batadv0: Interface deactivated: team0 [ 424.895964][T22582] batman_adv: batadv0: Removing interface: team0 [ 424.904345][T22582] bridge0: port 3(team0) entered blocking state [ 424.910685][T22582] bridge0: port 3(team0) entered disabled state [ 424.918560][T22582] team0: entered allmulticast mode [ 424.923711][T22582] team_slave_0: entered allmulticast mode [ 424.929538][T22582] team_slave_1: entered allmulticast mode [ 424.936121][T22582] bridge0: port 3(team0) entered blocking state [ 424.942512][T22582] bridge0: port 3(team0) entered forwarding state [ 424.966365][T22588] bond2: entered promiscuous mode [ 424.993232][T22589] bond2 (unregistering): Released all slaves [ 425.062360][T22595] netlink: 'syz.3.4588': attribute type 10 has an invalid length. [ 425.099128][T22595] bridge0: port 3(team0) entered disabled state [ 425.114462][T22599] netlink: 'syz.3.4588': attribute type 10 has an invalid length. [ 425.122364][T22599] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4588'. [ 425.131476][T22595] team0: left allmulticast mode [ 425.136457][T22595] team_slave_0: left allmulticast mode [ 425.141939][T22595] team_slave_1: left allmulticast mode [ 425.147565][T22595] team0: left promiscuous mode [ 425.152477][T22595] team_slave_0: left promiscuous mode [ 425.157964][T22595] team_slave_1: left promiscuous mode [ 425.163538][T22595] bridge0: port 3(team0) entered disabled state [ 425.194754][T22595] batman_adv: batadv0: Adding interface: team0 [ 425.200996][T22595] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.226290][T22595] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 425.237749][T22599] team0: entered promiscuous mode [ 425.242887][T22599] team_slave_0: entered promiscuous mode [ 425.248934][T22599] team_slave_1: entered promiscuous mode [ 425.255868][T22599] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.263242][T22599] batman_adv: batadv0: Interface activated: team0 [ 425.269780][T22599] batman_adv: batadv0: Interface deactivated: team0 [ 425.276545][T22599] batman_adv: batadv0: Removing interface: team0 [ 425.291408][T22599] bridge0: port 3(team0) entered blocking state [ 425.297874][T22599] bridge0: port 3(team0) entered disabled state [ 425.315559][T22599] team0: entered allmulticast mode [ 425.320850][T22599] team_slave_0: entered allmulticast mode [ 425.326662][T22599] team_slave_1: entered allmulticast mode [ 425.367739][T22599] bridge0: port 3(team0) entered blocking state [ 425.374224][T22599] bridge0: port 3(team0) entered forwarding state [ 425.381372][T22603] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 425.449166][T22605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4592'. [ 425.458342][T22605] netlink: 'syz.2.4592': attribute type 7 has an invalid length. [ 425.466193][T22605] netlink: 'syz.2.4592': attribute type 8 has an invalid length. [ 425.474026][T22605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4592'. [ 425.612933][T22612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4595'. [ 425.648137][T22612] bond1: entered promiscuous mode [ 425.656632][T22612] bond1 (unregistering): Released all slaves [ 425.870918][T22623] sel_write_user: 2 callbacks suppressed [ 425.870937][T22623] SELinux: syz.2.4600 (22623) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 425.997239][T22633] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 426.122820][T22649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4608'. [ 426.179648][T22649] bond1: entered promiscuous mode [ 426.211878][T22649] bond1 (unregistering): Released all slaves [ 426.296843][T22673] SELinux: syz.7.4615 (22673) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 426.447886][T22689] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 426.648729][T22702] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4627'. [ 426.657947][T22702] netlink: 'syz.7.4627': attribute type 7 has an invalid length. [ 426.665729][T22702] netlink: 'syz.7.4627': attribute type 8 has an invalid length. [ 426.674272][T22705] SELinux: syz.3.4628 (22705) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 426.821591][T22712] vlan2: entered allmulticast mode [ 426.826843][T22712] veth1_macvtap: entered allmulticast mode [ 426.872766][T22712] veth1_macvtap: left allmulticast mode [ 426.970421][T22722] 9pnet_fd: Insufficient options