last executing test programs: 11m15.575294722s ago: executing program 32 (id=120): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r2 = open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) mount(&(0x7f0000000040)=@filename='./file0/../file0/../file0\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x1000000, &(0x7f0000000300)='trans=rdma,') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB='\r\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="02002cbd7000ffdbdf2501000000080001003f00000008000300", @ANYRES32=r4, @ANYBLOB="0c009900060000001b000000"], 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x40001) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./bus\x00', 0x0, 0x4000, r1}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) 11m0.724780307s ago: executing program 33 (id=432): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10) setitimer(0x1, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037", @ANYRES16], 0xb0}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xe, &(0x7f0000000080)=0x2, 0x4) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4ec, &(0x7f0000000380)="$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") 9m42.173216407s ago: executing program 34 (id=2158): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x2}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 8m53.317307518s ago: executing program 35 (id=3136): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xb, 0x3, &(0x7f0000000540)=ANY=[@ANYRES16=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) waitid(0x0, 0x0, 0x0, 0x81000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYBLOB="07924a022e512b8b8a115516a1dca884cc5dec111d3cc98189b7c0a63958f19ac352ef487b7979795425655a35fb140c64c3287f4780c8579c7ad90335", @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a00000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) r6 = creat(&(0x7f0000000200)='./file1\x00', 0x50) close(r6) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x0, 0x10100, 0x0, 0x312}, 0x0, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0xb00, 0x0, 0x0, {0x0, 0x0, 0x3}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000300000000000004000000080002000500"], 0x24}}, 0x0) 7m23.343706819s ago: executing program 36 (id=5064): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 6m55.353746252s ago: executing program 37 (id=5656): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, &(0x7f0000000300)={0x0}, 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0x4, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0x2}, {0xfff3, 0x8}, {0x9, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x69}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000804) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000b1000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xf000, 0x7ff}]}) (fail_nth: 1) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010700000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001c40)={&(0x7f0000001cc0)='kmem_cache_free\x00', r9}, 0x10) pipe2(&(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x34}}, 0xc000) sendto$inet6(r5, &(0x7f00000002c0)="9e", 0x1, 0x40014, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0x1000}, 0x1c) sendto$inet6(r5, &(0x7f0000000000)="11e5a0", 0x3, 0xb4ff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5m25.920311464s ago: executing program 38 (id=7999): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) unshare(0x20040600) creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e) 5m25.692896381s ago: executing program 39 (id=8011): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 5m24.961821805s ago: executing program 40 (id=8024): r0 = io_uring_setup(0x4111, &(0x7f0000000200)={0x0, 0x10000000, 0x0, 0xfdfffffc, 0xd8}) eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0]}, 0x20) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa}, 0x0, &(0x7f0000000200)={0x1fc, 0x3, 0x0, 0x3}, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) 5m24.526346227s ago: executing program 41 (id=8028): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x6b66, &(0x7f0000000280)={0x0, 0xffbffffc, 0x10000, 0x1, 0x3bd}) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x4) close_range(r2, r3, 0x0) 5m22.781478365s ago: executing program 42 (id=8036): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00049b6f5200005d6688f80001cff2858eba331f3a2e0e57c44a9316afa27d2fbf0e7bf7869db1fee9d2806b03648d55618b7ab04b10028e96dbf7087ee3d04e4c08f6a455860c5b8da83434d38d56d46fecd33557a3386d7a59a6e653746e7ac1c4dd6d9c58286b9a8abbe4ec259042a6ce2029e0df662d8e0e8eeb38f0259cc904e0ad364d432dd888f7d827d19c60"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020114000129"], 0xdd12}], 0x1}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$P9_RLERRORu(r5, &(0x7f0000000140)={0x1d, 0x7, 0x2, {{0x10, 'kmem_cache_free\x00'}, 0x2}}, 