last executing test programs: 2m38.852850281s ago: executing program 1 (id=1208): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x40000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}], {0x95, 0x0, 0x0, 0x20}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m23.506635575s ago: executing program 32 (id=1208): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x40000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}], {0x95, 0x0, 0x0, 0x20}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m53.639919116s ago: executing program 0 (id=2155): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7ffffe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r2}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x1}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x1, 0x400, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}, {{0x1c, 0x1, {0xc, 0x38, 0x4, 0x5, 0x2, 0x4, 0x3, 0x3}}, {0xa, 0x2, [0x4, 0x4, 0xb3e6]}}]}]}, 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8a, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1m53.488753655s ago: executing program 0 (id=2163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='percpu_free_percpu\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000180900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m53.293012834s ago: executing program 0 (id=2173): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="85fad16d9b9c7a000000dd", @ANYRES16=r1, @ANYBLOB="230e00000000000000003d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x50}}, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) pwritev2(r2, 0x0, 0x0, 0x1400, 0x0, 0x3) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x7, 0x0}, 0x8) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@decl_tag={0x2, 0x0, 0x0, 0x11, 0x5, 0x6}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x9}}, @union={0xb, 0x4, 0x0, 0x5, 0x0, 0x6b, [{0x0, 0x1, 0x5}, {0x9, 0x3, 0xfffffc12}, {0x3, 0x3, 0x2}, {0xe, 0x4, 0x483}]}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x2, 0x6}, @restrict={0x5, 0x0, 0x0, 0xb, 0x3}, @fwd={0x3}, @restrict={0x5, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x5f]}}, &(0x7f0000000480)=""/199, 0xb3, 0xc7, 0x1, 0x4, 0x0, @void, @value}, 0x28) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000060000429500400000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @void}}}]}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x400501, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, r9, 0x0) syz_io_uring_submit(r10, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000f80)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x66a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffff6000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r13, 0x0, 0xe}, 0x18) brk(0x20001000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='kfree\x00', r11}, 0x18) 1m53.291468104s ago: executing program 33 (id=2173): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="85fad16d9b9c7a000000dd", @ANYRES16=r1, @ANYBLOB="230e00000000000000003d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x50}}, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) pwritev2(r2, 0x0, 0x0, 0x1400, 0x0, 0x3) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x7, 0x0}, 0x8) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@decl_tag={0x2, 0x0, 0x0, 0x11, 0x5, 0x6}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x9}}, @union={0xb, 0x4, 0x0, 0x5, 0x0, 0x6b, [{0x0, 0x1, 0x5}, {0x9, 0x3, 0xfffffc12}, {0x3, 0x3, 0x2}, {0xe, 0x4, 0x483}]}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x2, 0x6}, @restrict={0x5, 0x0, 0x0, 0xb, 0x3}, @fwd={0x3}, @restrict={0x5, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x5f]}}, &(0x7f0000000480)=""/199, 0xb3, 0xc7, 0x1, 0x4, 0x0, @void, @value}, 0x28) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000060000429500400000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @void}}}]}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x400501, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, r9, 0x0) syz_io_uring_submit(r10, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000f80)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x66a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffff6000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r13, 0x0, 0xe}, 0x18) brk(0x20001000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='kfree\x00', r11}, 0x18) 1m48.431952426s ago: executing program 34 (id=2254): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="c05215"], 0x24}}, 0x0) recvmmsg$unix(r1, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000002a80)=""/4111, 0x100f}, {&(0x7f0000000500)=""/17, 0x11}, {&(0x7f00000007c0)=""/109, 0x6d}, {&(0x7f0000000840)=""/95, 0x5f}, {&(0x7f0000000300)=""/25, 0x19}], 0x6}}], 0x1, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000180)) (async) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000180)=0x0) getgroups(0x1, &(0x7f00000001c0)=[0xee01]) (async) getgroups(0x1, &(0x7f00000001c0)=[0xee01]) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000008c0)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast1}}, 0x0, @in=@remote}}, &(0x7f00000003c0)=0x98) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)) (async) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)={'trans=xen,', {[{@noxattr}, {@posixacl}, {@access_uid={'access', 0x3d, r2}}, {@aname={'aname', 0x3d, 'kfree\x00'}}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@directio}, {@cachetag}, {@privport}, {@access_uid={'access', 0x3d, r4}}], [{@uid_gt={'uid>', r5}}, {@context={'context', 0x3d, 'user_u'}}]}}) sigaltstack(0x0, 0x0) (async) sigaltstack(0x0, 0x0) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x24, 0x3, 0x0, 0x3, 0x0, 0x2, 0x3e, 0x0, 0x301, 0x38, 0x0, 0x2f, 0x0, 0x20, 0x1, 0x4}, [{0x3, 0x8, 0xf3, 0x81, 0x4, 0x4, 0xc, 0x400}]}, 0x58) (async) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x24, 0x3, 0x0, 0x3, 0x0, 0x2, 0x3e, 0x0, 0x301, 0x38, 0x0, 0x2f, 0x0, 0x20, 0x1, 0x4}, [{0x3, 0x8, 0xf3, 0x81, 0x4, 0x4, 0xc, 0x400}]}, 0x58) close(r0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 1m30.22527432s ago: executing program 35 (id=2255): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000000)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000001900), 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = dup(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_io_uring_setup(0x10d, &(0x7f00000001c0)={0x0, 0xfffffffe, 0x400, 0x0, 0xe9}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r7, 0x47f9, 0x0, 0x0, 0x0, 0x0) r10 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r10, &(0x7f00000019c0)=""/4107, 0x100b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r6, 0x0, 0x4}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r6, 0x0, 0x4}, 0x18) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r11, &(0x7f00000000c0)="3f030e03f007120006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xb318, 0x0, &(0x7f0000000540)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r13}, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r15}, 0x10) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f0000000080)='./file0/../file0\x00') (async) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f0000000080)='./file0/../file0\x00') 38.058092789s ago: executing program 36 (id=3723): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x50) timer_create(0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0}, 0x18) rt_sigqueueinfo(0x0, 0x4, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000005000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 27.529817141s ago: executing program 6 (id=3912): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b601000000000000bd110000000000008510000002000000850000007600ff0095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03bf3a48dfe3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f541cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc36b3d7c734a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9d74aa222038994dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b223ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bf050c719661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebebf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc02846ac5791278f18c6759e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb5d5505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6ddeb67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff8279421778d4a914512ca803da18db6fcf89715c2d338f78d8b9220171b41f528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef00000000000000000000373494cd59e8ba04ec8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03d0e119c963a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac038e9e17136e7c698f73faaabb3d00000000000080014573789425c4c32da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767cd755783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a4af7464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f952b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf41ba88c7eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac80574fa3ea312997ab81bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d4f237dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b8667b4dd0c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 27.51676742s ago: executing program 6 (id=3913): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000200), 0xfc, 0x56d, &(0x7f00000013c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200080000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000050000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 27.189747649s ago: executing program 6 (id=3918): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000002}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) 27.17909691s ago: executing program 6 (id=3919): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) bind$inet6(r2, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000002}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], {0x4e22, 0xe22, 0x8}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f00000001c0)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) listen(r4, 0x0) r5 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x10000000}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0x0, 0x5, 0x0, 0x0, 0x3, 0x89008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_config_ext, 0x0, 0x19fbcc0a, 0x0, 0x3, 0x1, 0x2}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380), 0x5cb402, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x4, '\x00', 0x0, r6, 0x4, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$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") open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r9, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"}) r10 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r10, 0x0, 0x0) sendmmsg(r7, &(0x7f0000000180), 0x4000190, 0x0) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$NL80211_CMD_NEW_KEY(r11, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)={0xa0, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "a68ae23e16973cc7998a9d6164"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8}]}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x41}, 0x0) 26.617906037s ago: executing program 37 (id=3653): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0xffffffff, 0x3a, '#-@:$##H*\\,^\xb7-/', 0x3a, '/', 0x3a, './file0', 0x3a, [0x4f, 0x46, 0x4f, 0x4f, 0x4f]}, 0x3c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000005aab7b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) shutdown(r3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mm_page_free\x00', r2}, 0x18) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 26.134793006s ago: executing program 6 (id=3927): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000007000000950c00000900000000020200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000100)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) creat(0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r5}, 0x10) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r4, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001000010700dfffffff0000000a00320008000a00", @ANYRES32, @ANYBLOB], 0x1c}}, 0x0) 25.705318984s ago: executing program 6 (id=3934): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 25.665322574s ago: executing program 38 (id=3934): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 21.584698789s ago: executing program 1 (id=3925): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) 21.411719258s ago: executing program 9 (id=4007): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000300800008807c00078008000600fd000000080005"], 0xc4}}, 0x20044414) 21.411405698s ago: executing program 1 (id=4008): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) utimensat(r1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x42000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000020000000000000000001c0018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 21.395107638s ago: executing program 9 (id=4009): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000002000000080000000b"], 0x50) getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000500)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600000000000000ffed000000", @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") 21.252214047s ago: executing program 1 (id=4010): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000300), &(0x7f0000000400)}, 0x20) setrlimit(0xa, &(0x7f0000000040)={0xfffffffffffffff7, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000000030000966d4c2b000000000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="000000000e00"/21, @ANYRES32, @ANYBLOB="000000000300"/28, @ANYRES32, @ANYBLOB="000000000300"/28]) openat$rfkill(0xffffffffffffff9c, 0x0, 0x602, 0x0) r2 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r2, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) writev(r5, &(0x7f0000000380), 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2}) sendto$inet(r2, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r2, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x34, 0xfffffffe}, 0x9c) socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r8, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0xfffc, @empty}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7472733d66642c7266646e5b065c896319d29ca958dcfde77401b15173e6b8af0300ffde00000000a36c40ac45dc50975f047100000000f8700000001500002755c151ef0f9c8eab97042dc03c4f01478aef56f67a158c23e91f0f2fd228f5bd2ddb394a8ae7", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) 20.841348606s ago: executing program 9 (id=4016): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003ffe800000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 20.585447265s ago: executing program 9 (id=4022): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14}}, 0x74}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r10}, 0x10) r11 = socket$phonet(0x23, 0x2, 0x1) close(r11) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 20.564004665s ago: executing program 0 (id=3936): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000006a00007910480000000000910445000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 20.509618375s ago: executing program 0 (id=4025): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x3}}, 0x120) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) write$UHID_DESTROY(r0, &(0x7f0000000300), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", "5d362ced", "bc3a20b10f4ad11e"}, 0x38) close(r1) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) readv(r0, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x170, 0x1, 0x2, 0x903, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xdf}, @CTA_EXPECT_TUPLE={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x99}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASTER={0xbc, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @rand_addr=0x64010100}}}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4008050}, 0x4804) 20.421756825s ago: executing program 9 (id=4026): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r0}, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x6, 0x6d, 0x2, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x7800, 0x65, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=r1, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', r2, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffffff5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a00)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0500"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001440)='U', 0xfdef}], 0x1}, 0x3) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe800000000000d200000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x184}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r11}, 0x10) r12 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f00000005c0), &(0x7f0000000600)=0x30) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r13, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000000500)=0x8) 20.349694964s ago: executing program 1 (id=4027): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000004c0)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480081302400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x0) 20.180575564s ago: executing program 9 (id=4028): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a00000000000000fc02000007000080ffffff000000000000000000000000000200010000000000000002000000000005000500000000000a"], 0x78}, 0x1, 0x7}, 0x0) 20.082837963s ago: executing program 39 (id=4028): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a00000000000000fc02000007000080ffffff000000000000000000000000000200010000000000000002000000000005000500000000000a"], 0x78}, 0x1, 0x7}, 0x0) 18.914892039s ago: executing program 0 (id=4044): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000001000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 18.848367209s ago: executing program 40 (id=4044): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000001000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 18.385572847s ago: executing program 1 (id=4053): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="050000000000000073113f0000000000851000000200009b6fd7aa5a4d00000000000500000095000000006731009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0x0, 0x200c8004, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffffffffffffffe4, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000340), 0x4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000002d2800c26b9f8bf6d5f2b50000000000000000000fac84c6b9a2f5347c0de6ffe1814c73a063465bec1e019cf10ddde9eef9456c93eba35270662aaebf12017d09f3db8956b67f5d3f1e9585294ecc46739ccafbf68c1c9f995196bad2c2ffc9cd67495051848ab48b6c771cac2c5f7e72ca624d5445e078cac21f128a79cda799c9092b4f2170a5"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000180)=0x11) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) 18.292120477s ago: executing program 41 (id=4053): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="050000000000000073113f0000000000851000000200009b6fd7aa5a4d00000000000500000095000000006731009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0x0, 0x200c8004, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffffffffffffffe4, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000340), 0x4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000002d2800c26b9f8bf6d5f2b50000000000000000000fac84c6b9a2f5347c0de6ffe1814c73a063465bec1e019cf10ddde9eef9456c93eba35270662aaebf12017d09f3db8956b67f5d3f1e9585294ecc46739ccafbf68c1c9f995196bad2c2ffc9cd67495051848ab48b6c771cac2c5f7e72ca624d5445e078cac21f128a79cda799c9092b4f2170a5"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000180)=0x11) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) 14.781664604s ago: executing program 3 (id=4086): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2093}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x20000000) perf_event_open(&(0x7f0000000940)={0x3, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x457a4f59ceee3eb8}, 0x1206c, 0x80, 0x7, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) move_pages(r1, 0x2000000000000082, &(0x7f0000000000)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000140)=[0xfff], 