for proto=fd [ 427.118139][T22732] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 427.438444][T22742] SELinux: syz.1.4642 (22742) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 427.570476][T22718] Cannot find del_set index 0 as target [ 427.680947][T22757] 9pnet_fd: Insufficient options for proto=fd [ 427.693575][T22755] FAULT_INJECTION: forcing a failure. [ 427.693575][T22755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.706746][T22755] CPU: 1 UID: 0 PID: 22755 Comm: syz.2.4647 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 427.717234][T22755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 427.727330][T22755] Call Trace: [ 427.730712][T22755] [ 427.733662][T22755] dump_stack_lvl+0xf2/0x150 [ 427.738307][T22755] dump_stack+0x15/0x20 [ 427.742578][T22755] should_fail_ex+0x223/0x230 [ 427.747360][T22755] should_fail+0xb/0x10 [ 427.751550][T22755] should_fail_usercopy+0x1a/0x20 [ 427.756617][T22755] _copy_from_iter+0xd5/0xd00 [ 427.761425][T22755] ? kmalloc_reserve+0x16e/0x190 [ 427.766474][T22755] ? __build_skb_around+0x196/0x1f0 [ 427.771733][T22755] ? __alloc_skb+0x21f/0x310 [ 427.776417][T22755] ? __virt_addr_valid+0x1ed/0x250 [ 427.781550][T22755] ? __check_object_size+0x364/0x520 [ 427.786936][T22755] netlink_sendmsg+0x460/0x6e0 [ 427.791774][T22755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.797142][T22755] __sock_sendmsg+0x140/0x180 [ 427.801885][T22755] ____sys_sendmsg+0x312/0x410 [ 427.806703][T22755] __sys_sendmsg+0x19d/0x230 [ 427.811322][T22755] __x64_sys_sendmsg+0x46/0x50 [ 427.816101][T22755] x64_sys_call+0x2734/0x2dc0 [ 427.820825][T22755] do_syscall_64+0xc9/0x1c0 [ 427.825417][T22755] ? clear_bhb_loop+0x55/0xb0 [ 427.830133][T22755] ? clear_bhb_loop+0x55/0xb0 [ 427.834829][T22755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.840747][T22755] RIP: 0033:0x7f92b09ee819 [ 427.845244][T22755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.864861][T22755] RSP: 002b:00007f92af067038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.873285][T22755] RAX: ffffffffffffffda RBX: 00007f92b0ba5fa0 RCX: 00007f92b09ee819 [ 427.881289][T22755] RDX: 0000000044000000 RSI: 0000000020000840 RDI: 0000000000000003 [ 427.889299][T22755] RBP: 00007f92af067090 R08: 0000000000000000 R09: 0000000000000000 [ 427.897278][T22755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.905253][T22755] R13: 0000000000000000 R14: 00007f92b0ba5fa0 R15: 00007ffde88bd408 [ 427.913272][T22755] [ 427.979584][T22761] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 428.314902][T22797] SELinux: policydb table sizes (0,0) do not match mine (6,6) [ 428.352917][T22797] SELinux: failed to load policy [ 428.440562][T22803] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 428.463889][T22805] program syz.2.4666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 428.917315][T22844] program syz.6.4682 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 428.963225][T22844] FAULT_INJECTION: forcing a failure. [ 428.963225][T22844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.976412][T22844] CPU: 1 UID: 0 PID: 22844 Comm: syz.6.4682 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 428.986890][T22844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 428.996972][T22844] Call Trace: [ 429.000351][T22844] [ 429.003296][T22844] dump_stack_lvl+0xf2/0x150 [ 429.008002][T22844] dump_stack+0x15/0x20 [ 429.012366][T22844] should_fail_ex+0x223/0x230 [ 429.017077][T22844] should_fail+0xb/0x10 [ 429.021281][T22844] should_fail_usercopy+0x1a/0x20 [ 429.026368][T22844] _copy_from_user+0x1e/0xb0 [ 429.030980][T22844] scsi_ioctl+0x11dc/0x1540 [ 429.035529][T22844] ? avc_has_perm+0xd4/0x160 [ 429.040151][T22844] ? file_has_perm+0x329/0x370 [ 429.044942][T22844] ? do_vfs_ioctl+0x96e/0x1530 [ 429.049845][T22844] sg_ioctl+0xda4/0x1870 [ 429.054173][T22844] ? __fget_files+0x17c/0x1c0 [ 429.058923][T22844] ? __pfx_sg_ioctl+0x10/0x10 [ 429.063689][T22844] __se_sys_ioctl+0xc9/0x140 [ 429.068352][T22844] __x64_sys_ioctl+0x43/0x50 [ 429.072971][T22844] x64_sys_call+0x1690/0x2dc0 [ 429.077812][T22844] do_syscall_64+0xc9/0x1c0 [ 429.082421][T22844] ? clear_bhb_loop+0x55/0xb0 [ 429.087140][T22844] ? clear_bhb_loop+0x55/0xb0 [ 429.091857][T22844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.097860][T22844] RIP: 0033:0x7f23d073e819 [ 429.102330][T22844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.121981][T22844] RSP: 002b:00007f23cedb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.130488][T22844] RAX: ffffffffffffffda RBX: 00007f23d08f5fa0 RCX: 00007f23d073e819 [ 429.138481][T22844] RDX: 00000000200000c0 RSI: 0000000000000001 RDI: 0000000000000003 [ 429.146510][T22844] RBP: 00007f23cedb7090 R08: 0000000000000000 R09: 0000000000000000 [ 429.154501][T22844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.162593][T22844] R13: 0000000000000000 R14: 00007f23d08f5fa0 R15: 00007ffdaef1bd88 [ 429.170606][T22844] [ 429.263543][T22848] usb usb8: usbfs: process 22848 (syz.7.4684) did not claim interface 0 before use [ 429.268061][T22849] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 429.401045][T22857] __nla_validate_parse: 7 callbacks suppressed [ 429.401065][T22857] netlink: 148 bytes leftover after parsing attributes in process `syz.7.4687'. [ 429.663307][T22880] x_tables: duplicate underflow at hook 1 [ 429.745359][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 429.745377][ T29] audit: type=1326 audit(1732458635.768:15902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22883 comm="syz.1.4696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177bb3e819 code=0x7ffc0000 [ 429.800374][ T29] audit: type=1326 audit(1732458635.808:15903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22883 comm="syz.1.4696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f177bb3e819 code=0x7ffc0000 [ 429.824107][ T29] audit: type=1326 audit(1732458635.808:15904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22883 comm="syz.1.4696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177bb3e819 code=0x7ffc0000 [ 429.847775][ T29] audit: type=1326 audit(1732458635.808:15905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22883 comm="syz.1.4696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177bb3e819 code=0x7ffc0000 [ 429.871376][ T29] audit: type=1326 audit(1732458635.808:15906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22883 comm="syz.1.4696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f177bb3e819 code=0x7ffc0000 [ 429.877823][T22898] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4701'. [ 429.895002][ T29] audit: type=1326 audit(1732458635.808:15907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22883 comm="syz.1.4696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f177bb3e853 code=0x7ffc0000 [ 429.895040][ T29] audit: type=1326 audit(1732458635.808:15908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22883 comm="syz.1.4696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f177bb3e853 code=0x7ffc0000 [ 429.895073][ T29] audit: type=1326 audit(1732458635.808:15909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22883 comm="syz.1.4696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177bb3e819 code=0x7ffc0000 [ 429.895106][ T29] audit: type=1326 audit(1732458635.808:15910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22883 comm="syz.1.4696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177bb3e819 code=0x7ffc0000 [ 429.904069][T22898] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4701'. [ 429.927450][ T29] audit: type=1326 audit(1732458635.808:15911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22883 comm="syz.1.4696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177bb3e819 code=0x7ffc0000 [ 429.950903][T22898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4701'. [ 430.040416][T22885] IPv6: Can't replace route, no match found [ 430.066809][T22899] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 430.138073][T22905] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4703'. [ 430.188610][T22915] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4710'. [ 430.204477][T22915] bond2: entered promiscuous mode [ 430.215572][T22915] bond2 (unregistering): Released all slaves [ 430.256190][T22926] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4713'. [ 430.265271][T22926] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4713'. [ 430.274274][T22926] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4713'. [ 430.403778][T22940] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 430.417569][T22937] validate_nla: 3 callbacks suppressed [ 430.417645][T22937] netlink: 