0x1d) futex(&(0x7f00000001c0)=0x2, 0x7, 0x0, 0x0, 0x0, 0x2) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 4m18.51389513s ago: executing program 3 (id=9480): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x3}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@TCA_RATE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 4m18.497113601s ago: executing program 3 (id=9481): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000001, 0x8010, 0xffffffffffffffff, 0x0) (async) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x50, 0xffffffffffffffff, 0x10000000) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (async) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000006c0)=@IORING_OP_SENDMSG={0x9, 0x16, 0x0, r2, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@pppoe={0x18, 0x0, {0x1, @multicast, 'syz_tun\x00'}}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000000)="7d97679328e2d1093153e0ed9c014f60bb12e20785b2bf", 0x17}, {&(0x7f0000000200)="fb3c0ac2c64939f61670b794", 0xc}, {&(0x7f0000000380)="02ef7fd1fb2d1b62711447811376586ced1fba1b7188bb89dd326a5dd518ad4aa46d1f3e5d9735344f31a3dac4a6ac514ac59b78baa4222e6f68ad1fc1eb034eea1a4c6ccefc0d381035e2a87a22e5b272a636bfce87e89fe60d49aaed4498ad0a2f", 0x62}, {&(0x7f0000000640)="8516557bab9281f0b9010dbbf6209374ca9f6d5798f8dcae2b832d5eb5e08516d979ddc9224ae854f903", 0x2a}, {&(0x7f00000004c0)="ca32bfec48815a754f31f20c4a8c7ccaa7beafca8054d084ffa1920f25de068b1f2470b488989a84c167d2f9c92f0a5f7467fa1faa707dd59609ba593fae175d377f164d1443fa5349939a1ac62b4d9e56b4ce64b51ea116033b98b1dbcf3bcf4cc2b1f4b0481f4e868bb52e2f69a01f096e46f5df6116f0388cc41950463e0f180f94af1c5eb8ccbd49ee54832bd2297907d42472b9a403c89c6862d7ba1ebb0cda3976f76775501a78b9653f39bf27ac6e34c74150ae9d6845818f6a305e8b0543abdca3c98063a3ad4e6bc1f340c31abb6af33efc162a30730b491a1315", 0xdf}, {&(0x7f00000005c0)="f5bc750d4e275d52379bf9204ebc11c28ef5716f87af48a26d7c3a85c74db06f3091439f68bb9f75612e23400e4bf3e61d5370a3d1d22b48ba58166c9fc94125e0edcb62d0ab1a56f9ae232d639d632cbc0f3a685be12d301186c37f955c25c528c489af99e11a5c51bbab413ff0ae4b1b07a169b6c54aba88", 0x79}, {&(0x7f00000002c0)="01047eac96c6add6e27e4c0d8d79cfd50434e5d894e1dba4", 0x18}, {&(0x7f0000000800)="45e3e6c929b7c320da5811ea9ae21fea0eae9617a79d597551d5365742bb05bba684403e83bdeced98dd2633b14638861b4b384004fdf7be877d507a8621ec6c808e1ff34f03fb5f9cbc21d60f5fc93c5c145b3590d56ad6ab892462339fb2c6f32b7b78a76e1c268d07dc5ee325d2c117265fa44e33efaf16f58c7c9a8ed374f0f8c54a815daf9a8ca0dfdf9a5182717aad9764b9a38974981cfb1db16161b035047e7db7149ab0aff1905648e97422a0a26ebeceaeff3721f7d21f4f", 0xbd}, {&(0x7f00000008c0)="1ece148b40566c6d8c7c4753cf4b93786d005022ee5b3b630afd49eb6b779af820b4f598fecfb242497236d17e2dd6e6337fd9ef6b0b508a64bd205c54f40241cc6929127761a5cf2f3b5ba9f7ff14ba1840f9ff284b784402d23248869d147b2835cd9b1c90b3ccf938e7e3a5a440fad852b662ff2add98330a2db8157638986c7495a13e1337e71d3d2cb3c19dd10eaa3821f69b6263814abd9af0f4a7cc2a8a8055ad647806805f7933d69a95799e9785cd07c55d0cf240bbcf5bbf15fd85f77e3eb8cd53973e1bd526fa690b17b563", 0xd1}, {&(0x7f0000000b00)="8e0efe65df2a0477f4f99ef6471d220ad9c5de7077b2b7724bcd3cbdf62b1f7bb8babe8ee349dce0eeed8443aff6a11e4782292160ee77299c9311a2bd273553688eb9dedcfff979b7f22d8f1096f0f1f590a29446697d32210f63aacd969df04976a2d741fefd21122bbf5ba1dc3907a8396f7662403b840903777d358e2bcc211aa067fb5d9feb6b6cd2ac4be563e3f6cfbac0bdfa870522299437cb417144c2e591c69b0e067a145ab490d4077d88e5c8cc8371cb5ed70c299dc8391da14cadf67864d1106cb037855a17f290014aad5f823ed95ba735d2", 0xd9}, {&(0x7f0000000cc0)="d82198fd4bbeed585595d076919f511f22d8c450c4b14ba4d067ee80a2f89c18d12fbf43b5c4121ebb6c4fac1b5677974483e791dc896d9b22000113d7bd35fa0aa252b2e0439b89f99c15ea12fd932fe971a3c6ead5e04b95bfa7bf05c0ae9b690f9af05237313f16ed6b12b86f08019a8271b7b11728457ebcde94ca3a63a83da7fbaa947f053ab042862f9483c098ae4c135504e42752c9d155450a864e60fe109a08b5a871916e34608a02bcd4964b491a6b238d872ce343b16f36fee5", 0xbf}, {&(0x7f0000000dc0)="ea40e710adf7e993355331409227b3cb0f6b6932623018ad52c6a79f2dba63b04c3f7358eb8f299526a384110ca32dd3e690b910a6bcb58dfe8be7903c78751ad29a2972d93ac37ba14a7faffd2004f7da90088d67d0fe57edac2f5ce8201149ed6421cf657983f3400ab758bdf0f6bba3e7c07b604fb72be6c3fb022d72af7f8b9c2ab5b6786824f6c72107651a66d50246a51aa8c86843ea764d143ce8d51dcf256cf5dc5cff", 0xa7}, {&(0x7f00000009c0)="07708334d28e6830aac55fb2d46f72f07ded68b5d1fcd040b6c3cec7cc0fc3720a9ba5b243328fc9fe569f2ee28bdfc9d280e55efd1e145f91bd819d82fadc6b642cddbc6961648df5d69c8dfee2e1c6792e3c3a0702e067ef4b89b024e7b64c69d935f3f2b06746e2c34ab49f2203abb5727b1730b6438da0f85d2e51", 0x7d}, {&(0x7f0000000e80)="c1043f1825d083f88b58bbcf86f950e6617f9911c657671e5bfb81ea7e9a1fc426f596b78cd0ce636e31ef611f8c4825bc4b0ed42c2d94a3c9262eb47ef4cf527d40c8995796a40456b2d0b027e3767fe412fff2c30a4d7ec0e1135e9a76183e1990d3a3044fd0abbe0379063d1a709b9788f5e5bd5e711b18d5d9eb7e2c560932ba64e9042b95676aefdd6e3889334b9f0872970c90c4633b4d171292180bfcea190252c7cf90002a286794b2a1ef0e08ca4264b704e12b330d", 