0xfffffffffffffffe, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000040)='[-\x00') 14.781160474s ago: executing program 3 (id=4087): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 14.771676914s ago: executing program 3 (id=4088): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000000010003704000000000000000000000100", @ANYRES32=r3, @ANYBLOB="8b040400000000002000128008000100736974001400028008000100", @ANYBLOB='\b\x00'], 0x40}}, 0x0) 14.534152153s ago: executing program 3 (id=4089): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000004c0)={[{@grpquota}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@errors_continue}, {@lazytime}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@noload}, {@data_err_abort}]}, 0x1, 0x5e1, &(0x7f0000000a40)="$eJzs3c9vFdUeAPDv3P6gpbzXQl6e4kKaGAOJ0tIChhgXsDWkwR9x48ZKCyIFGlqjRRNKghsT48YYE1cuxP9CiWxZ6cqFG1eGhKhhaeI1c+9M6W3ntvTSdpD5fJJLZ865wznT22/PmdNzZgKorOH0n1rE3oiYTSIGk8WlvO7IMoeb77v350en01cS9fprvyeRZGn5+5Ps60B2cF9E/PhDEnu6Vpc7t3Dl/OTMzPTlbH90/sLs6NzClYPnLkyenT47fXH8hfFjR48cPTZ2qKPzulqQdvL6u+8PfjLx5jdf/ZWMffvLRBLH4+XsjcvPY7MMx3Dje5Kszho4ttmFlaQr+zlZ/hEn3SVWiA3JP7+eiHgiBqMr7n94g/HxK6VWDthS9SSiDlRUIv6hovJ+QH5tv/I6uFZKrwTYDndPNAcAVsd/d3NsMPoaYwM77yWxfFgniYjORuZa7YqI27cmrp+5NXE9tmgcDii2eC0iniyK/6QR/0PRF0ON+K+1xH/aLziVfU3TX+2w/JVDxeIftk8z/vvWjP9oE/9vLYv/tzssf/j+5jv9LfHf3+kpAQAAAAAAQGXdPBERzxf9/b+2NP8nCub/DETE8U0of3jF/uq//9fubEIxQIG7JyJeKpz/W8tn/w51ZVv/acwH6EnOnJuZPhQR/42IA9GzI90fW6OMg5/u+bJd3nA2/y9/peXfzuYCZvW4072j9ZipyfnJhz1vIOLutYinCuf/Jkvtf1LQ/qe/D2YfsIw9z9441S5v/fgHtkr964j9he3//btWJGvfn2O00R8YzXsFqz394WfftSu/0/h3iwl4eGn7v3Pt+B9Klt+vZ27jZRxe6K63y+u0/9+bvN645UxvlvbB5Pz85bGI3uRkV5rakj6+8TrD4yiPhzxe0vg/8Mza439F/f/+iFhc8X8nf7SuKc79/++BX9vVR/8fypPG/9SG2v+Nb4zfGPq+XfkP1v4fabT1B7IU43/Q9EUepr2t6QXh2F2Utd31BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDHQS0idkVSG1nartVGRiIGIuJ/sbM2c2lu/rkzl967OJXmNZ7/X8uf9DvY3E/y5/8PLdsfX7F/OCJ2R8TnXf2N/ZHTl2amyj55AAAAAAAAAAAAAAAAAAAAeEQMtFn/n/qtq+zaAVuuu+wKAKUpiP+fyqgHsP20/1Bd4h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/gHAAAAAIDHyu59N39OImLxxf7GK9Wb5fWUWjNgq9XKrgBQGrf4gepqTv3pLbsaQAlc4wPJOvl9bQ9a78i1zJ5+iIMBAAAAAAAAAAAAoHL277X+H6rK+n+oLuv/obryR3/sK7kewPZzjQ/EOiv5C9f/r3sUAAAAAAAAAAAAALCZ5haunJ+cmZm+bOONR6Ma27lRr9evpj8Fj0p9/uUb+VT4Nu/pK/n7nK/1e7CjyvudBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtPonAAD//6euJAc=") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x9d}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x3020088, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x7e}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x0, 0x42f, &(0x7f0000000940)="$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") (async) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x3020088, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x7e}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x0, 0x42f, &(0x7f0000000940)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000900)={[{@dioread_lock}, {@noblock_validity}, {@data_err_abort}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@inlinecrypt}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x4000, 0x0) symlink(0x0, &(0x7f00000000c0)='./file0\x00') (async) symlink(0x0, &(0x7f00000000c0)='./file0\x00') mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000240)='./file0/file0\x00', 0xb) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000080)={0xf4b, 0x1, 0x9, 0x7, 0xb, 0xd}) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x8e) mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000100)='./file0\x00', 0x2) lchown(&(0x7f0000000340)='./file0\x00', 0x0, 0xee00) (async) lchown(&(0x7f0000000340)='./file0\x00', 0x0, 0xee00) 14.298826922s ago: executing program 3 (id=4092): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee00) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000fff050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) 14.034106101s ago: executing program 3 (id=4095): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x50) timer_create(0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0}, 0x18) rt_sigqueueinfo(0x0, 0x4, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000011000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 13.928021601s ago: executing program 42 (id=4095): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x50) timer_create(0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0}, 0x18) rt_sigqueueinfo(0x0, 0x4, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000011000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 2.037686257s ago: executing program 4 (id=4302): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000b80)=ANY=[@ANYBLOB="7f454c4600000004010000000000000002003e000000000003000000000000004000000000000000980100000000000000000000000038000100000002000000030000000200000002000000000000000000000000000000070000000000000004"], 0x1fc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='net_dev_start_xmit\x00', r3}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000080)='X\x00\x00', 0x3}], 0x1) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) r8 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000140)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000300)='hhf\x00', r8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1.961795277s ago: executing program 4 (id=4305): r0 = open(&(0x7f0000000000)='./bus\x00', 0x143942, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x5, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) setitimer(0x2, 0x0, 0x0) preadv2(r0, &(0x7f0000000300)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000000200)=""/103, 0x67}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000040)=""/64, 0x40}, {&(0x7f0000000280)=""/91, 0x5b}], 0x5, 0x0, 0xffffffff, 0x0) syz_usbip_server_init(0x3) 1.709170596s ago: executing program 2 (id=4309): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x0) mknod$loop(0x0, 0x100000000000600d, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000024c0)={{r2}, &(0x7f0000000300), &(0x7f0000002480)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000002d78"], 0x48}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r5, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 1.639132476s ago: executing program 2 (id=4312): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) socketpair(0x1a, 0x4, 0x0, &(0x7f0000000080)) 1.277055805s ago: executing program 2 (id=4318): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) request_key(0x0, 0x0, &(0x7f0000000140)='stat\x00', 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = epoll_create1(0x80000) epoll_pwait2(r3, 0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x3938700}, &(0x7f0000000b00)={[0x2]}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000c40)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000c80)={0x1d, r6, 0x0, {0x1, 0x1e0, 0x3}}, 0x18) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1000001, 0x13, r4, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}, {}, {}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1800}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1a) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}}, 0x0) r11 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, &(0x7f00000007c0), &(0x7f00000003c0)='GPL\x00', 0x5, 0xa1, &(0x7f00000004c0)=""/161, 0x41100, 0x51, '\x00', r9, 0x25, r11, 0x8, &(0x7f0000000900)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x10, 0x5739, @void, @value}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 1.276802314s ago: executing program 5 (id=4319): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000100001000000000000ffffffffffffff", @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) 1.276192344s ago: executing program 4 (id=4320): r0 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000003150ddecc508bb0d3d709e83e6", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r3, 0x0, 0x7}, 0x18) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000000200)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000900)={0x6, &(0x7f00000006c0)=[{0x98b, 0x2, 0x9, 0x20000000}, {0x6, 0x0, 0x3, 0x5}, {0xae0d, 0x6, 0xf9, 0x8}, {0x7fff, 0x3, 0x7, 0xfffffffc}, {0x7, 0x3, 0x40, 0x7}, {0x4, 0xc0, 0x80, 0x1}]}) socket(0x2b, 0x1, 0x1) bind$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x1, './file1/file0\x00'}, 0x6e) ftruncate(0xffffffffffffffff, 0x1f) creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES16=0x0], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe08, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="7472613d10122f483548e7fa97c837e631b450bcc1bcdeb64bd9fe0aceba801cb444863ede8f11d9e369b145ecf152f58161c42f8c0b1d3f62d1103ddee43719f6c60d35e62b7bfed4c3892d029a5f73632facab999c6521e25c0cabc955225bb87b68d64c036bf6ef1a8b36a883f7e6d1b7054a9694c1112338ef7559a3a3472ac15e24cbe3057b108df8696f21dcb96f21a01d4e81d4a57188b08d547b1df4172d31c495794fb14522df1edd1e296377690735c6e81883c0ed8f22157bed249479332f62d670aa54614abd10b3a8917c18c4a7ce6b537c4f7536b8b2", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',\x00']) timer_create(0x9, 0x0, &(0x7f0000000400)=0x0) timer_delete(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="3a9386a9bd8f6fa024af2e7715809facfd98af5d07b4df916d46c279ea3f4f394b708850bab812b7e30d0f0ced75e4040bfc8969657024bd0999e0e0c30a816a2ba2f93fe18940d94148cad4d2f204b69ae27b6548e67cfd45419ef14b65e6c412c9b436f2ce086a2cf0e4f479d18711d9cded8c1127309fd5dad405c0f1b7110458758660ceef89d3109260b90480571554a83a55233ec5a8fcda8e09b306a486b3eb2f7c81ad77aed4fe4302937e7ae75d28d0fa502ccc72874b093c13a48a6e8e9b0ec47a1bb1ba56d1a8cdea97d6801f9e1d05c55e68890ee2aae821c3abca3d76d1e18081b1b6404e021e18433254acfbd56b19084b3a25831f418f7aee328f6a95c604672353e0dd640310760096989a2e4ee5f5ef7aec2d00345601b18b16634e81635e3c583c83ca5b8403702b4a5bf8a2e68eeee3a9d40669578ef38e3c3ca37aa6e8727238fc5000dba94df90d79a3b80e18954ce04396e1bbc97929c06d619011b1ef360d1e65ffdb5ac3a64e2600"/386], 0x10}}, 0x0) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1/file0\x00', 0x42, 0x108) faccessat(r0, 0x0, 0x5) perf_event_open(&(0x7f0000000140)={0x2, 0x60, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x2}, 0x100000, 0x5dd8, 0x4, 0x0, 0x0, 0x8, 0xffdc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=ANY=[@ANYRESOCT=r10, @ANYRES64=r9, @ANYRES32, @ANYRESOCT=r7, @ANYBLOB="46037eb7b484d2e2160750bc6b18adcb66ab3bfdbb11851d71be320129ea9ebca57e8aa486be82281d010feb332d0f74c5e3aaac1f8acad209fbc53d728f637c244b8135676dcf8578a417a73e8a275a4e83140a4c464d13af98a2b5f0df367f6d7657db382eb16bff9bc7d1cd156e4759318728fd72624147237f44e3b511e5e48064e83ecd01087b58dc0e90eafc4bde92d2003a9fa11da6bd99b100eb0c128b481774498e02f01ce024fa1a74"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) 1.234756884s ago: executing program 8 (id=4322): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18) r1 = syz_io_uring_setup(0x110, &(0x7f0000000680)={0x0, 0x83f4, 0x800, 0x1, 0xfffffffd}, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="54010000100013070000000000000000fe880000000000000000000000000001ac1414bb000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400210000000000000048000200656362286369706865725f6e756c6c29"], 0x154}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.190478104s ago: executing program 5 (id=4323): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 1.141230864s ago: executing program 2 (id=4324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000000fe2010000000000000000000000000a2c000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0x54}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) close_range(r1, r1, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000580)={0x4, &(0x7f0000000540)=[{0x8000, 0xa, 0x2, 0x8001}, {0x5, 0x8, 0x41, 0x2}, {0x9, 0xfc, 0x0, 0x1}, {0x2, 0x10, 0x4, 0x3}]}) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x15, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0xc, &(0x7f00000001c0)=""/12, 0x41000, 0x32, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f00000003c0)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000400)=[{0x0, 0x4, 0xa, 0x7}, {0x3, 0x4, 0x5, 0xb}, {0x4, 0x3, 0x2, 0x4}, {0x3, 0x3, 0xf, 0xb}, {0x4, 0x1, 0x10, 0x2}, {0x0, 0x3, 0x8, 0xa}], 0x10, 0x54000, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) creat(&(0x7f0000000040)='./bus\x00', 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x39) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x10, 0x6, 0x618, 0x1c0, 0x1c0, 0x5b0, 0x5b0, 0x1c0, 0x680, 0x680, 0x680, 0x680, 0x680, 0x6, 0x0, {[{{@ipv6={@dev, @loopback, [], [], 'vcan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x160, 0x1c0, 0x0, {0x7a00000000000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], [], 0xca36231a82f0fdc7}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@loopback}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x678) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCGKEY(r8, 0x80404518, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000005c0), 0x141842, 0x0) 1.132776234s ago: executing program 8 (id=4326): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000140)={[{}, {@overriderock, 0x0}, {@unhide}, {@uid}, {@map_normal}, {@check_strict, 0x41}, {@block={'block', 0x3d, 0x800}}], [{@fsmagic={'fsmagic', 0x3d, 0x1}}, {@subj_type={'subj_type', 0x3d, 'mask'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'unhide'}}]}, 0x0, 0x63b, &(0x7f0000000700)="$eJzs3U1v28gdx/EfZdlWvEBQtEUQBNlkNukCDpoqkrxxYKSHshRls5VEgaQLGyiwSDf2IoicbZMUaHxZ+NIHYPsGettLD30RBXruu+ixwKK9FehFBYeSJVuPThR7t/l+BIcj8k/OfzgOB7REUgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQI5XLZXKjupBc3vHjOdVo7AxYXm2tUXdyQp3ptYrOemPCgVdzWZd/W5/8ZX0n1u6nr27rkI6KejwvSvfevidfK63/oSEXofOusEXrw6fPmq3957POZGvAeVmCNr0m0EcBg130zdBHJqN9fXSva1abGpB3Y9348RvGC/yc0kYmVXvjilvbKwZv7gbbjc3q27dN6uyMx/8oFIqrZufLKf9ahVjbyuo14Pmpl0xXZzGPDBf/DwL8N2GMftP2ntr05JMg8qzBFWmBVVKlUq5XKmU1+9v3H9QKuWHZpRO0VDE3H9p8Q0zv4M38IZy6fj/D0eqq6CmtrUjM/LlqapIoRpjlnf1xv8P7/kT6x0c/3uj/NX+4muy4/+N7N2NceP/mFyMjF1h1BJnzPzXe73QKx3qqR6prbb29Hw+2705vwzf7mtTykuBYoUK1JCrTfky3TlGG1rXukr6WFuqKZZRTYHq8hVrV7ES+WrYPonky1WiUJGMVuXpjozK2tCG1mTkq6hdhdpWU5uqytV/Op3Ovp7Y/b42IUf1gsqzBFUmBI0b/3/xefZ7yvj/rusdv2aJAS5cp3v+f0Y33042AAAAAADgbXDsX98d+9n9+5I6qgV1v3TRaQEAAAAAgDmyn/xfTyeLael9OWPO/zvnnxsAAAAAAJgPx15j50hasV/qd/pXQs3yJYCFc0gRAAAAAAC8Ifv5/40lqbMse12/c6bzfwAAAAAA8A3w+4F77Od799jt9D7Wz0mKW8vOX/+1rGjROWrtfM85cNMl7kE3ZugbAEntmnO5e6NeO1mSZN95/nWn/2AAx/4Usjdf7U+7178TnUpgaaH354tpCaznu+/0hT7IYj7o1vv4MCe7JKtlpRbU/aIX1h+W5bqXc4m/k/z62ZPfSNFxO/eftPeKn3zWfmxzOUpnHR2keXx+Ip3ctFxe2vst2GsuRrX4kmq9Kv/QbKw4tt5Sr/0Lcg9ygxXN1v7f6lYWc2slm64c9nrAtr+Qtr9ctF3Wb729O4TTz6J8uuWjOmJMFgWbxe0s5vbq7WxyuHxloBcK31+QKsXhPogGs6gMZjF9Xzj/HtoXt7NV+lm8dyKLdF+spVn8Ld3QmCzWzpbFUI8AwEXZ749C9ibmw/fYPz3uvs5Rbvro/qOTtbz8Uye74HBBync/m5hYS0HpEX01i1mSPbDmr404ope640pBY47opTcY3dK6/tJ/BlI37aEs/tvpdB6Wbb1/PDWqfpmu8OXYeuN6ZSHdhfdeHvzS3gA/9enep3vPKpW19dJHpdL9ihZtM7oTxh4AwAjTn7EzNcL56Pis+vE/P8xKJ0a8bx9/paCoT/SZ2nqsu71HCNwcvdWVga8h3B0+a01jL0mnY8u6O3xu2c3FjqUDsZXj2EX1Vjk5Uvdj195yLwAAcL5uTRmHZxn/7/bOu1evjTzvPjmWn35C8LjY8qlMC+ewNwAAeDf40VfOSvI7J4qC1sfljY2ym2z5Jgq9n5ooqG76JmgmfuRtuc1N37SiMAm9sG5akZaDqh+beLvVCqPE1MLItMI42LFPfjfdR7/HfsNtJoEXt+q+G/vGC5uJ6yWmGsSeaW3/uB7EW35kV45bvhfUAs9NgrBp4nA78vyiMbHvDwQGVb+ZBLUgLTZNKwoabrRrfhbWtxu+qfqxFwWtJMw22KsraNbCqGE3W1TnzA86BADg/9GLV4dPH7Xbe88nFI40PaZbWBq1wYtuIwAAOIlRGgAAAAAAAAAAAAAAAAAAAACAr79Zrv87U2Fx1MWC0vGcX12eaTuO5p3YWQq511/97xNiLh3P6e3+wZijC2ipskJ+/lu+JM1+2egcCj/cz/bo2Jh04chFy8d9kZ//f4e08OzPYxZ1Op3O5NWXT+7DpUkNPFnIS3q+9AZdcDHHIwDn538BAAD//zFGQ0I=") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%pB \x00'}, 0x20) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) 1.095242314s ago: executing program 5 (id=4327): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="38010000100013070000000000000000ffffffff00000000000000000000000000000000000000000000610000000000000000000000fffc0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000040032000000ac1414bb000000000000000000bb1414ac000000000000000000000000000000000000000000000000000000000000000300000000000000010000000000000000000000000000000000000000000000000001000000000000000000000000000f04000000000000000000800000000000000000000000000000000000000000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0xe}, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x65, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x140020, 0x0, 0x1, 0x0, &(0x7f0000000080)) io_uring_setup(0x4896, &(0x7f0000000340)={0x0, 0xfcd3, 0x3}) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r3, 0x20000005) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 1.043670624s ago: executing program 8 (id=4328): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000100)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000010000107e0ffffffffffffff0a00000008000a00", @ANYRES32, @ANYBLOB], 0x1c}}, 0x0) 993.916333ms ago: executing program 8 (id=4329): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000100)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0xb, &(0x7f0000000040)=ANY=[], 0x0) ioctl$BTRFS_IOC_ADD_DEV(r4, 0xc0085504, &(0x7f00000000c0)={{r4}, "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"}) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) 993.048954ms ago: executing program 2 (id=4330): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$kcm(r1, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) (async) sendmsg$kcm(r1, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r1) shutdown(0xffffffffffffffff, 0x1) (async) shutdown(0xffffffffffffffff, 0x1) socket$inet6(0xa, 0x806, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r5}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r5}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="000000000000000000000000007b8af8ff00000000bfa2000000000000ffb703000000000000b70400000000000085000000c300000095f39349b21024cfb33e3dca6c55187e475e77d7a75ba456020bff976206fd26ddc8d77e64a88af764c81c4d49a40952fd825d2de1c6a982f92118b358c031feda744591ef0b1b73bd0cb57b077470307d4176cc43603f5f91160016704866c41e0413b98b1866c0363e27fde9ebec4b20c62f5c051bce0904e4b2be92000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) sendto$inet6(r0, &(0x7f0000000000)="eb", 0x1, 0x3f1, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x3, &(0x7f0000000280)=0xc5e3, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x3, &(0x7f0000000280)=0xc5e3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) 992.446244ms ago: executing program 4 (id=4331): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="40000000100037040000000000ffffffe4000000", @ANYRES32=r2, @ANYBLOB="8b040400000000002000128008000100736974001400028008000100", @ANYRES32=r2, @ANYBLOB="08000300e0"], 0x40}}, 0x0) 972.365693ms ago: executing program 5 (id=4333): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="0000000000000003f400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000b252c39700000000"], 0x48) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 915.007173ms ago: executing program 5 (id=4334): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0) socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES16=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) readlink(0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x50) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x125d, &(0x7f0000001080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x1f, 0x1, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1c, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='ext4_da_release_space\x00', r7, 0x0, 0xfcd}, 0x18) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000005040)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)='7', 0x1}], 0x1}}, {{&(0x7f0000000b00)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000b80)="2fa3fb171c32e3c7e30844ef056af2078c3d1a4dcdf0be9297c28e8fb07535e68c2457371a009c43267822e0de1f2f2219500b7e78cb10ec3b2f4bcc44f81111c3f090e13d86c4a1bce5e758b3628833737139889548439019bee273c106b06d0e65e301a231d30e5e44167756d3d51a1a86986477bad1fb0e5df61ba2f596825ccb3ad462ff4952d1ec33278e6750422fb4720b4b8476d818cb2b7a24e70051c2a7691ff46c570b47fe8198e2c19a599da923903885007fdd1530cb190034f70138b694947ce6739b4f62", 0xcb}, {&(0x7f0000000c80)="2767ed6fa5", 0x5}, {&(0x7f0000000cc0)="ae8df36088e4a25b95f71f602a4fa2d70252e229daee09f4fc376b19df400cf4b1db83c193a8cfd86051f4a5bf013e930b0a87355bcd7dbe1460a8e55472974b6af3fa5d030a453401f65347987c379640309b8139dc378ee488255a06d316bcf31fc4c9d7161540203427f184c85e47d4bbf9df6cd11b8753554c37f8a7be", 