'syz.1.4715': attribute type 10 has an invalid length. [ 430.447629][T22937] bridge0: port 3(team0) entered disabled state [ 430.470957][T22947] netlink: 'syz.1.4715': attribute type 10 has an invalid length. [ 430.478950][T22947] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4715'. [ 430.510272][T22937] team0: left allmulticast mode [ 430.515215][T22937] team_slave_0: left allmulticast mode [ 430.520750][T22937] team_slave_1: left allmulticast mode [ 430.526285][T22937] team0: left promiscuous mode [ 430.531114][T22937] team_slave_0: left promiscuous mode [ 430.536626][T22937] team_slave_1: left promiscuous mode [ 430.542284][T22937] bridge0: port 3(team0) entered disabled state [ 430.591994][T22937] batman_adv: batadv0: Adding interface: team0 [ 430.598261][T22937] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.623580][T22937] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 430.669830][T22947] team0: entered promiscuous mode [ 430.674913][T22947] team_slave_0: entered promiscuous mode [ 430.680715][T22947] team_slave_1: entered promiscuous mode [ 430.724977][T22947] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.751210][T22947] batman_adv: batadv0: Interface activated: team0 [ 430.757775][T22947] batman_adv: batadv0: Interface deactivated: team0 [ 430.764495][T22947] batman_adv: batadv0: Removing interface: team0 [ 430.794918][T22947] bridge0: port 3(team0) entered blocking state [ 430.801269][T22947] bridge0: port 3(team0) entered disabled state [ 430.867086][T22947] team0: entered allmulticast mode [ 430.872375][T22947] team_slave_0: entered allmulticast mode [ 430.878129][T22947] team_slave_1: entered allmulticast mode [ 430.914570][T22947] bridge0: port 3(team0) entered blocking state [ 430.920983][T22947] bridge0: port 3(team0) entered forwarding state [ 431.112948][T23004] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 431.157100][T23006] netlink: 'syz.3.4738': attribute type 7 has an invalid length. [ 431.164944][T23006] netlink: 'syz.3.4738': attribute type 8 has an invalid length. [ 431.323263][T23012] netlink: 'syz.1.4739': attribute type 7 has an invalid length. [ 431.331194][T23012] netlink: 'syz.1.4739': attribute type 8 has an invalid length. [ 431.600630][T23033] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 431.820825][T23016] netlink: 'syz.3.4742': attribute type 2 has an invalid length. [ 432.082156][T23075] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 432.121255][T23076] vlan3: entered allmulticast mode [ 432.126432][T23076] veth1_macvtap: entered allmulticast mode [ 432.168549][T23076] veth1_macvtap: left allmulticast mode [ 432.413248][T23105] netlink: 'syz.1.4773': attribute type 10 has an invalid length. [ 432.447453][T23105] bridge0: port 3(team0) entered disabled state [ 432.472637][T23111] SELinux: syz.2.4778 (23111) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 432.508236][T23105] team0: left allmulticast mode [ 432.513288][T23105] team_slave_0: left allmulticast mode [ 432.518785][T23105] team_slave_1: left allmulticast mode [ 432.524331][T23105] team0: left promiscuous mode [ 432.529168][T23105] team_slave_0: left promiscuous mode [ 432.534723][T23105] team_slave_1: left promiscuous mode [ 432.540313][T23105] bridge0: port 3(team0) entered disabled state [ 432.562130][T23119] netlink: 'syz.1.4773': attribute type 10 has an invalid length. [ 432.596589][T23105] batman_adv: batadv0: Adding interface: team0 [ 432.602894][T23105] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.615498][T23121] x_tables: duplicate underflow at hook 1 [ 432.628057][T23105] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 432.703836][T23119] team0: entered promiscuous mode [ 432.708979][T23119] team_slave_0: entered promiscuous mode [ 432.714873][T23119] team_slave_1: entered promiscuous mode [ 432.748124][T23119] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.756800][T23119] batman_adv: batadv0: Interface activated: team0 [ 432.763436][T23119] batman_adv: batadv0: Interface deactivated: team0 [ 432.770270][T23119] batman_adv: batadv0: Removing interface: team0 [ 432.781758][T23119] bridge0: port 3(team0) entered blocking state [ 432.788091][T23119] bridge0: port 3(team0) entered disabled state [ 432.797848][T23119] team0: entered allmulticast mode [ 