0xba}, {&(0x7f0000000f40)="19bc1ee0c0ebf8176d2615fa132e384f992222ea210a7287a3c50cca9dd246227de81c77bcb56bce8ac378163b5fdeb5080e08153b2f7bfe78ffc744f25e536a48949419ead30619ed8ad9d9ea12c951dfba7b9e05b6ae4f23b5c3a526600d0eb82c15a569658d8e83791d0b1cd6f2fef3c2f9fdf8d51b5e7710b6731c28d8f555", 0x81}], 0xf}, 0x0, 0x24000880, 0x1, {0x0, r3}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRESOCT=r3], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r6, 0x0) (async, rerun: 64) bind$unix(r6, &(0x7f0000000780)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0xb, 0x5d, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback={0x0, 0x460c6}, 0x20, 0x7800, 0xb2, 0x40000}}) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRESDEC=r3], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c80)='kfree\x00', r9}, 0x18) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async, rerun: 32) r12 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000001040)=""/4111) (async, rerun: 64) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES64=r8, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT=r11, @ANYRES8=0x0], 0x5c}}, 0x0) (rerun: 64) 4m18.428616836s ago: executing program 3 (id=9485): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=r1, @ANYBLOB="20d100000000000014002b8008000100", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x88000}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000031401002dbd7000ffdbdf2509002200"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='ext4_prefetch_bitmaps\x00', 0xffffffffffffffff, 0x0, 0x101}, 0x18) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000440)="77690addcfbe1fbb666cd7247fafcf421f72132a1f5276281bd778a860df991eeb9b64394196afe17e0af07e636d91b50097d128108642b0c578e3a4a2389e3cd28e884188a725d60a93934f2f8246151d6fbf405b0d71fa39ac35d5833f6331c576b782b91ca9", 0x67}], 0x1, 0x1) close(r5) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0xf80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) syz_open_procfs(r6, &(0x7f0000000100)='attr/current\x00') r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x4f77f566c788bb0a) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) close_range(r7, 0xffffffffffffffff, 0x0) 4m18.36580741s ago: executing program 3 (id=9489): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x80e, &(0x7f00000000c0)={[{@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@stripe={'stripe', 0x3d, 0x4}}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}]}, 0x3, 0x45c, &(0x7f00000009c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r1, 0x0) syz_clone3(&(0x7f00000003c0)={0x800000, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext={0x0, 0x1}, 0x115428, 0x0, 0x0, 0x0, 0x5f4d, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x5, 0x96, 0x0, 0xe, 0x7, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xb}, 0x0, 0xc8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x80) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000280)='./file0\x00', 0x1004400, &(0x7f0000000b80)=ANY=[], 0x1, 0x5c1, &(0x7f0000000440)="$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") r4 = syz_open_procfs(0x0, &(0x7f0000000380)='attr/exec\x00') r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bind$pptp(r4, &(0x7f00000000c0)={0x18, 0x2, {0x2, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYRES16=r5], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x2e3b, &(0x7f0000000240)={0x0, 0x482b, 0x10100, 0x1}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0c10000048e36a662cdbddd81000003900000000"], &(0x7f0000000500), 0x600) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x800000000000, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x3ed7, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r6, 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 4m18.218679812s ago: executing program 3 (id=9492): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x3}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@TCA_RATE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 4m17.941045942s ago: executing program 3 (id=9499): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000002604ffff03000000400001802c0004001400010003000a00ac14140f00000000000000001400120002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) 4m17.897187735s ago: executing program 43 (id=9499): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000002604ffff03000000400001802c0004001400010003000a00ac14140f00000000000000001400120002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) 3m20.458092059s ago: executing program 8 (id=10944): creat(&(0x7f0000000240)='./bus\x00', 0xc2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x2) timer_settime(0x0, 0x0, 0x0, 0x0) 3m19.582359053s ago: executing program 8 (id=10971): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x100000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00"/135], 0xa8}}, 0x0) 3m19.572434203s ago: executing program 8 (id=10973): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000000c0)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x20, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}]}, 0x28}}, 0x0) 3m19.549479956s ago: executing program 8 (id=10975): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="850000001a", 0x5) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = socket$netlink(0x10, 0x3, 0x0) listen(r3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r4 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001480)={&(0x7f0000001500)=ANY=[@ANYBLOB="2c0000000107e4a80000004000000000030000010c0015219d034000000000003ac96219208036fa92a08717313e97e246d85669b8d50f4a724fd8438312be82cda702c1584f244057bb7dcfd84ce013b2dd222a266b016bdb361715f08d9c011a4cf15fb1071327e9c742faf739df"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x5090c6ed2485e180) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x96f0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregset(0x4205, r8, 0x2, &(0x7f0000000040)={&(0x7f0000001c40)="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", 0x828}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)=@deltfilter={0xcc4, 0x2d, 0x2, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x9, 0x10}, {0xf, 0x7}, {0x9}}, [@TCA_RATE={0x6, 0x5, {0x53, 0xfd}}, @TCA_RATE={0x6, 0x5, {0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0xc24, 0x2, [@TCA_BPF_POLICE={0xc20, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x3ff, 0x1, 0xfb, 0x6d7f, 0x5, 0x400, 0x7, 0x8, 0xa8, 0x4cdb5246, 0xffffff81, 0x6, 0x7, 0x4, 0x8, 0x1, 0x2e23, 0xa497, 0x1, 0x7f, 0x7fff, 0x4, 0x8, 0x8, 0x400, 0xf6f, 0x10000, 0x8, 0x8000, 0x5, 0x80, 0x9, 0x5, 0x7, 0xb6, 0x4, 0xe9, 0x2c9, 0x3, 0xffff, 0xfb, 0x3, 0xfffffffa, 0x10001, 0x7fffffff, 0x2, 0x3, 0xe, 0x579b, 0xef, 0x9, 0x7, 0x8, 0x0, 0x7, 0x4, 0x0, 0xffffff81, 0x8, 0x4, 0x7, 0x9, 0x671, 0x4, 0x80000001, 0x426, 0x958, 0x3, 0xffffff25, 0x40, 0x4, 0x5, 0x3, 0x81, 0x8, 0x4, 0x10001, 0x0, 0xc, 0x7f, 0x6, 0x800000, 0x9, 0x1ff, 0x6, 0x4, 0xc, 0x5, 0x0, 0x8, 0x2, 0x1, 0x0, 0x2cb, 0x0, 0x4000, 0x4, 0xdd, 0x8001, 0x101, 0x7f, 0x4, 0x2, 0xffffff00, 0x4, 0x2, 0x80000000, 0x8, 0x7, 0x0, 0x7fff, 0xd, 0x20000000, 0x9, 0x4, 0x200, 0x4, 0x9a, 0x8, 0x7c, 0xc6, 0xfffffbff, 0x10, 0x2, 0xe, 0x40, 0x4, 0x7ff, 0xffffffff, 0xdf, 0xfa98, 0xa, 0x7, 0x7, 0x35, 0x5, 0x6, 0x80, 0x1e8, 0x4, 0x6, 0xaa, 0x8e, 0x0, 0x8, 0x5, 0x4, 0xdc46, 0x40, 0x5, 0x2, 0xe, 0x101, 0xffff, 0xd2, 0x3ff, 0x6, 0x100, 0x6, 0x32da, 0xae, 0x101, 0xfffffff8, 0x3, 0x2, 0x80, 0x7, 0x4b, 0xaf, 0x4e7, 0x800, 0x1, 0x267407bb, 0x7, 0x1, 0xdec4ea5, 0xbd9, 0x80000000, 0x7, 0x10, 0x1, 0x0, 0x10000, 0x40, 0x4, 0x2, 0x9, 0x4, 0x7, 0xd57f, 0xff, 0x0, 0x7, 0xcd2, 0x101, 0x6, 0x8, 0x4, 0x39c19fb0, 0xe, 0x3, 0xfffffc00, 0x4, 0x0, 0x2, 0x31e0, 0x7, 0x11, 0x676, 0x6, 0x1ff, 0x3, 0x2, 0x7, 0xa, 0x8, 0x7ff, 0x3, 0x3, 0xa559, 0x1000, 0x800, 0x1, 0xdc, 0x6, 0x80, 0xa97, 0x2a, 0x1ff, 0x8, 0x1, 0x7fff, 0x78c0000, 0x0, 0x8476c9, 0x8000, 0x9, 0xfff, 0x40, 0xfffffffe, 0xec000000, 0xa5, 0xffff, 0x8712, 0xd, 0x9d13, 0x2, 0x1, 0x2, 0x48, 0x7, 0x1, 0x2, 0x8, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfff}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x6, 0x4, 0x5, 0xb, 0x6, 0xaf, 0xee, 0x7, 0x0, 0x9, 0x7, 0x9a86, 0x2, 0x4f, 0x8, 0x8, 0x5, 0x7f, 0x9, 0x772b, 0x4, 0x1, 0x5, 0x80000001, 0xffffffff, 0x100, 0x8, 0x6e3, 0x7, 0xfffffe00, 0x4, 0xfffff8e1, 0xfffff399, 0x3, 0x1, 0x9, 0x8, 0x72a, 0x9, 0x6, 0x10, 0x6, 0x1ff, 0x600000, 0x8, 0x7fff, 0x7, 0x61f, 0x72, 0xf847, 0x3, 0x5, 0x5, 0x6, 0x3, 0x81, 0x3, 0x4, 0x4, 0x0, 0x7fffffff, 0x3, 0xffffff4e, 0x1, 0x3, 0x5, 0x1, 0x4, 0x800, 0x8, 0x4, 0x4, 0x82, 0x2, 0x8, 0x8, 0x7ff, 0x3, 0x4, 0x1, 0x8001, 0x6, 0x8000, 0xffffffff, 0x7, 0x0, 0x4, 0x1, 0x8, 0x8, 0x7, 0x128c, 0x1502000, 0x1, 0x2, 0x54510ca6, 0xc, 0x9e2b, 0xfffffff9, 0xffffffff, 0x200, 0x5, 0x2, 0x0, 0x1ff, 0x0, 0x5, 0x2, 0x4, 0x7, 0x3, 0x6, 0x80000000, 0xfffffffb, 0xffff0001, 0x9, 0x6, 0x9, 0x8, 0x80000001, 0x3, 0x7, 0x1, 0xffff0000, 0x401, 0x0, 0x9, 0x2, 0x2448, 0x7, 0x4, 0xdf4, 0x9, 0x4, 0x4, 0x401, 0x40, 0x40, 0x1dd8245e, 0xa8, 0x7, 0x9, 0xb4bc, 0x401, 0x9, 0x400, 0x3, 0x9, 0x6, 0x76845613, 0x8, 0xd7a7, 0x7, 0x7, 0x3, 0xcbc0, 0x10bacf51, 0xc, 0x5, 0x6, 0x76c, 0x1, 0x7, 0x6, 0x89, 0x4, 0x7f, 0x1, 0x4, 0x4, 0x1, 0x1, 0xb, 0x10000, 0x6, 0x7fffffff, 0x9, 0x3, 0x1, 0xfffffff9, 0x3, 0xfffffffc, 0x1c65, 0x4, 0xfff, 0x0, 0x3, 0x10001, 0x5, 0x7fffffff, 0x4, 0x2, 0x6, 0x80, 0xf, 0x7, 0x5, 0x0, 0x2, 0x9, 0xffffffff, 0xffff, 0x1, 0x9, 0x418, 0xfffffffe, 0x2, 0x0, 0x9, 0x7, 0x2, 0x80, 0xfffffffb, 0x3, 0x2, 0x400, 0x0, 0x6, 0xe, 0xf, 0x9, 0x9, 0xff, 0x8179, 0x80000001, 0x1, 0x9, 0x8, 0x800, 0xb, 0x4, 0x5, 0x3, 0x5, 0x3, 0x8, 0x1, 0x6, 0xbe, 0x9, 0x8, 0xfffffff7, 0x2, 0x7, 0x6, 