0x7f}, {&(0x7f0000000d40)="fa910331903849b1864d7e7a7c60a9021a1757c5d90f0bd4a57d414f026936c4ca2b69abb8fd176657b5240ca089f7c0e17025cbaf76b9dfd769e0f6b81d0d2d9729b7a5211fc720ee0418dcf81057955e909c8292d1fa33e6445fb5bbd31665e92eae9fcc1a8825c6e70915b3b706013dbc05519411bd9c6a441ba2d6f19302611d0f0e3ed1c61e77a2482e986e895f0625e236773d8a951a9c8ccc6ea3b527f3", 0xa1}, {&(0x7f0000000e00)="ca6d8f240fd987aec74980c4bf2a6f546d7850096013e1096571ab2aa6e5e98392bd90972e0f595145e5e43d08cc188243a0166a7d81ee0d46477e67f269abe05aa8630934f21565175a5d91c55809b28e6a76908070b1faf9801a6c658a2b1752c85283f8484e15daa1da57a93f80089c823fd6efa09a4c6a3af240c4a8a6073a0ff597f8fcb55c509fac5c3ced0b47cae82030b763349dd7b17632f02d3c6ac4c1887dcf674b1d7d7cbec9127e816b08a9533b91288cad243ca1715440035e88433e0998ca4501e78ee274aaffa50473a235a3ab5e4c80d084b2145f33d7a8472a941967a4187ea21f4465ef95449d768f13f5", 0xf4}, {&(0x7f0000000f00)="93b20e47a22a31a0071d778e4d3c83bc8039c6affc2675fb54b665c72dcd336ac033c8c95ed9eff58855a170514217a875854ce4477a08267989b9257e06d4b0c1d0f473d89d90b1bbded99735cba8d191e4489a6091cc57b5d457e0ce221332215ac936e0535800d88befbc6a354071f08d048aa1a1c058a8d56628fa694cbbe5604495d4b4ad49c53d9d79921e871cd2e2ab6b8ec1fe85de951f971bf2fed0cb1844be712614032187ea1c48", 0xad}], 0x6, &(0x7f00000010c0)=[{0x108, 0x10a, 0x9, "1716d4b4c70f0931f11eb95b15af12a3525bda8910a2080ece3fbb88ab05dc6d9317e386da1a486b1d52aca013aa5e028a088c59d06bec0ac745948584ff861f01096c83489ad09caf4cdb8ea63a66bd3db002f9ebc5a5a40aa4a532c6b333d818ab75929b3977544f2b982ad515c76e3f8a8d14d6481d7839c9061adf418a9a123eda965eba7e67194f45648917654a4fd89c204e03482f595379fe80c628f8696eb1d257743f3599708ec403c12123647bf0a8aac1fa6bdb8ef50ac3ad6e51dbf91d7e1749d761392f31868b44ea6666fe570ac29e00cb44829da1cd308d665408f6130c95631a61135df76ddee087f8"}], 0x108}}, {{&(0x7f0000001200)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @remote}, 0x1, 0x1, 0x1, 0x3}}, 0x80, &(0x7f0000002580)=[{&(0x7f0000001280)="2fb340eb632b10e03b366be8187a8f9aab5a754623bac0ef8d6d439e81fa36c1c2eec347a77ed8d4ce66184d5b795f5a101142101179422a8599eae2457cf8e635253c7717214340d79d200536c4d598d0d98869a4e236ec615718a22b4e2839f28888b4", 0x64}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="7427d893962a612d8dface5c8d82b1ce30d159b4c53e38b0ed8db7ec7cd123b681001c2ee410d0ce1b0740b9667359fca0eee67a710fa4f06b88bdb6eec143d92b081871e05cab40d5cfbd8bdf5cbe634d04cb51a57c8eac06ec6f9b08ee76705d22859a8d6120ab361c4599c9aadfa237e12da7a3b0f126cc40875689ff", 0x7e}, {&(0x7f0000002380)="6c0503166ed33dc12827c24fc107a53bc44d59baca25ead1ca7c816f4393b32257e3cb4c7b8e6fadcb6795a4a180c65cbb836600ed64bfb4936567a4f4072a35c764676747a979f15d2b19efd58784da9bb30bdc2431e4c67e233f02a40631c742f669bd34ad43cb41891de2cd558ac3788795c246c0b00d", 0x78}, {&(0x7f0000002400)="72ab98de648d9e0f0df755f86a2875fd2994f9bf4fb6ecdf0221ae368688a52e447bad8b2cd12fb56018743769b4c1eb630bb9407f273e52cec201f59e107d96a5239f", 0x43}, {&(0x7f0000002480)="dde9ae4edd53c2371581d5e5ee85a8d1f5e543b3cff8c3a17cbb7630247af2ecf39f32451a67baf0c70fb30cd19629280d935627213459384e3008716933bac5ff9031ae72c92018ba2b2014eb9a7dc9054c4bf8e7f76f728f1b85dc3a3c33c1a00a0d73b6384d12844b583de6bec41fd098446570293849b3d0ae3df4e41fec185cb378c6f4a67aa0922f240685bb3ffedf305dcc30db8fbf9f240cf3ac57f5498858dec25a6bad06a6e0c2c07589c99fb5d479dd05b44ec322a004928dc885710b3ddeb6a96a8bb84c1a5a3d506f105b9dca70ce6275a6a52c0bbd64c6e100d2a2691db338f1c94f83b174c8f6993d3a6eaeb856", 0xf5}], 0x6, &(0x7f0000004b80)=[{0xc8, 0x19, 0x5, "76b83e3d419e208968f56a1cf2e1cac76a6462ac80648b10a5e15cf292fe093e27ff544b4ba0b8dd6af608f472dd44e1d6c352974656f1a326f63c3b99f1b4a3616e0a21a040709fd59edd51decfa8ec64ed17a3953ae6a9f638bcc72cfe6f7743408740fe1246869b20bc24bcad8d39cfae44e049ba5efa6411a7467de37c7a8ee02cc54d94bc0ca49e93342ed129913e9b7ef1c142144d049a8d5903520f612bb12e71a44e03527ec89325e72f76e97376e2cd6c"}, {0x78, 0x109, 0x3, "c321caee494cec71f8a19d6b3ccff35c4121857317d377c3e573eac0c0a0c0940293423e62940caec79a0179b615095127b7a6903990a6f8a25bfc2142c33f7e8b83fb9ac50a5d7887ba0091e919295e314d551ccbdc50ac17df61609392f00a5ec12ab3189860"}, {0x98, 0x10b, 0x1, "ecb32c267a0101d151a25fbdb65e414f9b16427ad59925b4a51c944cb93097d8439dcf00ff8aeebf7d2961156760a48edbe995e9987b7e9978effc5e43e8749f9cbd3273349e458ca103daadeccc609a0b65d76ceddd11851b996ae095aeebeee4c19af1c4ddc56a7e6dbfabef59f23e7dd91847f70d8e0c34fc0a00e81ed7ec9b67e4ef12"}, {0xe0, 0x10c, 0x81, "323a019d05d951a18c21d484ec93a5b805eadb61a89feabe9644e6dd62238147a640b216b2a820b2a3c5507f40e4a0f53f9933ab1d648c89f56d27bdbbe914e72d2f5ad8457a717f61b07005e5e0821e11c42036159a563e636a1da16643b86e9dc42d277a1b1de641d60738bffcc8c2880bb3ea3bc98561f7ce31351b71b64ee24d6960e9afb92752dc8159748cb226e79a09301692753827457a383fe50d9181db109f1f1357b5e84654f631270ef23e96164d248b247ad5e28e5c4d279b9ef0097e14ed7cb082aaf84d8b31ae375d"}, {0xe8, 0x3a, 0x2, "04d14a524c5cefe23b32357d9b095cbf9d7a9746572b957dae82ddb68545f1c337fe57961a2c23a8e3025835f797c6dbd253376c5761141384bcfcff3e6348d39fb801672185e4cb37701eb5438952ca72b707f3611cc59802f42b00acbb40fcc8a28fa20f5124b13e82af6fe3551d1b545633a55d8ac9fb9cefc476dd5b0a32cc556da9014d0c5a100ca80e3cf4a9a03a10fea7643ee1b598a5eb608e07a70177c7ccc28f0a01eaa0c099036486dbaee33a8643295cde1cdd0f588b0bb54894a0c0d70010aec1ada467a99d4c75c9105ea4977032"}], 0x3a0}}, {{&(0x7f0000002600)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @empty}, 0x2, 0x2, 0x1, 0x4}}, 0x80, &(0x7f0000002680)=[{&(0x7f0000001040)="a48f34692295ea2cefe2c521f5fac46b", 0x10}], 0x1, &(0x7f00000026c0)=[{0x88, 0x119, 0xadc8, "2f744150062072f732d85f97dc8248e4d7fb7174c89fb4d177bd39810161cd811ad8ce28684da3ef4ce220d59014358933b149feb9ccaa45703b350d8f10833835a8c540e5e7797c3e763614c3edde2679996bc3c587dde7758fc5cb99a1c81617697cdfb6b8e812610738e8bcb9ab93cdd238907e9c33"}, {0x28, 0x102, 0x9, "32cdf781b7ab6db7cea43596bd25268c59f3"}, {0x108, 0x115, 0x0, "238aca0b6d65b99a86a15a1e2173e1e3ba02ffdcb0e0e6b2c4e74fdfcf27dc75327c681e348f1db49941c853714459426b403a3342cf13ef96c15621f69c33786d2fcee5202f63c123387fa731e8a909e8495dcb4d9a8bddcf1977b417c53c8f01d978abe30bbf6758252e1760d7d6cc3ab524f20457d0ad54470e9523e1ddabc9fef96681f3bffff94eec2fd6b95744e0e105fd72add2fab3a0f04c3bc55b08c592d0939071e7795112017105b8e38f6dc7087d276cfd3f3d7e94a8611f19171c23d6bd3f753e16fdf435488aa2498795a10779603c1c97b720099845d26f58db6eef1c1f9daa488590949cb4a38088f64cfac752"}], 0x1b8}}, {{&(0x7f0000002880)=@ethernet={0x6, @broadcast}, 0x80, &(0x7f0000005000)=[{&(0x7f0000004f40)="7caa7448589f4482", 0x8}, {&(0x7f0000004f80)="2928b9996725159f310e072fa2a82b7c84ed8cc83ef385511bf7b06c4b8dc085c08160920b70c53606e5805bd0d2545be419db6ea4c10ef1b24e76daebb300137a43d0f83b842eb4d0249823482e68de8d10", 0x52}], 0x2}}], 0x5, 0x2c000011) close(r8) write$tun(r6, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x2247) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x45c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0}) kcmp(r5, r9, 0x6, r0, r8) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) 837.244263ms ago: executing program 4 (id=4336): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x185100, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x22}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) link(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r7}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r9}, 0x57) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x140, 0x1, 0x3, 0x5, 0x0, 0x8, 0x5d, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r10, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x66, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 833.516523ms ago: executing program 7 (id=4338): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x40}, {0x0, 0x0, 0x0, 0x40000000}, {0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {0x80000000, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xcc1}, {}, {}, {}, {}, {0x400}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 810.198222ms ago: executing program 7 (id=4339): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000100)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000010000107e0ffffffffffffff0a00000008000a00", @ANYRES32, @ANYBLOB], 0x1c}}, 0x0) 741.381302ms ago: executing program 7 (id=4340): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r5}, 0x3d) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r6}, 0x3d) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) eventfd(0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid}]}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) unshare(0x22020400) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r11 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r11, 0xc0481273, &(0x7f0000000180)={'\x00', 0x5, 0x4d13, 0x80000000, 0x8, 0x8000000000000000}) 487.160681ms ago: executing program 8 (id=4341): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) finit_module(0xffffffffffffffff, 0x0, 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_getparam(r2, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = epoll_create1(0x0) fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB="1100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="f3cda9414e01d1e9aeab5199e78774934eb108e30f25152f7cb5061f4b100136c5c0fadcda033013d521f2720de6d7120e7bda5c1d4d2a1436df61ff1f23fcf0dd8b191d73487232", @ANYRES64=0x0], 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8995, &(0x7f0000000900)={'batadv_slave_1\x00', @random='\x00\x00\x00 \x00'}) r7 = socket(0x400000000010, 0x3, 0x0) fchdir(r1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x1200040, &(0x7f0000000140)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c757466383d312c696f636861727365743d63703433372c73686f72746e616d653d77696e39352c756e695f786c6174653d312c757466383d302c757466383d302c6e66732c0034003fc9cd02a9"], 0x3, 0x377, &(0x7f00000002c0)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x19) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000000300)={0x0, 0x2, "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"}) dup2(r7, r8) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0), 0x4800, 0x0) 457.969511ms ago: executing program 7 (id=4342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'wg2\x00', 0x1000}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4(r3, &(0x7f0000000280)=@can, &(0x7f0000000300)=0x80, 0x800) sendmsg$tipc(r4, &(0x7f0000000940)={&(0x7f0000000340)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x4}}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000004c0)="aec262e0d30f4910955ab4a5a5d49297f9e2470c2234dcc00c720f41dabb9d7e73295f848440370078eb35f1061f58a0347df4bdfe503e8360484e41ab035a3bcd29343c2d74c1da0b84cd81057c5d832c9cd1aa272750b748b7440fc3bfc0df2e6bbb850207a494011e5521f242122af5bb58431f565d509a48525bea2842531a213a69323a606538fbb9b93723fb0bece06c2e9bfd80814010eb761a50a6592af04b8f23b1f04b2f17d9a37561cce5df21", 0xb2}, {&(0x7f0000000600)="dfb75dea67eafc9e29e5a3c283c1f22291886a78df742c6545bc7ef3e28f11cfbce42121f560453e6fe885efdfdaa470373eb60238451cb9dd3d194e62ef99a073071a62cd41712f7e8865eb45c25e1e3b988f992d4215ee1be06b6d466c032fe12d61faa27f16223258bd3265c425f3b90b014a61e522b025698a34", 0x7c}, {&(0x7f0000000580)="b631550ef9368948fbffd4654089ad47d9a9f09d00b4960a66cb9eff1a8b4d1949887cb8b8f8b3932d8985a3", 0x2c}, {&(0x7f0000000680)="7f210ffe8b6f07b2386d632c284d6e042e999235f7bb5298a0177bf0a153b85ceabe8517f625586fca951c3ac0f3795832acc661c5ec94d4349e870004f4dfd0ba52e0aa6b366d70b45a15ecb5d5de214ebf93abb16cc9b0211aea24eb5cb12a864c820888ffed484168c552eff37be7ae87ee0ea0a3e94f5b8f4038f1335f13e1e0378a1f87f284c8dc47ea473761c0f8a0cf18cdf35f9743fc62dd043e03b9d5d7d903f60417e969cf49d59e34e2b3338c9137de698159d5bf309081f08ce93e1317872d2d1f57a2b3bd5e6a1c5b049266b9102710a83c19e5dc49ad57244d31478f336e5dff84bf37c9434f4c2e958b0741254393", 0xf6}, {&(0x7f0000000780)="fb937d4cc17d6b2128939911136d9d5867bf217e86ca4119b4fdd00afd7f498cf40be2a052ad", 0x26}], 0x5, &(0x7f0000000840)="93ade2f1449fbf6f1c251f47765a3bfc09783f74991acef05808ea27b686a66ea16c4ab915dab0fb0b2da0c58af8e2a298f2227b7c34731af51b21916323556328accfc1eba3642c1519a7b4f549ddaad3a3d15249336aaa186d102de519e9e853479b5da2877f8b4c25d1a08eafdf61b9cb2f72699f1882a0153883f0e3aa911b48e4cc020da4c848bd25038935b48e37ed5def148892b4ed9722f6d5d6c415fbb0bedeadbf1b7caf84637f9eb9faf839a8228d6495119b424d4af6ff75c9a46f125f55c5f6f623f6970f46beeea54f", 0xd0, 0x24048810}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 313.661151ms ago: executing program 4 (id=4343): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30"], 0x7c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc88c0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x14) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8}]}}, @TCA_STAB={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x3}, 0x20004004) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r7, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000480)={0x0, 0x1, r5, 0x1, 0x80000}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 225.974431ms ago: executing program 7 (id=4344): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000007000000ff0f000007"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x4a, 0x0, 0x5a, 0x9}, {0x9, 0x2, 0x7, 0x6}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4, 0x0, 0x101}, 0x18) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100feffffff0000000005000000180001801400020073797a5f74756e0000000000000000002400038018000180"], 0x50}}, 0x0) 136.34558ms ago: executing program 2 (id=4345): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) fremovexattr(0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000308000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x81f41619f87edb83}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@bridge_getvlan={0x20, 0x72, 0x4, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004845) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffa0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="b9ff060000000000000014f086dd", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r11}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="550a0000000000006111780000800000180000000000000000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000280)={r7, 0x11, 0x6}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000180)={r7, 0x1, 0x6, @multicast}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002ec85fc44afce37073188039da000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002000000ffffffff00000000a533311a000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"], 0x190) 48.73828ms ago: executing program 5 (id=4346): r0 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) 48.063ms ago: executing program 7 (id=4347): r0 = io_uring_setup(0x77e1, &(0x7f0000000000)={0x0, 0x68d9, 0x40, 0x1, 0xab}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x1010, r0, 0x3a821000) (async) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/232, 0xe8) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x6002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x7, [@type_tag={0x9, 0x0, 0x0, 0x12, 0x2}, @fwd={0xb}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x4}, @union={0xf, 0x4, 0x0, 0x5, 0x0, 0x4, [{0xb, 0x1, 0x800}, {0x1, 0x1, 0x6bc}, {0x2, 0x0, 0x24d5}, {0x4, 0x4, 0x1}]}]}, {0x0, [0x0, 0x61, 0x61, 0x30, 0x61]}}, &(0x7f0000000340)=""/174, 0x7f, 0xae, 0x0, 0x4, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x1, 0x1ff, 0x28000, 0x15a0, r1, 0x1, '\x00', r2, r3, 0x1, 0x5, 0x5, 0xf, @void, @value, @void, @value}, 0x50) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f00000004c0)=0x80, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r4}, 0x8) (async) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000540)=0x10001, 0x4) r5 = openat$incfs(r1, &(0x7f0000000580)='.pending_reads\x00', 0x0, 0x6a) ioctl$SIOCGETLINKNAME(r5, 0x89e0, &(0x7f00000005c0)={0x4, 0x2}) (async) r6 = socket$packet(0x11, 0x3, 0x300) bind$bt_hci(r5, &(0x7f0000000640)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) (async) getsockopt$bt_hci(r6, 0x0, 0x1, &(0x7f0000000680)=""/166, &(0x7f0000000740)=0xa6) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) bind$bt_hci(r1, &(0x7f0000000780)={0x1f, 0x2, 0x3}, 0x6) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x8, 0x0, 0x4}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) write$P9_RSYMLINK(r1, &(0x7f00000008c0)={0x14, 0x11, 0x2, {0x4, 0x3, 0x7}}, 0x14) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000900)={r1}, 0x8) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000940)=""/182) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000a00), 0xc202, 0x0) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000a40)={@private2, 0xfffffc00, 0x0, 0x2, 0xa, 0x8, 0x6}, &(0x7f0000000a80)=0x20) (async) setgroups(0x0, &(0x7f0000000ac0)) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)=@newtfilter={0x34, 0x2c, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0x7}, {0x1c, 0xffe0}, {0xffff, 0x6}}, [@TCA_RATE={0x6, 0x5, {0xf7, 0xf6}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) 0s ago: executing program 8 (id=4348): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) kernel console output (not intermixed with test programs): adv_slave_1 (retrying later): interface not active [ 215.082964][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 215.082982][ T29] audit: type=1400 audit(2000000049.850:8694): avc: denied { read write } for pid=14297 comm="syz.6.3753" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 215.129693][T14299] loop6: detected capacity change from 0 to 512 [ 215.131252][ T29] audit: type=1400 audit(2000000049.870:8695): avc: denied { ioctl open } for pid=14297 comm="syz.6.3753" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 215.198300][T14306] loop3: detected capacity change from 0 to 256 [ 215.217000][T14212] hsr_slave_0: entered promiscuous mode [ 215.223409][T14212] hsr_slave_1: entered promiscuous mode [ 215.232439][T14212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.236361][T14306] syz.3.3756: attempt to access beyond end of device [ 215.236361][T14306] loop3: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 215.240196][T14212] Cannot create hsr debugfs directory [ 215.261834][T14306] syz.3.3756: attempt to access beyond end of device [ 215.261834][T14306] loop3: rw=2049, sector=260, nr_sectors = 4 limit=256 [ 215.279218][T14306] syz.3.3756: attempt to access beyond end of device [ 215.279218][T14306] loop3: rw=2049, sector=264, nr_sectors = 60 limit=256 [ 215.347813][T14313] loop3: detected capacity change from 0 to 512 [ 215.391721][T14316] loop2: detected capacity change from 0 to 2048 [ 215.398830][T14313] EXT4-fs (loop3): invalid journal inode [ 215.404628][T14313] EXT4-fs (loop3): can't get journal size [ 215.412529][T14313] EXT4-fs (loop3): 1 truncate cleaned up [ 215.499873][T14325] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3763'. [ 215.525386][T14212] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 215.537632][T14212] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 215.556100][T14212] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 215.559322][ T29] audit: type=1400 audit(2000000050.320:8696): avc: denied { checkpoint_restore } for pid=14330 comm="syz.3.3765" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 215.591068][T14212] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 215.624349][T14334] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3766'. [ 215.633949][T14334] netlink: 264 bytes leftover after parsing attributes in process `syz.3.3766'. [ 215.642018][T14212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.654860][T14212] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.663928][T14336] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 215.708458][ T5055] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.715664][ T5055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.721794][ T29] audit: type=1400 audit(2000000050.480:8697): avc: denied { create } for pid=14339 comm="syz.3.3768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 215.727903][ T5055] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.747010][ T29] audit: type=1400 audit(2000000050.510:8698): avc: denied { connect } for pid=14339 comm="syz.3.3768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 215.749620][ T5055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.770013][ T29] audit: type=1400 audit(2000000050.510:8699): avc: denied { ioctl } for pid=14339 comm="syz.3.3768" path="socket:[40858]" dev="sockfs" ino=40858 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 215.803280][ T29] audit: type=1400 audit(2000000050.560:8700): avc: denied { nlmsg_write } for pid=14339 comm="syz.3.3768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 215.854084][ T29] audit: type=1326 audit(2000000050.610:8701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14346 comm="syz.6.3769" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38871f5d29 code=0x0 [ 215.872793][T14212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.009441][T14212] veth0_vlan: entered promiscuous mode [ 216.028265][T14212] veth1_vlan: entered promiscuous mode [ 216.053435][T14212] veth0_macvtap: entered promiscuous mode [ 216.072903][T14357] loop7: detected capacity change from 0 to 16384 [ 216.079014][T14212] veth1_macvtap: entered promiscuous mode [ 216.107651][T14212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.118210][T14212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.128077][T14212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.138641][T14212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.153103][T14357] I/O error, dev loop7, sector 11776 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0 [ 216.154886][ T29] audit: type=1400 audit(2000000050.920:8702): avc: denied { compute_member } for pid=14346 comm="syz.6.3769" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 216.166634][T14357] I/O error, dev loop7, sector 12032 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0 [ 216.185499][T14212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.204490][T14357] I/O error, dev loop7, sector 11776 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 216.216583][T14212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.227058][T14212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.236985][T14212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.241071][ T29] audit: type=1400 audit(2000000051.000:8703): avc: denied { write } for pid=2982 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.247571][T14212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.248986][T14212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.290630][T14212] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.299484][T14212] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.308324][T14212] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.317079][T14212] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.394741][T14367] bond1: entered promiscuous mode [ 216.400022][T14367] bond1: entered allmulticast mode [ 216.405773][T14367] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.418768][T14367] bond1 (unregistering): Released all slaves [ 216.706583][T14357] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 216.716312][T14357] buffer_io_error: 6 callbacks suppressed [ 216.716324][T14357] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 216.731075][T14357] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 216.739489][T14357] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 216.748026][T14357] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 216.757076][T14357] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 216.765482][T14357] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 216.773836][T14357] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 216.782309][T14357] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 216.791435][T14357] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 216.799842][T14357] Buffer I/O error on dev loop7, logical block 9, lost async page write [ 216.834247][T14357] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 216.866969][T14357] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 216.897053][T14357] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 216.921395][T14357] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 216.950355][T14357] I/O error, dev loop7, sector 5120 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 216.978130][T14357] I/O error, dev loop7, sector 6144 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 217.131714][T14389] loop9: detected capacity change from 0 to 128 [ 217.315147][T14389] syz.9.3779: attempt to access beyond end of device [ 217.315147][T14389] loop9: rw=2049, sector=697, nr_sectors = 344 limit=128 [ 217.332621][T14394] loop6: detected capacity change from 0 to 2048 [ 217.580010][T14405] loop2: detected capacity change from 0 to 1024 [ 217.601980][T14405] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.629455][T14405] syz.2.3783[14405] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.629978][T14405] syz.2.3783[14405] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.657340][T14405] syz.2.3783[14405] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.854847][T14427] loop2: detected capacity change from 0 to 128 [ 217.890746][T14427] ext4 filesystem being mounted at /115/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 218.050172][T14440] loop2: detected capacity change from 0 to 512 [ 218.101494][T14440] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.152835][T14450] loop3: detected capacity change from 0 to 2048 [ 218.215151][T14459] loop2: detected capacity change from 0 to 128 [ 218.240175][T14459] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 218.248101][T14459] FAT-fs (loop2): Filesystem has been set read-only [ 218.363952][T14467] loop2: detected capacity change from 0 to 512 [ 218.386847][T14467] EXT4-fs (loop2): invalid journal inode [ 218.404902][T14467] EXT4-fs (loop2): can't get journal size [ 218.424674][T14465] loop6: detected capacity change from 0 to 8192 [ 218.432531][T14467] EXT4-fs (loop2): 1 truncate cleaned up [ 218.447032][T14465] syz.6.3804: attempt to access beyond end of device [ 218.447032][T14465] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 218.464147][T14465] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 218.472089][T14465] FAT-fs (loop6): Filesystem has been set read-only [ 218.486420][T14465] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 218.496988][T14465] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 218.571077][T14474] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 218.667404][T14478] loop2: detected capacity change from 0 to 4096 [ 218.946143][T14501] loop6: detected capacity change from 0 to 128 [ 219.042659][T14501] syz.6.3818: attempt to access beyond end of device [ 219.042659][T14501] loop6: rw=0, sector=121, nr_sectors = 920 limit=128 [ 219.092655][T14509] loop3: detected capacity change from 0 to 1024 [ 219.249788][T14533] __nla_validate_parse: 20 callbacks suppressed [ 219.249809][T14533] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3831'. [ 219.368919][T14544] ebtables: ebtables: counters copy to user failed while replacing table [ 219.381499][T14548] syz.6.3837[14548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.381676][T14548] syz.6.3837[14548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.393700][T14548] syz.6.3837[14548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.414854][T14548] loop6: detected capacity change from 0 to 1024 [ 219.441879][T14553] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.452147][T14548] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 219.467222][T14548] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 51 with max blocks 1 with error 28 [ 219.479646][T14548] EXT4-fs (loop6): This should not happen!! Data will be lost [ 219.479646][T14548] [ 219.489331][T14548] EXT4-fs (loop6): Total free blocks count 0 [ 219.495326][T14548] EXT4-fs (loop6): Free/Dirty block details [ 219.501315][T14548] EXT4-fs (loop6): free_blocks=68451041280 [ 219.507223][T14548] EXT4-fs (loop6): dirty_blocks=32 [ 219.512405][T14548] EXT4-fs (loop6): Block reservation details [ 219.518463][T14548] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 219.538071][ T5055] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 219.550378][ T5055] EXT4-fs (loop6): This should not happen!! Data will be lost [ 219.550378][ T5055] [ 219.629441][T14553] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.646528][T14563] loop6: detected capacity change from 0 to 256 [ 219.660663][T14563] FAT-fs (loop6): Directory bread(block 64) failed [ 219.667287][T14563] FAT-fs (loop6): Directory bread(block 65) failed [ 219.674258][T14563] FAT-fs (loop6): Directory bread(block 66) failed [ 219.681123][T14563] FAT-fs (loop6): Directory bread(block 67) failed [ 219.688381][T14563] FAT-fs (loop6): Directory bread(block 68) failed [ 219.689009][T14553] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.694937][T14563] FAT-fs (loop6): Directory bread(block 69) failed [ 219.711980][T14563] FAT-fs (loop6): Directory bread(block 70) failed [ 219.718766][T14563] FAT-fs (loop6): Directory bread(block 71) failed [ 219.726533][T14563] FAT-fs (loop6): Directory bread(block 72) failed [ 219.733290][T14563] FAT-fs (loop6): Directory bread(block 73) failed [ 219.741188][T14553] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.752053][T14563] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3842'. [ 219.786996][T14565] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3843'. [ 219.796051][T14565] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3843'. [ 219.814327][T14553] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.828083][T14553] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.840912][T14553] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.849681][T14565] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3843'. [ 219.852939][T14553] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.871291][T14565] loop6: detected capacity change from 0 to 512 [ 219.882416][T14565] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 219.890832][T14565] EXT4-fs (loop6): orphan cleanup on readonly fs [ 219.899913][T14565] EXT4-fs warning (device loop6): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 219.915051][T14565] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 219.924900][T14565] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #16: comm syz.6.3843: iget: immutable or append flags not allowed on symlinks [ 219.942722][T14565] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.3843: couldn't read orphan inode 16 (err -117) [ 219.959996][T14565] EXT4-fs mount: 73 callbacks suppressed [ 219.960012][T14565] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 219.982842][T14565] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 220.059886][ T9745] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.078029][T14570] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3844'. [ 220.104663][T14574] x_tables: duplicate underflow at hook 2 [ 220.113404][T14572] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3845'. [ 220.122441][T14572] netlink: 264 bytes leftover after parsing attributes in process `syz.9.3845'. [ 220.133090][T14572] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3845'. [ 220.178992][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 220.179007][ T29] audit: type=1326 audit(2000000054.940:8810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14577 comm="syz.9.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43013d5d29 code=0x7ffc0000 [ 220.218763][T14581] loop6: detected capacity change from 0 to 512 [ 220.240604][T14583] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.250108][T14583] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.251437][ T29] audit: type=1326 audit(2000000054.990:8811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14577 comm="syz.9.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43013d5d29 code=0x7ffc0000 [ 220.258862][T14583] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.258900][T14583] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.282507][ T29] audit: type=1326 audit(2000000054.990:8812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14577 comm="syz.9.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43013d5d29 code=0x7ffc0000 [ 220.282575][ T29] audit: type=1326 audit(2000000054.990:8813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14577 comm="syz.9.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43013d5d29 code=0x7ffc0000 [ 220.282605][ T29] audit: type=1326 audit(2000000054.990:8814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14577 comm="syz.9.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43013d5d29 code=0x7ffc0000 [ 220.282638][ T29] audit: type=1326 audit(2000000054.990:8815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14577 comm="syz.9.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f43013d5d29 code=0x7ffc0000 [ 220.282697][ T29] audit: type=1326 audit(2000000054.990:8816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14577 comm="syz.9.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43013d5d29 code=0x7ffc0000 [ 220.282730][ T29] audit: type=1326 audit(2000000054.990:8817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14577 comm="syz.9.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f43013d5d29 code=0x7ffc0000 [ 220.282761][ T29] audit: type=1326 audit(2000000054.990:8818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14577 comm="syz.9.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43013d5d29 code=0x7ffc0000 [ 220.282866][ T29] audit: type=1326 audit(2000000054.990:8819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14577 comm="syz.9.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f43013d5d29 code=0x7ffc0000 [ 220.283144][T14581] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 220.459464][T14590] loop9: detected capacity change from 0 to 1024 [ 220.478382][T14581] EXT4-fs warning (device loop6): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop6. [ 220.528946][T14590] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.563551][T14599] loop6: detected capacity change from 0 to 512 [ 220.635865][T14599] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.655903][T14599] ext4 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.733995][T14212] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.784098][T14613] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3858'. [ 220.810033][T14616] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #19: comm syz.6.3854: corrupted inode contents [ 220.833364][T14616] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #19: comm syz.6.3854: mark_inode_dirty error [ 220.870661][T14616] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #19: comm syz.6.3854: corrupted inode contents [ 220.892193][T14616] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3006: inode #19: comm syz.6.3854: mark_inode_dirty error [ 220.915550][T14625] wireguard0: entered promiscuous mode [ 220.921067][T14625] wireguard0: entered allmulticast mode [ 220.935920][T14616] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3009: inode #19: comm syz.6.3854: mark inode dirty (error -117) [ 220.949383][T14616] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -117) [ 221.004567][ T9745] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.172995][T14637] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 221.242036][T14642] loop6: detected capacity change from 0 to 1024 [ 221.273300][T14642] EXT4-fs: Ignoring removed orlov option [ 221.289237][T14642] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.357482][T14647] loop9: detected capacity change from 0 to 1024 [ 221.385359][T14647] EXT4-fs: Ignoring removed i_version option [ 221.404934][T14647] EXT4-fs: Ignoring removed bh option [ 221.427569][T14647] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.516150][T14212] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.657262][T14659] loop2: detected capacity change from 0 to 2048 [ 221.677532][T14659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.112059][ T9745] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.512791][T14683] xt_hashlimit: max too large, truncated to 1048576 [ 222.560567][T12587] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.892382][T14716] loop9: detected capacity change from 0 to 128 [ 222.938465][T14719] loop2: detected capacity change from 0 to 2048 [ 222.966449][T14716] syz.9.3897: attempt to access beyond end of device [ 222.966449][T14716] loop9: rw=0, sector=121, nr_sectors = 920 limit=128 [ 223.174072][T14719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.338461][T14728] loop9: detected capacity change from 0 to 128 [ 223.458279][T14733] wireguard0: entered promiscuous mode [ 223.463790][T14733] wireguard0: entered allmulticast mode [ 223.549391][T14737] loop3: detected capacity change from 0 to 512 [ 223.610894][T14737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.644087][T14728] loop9: detected capacity change from 128 to 0 [ 223.735678][T14737] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.769736][T14733] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.3903: Failed to acquire dquot type 1 [ 223.783651][T14733] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.3903: Failed to acquire dquot type 1 [ 223.827206][T12121] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.881451][T14212] syz-executor: attempt to access beyond end of device [ 223.881451][T14212] loop9: rw=0, sector=104, nr_sectors = 1 limit=0 [ 223.899594][T14212] FAT-fs (loop9): Directory bread(block 104) failed [ 223.908134][ T5046] kworker/u8:8: attempt to access beyond end of device [ 223.908134][ T5046] loop9: rw=0, sector=1, nr_sectors = 1 limit=0 [ 223.945646][ T5046] FAT-fs (loop9): bread failed in fat_clusters_flush [ 223.965609][T14212] syz-executor: attempt to access beyond end of device [ 223.965609][T14212] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 223.997912][T14212] FAT-fs (loop9): unable to read boot sector to mark fs as dirty [ 224.017097][T14746] loop9: detected capacity change from 0 to 1024 [ 224.134490][T12587] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.208972][T14747] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 224.341123][T14761] loop6: detected capacity change from 0 to 1024 [ 224.367326][T14746] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.411822][T14212] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.578349][T14761] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.608027][ T9745] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.676818][T14772] loop9: detected capacity change from 0 to 1024 [ 224.732697][T14772] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.753702][T14777] loop6: detected capacity change from 0 to 512 [ 224.792427][T14212] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.851769][T14777] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.874813][T14777] ext4 filesystem being mounted at /349/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 224.934681][T14792] loop3: detected capacity change from 0 to 512 [ 224.955498][T14777] loop6: detected capacity change from 512 to 0 [ 224.962394][T14777] syz.6.3919: attempt to access beyond end of device [ 224.962394][T14777] loop6: rw=12288, sector=12, nr_sectors = 4 limit=0 [ 224.994450][T14777] syz.6.3919: attempt to access beyond end of device [ 224.994450][T14777] loop6: rw=524288, sector=140, nr_sectors = 4 limit=0 [ 225.041051][T14777] syz.6.3919: attempt to access beyond end of device [ 225.041051][T14777] loop6: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 225.108207][T14792] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 225.123037][T14777] syz.6.3919: attempt to access beyond end of device [ 225.123037][T14777] loop6: rw=12288, sector=136, nr_sectors = 4 limit=0 [ 225.140239][T14777] EXT4-fs error (device loop6): ext4_get_inode_loc:4573: inode #2: block 34: comm syz.6.3919: unable to read itable block [ 225.145953][T14792] System zones: 0-2, 18-18, 34-34 [ 225.155135][T14777] syz.6.3919: attempt to access beyond end of device [ 225.155135][T14777] loop6: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 225.171655][T14777] buffer_io_error: 1462 callbacks suppressed [ 225.171671][T14777] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 225.196289][T14777] EXT4-fs (loop6): I/O error while writing superblock [ 225.203116][T14777] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: IO failure [ 225.234046][T14799] loop9: detected capacity change from 0 to 1024 [ 225.270363][T14777] syz.6.3919: attempt to access beyond end of device [ 225.270363][T14777] loop6: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 225.283656][T14777] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 225.294438][T14799] EXT4-fs: Ignoring removed nobh option [ 225.300721][T14799] EXT4-fs: Ignoring removed bh option [ 225.333170][T14792] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3921: bg 0: block 248: padding at end of block bitmap is not set [ 225.362303][T14777] EXT4-fs (loop6): I/O error while writing superblock [ 225.369148][T14777] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #2: comm syz.6.3919: mark_inode_dirty error [ 225.394409][T14804] __nla_validate_parse: 15 callbacks suppressed [ 225.394428][T14804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3926'. [ 225.398271][T14792] __quota_error: 65 callbacks suppressed [ 225.398290][T14792] Quota error (device loop3): write_blk: dquota write failed [ 225.403616][T14777] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 225.409705][T14792] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 225.440242][T14792] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.3921: Failed to acquire dquot type 1 [ 225.443018][T14777] EXT4-fs (loop6): I/O error while writing superblock [ 225.461845][ T29] audit: type=1326 audit(2000000060.220:8881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.2.