432.803061][T23119] team_slave_0: entered allmulticast mode [ 432.808822][T23119] team_slave_1: entered allmulticast mode [ 432.818582][T23119] bridge0: port 3(team0) entered blocking state [ 432.825085][T23119] bridge0: port 3(team0) entered forwarding state [ 432.833411][T23117] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 432.843470][T23101] netlink: 'syz.7.4774': attribute type 2 has an invalid length. [ 433.037741][T23148] SELinux: syz.2.4790 (23148) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 433.247922][T23164] bridge0: port 3(team0) entered disabled state [ 433.262321][T23164] team0: left allmulticast mode [ 433.267253][T23164] team_slave_0: left allmulticast mode [ 433.272788][T23164] team_slave_1: left allmulticast mode [ 433.278265][T23164] team0: left promiscuous mode [ 433.283127][T23164] team_slave_0: left promiscuous mode [ 433.288605][T23164] team_slave_1: left promiscuous mode [ 433.294167][T23164] bridge0: port 3(team0) entered disabled state [ 433.306622][T23164] batman_adv: batadv0: Adding interface: team0 [ 433.313045][T23164] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.338261][T23164] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 433.372441][T23169] team0: entered promiscuous mode [ 433.377547][T23169] team_slave_0: entered promiscuous mode [ 433.383460][T23169] team_slave_1: entered promiscuous mode [ 433.473016][T23169] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.496917][T23169] batman_adv: batadv0: Interface activated: team0 [ 433.503623][T23169] batman_adv: batadv0: Interface deactivated: team0 [ 433.510303][T23169] batman_adv: batadv0: Removing interface: team0 [ 433.535188][T23169] bridge0: port 3(team0) entered blocking state [ 433.539015][T23185] SELinux: syz.2.4804 (23185) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 433.541687][T23169] bridge0: port 3(team0) entered disabled state [ 433.596596][T23169] team0: entered allmulticast mode [ 433.601825][T23169] team_slave_0: entered allmulticast mode [ 433.607675][T23169] team_slave_1: entered allmulticast mode [ 433.633046][T23189] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 433.639601][T23189] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 433.647089][T23189] vhci_hcd vhci_hcd.0: Device attached [ 433.689015][T23169] bridge0: port 3(team0) entered blocking state [ 433.695359][T23169] bridge0: port 3(team0) entered forwarding state [ 433.713277][T23189] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7) [ 433.719867][T23189] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 433.727305][T23189] vhci_hcd vhci_hcd.0: Device attached [ 433.753479][T23194] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(10) [ 433.760170][T23194] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 433.767603][T23194] vhci_hcd vhci_hcd.0: Device attached [ 433.787333][T23189] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 433.793910][T23189] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 433.801551][T23189] vhci_hcd vhci_hcd.0: Device attached [ 433.851832][ T3395] vhci_hcd: vhci_device speed not set [ 433.951673][ T3395] usb 7-1: new full-speed USB device number 17 using vhci_hcd [ 434.357011][T23192] vhci_hcd: connection closed [ 434.357173][T23190] vhci_hcd: connection reset by peer [ 434.367444][T11312] vhci_hcd: stop threads [ 434.371820][T11312] vhci_hcd: release socket [ 434.376345][T11312] vhci_hcd: disconnect device [ 434.384704][T23195] vhci_hcd: connection closed [ 434.385443][T23197] vhci_hcd: connection closed [ 434.396196][T23227] SELinux: syz.6.4816 (23227) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 434.414858][T11312] vhci_hcd: stop threads [ 434.419221][T11312] vhci_hcd: release socket [ 434.423730][T11312] vhci_hcd: disconnect device [ 434.441199][T11312] vhci_hcd: stop threads [ 434.445519][T11312] vhci_hcd: release socket [ 434.449956][T11312] vhci_hcd: disconnect device [ 434.490365][T11312] vhci_hcd: stop threads [ 434.494704][T11312] vhci_hcd: release socket [ 434.499140][T11312] vhci_hcd: disconnect device [ 434.524487][T23236] x_tables: duplicate underflow at hook 1 [ 434.552152][T23239] __nla_validate_parse: 23 callbacks suppressed [ 434.552176][T23239] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4820'. [ 434.648753][T23239] bond1: entered promiscuous mode [ 434.850046][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 434.850091][ T29] audit: type=1326 audit(1732458640.865:16084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23249 comm="syz.7.