0x8001, 0x4, 0x6, 0x6, 0xffffff0a, 0x4, 0x101, 0x4, 0x1, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x8, 0xffffffff, 0x4, 0x6, 0x1, 0xf3f9, 0x7ff, 0x7, 0x3, 0x10001, 0xffff, 0x8, 0x2, 0x0, 0x2, 0x1, 0x5, 0x2, 0x1, 0x1, 0x2, 0xcc6, 0xffffffff, 0x1, 0x2c9, 0x1, 0x80000001, 0x5, 0x6, 0x7, 0x86bd, 0x100, 0x3, 0xffff, 0x4dcdeda3, 0x51b9, 0x3, 0x0, 0xffffff80, 0x2, 0x7, 0x9, 0x7, 0x2, 0x2, 0x1, 0x3, 0x5, 0x7f, 0x1, 0x2, 0x100, 0x1, 0x3, 0x80, 0x1, 0x6, 0x88a, 0x9, 0xffffff09, 0xdb, 0x1, 0x3, 0x4, 0x29, 0xffff87e8, 0x8, 0xd4100000, 0xcb7, 0x6, 0x7fffffff, 0x6, 0x2, 0x6, 0x6, 0x6, 0x40, 0x8, 0x4, 0x6, 0x191, 0x9, 0x3, 0x0, 0x3, 0x7, 0x1000, 0xe8dc, 0x5, 0xcb0d, 0x401, 0x1, 0x2, 0x6, 0xffffffff, 0x4, 0x7ff, 0x4a, 0x7f, 0x4, 0xe9de, 0x5, 0x66, 0xa39, 0x1, 0xc42b, 0x8001, 0x6, 0x2, 0x9, 0x1, 0xe1b, 0x5, 0x8, 0x1, 0x2f, 0x3, 0x8, 0x5, 0x8, 0x8, 0xd5d9, 0x6, 0x1, 0x7, 0x8dad, 0x0, 0x5, 0x4, 0x7, 0x1, 0x8000, 0xde5, 0xfffffff9, 0x6, 0x4, 0x7, 0xd, 0x4, 0x6, 0x2, 0x1, 0x2, 0x210d, 0x200, 0xef, 0x8, 0x5, 0xfffffffc, 0x7, 0x4, 0x1, 0xd56, 0x0, 0x9, 0x731, 0x7fffffff, 0x8001, 0xff, 0x13ea, 0xcce, 0x5, 0x0, 0x0, 0x67, 0x0, 0x0, 0x101, 0x8, 0x10000, 0x7fffffff, 0xab, 0x10001, 0x3, 0x4, 0x6, 0x8, 0x0, 0x400, 0x200, 0x7, 0x6, 0x19, 0x6, 0x7, 0x18000, 0x1, 0x9ba, 0x6, 0x9, 0x9, 0x9, 0x29, 0x2dd, 0x100, 0x9, 0x3, 0xe1ab, 0xbb5, 0x7, 0x0, 0x6b95855e, 0xe8b5, 0x800, 0x4, 0x0, 0x1, 0x3, 0x1, 0x5, 0x6, 0xca, 0x3, 0x80000000, 0x10001, 0x5, 0x2, 0x401, 0xf, 0x0, 0x5, 0x7, 0x2, 0x8, 0x3, 0x2, 0x8, 0x9, 0x1, 0x2, 0x7fffffff, 0xc, 0x55af29cb, 0x10001, 0xb, 0x2, 0x9, 0x5, 0x0, 0x2, 0x4, 0x8, 0x1, 0x8, 0x3, 0x3e1, 0x0, 0x2, 0x3, 0xfffffffe, 0x8330, 0xffffffe1, 0x0, 0x8, 0x5]}]}]}}, @TCA_RATE={0x6, 0x5, {0x81, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0xf}}, @TCA_RATE={0x6, 0x5, {0x2, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0xfda}, @filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_UDP_DST={0x6}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @multicast}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff2}}]}}]}, 0xcc4}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r10, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg0\x00'}]}, 0x34}}, 0x8004) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010001ffff2ff00000000000000060000244eec001c576116a805898d7bab48c621dda90d91", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r1, @ANYBLOB], 0x40}}, 0x0) 3m19.433428454s ago: executing program 8 (id=10979): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000019340)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6001010000081100fe8000000000000000000000000000bbfe8000b2d541a5b33ca50a02000000000000002200089078"], 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f0000000380)=""/125, &(0x7f0000000400)=0x7d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x40, 0x8, 0x0, 0x605, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x10010, 0xfffffffffffffffe, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB, @ANYRES32=0x0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000000206030000000000fffff000000000000900020073797a32000000000500040000000000050005000200000012000300686173683a6e65742c706f727400000005000100070000000c0007800800124009000000fe49579b658ec7312772fe3bc269328aabd1821cc3deaf55ea4154adcc457cf0f1f456f35e672ffcd55e4c8d35a4feab64c390345a"], 0x58}}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) lseek(r6, 0x2b1, 0x0) preadv2(r6, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0xffffff3d}], 0x37, 0x867, 0x0, 0x4) sendmsg$sock(r5, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, @perf_config_ext={0x7, 0x50000000}, 0x10a0a1, 0x5dda, 0x3, 0x2, 0x4, 0x4000008, 0xfffb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_QGROUP_LIMIT(r6, 0x8030942b, &(0x7f0000000440)={0x1, {0x16, 0xffff, 0x8, 0x1effe0, 0x1}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0xfd, 0x6b1, &(0x7f0000001f80)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000020000001d"], 0x0) 3m19.21168164s ago: executing program 8 (id=10982): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001e850000006d00000f95"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='ib_mad_recv_done_handler\x00', r0, 0x0, 0x155e}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200003b5e15f5dd70021d20ed7fcdb7030004000000080000000100000080000000b199ef9df5cb548268511e", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000001c0)=0x29f8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@delneigh={0x24, 0x1d, 0x100, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x10, 0x56, 0x6}, [@NDA_NH_ID={0x8, 0xd, 0x5}]}, 0x24}}, 0x880) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4004850) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800e58, &(0x7f00000005c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5f}}, {@abort}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@jqfmt_vfsold}], [{@obj_type={'obj_type', 0x3d, 'noinit_itable'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}]}, 0x16, 0x5ff, &(0x7f0000000cc0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000380)='.