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1580b75d29 code=0x7ffc0000 [ 225.496659][T14799] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.510579][T14792] EXT4-fs (loop3): 1 truncate cleaned up [ 225.519994][ T29] audit: type=1326 audit(2000000060.220:8882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.2.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1580b75d29 code=0x7ffc0000 [ 225.543583][ T29] audit: type=1326 audit(2000000060.220:8883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.2.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1580b75d29 code=0x7ffc0000 [ 225.567097][ T29] audit: type=1326 audit(2000000060.220:8884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.2.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1580b75d29 code=0x7ffc0000 [ 225.594931][ T29] audit: type=1326 audit(2000000060.220:8885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.2.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1580b75d29 code=0x7ffc0000 [ 225.596530][T14792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.618596][ T29] audit: type=1326 audit(2000000060.220:8886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.2.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1580b75d29 code=0x7ffc0000 [ 225.618694][ T29] audit: type=1326 audit(2000000060.220:8887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.2.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1580b75d29 code=0x7ffc0000 [ 225.618728][ T29] audit: type=1326 audit(2000000060.220:8888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.2.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1580b75d29 code=0x7ffc0000 [ 225.703594][ T9745] EXT4-fs error (device loop6): ext4_get_inode_loc:4573: inode #2: block 34: comm syz-executor: unable to read itable block [ 225.703632][ T9745] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 225.703648][ T9745] EXT4-fs (loop6): I/O error while writing superblock [ 225.703661][ T9745] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: IO failure [ 225.720623][T14792] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.725210][ T9745] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 225.741404][T14789] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 225.751114][ T9745] EXT4-fs (loop6): I/O error while writing superblock [ 225.776783][ T9745] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #2: comm syz-executor: mark_inode_dirty error [ 225.780862][T14212] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.788298][ T9745] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 225.788320][ T9745] EXT4-fs (loop6): I/O error while writing superblock [ 225.821786][ T5062] EXT4-fs error (device loop6): __ext4_get_inode_loc_noinmem:4558: inode #18: block 35: comm kworker/u8:11: unable to read itable block [ 225.836036][ T5062] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 225.844541][ T5062] EXT4-fs (loop6): I/O error while writing superblock [ 225.851744][ T5062] EXT4-fs error (device loop6): __ext4_get_inode_loc_noinmem:4558: inode #2: block 34: comm kworker/u8:11: unable to read itable block [ 225.866137][ T5062] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 225.874519][ T5062] EXT4-fs (loop6): I/O error while writing superblock [ 225.908833][T14332] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.972247][T14332] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 225.980789][T14783] Buffer I/O error on dev loop6, logical block 12, lost sync page write [ 225.992942][T12121] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.143587][T14800] chnl_net:caif_netlink_parms(): no params data found [ 226.253429][T14845] loop2: detected capacity change from 0 to 512 [ 226.294184][T14845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.307677][T14845] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.324032][T14800] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.331202][T14800] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.340841][T14800] bridge_slave_0: entered allmulticast mode [ 226.347624][T14800] bridge_slave_0: entered promiscuous mode [ 226.354915][T14800] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.362044][T14800] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.402357][T14800] bridge_slave_1: entered allmulticast mode [ 226.413050][T14800] bridge_slave_1: entered promiscuous mode [ 226.453671][T14859] loop9: detected capacity change from 0 to 512 [ 226.466357][T12587] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.521381][T14859] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.3943: Invalid inode bitmap blk 4 in block_group 0 [ 226.535234][T14859] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.558365][T14859] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.3943: bg 0: block 13: invalid block bitmap [ 226.570098][T14800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.587001][T14800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.621954][T14859] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.626474][T14800] team0: Port device team_slave_0 added [ 226.637934][T14800] team0: Port device team_slave_1 added [ 226.671926][T14871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3944'. [ 226.703597][T14800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.710675][T14800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.736633][T14800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.797183][T14879] loop3: detected capacity change from 0 to 512 [ 226.809483][T14879] EXT4-fs (loop3): #blocks per group too big: 65280 [ 226.823512][T14871] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 48661 - 0 [ 226.833240][T14871] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 48661 - 0 [ 226.833692][T14879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3948'. [ 226.842073][T14871] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 48661 - 0 [ 226.850986][T14879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3948'. [ 226.860464][T14871] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 48661 - 0 [ 226.875369][T14879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3948'. [ 226.894745][T14871] geneve2: entered promiscuous mode [ 226.900110][T14871] geneve2: entered allmulticast mode [ 226.919346][T14800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.926428][T14800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.952506][T14800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.023932][T14886] ebtables: ebtables: counters copy to user failed while replacing table [ 227.053037][T14890] loop9: detected capacity change from 0 to 128 [ 227.073167][T14892] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3953'. [ 227.082693][T14890] vfat: Unknown parameter '‰odir' [ 227.087991][T14892] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3953'. [ 227.105626][T14892] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3953'. [ 227.124886][T14800] hsr_slave_0: entered promiscuous mode [ 227.131994][T14800] hsr_slave_1: entered promiscuous mode [ 227.143214][T14800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.166497][T14892] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3953'. [ 227.171161][T14800] Cannot create hsr debugfs directory [ 227.175578][T14892] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3953'. [ 227.312378][T14842] chnl_net:caif_netlink_parms(): no params data found [ 227.343223][T14800] netdevsim netdevsim1 netdevsim3 (unregistering): left allmulticast mode [ 227.351880][T14800] netdevsim netdevsim1 netdevsim3 (unregistering): left promiscuous mode [ 227.360437][T14800] bridge0: port 3(netdevsim3) entered disabled state [ 227.371391][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.378964][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.386631][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.394111][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.401558][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.409022][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.416478][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.423969][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.431573][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.439034][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.446542][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.453956][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.461417][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.468982][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.476425][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.483843][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.491447][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.498899][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.506531][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.513970][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.521451][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.528919][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.536372][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.543776][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.551427][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.558891][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.566373][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.573857][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.581326][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.588789][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.596231][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.603745][ T1050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 227.612796][ T1050] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 227.685504][T14912] syz.3.3959[14912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.685662][T14912] syz.3.3959[14912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.734036][T14912] syz.3.3959[14912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.755636][T14842] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.774324][T14842] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.805047][T14922] loop9: detected capacity change from 0 to 128 [ 227.805729][T14842] bridge_slave_0: entered allmulticast mode [ 227.828518][T14842] bridge_slave_0: entered promiscuous mode [ 227.850339][T14842] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.858189][T14842] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.869033][T14842] bridge_slave_1: entered allmulticast mode [ 227.885766][T14842] bridge_slave_1: entered promiscuous mode [ 228.002622][T14926] bond1: entered promiscuous mode [ 228.007771][T14926] bond1: entered allmulticast mode [ 228.019451][T14926] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.028901][T14926] bond1 (unregistering): Released all slaves [ 228.053126][T14842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.081264][T14929] syz.3.3965[14929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.081394][T14929] syz.3.3965[14929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.094460][T14842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.116491][T14929] syz.3.3965[14929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.117706][T14929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.130919][T14800] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 228.138099][T14929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.198593][T14800] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 228.208066][T14800] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 228.217974][T14842] team0: Port device team_slave_0 added [ 228.229218][T14842] team0: Port device team_slave_1 added [ 228.259590][T14800] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 228.313313][T14842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.320372][T14842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.346484][T14842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.368705][T14842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.375818][T14842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.401897][T14842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.482957][T14949] syz.9.3973[14949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.483138][T14949] syz.9.3973[14949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.499674][T14949] syz.9.3973[14949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.523037][T14842] hsr_slave_0: entered promiscuous mode [ 228.555068][T14842] hsr_slave_1: entered promiscuous mode [ 228.564221][T14842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.572735][T14842] Cannot create hsr debugfs directory [ 228.675418][T14800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.725438][T14800] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.756772][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.763888][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.769698][T14965] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 228.776545][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.786153][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.932751][T14982] netlink: 'syz.9.3987': attribute type 13 has an invalid length. [ 228.941073][T14983] netlink: 'syz.9.3987': attribute type 13 has an invalid length. [ 228.952253][T14982] syz_tun: refused to change device tx_queue_len [ 228.959357][T14982] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 229.000942][T14983] syz_tun: refused to change device tx_queue_len [ 229.001055][T14987] loop9: detected capacity change from 0 to 512 [ 229.007375][T14983] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 229.090690][T14987] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.103382][T14987] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 229.155890][T14982] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #2: comm syz.9.3987: corrupted inode contents [ 229.173639][T14982] EXT4-fs error (device loop9): ext4_dirty_inode:6041: inode #2: comm syz.9.3987: mark_inode_dirty error [ 229.188945][T14982] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #2: comm syz.9.3987: corrupted inode contents [ 229.201373][T14982] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #2: comm syz.9.3987: mark_inode_dirty error [ 229.273160][T14800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.415910][T14212] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.464329][T14842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 229.475871][T14842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 229.487014][T14842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 229.498633][T14842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 229.579752][T14800] veth0_vlan: entered promiscuous mode [ 229.592088][T14842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.602385][T14800] veth1_vlan: entered promiscuous mode [ 229.619317][T14842] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.650727][ T5055] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.657932][ T5055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.679000][T14800] veth0_macvtap: entered promiscuous mode [ 229.689383][ T5055] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.696561][ T5055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.720166][T14800] veth1_macvtap: entered promiscuous mode [ 229.743167][T14800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.753736][T14800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.763630][T14800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.774124][T14800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.784002][T14800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.798583][T14800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.834191][T14800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.844821][T15027] loop9: detected capacity change from 0 to 1024 [ 229.856211][T14800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.866823][T14800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.876846][T14800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.887995][T14800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.897873][T14800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.908417][T14800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.931636][T15027] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.938290][T14800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.971599][T14800] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.980471][T14800] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.989329][T14800] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.998253][T14800] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.034294][T15027] EXT4-fs error (device loop9): __ext4_remount:6749: comm syz.9.3999: Abort forced by user [ 230.050822][T15027] EXT4-fs (loop9): Remounting filesystem read-only [ 230.057549][T15027] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 230.086499][T15027] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 230.096594][T15039] wireguard0: entered promiscuous mode [ 230.102145][T15039] wireguard0: entered allmulticast mode [ 230.131367][T14212] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.150867][T15033] loop2: detected capacity change from 0 to 512 [ 230.155675][T15043] loop3: detected capacity change from 0 to 512 [ 230.218935][T15043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.231873][T15043] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.232697][T14842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.261059][T15043] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.4003: Failed to acquire dquot type 1 [ 230.281940][T15033] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 230.291593][T15033] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 230.304630][T15033] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.4001: bad orphan inode 13 [ 230.332154][T15033] EXT4-fs (loop2): Remounting filesystem read-only [ 230.340836][T15033] ext4_test_bit(bit=12, block=4) = 1 [ 230.345944][T15039] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.4003: Failed to acquire dquot type 1 [ 230.346424][T15033] is_bad_inode(inode)=0 [ 230.372713][T15033] NEXT_ORPHAN(inode)=17694720 [ 230.378233][T15033] max_ino=32 [ 230.382101][T15033] i_nlink=0 [ 230.415856][T12121] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.424500][T15033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.456736][T15033] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 230.482683][T15033] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.516646][T15068] bond1: entered promiscuous mode [ 230.521798][T15068] bond1: entered allmulticast mode [ 230.538836][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 230.538855][ T29] audit: type=1400 audit(2000000065.280:9052): avc: denied { create } for pid=15070 comm="syz.3.4006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 230.545355][T15068] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.597144][T15068] bond1 (unregistering): Released all slaves [ 230.616529][T15073] loop9: detected capacity change from 0 to 256 [ 230.665060][T14842] veth0_vlan: entered promiscuous mode [ 230.673154][ T29] audit: type=1326 audit(2000000065.430:9053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15076 comm="syz.1.