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc049de819 code=0x7ffc0000 [ 434.942906][ T29] audit: type=1326 audit(1732458640.935:16085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23249 comm="syz.7.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc049de819 code=0x7ffc0000 [ 434.966896][ T29] audit: type=1326 audit(1732458640.935:16086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23249 comm="syz.7.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc049de819 code=0x7ffc0000 [ 434.990569][ T29] audit: type=1326 audit(1732458640.935:16087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23249 comm="syz.7.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc049de819 code=0x7ffc0000 [ 435.014396][ T29] audit: type=1326 audit(1732458640.935:16088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23249 comm="syz.7.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdc049de819 code=0x7ffc0000 [ 435.038194][ T29] audit: type=1326 audit(1732458640.935:16089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23249 comm="syz.7.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc049de819 code=0x7ffc0000 [ 435.062065][ T29] audit: type=1326 audit(1732458640.935:16090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23249 comm="syz.7.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc049de819 code=0x7ffc0000 [ 435.085700][ T29] audit: type=1326 audit(1732458640.945:16091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23249 comm="syz.7.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fdc049de819 code=0x7ffc0000 [ 435.109591][ T29] audit: type=1326 audit(1732458640.945:16092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23249 comm="syz.7.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc049de819 code=0x7ffc0000 [ 435.133255][ T29] audit: type=1326 audit(1732458640.945:16093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23249 comm="syz.7.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc049de819 code=0x7ffc0000 [ 435.153846][T23261] SELinux: syz.7.4827 (23261) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 435.187479][T23264] ================================================================== [ 435.195606][T23264] BUG: KCSAN: data-race in mas_replace_node / mtree_range_walk [ 435.203169][T23264] [ 435.205498][T23264] write to 0xffff888104586f00 of 8 bytes by task 23263 on cpu 1: [ 435.213219][T23264] mas_replace_node+0x1b8/0x430 [ 435.218083][T23264] mas_wr_store_entry+0x1fbf/0x2d10 [ 435.223289][T23264] mas_store_prealloc+0x6bf/0x960 [ 435.228320][T23264] vma_complete+0x3a7/0x760 [ 435.232840][T23264] __split_vma+0x5d6/0x6a0 [ 435.237271][T23264] vma_modify+0xd3/0x1e0 [ 435.241528][T23264] vma_modify_flags+0xf1/0x120 [ 435.246305][T23264] mprotect_fixup+0x31a/0x5e0 [ 435.251002][T23264] do_mprotect_pkey+0x653/0x960 [ 435.255870][T23264] __x64_sys_mprotect+0x48/0x60 [ 435.260747][T23264] x64_sys_call+0x2770/0x2dc0 [ 435.265444][T23264] do_syscall_64+0xc9/0x1c0 [ 435.269969][T23264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.275971][T23264] [ 435.278309][T23264] read to 0xffff888104586f00 of 8 bytes by task 23264 on cpu 0: [ 435.285939][T23264] mtree_range_walk+0x33d/0x460 [ 435.290815][T23264] mas_walk+0x16e/0x320 [ 435.295061][T23264] lock_vma_under_rcu+0x95/0x260 [ 435.300025][T23264] exc_page_fault+0x150/0x650 [ 435.304732][T23264] asm_exc_page_fault+0x26/0x30 [ 435.309608][T23264] [ 435.311932][T23264] value changed: 0xffff888116a7140e -> 0xffff888104586f00 [ 435.319041][T23264] [ 435.321364][T23264] Reported by Kernel Concurrency Sanitizer on: [ 435.327514][T23264] CPU: 0 UID: 0 PID: 23264 Comm: syz.3.4829 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 435.337932][T23264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 435.347992][T23264] ================================================================== [ 435.497468][T23213] syz.1.4811 (23213) used greatest stack depth: 6248 bytes left [ 439.112556][ T3395] usb 7-1: enqueue for inactive port 0 [ 439.118113][ T3395] usb 7-1: enqueue for inactive port 0 [ 439.203866][ T3395] vhci_hcd: vhci_device speed not set