\x00', 0x2042023, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r5, &(0x7f00000003c0)='./file0\x00') r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001a00010000000000000000001c00"/28], 0x1c}}, 0x0) 3m19.21120678s ago: executing program 44 (id=10982): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001e850000006d00000f95"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='ib_mad_recv_done_handler\x00', r0, 0x0, 0x155e}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200003b5e15f5dd70021d20ed7fcdb7030004000000080000000100000080000000b199ef9df5cb548268511e", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000001c0)=0x29f8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@delneigh={0x24, 0x1d, 0x100, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x10, 0x56, 0x6}, [@NDA_NH_ID={0x8, 0xd, 0x5}]}, 0x24}}, 0x880) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4004850) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800e58, &(0x7f00000005c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5f}}, {@abort}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@jqfmt_vfsold}], [{@obj_type={'obj_type', 0x3d, 'noinit_itable'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}]}, 0x16, 0x5ff, &(0x7f0000000cc0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000380)='.\x00', 0x2042023, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r5, &(0x7f00000003c0)='./file0\x00') r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001a00010000000000000000001c00"/28], 0x1c}}, 0x0) 2m14.571983921s ago: executing program 1 (id=12527): socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{0x0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000003ccd00"/21, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) close_range(r8, r8, 0x2) dup2(r7, r8) 2m14.425328962s ago: executing program 1 (id=12533): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000040)={0x80, 0x18, 0x2, 0xfffffff9, 0x0, 0x2f}) 2m14.404537263s ago: executing program 1 (id=12534): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) iopl(0x3) ioperm(0x0, 0x40, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb502000008000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000010000000000008500000007dc349c389871e07e38d6c94a41a4ef4b8dda42b1f635381610760e0279552557ff303001aca9cf6f2cb91df1c3bff1ebdf3355da608f9bff7c4f3f07df191ddb456c9ea7539fbfed74f159db84a7f56d3748781a3b5f32dcbf63e3f1d3d7b8073edb58c9f9d61c833282ce828812ac7763f76861d7940c8008e2c32d2ce2bca0128536d6e717bbe5b4faaddd9714fe43129be3847258013a5b44ff0697adf265b813a9eb35949d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x698c, 0x40, 0x2, 0xfffffffe}) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[], 0x30}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 2m14.358763106s ago: executing program 1 (id=12536): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$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") open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000059176d1bec1009a2006aaca5ff1b8f45de15ec3085be1429c9638f10f4a84274a4848bdf81f4515252afd34c0a1cf03374ddedf61a8c96f9d1d04f4c1ead76a77df42f169314b772"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='percpu_free_percpu\x00'}, 0x10) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r3 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r3, &(0x7f0000000280)='ns/pid\x00') bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000300)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) getrandom(0x0, 0x0, 0x3) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010003b150000e9a68447a8fd363a0000", @ANYRES32=0x0, @ANYBLOB="0000000004280400100012800800010067747000040002800800230006000000"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[], 0x64}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x565) futex_waitv(&(0x7f00000019c0)=[{0x5, &(0x7f0000000400)=0x7fffffffffffffff, 0x82}, {0x8, &(0x7f00000004c0)=0x7, 0x82}, {0x6, &(0x7f0000000500)=0x7fffffffffffffff, 0x2}, {0x3, &(0x7f0000000540)=0x3, 0x2}, {0x2, &(0x7f0000000580)=0x10000, 0x2}, {0x5, &(0x7f00000005c0)=0x6, 0x2}, {0x3, &(0x7f0000000600)=0x3, 0x2}, {0xf3, &(0x7f00000009c0)=0x7fff, 0x2}, {0x6, &(0x7f0000000a00)=0x2, 0x2}, {0x9, &(0x7f0000000b00)=0xffffffffffffffff, 0x82}, {0x0, &(0x7f0000000b40)=0x5, 0x2}, {0x4, &(0x7f0000000b80)=0x7, 0x2}, {0x0, &(0x7f0000000bc0)=0x6, 0x2}, {0x400, &(0x7f0000000c00)=0x8, 0x82}, {0x1, &(0x7f0000000c40)=0x1, 0x2}, {0x7, &(0x7f00000011c0)=0x5, 0x2}, {0x800, &(0x7f0000001200), 0x2}, {0x4, &(0x7f0000001240)=0x1, 0x2}, {0x7, &(0x7f0000001280)=0x1, 0x2}, {0x3, &(0x7f00000012c0)=0x230, 0x82}, {0x5, &(0x7f0000001300)=0x8000000000000000, 