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67dfb85d29 code=0x7ffc0000 [ 230.697417][ T29] audit: type=1326 audit(2000000065.430:9054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15076 comm="syz.1.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f67dfb85d29 code=0x7ffc0000 [ 230.720964][ T29] audit: type=1326 audit(2000000065.430:9055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15076 comm="syz.1.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67dfb85d29 code=0x7ffc0000 [ 230.748868][T14842] veth1_vlan: entered promiscuous mode [ 230.756186][ T29] audit: type=1326 audit(2000000065.430:9056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15076 comm="syz.1.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f67dfb85d29 code=0x7ffc0000 [ 230.780465][ T29] audit: type=1326 audit(2000000065.430:9057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15076 comm="syz.1.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67dfb85d29 code=0x7ffc0000 [ 230.783766][T14842] veth0_macvtap: entered promiscuous mode [ 230.804128][ T29] audit: type=1326 audit(2000000065.430:9058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15076 comm="syz.1.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f67dfb85d29 code=0x7ffc0000 [ 230.833920][ T29] audit: type=1326 audit(2000000065.440:9059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15076 comm="syz.1.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67dfb85d29 code=0x7ffc0000 [ 230.849539][T14842] veth1_macvtap: entered promiscuous mode [ 230.858293][ T29] audit: type=1326 audit(2000000065.440:9060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15076 comm="syz.1.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f67dfb85d29 code=0x7ffc0000 [ 230.887411][ T29] audit: type=1326 audit(2000000065.440:9061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15076 comm="syz.1.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67dfb85d29 code=0x7ffc0000 [ 230.917314][T15088] loop3: detected capacity change from 0 to 256 [ 230.921609][T14842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.934374][T14842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.944611][T14842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.949591][T15088] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 230.955337][T14842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.975646][T14842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.986212][T14842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.996277][T14842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.007052][T14842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.018872][T14842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.027627][T14842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.038154][T14842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.048072][T14842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.058599][T14842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.068597][T14842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.079264][T14842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.089209][T14842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.099915][T14842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.110796][T14842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.139966][T14842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.148834][T14842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.157792][T14842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.166614][T14842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.298820][T15105] pim6reg1: entered promiscuous mode [ 231.304202][T15105] pim6reg1: entered allmulticast mode [ 231.313360][T15105] x_tables: duplicate entry at hook 2 [ 231.357190][T15110] loop2: detected capacity change from 0 to 2048 [ 231.381664][T15110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.663994][ T5062] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.742108][ T5062] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.809743][ T5062] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.860244][ T5062] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.958862][ T5062] bridge_slave_1: left allmulticast mode [ 231.964580][ T5062] bridge_slave_1: left promiscuous mode [ 231.970382][ T5062] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.986479][ T5062] bridge_slave_0: left allmulticast mode [ 231.992174][ T5062] bridge_slave_0: left promiscuous mode [ 231.997884][ T5062] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.098456][ T5062] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.109739][ T5062] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.122303][ T5062] bond0 (unregistering): Released all slaves [ 232.258707][ T5062] hsr_slave_0: left promiscuous mode [ 232.264402][ T5062] hsr_slave_1: left promiscuous mode [ 232.271635][ T5062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.279102][ T5062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.287305][ T5062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.294725][ T5062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.306919][ T5062] veth1_macvtap: left promiscuous mode [ 232.312472][ T5062] veth0_macvtap: left promiscuous mode [ 232.318096][ T5062] veth1_vlan: left promiscuous mode [ 232.323376][ T5062] veth0_vlan: left promiscuous mode [ 232.414453][ T5062] team0 (unregistering): Port device team_slave_1 removed [ 232.447448][ T5062] team0 (unregistering): Port device team_slave_0 removed [ 232.448213][T12587] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.634223][T15142] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 232.690095][T15146] loop3: detected capacity change from 0 to 512 [ 232.701282][T15146] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 232.729439][T15146] EXT4-fs (loop3): 1 truncate cleaned up [ 232.739063][T15146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.749053][T15151] bridge0: port 3(gretap0) entered blocking state [ 232.758905][T15151] bridge0: port 3(gretap0) entered disabled state [ 232.765656][T15151] gretap0: entered allmulticast mode [ 232.783359][T15119] chnl_net:caif_netlink_parms(): no params data found [ 232.858843][T15119] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.866145][T15119] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.873600][T15119] bridge_slave_0: entered allmulticast mode [ 232.874209][T12121] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.880886][T15119] bridge_slave_0: entered promiscuous mode [ 232.895998][T15119] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.903173][T15119] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.915637][T15119] bridge_slave_1: entered allmulticast mode [ 232.929379][T15119] bridge_slave_1: entered promiscuous mode [ 232.971672][ T5062] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.010165][T15119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.044795][T15119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.051133][T15170] loop2: detected capacity change from 0 to 1024 [ 233.085283][T15170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.118323][T12587] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.140560][T15119] team0: Port device team_slave_0 added [ 233.147781][T15119] team0: Port device team_slave_1 added [ 233.178125][T15119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.185125][T15119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.211208][T15119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.222887][T15119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.230016][T15119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.256025][T15119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.289610][T15119] hsr_slave_0: entered promiscuous mode [ 233.299039][T15119] hsr_slave_1: entered promiscuous mode [ 233.305244][T15119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.313377][T15119] Cannot create hsr debugfs directory [ 233.584228][T15202] syz.3.4056[15202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.584315][T15202] syz.3.4056[15202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.604520][T15202] syz.3.4056[15202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.619317][T15202] loop3: detected capacity change from 0 to 164 [ 233.678656][T15171] chnl_net:caif_netlink_parms(): no params data found [ 233.860441][ T5062] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.956069][ T5062] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.961461][T15216] __nla_validate_parse: 21 callbacks suppressed [ 233.961480][T15216] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4057'. [ 234.119533][ T5062] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.153359][T15171] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.160697][T15171] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.194695][T15171] bridge_slave_0: entered allmulticast mode [ 234.238229][T15171] bridge_slave_0: entered promiscuous mode [ 234.290934][T15119] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 234.317319][T15119] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 234.331862][T15171] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.339054][T15171] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.351083][T15171] bridge_slave_1: entered allmulticast mode [ 234.357949][T15171] bridge_slave_1: entered promiscuous mode [ 234.372713][T15119] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 234.448046][T15119] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 234.465425][T15171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.474983][ T5062] bridge_slave_1: left allmulticast mode [ 234.480825][ T5062] bridge_slave_1: left promiscuous mode [ 234.487202][ T5062] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.495304][ T5062] bridge_slave_0: left allmulticast mode [ 234.501038][ T5062] bridge_slave_0: left promiscuous mode [ 234.501388][T15222] loop2: detected capacity change from 0 to 1024 [ 234.506717][ T5062] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.532124][T15222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.570526][T12587] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.601015][ T5062] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.614560][ T5062] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.625802][ T5062] bond0 (unregistering): Released all slaves [ 234.639280][T15226] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4059'. [ 234.649100][T15226] netlink: 264 bytes leftover after parsing attributes in process `syz.2.4059'. [ 234.660903][T15226] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4059'. [ 234.671101][T15171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.696235][T15231] netlink: 348 bytes leftover after parsing attributes in process `syz.2.4061'. [ 234.724030][T15228] smc: net device bond0 applied user defined pnetid SYZ0 [ 234.725199][T15171] team0: Port device team_slave_0 added [ 234.740025][T15229] smc: net device bond0 erased user defined pnetid SYZ0 [ 234.762648][T15171] team0: Port device team_slave_1 added [ 234.769856][T15233] loop2: detected capacity change from 0 to 128 [ 234.801446][ T5062] hsr_slave_0: left promiscuous mode [ 234.802642][T15233] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 234.819589][ T5062] hsr_slave_1: left promiscuous mode [ 234.825608][T15233] ext4 filesystem being mounted at /189/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 234.858593][ T5062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.866145][ T5062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.873879][ T5062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.881442][ T5062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.891284][T12587] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 234.900529][ T5062] veth1_macvtap: left promiscuous mode [ 234.906267][ T5062] veth0_macvtap: left promiscuous mode [ 234.911904][ T5062] veth1_vlan: left promiscuous mode [ 234.917219][ T5062] veth0_vlan: left promiscuous mode [ 234.954736][T15244] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4065'. [ 235.034480][ T5062] team0 (unregistering): Port device team_slave_1 removed [ 235.044358][ T5062] team0 (unregistering): Port device team_slave_0 removed [ 235.092012][T15171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.099747][T15171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.126500][T15171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.149278][T15171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.156347][T15171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.182569][T15171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.198514][T15255] loop3: detected capacity change from 0 to 512 [ 235.245325][T15255] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 235.260303][T15255] System zones: 0-2, 18-18, 34-34 [ 235.266557][T15255] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4069: bg 0: block 248: padding at end of block bitmap is not set [ 235.268148][T15205] chnl_net:caif_netlink_parms(): no params data found [ 235.281327][T15255] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.4069: Failed to acquire dquot type 1 [ 235.300875][T15255] EXT4-fs (loop3): 1 truncate cleaned up [ 235.307272][T15255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.309109][T15171] hsr_slave_0: entered promiscuous mode [ 235.319895][T15255] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.338118][T15171] hsr_slave_1: entered promiscuous mode [ 235.344171][T15171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.351781][T15171] Cannot create hsr debugfs directory [ 235.403106][T15119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.441087][T15119] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.452384][T12121] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.463774][T15205] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.471146][T15205] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.479635][T15205] bridge_slave_0: entered allmulticast mode [ 235.486162][T15205] bridge_slave_0: entered promiscuous mode [ 235.493138][T15205] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.500279][T15205] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.508223][T15205] bridge_slave_1: entered allmulticast mode [ 235.515074][T15205] bridge_slave_1: entered promiscuous mode [ 235.555680][ T5046] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.562800][ T5046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.577915][T15205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.592230][ T5046] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.599374][ T5046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.601307][T15267] loop3: detected capacity change from 0 to 1024 [ 235.622755][T15205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.633716][T15267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.663236][T12121] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.673451][T15171] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.702886][T15271] Process accounting resumed [ 235.708336][T15271] kernel write not supported for file task/640/attr/sockcreate (pid: 15271 comm: syz.3.4072) [ 235.723291][T15119] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 235.733735][T15119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 235.760545][T15205] team0: Port device team_slave_0 added [ 235.767544][T15205] team0: Port device team_slave_1 added [ 235.781602][T15171] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.842957][T15280] netlink: 'syz.2.4075': attribute type 10 has an invalid length. [ 235.854862][ T5062] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.867362][T15205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.874336][T15205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.895644][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 235.895664][ T29] audit: type=1326 audit(2000000070.660:9135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15279 comm="syz.2.4075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1580b75d29 code=0x7ffc0000 [ 235.901134][T15205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.909853][ T29] audit: type=1326 audit(2000000070.670:9136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15279 comm="syz.2.4075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1580b75d29 code=0x7ffc0000 [ 235.970459][T15171] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.982478][T15280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.992054][T15280] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 236.002279][T15205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.010063][T15205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.036733][T15205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.063909][ T5062] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.080742][T15291] loop2: detected capacity change from 0 to 512 [ 236.086323][T15119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.100173][T15171] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.127856][ T5062] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.144848][T15291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.161082][T15291] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.163396][T15205] hsr_slave_0: entered promiscuous mode [ 236.178811][T15291] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.188594][T15205] hsr_slave_1: entered promiscuous mode [ 236.194613][T15205] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.203757][T15205] Cannot create hsr debugfs directory [ 236.218968][ T29] audit: type=1400 audit(2000000070.980:9137): avc: denied { setopt } for pid=15288 comm="syz.3.4078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 236.238727][ T29] audit: type=1400 audit(2000000070.980:9138): avc: denied { write } for pid=15288 comm="syz.3.4078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 236.241306][T15301] loop2: detected capacity change from 0 to 512 [ 236.258283][ T29] audit: type=1400 audit(2000000070.980:9139): avc: denied { read } for pid=15288 comm="syz.3.4078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 236.288938][ T5062] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.323906][T15301] EXT4-fs error (device loop2): ext4_quota_enable:7112: inode #3: comm syz.2.4080: iget: special inode unallocated [ 236.343882][T15301] EXT4-fs error (device loop2): ext4_quota_enable:7115: comm syz.2.4080: Bad quota inode: 3, type: 0 [ 236.360417][T15171] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 236.360552][T15301] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 236.382404][T15301] EXT4-fs (loop2): mount failed [ 236.401759][T15171] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 236.422747][T15171] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 236.432034][T15171] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 236.462243][T15313] tmpfs: Bad value for 'mpol' [ 236.468794][T15313] netlink: 'syz.2.4081': attribute type 13 has an invalid length. [ 236.493964][T15313] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.502985][T15313] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.511969][T15313] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.521605][T15313] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.531903][T15313] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 48661 - 0 [ 236.541027][T15313] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 48661 - 0 [ 236.550766][T15313] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 48661 - 0 [ 236.559795][T15313] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 48661 - 0 [ 236.615976][ T5062] bridge_slave_1: left allmulticast mode [ 236.621680][ T5062] bridge_slave_1: left promiscuous mode [ 236.627481][ T5062] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.637176][ T5062] bridge_slave_0: left allmulticast mode [ 236.642849][ T5062] bridge_slave_0: left promiscuous mode [ 236.648687][ T5062] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.748962][ T5062] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.761611][ T5062] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.771591][ T5062] bond0 (unregistering): Released all slaves [ 236.789288][T15171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.790807][T15323] loop2: detected capacity change from 0 to 2048 [ 236.802044][T15171] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.818640][T15323] EXT4-fs: Ignoring removed bh option [ 236.830314][T15323] EXT4-fs (loop2): can't mount with commit=1, fs mounted w/o journal [ 236.847421][ T29] audit: type=1400 audit(2000000071.610:9140): avc: denied { setopt } for pid=15319 comm="syz.2.4083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 236.856828][T15119] veth0_vlan: entered promiscuous mode [ 236.878652][ T5055] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.885798][ T5055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.899014][T15119] veth1_vlan: entered promiscuous mode [ 236.912683][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.919818][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.943462][T15326] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4084'. [ 236.981910][T15328] syz.3.4085[15328] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 236.982070][T15328] syz.3.4085[15328] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.001819][T15119] veth0_macvtap: entered promiscuous mode [ 237.083575][T15334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4088'. [ 237.107270][ T5062] hsr_slave_0: left promiscuous mode [ 237.113174][ T5062] hsr_slave_1: left promiscuous mode [ 237.119257][ T5062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.126931][ T5062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.134693][ T5062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.142709][ T5062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.152753][ T5062] veth1_macvtap: left promiscuous mode [ 237.158624][ T5062] veth0_macvtap: left promiscuous mode [ 237.164127][ T5062] veth1_vlan: left promiscuous mode [ 237.169597][ T5062] veth0_vlan: left promiscuous mode [ 237.240858][ T5062] team0 (unregistering): Port device team_slave_1 removed [ 237.250706][ T5062] team0 (unregistering): Port device team_slave_0 removed [ 237.285786][T15119] veth1_macvtap: entered promiscuous mode [ 237.327113][T15337] loop3: detected capacity change from 0 to 1024 [ 237.330548][T15119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.344114][T15119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.354671][T15119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.365284][T15119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.366827][T15339] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4090'. [ 237.380586][T15119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.397014][T15337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.438488][T15205] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 237.445565][ T29] audit: type=1400 audit(2000000072.200:9141): avc: denied { rename } for pid=15336 comm="syz.3.4089" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 237.468066][ T29] audit: type=1400 audit(2000000072.200:9142): avc: denied { rmdir } for pid=15336 comm="syz.3.4089" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 237.502712][ T29] audit: type=1400 audit(2000000072.200:9143): avc: denied { rename } for pid=15336 comm="syz.3.4089" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 237.540180][T12121] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 237.541080][T15119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.562619][T12121] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 237.567459][T15119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.594022][T15119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.604554][T15119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.615304][T15119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.633323][T15119] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.642117][T15119] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.650990][T15119] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.659759][T15119] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.673544][T15205] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 237.683231][T15205] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 237.693794][T15205] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 237.710259][T15352] random: crng reseeded on system resumption [ 237.738451][T15171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.758512][T12121] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.919020][T15205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.958509][T15205] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.996958][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.004094][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.032243][T15371] loop5: detected capacity change from 0 to 2048 [ 238.038088][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.045756][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.059955][T15371] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.239932][T15171] veth0_vlan: entered promiscuous mode [ 238.249420][T15205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.268213][T15171] veth1_vlan: entered promiscuous mode [ 238.331637][T15171] veth0_macvtap: entered promiscuous mode [ 238.377272][T15171] veth1_macvtap: entered promiscuous mode [ 238.416749][T15171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.427300][T15171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.437729][T15171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.448186][T15171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.458245][T15171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.469445][T15171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.481256][T15171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.509170][T15171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.519835][T15171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.529733][T15171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.540888][T15171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.550800][T15171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.561421][T15171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.573160][T15171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.582520][T15171] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.591499][T15171] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.600883][T15171] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.609682][T15171] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.774449][T15409] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 238.794344][T15368] chnl_net:caif_netlink_parms(): no params data found [ 238.868320][T15205] veth0_vlan: entered promiscuous mode [ 238.898115][T15205] veth1_vlan: entered promiscuous mode [ 238.934579][T15418] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4101'. [ 238.946044][T15119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.971511][T15205] veth0_macvtap: entered promiscuous mode [ 238.991519][T15420] loop5: detected capacity change from 0 to 512 [ 239.005153][T15368] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.012293][T15368] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.015694][T15420] EXT4-fs (loop5): invalid journal inode [ 239.020356][T15368] bridge_slave_0: entered allmulticast mode [ 239.031760][T15368] bridge_slave_0: entered promiscuous mode [ 239.032188][T15420] EXT4-fs (loop5): can't get journal size [ 239.038824][T15368] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.050548][T15368] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.058001][T15368] bridge_slave_1: entered allmulticast mode [ 239.064736][T15368] bridge_slave_1: entered promiscuous mode [ 239.074535][T15420] EXT4-fs (loop5): 1 truncate cleaned up [ 239.085765][T15420] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.096443][T15418] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 239.112704][T15205] veth1_macvtap: entered promiscuous mode [ 239.134182][T15425] __nla_validate_parse: 1 callbacks suppressed [ 239.134198][T15425] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4104'. [ 239.167317][T15119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.178053][T15427] random: crng reseeded on system resumption [ 239.220921][T15368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.233885][T15205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.244494][T15205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.254472][T15205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.265039][T15205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.274935][T15205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.285507][T15205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.295343][T15205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.305912][T15205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.353457][T15205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.362909][T15368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.374981][T15205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.385602][T15205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.395424][T15205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.405963][T15205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.415848][T15205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.426420][T15205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.436343][T15205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.447129][T15205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.480363][T15445] loop5: detected capacity change from 0 to 2048 [ 239.488475][T15205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.519652][T15445] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.520408][T15447] xt_TPROXY: Can be used only with -p tcp or -p udp [ 239.553261][T15205] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.562164][T15205] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.571597][T15205] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.580390][T15205] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.594426][T15368] team0: Port device team_slave_0 added [ 239.602739][T15368] team0: Port device team_slave_1 added [ 239.628062][T15368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.635060][T15368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.662394][T15368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.675309][T15368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.682422][T15368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.709617][T15368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.755844][T15368] hsr_slave_0: entered promiscuous mode [ 239.770216][T15368] hsr_slave_1: entered promiscuous mode [ 239.776916][T15368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.793557][T15368] Cannot create hsr debugfs directory [ 239.900947][T15461] loop7: detected capacity change from 0 to 512 [ 239.922561][T15461] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 239.939949][T15368] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.964270][T15461] EXT4-fs (loop7): 1 orphan inode deleted [ 239.970164][T15461] EXT4-fs (loop7): 1 truncate cleaned up [ 239.979709][T15461] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.994373][T15461] EXT4-fs error (device loop7): ext4_search_dir:1505: inode #12: block 7: comm syz.7.4115: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 240.017036][T15461] EXT4-fs (loop7): Remounting filesystem read-only [ 240.033294][T15368] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.096345][T15368] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.120404][T15469] random: crng reseeded on system resumption [ 240.208113][T15471] loop8: detected capacity change from 0 to 512 [ 240.240975][T15368] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.343810][T15368] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 240.376145][T15482] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4122'. [ 240.392309][T15368] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 240.402839][ T29] audit: type=1326 audit(2000000075.160:9144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15479 comm="syz.7.4122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7f7a5d29 code=0x7ffc0000 [ 240.442404][T15368] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 240.467044][T15368] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 240.536728][T15368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.571457][T15368] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.583976][T15499] bridge0: entered promiscuous mode [ 240.592030][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.599144][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.600905][T15501] random: crng reseeded on system resumption [ 240.631318][ T5055] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.638437][ T5055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.856186][T15368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.904987][T15517] loop8: detected capacity change from 0 to 2048 [ 240.964051][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 240.964067][ T29] audit: type=1400 audit(2000000075.720:9275): avc: denied { audit_read } for pid=15523 comm="syz.2.4136" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 241.152503][ T29] audit: type=1326 audit(2000000075.900:9276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.2.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1580b75d29 code=0x7ffc0000 [ 241.163606][T15368] veth0_vlan: entered promiscuous mode [ 241.176801][ T29] audit: type=1326 audit(2000000075.900:9277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.2.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1580b74690 code=0x7ffc0000 [ 241.195310][T15368] veth1_vlan: entered promiscuous mode [ 241.204955][ T29] audit: type=1326 audit(2000000075.900:9278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.2.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1580b74690 code=0x7ffc0000 [ 241.234803][ T29] audit: type=1326 audit(2000000075.900:9279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.2.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1580b75d29 code=0x7ffc0000 [ 241.259025][ T29] audit: type=1326 audit(2000000075.900:9280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.2.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1580b75d29 code=0x7ffc0000 [ 241.282745][ T29] audit: type=1326 audit(2000000075.900:9281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.2.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1580b75d29 code=0x7ffc0000 [ 241.306984][ T29] audit: type=1326 audit(2000000075.900:9282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.2.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1580b75d29 code=0x7ffc0000 [ 241.311503][T15368] veth0_macvtap: entered promiscuous mode [ 241.330665][ T29] audit: type=1326 audit(2000000075.900:9283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.2.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1580b75d29 code=0x7ffc0000 [ 241.360481][ T29] audit: type=1326 audit(2000000075.900:9284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.2.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1580b75d29 code=0x7ffc0000 [ 241.399371][T15368] veth1_macvtap: entered promiscuous mode [ 241.409247][T15494] bridge0: left promiscuous mode [ 241.427753][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.439049][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.448923][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.450087][T15547] ebtables: ebtables: counters copy to user failed while replacing table [ 241.459365][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.459438][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.489067][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.499672][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.510142][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.520034][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.531102][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.541941][T15368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.551123][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.562577][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.572499][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.582984][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.593518][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.603984][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.613835][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.624961][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.634994][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.645480][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.656673][T15368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.667801][T15554] random: crng reseeded on system resumption [ 241.733258][T15368] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.743170][T15368] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.751898][T15368] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.760652][T15368] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.894708][T15568] xt_CT: No such helper "snmp_trap" [ 241.918171][T15570] loop2: detected capacity change from 0 to 4096 [ 241.953023][T15576] loop8: detected capacity change from 0 to 512 [ 241.971905][T15576] EXT4-fs error (device loop8): ext4_orphan_get:1389: inode #15: comm syz.8.4148: casefold flag without casefold feature [ 241.992516][T15576] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.4148: couldn't read orphan inode 15 (err -117) [ 242.029315][T15584] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4150'. [ 242.038516][T15584] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4150'. [ 242.047850][T15584] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4150'. [ 242.093149][T15584] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4150'. [ 242.100573][T15586] ip6tnl1: entered promiscuous mode [ 242.102202][T15584] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4150'. [ 242.108415][T15586] ip6tnl1: entered allmulticast mode [ 242.117200][T15584] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4150'. [ 242.199193][T15584] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4150'. [ 242.208357][T15584] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4150'. [ 242.227957][T15598] random: crng reseeded on system resumption [ 242.312210][T15600] loop5: detected capacity change from 0 to 2048 [ 242.435178][T15613] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 242.497989][T15613] loop4: detected capacity change from 0 to 512 [ 242.518816][T15613] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.4161: casefold flag without casefold feature [ 242.553166][T15613] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.4161: couldn't read orphan inode 15 (err -117) [ 242.570684][T15627] loop8: detected capacity change from 0 to 512 [ 242.577658][T15627] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 242.603652][T15627] EXT4-fs error (device loop8): ext4_orphan_get:1415: comm syz.8.4167: bad orphan inode 131083 [ 242.606512][T15631] loop7: detected capacity change from 0 to 128 [ 242.705912][T15635] bio_check_eod: 19 callbacks suppressed [ 242.706008][T15635] syz.7.4165: attempt to access beyond end of device [ 242.706008][T15635] loop7: rw=0, sector=121, nr_sectors = 920 limit=128 [ 242.748647][T15637] random: crng reseeded on system resumption [ 242.820012][T15623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.832956][T15623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.954958][T15650] syz.4.4175[15650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.955162][T15650] syz.4.4175[15650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.967613][T15650] syz.4.4175[15650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 243.282525][T15665] loop4: detected capacity change from 0 to 512 [ 243.320178][T15667] random: crng reseeded on system resumption [ 243.394869][T15665] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.461886][T15674] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 243.733361][T15695] loop7: detected capacity change from 0 to 256 [ 243.776525][T15695] FAT-fs (loop7): Directory bread(block 64) failed [ 243.788464][T15697] loop5: detected capacity change from 0 to 2048 [ 243.804212][T15695] FAT-fs (loop7): Directory bread(block 65) failed [ 243.821770][T15695] FAT-fs (loop7): Directory bread(block 66) failed [ 243.841363][T15695] FAT-fs (loop7): Directory bread(block 67) failed [ 243.918499][T15695] FAT-fs (loop7): Directory bread(block 68) failed [ 243.965782][T15695] FAT-fs (loop7): Directory bread(block 69) failed [ 244.012394][T15695] FAT-fs (loop7): Directory bread(block 70) failed [ 244.042788][T15695] FAT-fs (loop7): Directory bread(block 71) failed [ 244.082459][T15695] FAT-fs (loop7): Directory bread(block 72) failed [ 244.104270][T15695] FAT-fs (loop7): Directory bread(block 73) failed [ 244.148235][T15709] random: crng reseeded on system resumption [ 244.156256][T15695] __nla_validate_parse: 9 callbacks suppressed [ 244.156273][T15695] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4191'. [ 244.414830][T15718] netlink: 5 bytes leftover after parsing attributes in process `syz.8.4199'. [ 244.423896][T15718] netlink: 5 bytes leftover after parsing attributes in process `syz.8.4199'. [ 244.451179][T15720] wireguard0: entered promiscuous mode [ 244.456017][T15723] loop2: detected capacity change from 0 to 128 [ 244.456731][T15720] wireguard0: entered allmulticast mode [ 244.464888][T15723] vfat: Bad value for 'shortname' [ 244.742575][T15739] random: crng reseeded on system resumption [ 245.093949][T15751] x_tables: duplicate underflow at hook 1 [ 245.197944][T15757] netlink: 268 bytes leftover after parsing attributes in process `syz.8.4215'. [ 245.207311][T15757] unsupported nla_type 65024 [ 245.224229][T15759] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4216'. [ 245.614430][T15764] loop8: detected capacity change from 0 to 2048 [ 245.794645][T15773] wireguard0: entered promiscuous mode [ 245.800203][T15773] wireguard0: entered allmulticast mode [ 245.815649][T15776] loop4: detected capacity change from 0 to 512 [ 245.858146][T15776] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.884383][T15780] random: crng reseeded on system resumption [ 245.893239][T15776] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.4220: Failed to acquire dquot type 1 [ 245.915416][T15776] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.4220: Failed to acquire dquot type 1 [ 245.973794][ T29] kauditd_printk_skb: 294 callbacks suppressed [ 245.973813][ T29] audit: type=1400 audit(2000000080.730:9575): avc: denied { create } for pid=15782 comm="syz.5.4223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 246.037374][T15783] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4223'. [ 246.053913][T15783] batadv1: entered promiscuous mode [ 246.059912][T15783] batadv1: entered allmulticast mode [ 246.102634][T15787] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4224'. [ 246.130423][T15787] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4224'. [ 246.188993][T15790] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4226'. [ 246.303170][T15793] syzkaller0: entered promiscuous mode [ 246.308770][T15793] syzkaller0: entered allmulticast mode [ 246.339723][T15799] wireguard0: entered promiscuous mode [ 246.345352][T15799] wireguard0: entered allmulticast mode [ 246.402632][T15804] bond1: entered promiscuous mode [ 246.407869][T15804] bond1: entered allmulticast mode [ 246.413748][T15804] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.423340][T15809] loop5: detected capacity change from 0 to 256 [ 246.456304][T15804] bond1 (unregistering): Released all slaves [ 246.491529][ T29] audit: type=1400 audit(2000000081.250:9576): avc: denied { create } for pid=15812 comm="syz.8.4232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 246.515869][T15813] loop8: detected capacity change from 0 to 512 [ 246.522624][T15813] vfat: Unknown parameter 'fowner' [ 246.528494][T15813] ucma_write: process 84 (syz.8.4232) changed security contexts after opening file descriptor, this is not allowed. [ 246.575684][T15817] random: crng reseeded on system resumption [ 246.686716][T15825] netlink: 'syz.7.4239': attribute type 1 has an invalid length. [ 246.708715][T15826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4236'. [ 246.755467][ T29] audit: type=1400 audit(2000000081.510:9577): avc: denied { nlmsg_read } for pid=15824 comm="syz.4.4236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 246.758857][T15834] loop8: detected capacity change from 0 to 2048 [ 246.797352][T15835] loop5: detected capacity change from 0 to 2048 [ 246.833104][T15840] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 246.883176][T15846] loop4: detected capacity change from 0 to 512 [ 246.901689][T15846] ext4: Unknown parameter 'GPL' [ 247.014391][ T29] audit: type=1326 audit(2000000081.750:9578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15857 comm="syz.4.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c2365d29 code=0x7ffc0000 [ 247.038753][ T29] audit: type=1326 audit(2000000081.750:9579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15857 comm="syz.4.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c2365d29 code=0x7ffc0000 [ 247.062838][ T29] audit: type=1326 audit(2000000081.750:9580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15857 comm="syz.4.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fa1c2365d29 code=0x7ffc0000 [ 247.087069][ T29] audit: type=1326 audit(2000000081.750:9581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15857 comm="syz.4.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c2365d29 code=0x7ffc0000 [ 247.110630][ T29] audit: type=1326 audit(2000000081.750:9582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15857 comm="syz.4.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1c2365d29 code=0x7ffc0000 [ 247.135014][ T29] audit: type=1326 audit(2000000081.750:9583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15857 comm="syz.4.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c2365d29 code=0x7ffc0000 [ 247.159332][ T29] audit: type=1326 audit(2000000081.750:9584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15857 comm="syz.4.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa1c2365d29 code=0x7ffc0000 [ 247.267444][T15872] random: crng reseeded on system resumption [ 247.344497][T15874] loop2: detected capacity change from 0 to 512 [ 247.355761][T15874] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 247.376142][T15874] EXT4-fs (loop2): 1 truncate cleaned up [ 247.542840][T15882] loop7: detected capacity change from 0 to 1024 [ 247.705678][T15522] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 247.775494][T15522] EXT4-fs (loop5): Remounting filesystem read-only [ 247.979914][T15895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.988521][T15895] batadv_slave_0: entered promiscuous mode [ 248.013353][T15895] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 248.036130][T15895] netlink: 'syz.4.4264': attribute type 29 has an invalid length. [ 248.048930][T15895] netlink: 'syz.4.4264': attribute type 29 has an invalid length. [ 248.052233][T15898] loop5: detected capacity change from 0 to 1024 [ 248.070667][T15895] netlink: 'syz.4.4264': attribute type 29 has an invalid length. [ 248.079860][T15895] netlink: 'syz.4.4264': attribute type 29 has an invalid length. [ 248.088729][T15895] netlink: 'syz.4.4264': attribute type 29 has an invalid length. [ 248.097560][T15895] netlink: 'syz.4.4264': attribute type 29 has an invalid length. [ 248.111045][T15895] netlink: 'syz.4.4264': attribute type 29 has an invalid length. [ 248.187433][T15909] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15909 comm=syz.5.4267 [ 248.216836][T15907] loop4: detected capacity change from 0 to 2048 [ 248.286959][T15917] hsr0: entered promiscuous mode [ 248.298332][T15917] macsec1: entered allmulticast mode [ 248.303762][T15917] hsr0: entered allmulticast mode [ 248.309542][T15917] hsr_slave_0: entered allmulticast mode [ 248.315267][T15917] hsr_slave_1: entered allmulticast mode [ 248.322922][T15917] hsr0: left allmulticast mode [ 248.327863][T15917] hsr_slave_0: left allmulticast mode [ 248.333340][T15917] hsr_slave_1: left allmulticast mode [ 248.339679][T15921] block device autoloading is deprecated and will be removed. [ 248.352234][T15921] syz.7.4271: attempt to access beyond end of device [ 248.352234][T15921] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 248.440665][T15925] random: crng reseeded on system resumption [ 248.562276][T15930] loop5: detected capacity change from 0 to 1024 [ 248.576692][T15930] ext4: Bad value for 'auto_da_alloc' [ 248.625259][T15938] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 248.645178][T15936] loop2: detected capacity change from 0 to 2048 [ 248.667511][T15930] program syz.5.4275 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.727762][T15941] loop5: detected capacity change from 0 to 1024 [ 248.791599][T15941] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm +}[@: Failed to acquire dquot type 0 [ 248.805404][T15941] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 248.835249][T15941] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #13: comm +}[@: corrupted inode contents [ 248.835697][T15949] loop2: detected capacity change from 0 to 1024 [ 248.851191][T15941] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #13: comm +}[@: mark_inode_dirty error [ 248.864440][T15941] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #13: comm +}[@: corrupted inode contents [ 248.879905][T15941] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #13: comm +}[@: mark_inode_dirty error [ 248.891135][T15941] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #13: comm +}[@: corrupted inode contents [ 248.907321][T15941] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 248.940512][T15941] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #13: comm +}[@: corrupted inode contents [ 248.961171][T15941] EXT4-fs error (device loop5): ext4_truncate:4240: inode #13: comm +}[@: mark_inode_dirty error [ 248.996305][T15941] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 249.011313][T15941] EXT4-fs (loop5): 1 truncate cleaned up [ 249.018838][T15954] loop2: detected capacity change from 0 to 128 [ 249.048801][T15954] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.169366][T15959] __nla_validate_parse: 10 callbacks suppressed [ 249.169471][T15959] netlink: 348 bytes leftover after parsing attributes in process `syz.4.4284'. [ 249.242003][T15963] loop2: detected capacity change from 0 to 128 [ 249.271802][T15963] ext4 filesystem being mounted at /245/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 249.356222][T15968] random: crng reseeded on system resumption [ 249.474951][T15973] xt_connbytes: Forcing CT accounting to be enabled [ 249.481795][T15973] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 249.501168][T15978] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4291'. [ 249.519017][T15973] xt_bpf: check failed: parse error [ 249.579549][T15980] loop8: detected capacity change from 0 to 128 [ 249.589340][T15986] loop4: detected capacity change from 0 to 512 [ 249.624554][T15986] journal_path: Non-blockdev passed as './file0' [ 249.631086][T15986] EXT4-fs: error: could not find journal device path [ 249.644676][T15988] loop2: detected capacity change from 0 to 1024 [ 249.757120][T15995] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4298'. [ 249.851005][T16005] loop2: detected capacity change from 0 to 512 [ 249.880409][T16008] tmpfs: Bad value for 'mpol' [ 249.894795][T16008] netlink: 'syz.8.4304': attribute type 13 has an invalid length. [ 249.903808][T16009] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 249.907874][T16005] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.910335][T16009] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 249.929400][T16009] vhci_hcd vhci_hcd.0: Device attached [ 249.979485][T16012] vhci_hcd: connection closed [ 249.979746][ T50] vhci_hcd: stop threads [ 249.988872][ T50] vhci_hcd: release socket [ 249.993512][ T50] vhci_hcd: disconnect device [ 250.108793][T16021] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4308'. [ 250.148647][T16008] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.156000][T16008] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.208789][T16029] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4312'. [ 250.274626][T16008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.289082][T16008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.335172][T16008] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.344220][T16008] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.353372][T16008] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.362476][T16008] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.387944][T16029] batadv1: entered promiscuous mode [ 250.393210][T16029] batadv1: entered allmulticast mode [ 250.449651][T16042] loop8: detected capacity change from 0 to 128 [ 250.459384][T16042] program syz.8.4316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.468939][T16042] program syz.8.4316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.480761][T16042] hub 6-0:1.0: USB hub found [ 250.485773][T16042] hub 6-0:1.0: 8 ports detected [ 250.579774][T16047] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 250.617242][T16051] loop4: detected capacity change from 0 to 4096 [ 250.631191][T16055] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4321'. [ 250.666108][T16054] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4322'. [ 250.712531][T16058] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 250.714642][T16051] EXT4-fs mount: 46 callbacks suppressed [ 250.714661][T16051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.757440][T16064] loop8: detected capacity change from 0 to 164 [ 250.769514][T16064] isofs_fill_super: root inode is not a directory. Corrupted media? [ 250.842468][T15368] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.924009][T16087] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4335'. [ 250.933197][T16087] netlink: 84 bytes leftover after parsing attributes in process `syz.7.4335'. [ 251.069256][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 251.069275][ T29] audit: type=1326 audit(2000000085.830:9742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16098 comm="syz.7.4340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7f7a5d29 code=0x7ffc0000 [ 251.107818][ T29] audit: type=1326 audit(2000000085.830:9743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16098 comm="syz.7.4340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f3d7f7a5d29 code=0x7ffc0000 [ 251.131571][ T29] audit: type=1326 audit(2000000085.830:9744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16098 comm="syz.7.4340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7f7a5d29 code=0x7ffc0000 [ 251.155323][ T29] audit: type=1326 audit(2000000085.830:9745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16098 comm="syz.7.4340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3d7f7a5d29 code=0x7ffc0000 [ 251.178907][ T29] audit: type=1326 audit(2000000085.830:9746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16098 comm="syz.7.4340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7f7a5d29 code=0x7ffc0000 [ 251.202576][ T29] audit: type=1326 audit(2000000085.830:9747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16098 comm="syz.7.4340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d7f7a5d29 code=0x7ffc0000 [ 251.226684][ T29] audit: type=1326 audit(2000000085.830:9748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16098 comm="syz.7.4340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7f7a5d29 code=0x7ffc0000 [ 251.250608][ T29] audit: type=1326 audit(2000000085.830:9749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16098 comm="syz.7.4340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d7f7a5d29 code=0x7ffc0000 [ 251.274541][ T29] audit: type=1326 audit(2000000085.860:9750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16098 comm="syz.7.4340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7f7a5d29 code=0x7ffc0000 [ 251.281289][T16102] blktrace: Concurrent blktraces are not allowed on loop15 [ 251.298109][ T29] audit: type=1326 audit(2000000085.860:9751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16098 comm="syz.7.4340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7f7a5d29 code=0x7ffc0000 [ 251.419910][T16105] loop8: detected capacity change from 0 to 256 [ 251.447726][T16105] FAT-fs (loop8): Directory bread(block 64) failed [ 251.454310][T16105] FAT-fs (loop8): Directory bread(block 65) failed [ 251.461656][T16105] FAT-fs (loop8): Directory bread(block 66) failed [ 251.468253][T16105] FAT-fs (loop8): Directory bread(block 67) failed [ 251.474848][T16105] FAT-fs (loop8): Directory bread(block 68) failed [ 251.481503][T16105] FAT-fs (loop8): Directory bread(block 69) failed [ 251.488845][T16105] FAT-fs (loop8): Directory bread(block 70) failed [ 251.493912][T16110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4343'. [ 251.495556][T16105] FAT-fs (loop8): Directory bread(block 71) failed [ 251.495645][T16105] FAT-fs (loop8): Directory bread(block 72) failed [ 251.495736][T16105] FAT-fs (loop8): Directory bread(block 73) failed [ 251.788658][T15205] ================================================================== [ 251.796876][T15205] BUG: KCSAN: data-race in filemap_flush / xas_set_mark [ 251.803835][T15205] [ 251.806174][T15205] write to 0xffff8881004c2464 of 4 bytes by task 28 on cpu 0: [ 251.813744][T15205] xas_set_mark+0x131/0x150 [ 251.818278][T15205] __folio_start_writeback+0x1e8/0x430 [ 251.822213][T16121] ebtables: ebtables: counters copy to user failed while replacing table [ 251.823765][T15205] __block_write_full_folio+0x506/0x8c0 [ 251.837916][T15205] block_write_full_folio+0x293/0x2b0 [ 251.843327][T15205] write_cache_pages+0x62/0x100 [ 251.848216][T15205] blkdev_writepages+0x59/0x90 [ 251.853022][T15205] do_writepages+0x1d8/0x480 [ 251.857660][T15205] __writeback_single_inode+0x89/0x850 [ 251.863159][T15205] writeback_sb_inodes+0x461/0xa30 [ 251.868302][T15205] __writeback_inodes_wb+0x9a/0x1a0 [ 251.873549][T15205] wb_writeback+0x274/0x640 [ 251.878082][T15205] wb_workfn+0x67f/0x940 [ 251.882373][T15205] process_scheduled_works+0x483/0x9a0 [ 251.887876][T15205] worker_thread+0x51d/0x6f0 [ 251.892501][T15205] kthread+0x1d1/0x210 [ 251.894459][T16126] bridge0: entered promiscuous mode [ 251.896578][T15205] ret_from_fork+0x4b/0x60 [ 251.896604][T15205] ret_from_fork_asm+0x1a/0x30 [ 251.896631][T15205] [ 251.896639][T15205] read to 0xffff8881004c2464 of 4 bytes by task 15205 on cpu 1: [ 251.921008][T15205] filemap_flush+0x9a/0x120 [ 251.925536][T15205] sync_blockdev_nowait+0x29/0x40 [ 251.930593][T15205] sync_filesystem+0xe3/0x190 [ 251.935299][T15205] generic_shutdown_super+0x46/0x220 [ 251.940617][T15205] kill_block_super+0x2a/0x70 [ 251.945325][T15205] deactivate_locked_super+0x7d/0x1c0 [ 251.950749][T15205] deactivate_super+0x9f/0xb0 [ 251.955454][T15205] cleanup_mnt+0x268/0x2e0 [ 251.959893][T15205] __cleanup_mnt+0x19/0x20 [ 251.964335][T15205] task_work_run+0x13a/0x1a0 [ 251.968944][T15205] syscall_exit_to_user_mode+0xa8/0x120 [ 251.974593][T15205] do_syscall_64+0xd6/0x1c0 [ 251.979129][T15205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.985069][T15205] [ 251.987412][T15205] value changed: 0x02000021 -> 0x04000021 [ 251.993148][T15205] [ 251.995479][T15205] Reported by Kernel Concurrency Sanitizer on: [ 252.001644][T15205] CPU: 1 UID: 0 PID: 15205 Comm: syz-executor Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 252.012610][T15205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 252.022694][T15205] ================================================================== [ 252.585671][T16118] bridge0: left promiscuous mode