0x2}, {0x5, &(0x7f0000001340)}, {0x9, &(0x7f0000001380)=0x2, 0x2}, {0xa, &(0x7f00000013c0)=0xff, 0x82}, {0x9, &(0x7f0000001400)=0x3, 0x2}, {0xd7fd, &(0x7f0000001440)=0x5, 0x82}, {0x1f, &(0x7f0000001480)=0xff, 0x82}, {0x1, &(0x7f00000014c0), 0x2}, {0x8, &(0x7f0000001500)=0x3, 0x2768a1047c27b249}, {0x7fffffffffffffff, &(0x7f0000001540)=0xfffffffffffffff7, 0x82}, {0x1, &(0x7f0000001580)=0x40000, 0x82}, {0x6, &(0x7f00000015c0)=0x1, 0x2}, {0xdfe, &(0x7f0000001600), 0x82}, {0x7, &(0x7f0000001640)=0x4, 0x2}, {0x800, &(0x7f0000001680)=0x100000001, 0x82}, {0x5, &(0x7f00000016c0)=0xc, 0x106}, {0x3, &(0x7f0000001700), 0x2}, {0xfffffffffffeffff, &(0x7f0000001740)=0xaec, 0x3d9577beaa8ded67}, {0x5, &(0x7f0000001780)=0x10000, 0x82}, {0x101, &(0x7f00000017c0), 0x2}, {0x80000001, &(0x7f0000001800)=0x6d143bff, 0x82}, {0xaf6c, &(0x7f0000001840)=0x1, 0x2}, {0x8000, &(0x7f0000001880)=0x7, 0x2}, {0x800000000000000, &(0x7f00000018c0)=0x81, 0x2}, {0x1, &(0x7f0000001900)=0x3ff, 0x2}, {0x10, &(0x7f0000001940)=0x80, 0x2}, {0x1, &(0x7f0000001980)=0xe367, 0x2}], 0x2f, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x3c56, 0x1, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000009df7000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000002ca494291c3d676b932dc9"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}}, &(0x7f0000000280)=0x84) 2m14.239942805s ago: executing program 1 (id=12540): syz_io_uring_setup(0x5c23, &(0x7f0000000100)={0x0, 0x0, 0x4000}, 0x0, &(0x7f0000000080)) accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000180)=0x12, 0x80000) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000003040)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000005}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 2m13.817366496s ago: executing program 1 (id=12551): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) close(r1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x541b, 0x2000fcc6) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2410}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x4000) r8 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) gettid() r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095", @ANYRESDEC=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r11}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x4040) ioctl$USBDEVFS_IOCTL(r8, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r12 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r12, 0x80045505, &(0x7f0000000000)=0x1) 2m13.813693646s ago: executing program 45 (id=12551): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) close(r1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x541b, 0x2000fcc6) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2410}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x4000) r8 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) gettid() r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095", @ANYRESDEC=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r11}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x4040) ioctl$USBDEVFS_IOCTL(r8, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r12 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r12, 0x80045505, &(0x7f0000000000)=0x1) 1m49.86153724s ago: executing program 7 (id=12986): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001c80)="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", 0x2f3}], 0x1}, 0x44080) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1m49.8568513s ago: executing program 7 (id=12987): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001c80)="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", 0x2f3}], 0x1}, 0x44080) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1m49.766800176s ago: executing program 7 (id=12990): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000340)) ptrace$poke(0x21, r4, 0x0, 0x0) mq_notify(r0, &(0x7f0000000040)={0x0, 0x1d, 0x0, @tid=r4}) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f0000000380)='./file0\x00', 0x80) 1m49.633428936s ago: executing program 7 (id=12995): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = io_uring_setup(0xad5, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="a00000001a00010000000000000000001c000009"], 0xa0}}, 0x0) close(r1) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) socket$key(0xf, 0x3, 0x2) syz_clone(0x24261080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) unshare(0x2a020400) r2 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x10, 0x13290, 0x0, 0x3}, &(0x7f0000000440)=0x0, &(0x7f0000000ac0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000400)='./file0/../file0\x00'}) io_uring_enter(r2, 0x1, 0x0, 0x1, 0x0, 0x1000000) 1m48.7598727s ago: executing program 7 (id=13013): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x300}) 1m48.684904056s ago: executing program 7 (id=13014): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x42542, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x3) r1 = syz_io_uring_setup(0x5ab8, &(0x7f00000003c0)={0x0, 0x4278, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x3b, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x80002101, 0x1}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.kill\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r5}, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x80, 0x6}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) prctl$PR_GET_FP_MODE(0x2e) accept$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000540)={[{@jqfmt_vfsv0}]}, 0x1, 0x439, &(0x7f0000000100)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_uring_enter(r1, 0x678, 0x5, 0x0, 0x0, 0x0) 1m33.284249893s ago: executing program 46 (id=13014): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x42542, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x3) r1 = syz_io_uring_setup(0x5ab8, &(0x7f00000003c0)={0x0, 0x4278, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x3b, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x80002101, 0x1}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.kill\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r5}, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x80, 0x6}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) prctl$PR_GET_FP_MODE(0x2e) accept$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000540)={[{@jqfmt_vfsv0}]}, 0x1, 0x439, &(0x7f0000000100)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_uring_enter(r1, 0x678, 0x5, 0x0, 0x0, 0x0) 1m4.785368508s ago: executing program 5 (id=13865): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000019c0)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r5], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000000000000000a090000000000000000000008001e0001"], 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000019c0)='kmem_cache_free\x00', r3}, 0x18) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) (async) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r5], 0x20}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000000000000000a090000000000000000000008001e0001"], 0x2c}}, 0x0) (async) 1m4.738589462s ago: executing program 5 (id=13866): syz_io_uring_setup(0x5c23, &(0x7f0000000100)={0x0, 0x0, 0x4000}, 0x0, &(0x7f0000000080)) accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000180)=0x12, 0x80000) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000003040)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000080c200"], 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000005}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 1m4.738095812s ago: executing program 5 (id=13867): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) syz_open_dev$evdev(&(0x7f0000000040), 0x3d, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x26) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) utimes(&(0x7f0000000100)='./file0\x00', 0x0) 1m3.823235549s ago: executing program 5 (id=13882): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioperm(0x0, 0x1, 0x1bf4) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xeb) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@lazytime}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0x1, 0x443, &(0x7f0000000940)="$eJzs3MtvG0UYAPBv10mgLxJKefQBBMqj4pE0aYEeuIBA4gASEhzKMSRpVeo2qAkSrSoICJUjqsQdcUTiL+BELwg4IXGFAzdUqUK9tHAyWnu3cYztNsbuQv37SevM7I4182V37JmdbAIYWpPZSxKxNSJ+iYjxRnZ9gcnGj6uXz87/efnsfBK12ht/JPVyVy6fnS+KFu/bkmf2pRHpJ0nsblPv8ukzx+eq1cVTeX565cS708unzzx97MTc0cWjiydnDx06eGDmuWdnn+lLnFlcV3Z9sLRn5ytvnX9t/vD5t3/4Oinib4mjTya7HXy0VutzdeXa1pRORkpsCBtSiYjsdI3W+/94VGLt5I3Hyx+X2jhgoGq5DodXa8AtLImyWwCUo/iiz+a/xXbzRh/lu/RCYwKUxX013xpHRiLNy4y2zG/7aTIiDq/+9UW2xWDuQwAArPNtNv55qt34L417msrdka+hTETEnRGxPSLuiogdEXF3RL3svRFx3wbrb10k+ef4J73YU2A3KBv/PZ+vba0f/xWjv5io5Llt9fhHkyPHqov7G8dWs5csP9Oljgsv/fxZp2PN479sy+ovxoJ5Oy6O3Lb+PQtzK3O9xtvq0kcRu0baxZ9cWwlIImJnROzqsY5jT3y1p9Ox68ffRR/WmWpfRjzeOP+r0RJ/Iem+Pjl9e1QX9083XRUtfvzp3Oud6v9X8fdBdv43t73+r8U/kTSv1y5vvI5zv37acU7T6/U/lrxZT4/l+96fW1k5NRMxlrzaaHTz/tm19xb5onwW/7697fv/9lj7TeyOiOwivj8iHoiIB/O2PxQRD0fE3i7xf//iI+/0Hv9gZfEvbOj8ryXGonVP+0Tl+HffrKt0YiPxZ+f/YD21L99T//xLusd1I+3q7WoGAACA/580IrZGkk5dS6fp1FTjb/h3xOa0urS88uSRpfdOLjSeEZiI0bS40zXedD90Jp/WF/nZlvyB/L7x55VN9fzU/FJ1oezgYcht6dD/M79Xym4dMHCe14Lhpf/D8NL/YXjp/zC82vT/TWW0A7j52n3/fxgRFx4roTHATdXS/y37wRAx/4fhpf/D8LqB/v/brfXvqoGIWN4U139IfrCJSpRZu0SPiUj/E82QGFCi7E8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/vg7AAD//9aZ7PU=") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) io_setup(0x82, &(0x7f0000000300)) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) getsockname(r2, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @local}, &(0x7f0000000040)=0x80) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) semctl$IPC_RMID(0x0, 0x0, 0x0) 1m3.508250362s ago: executing program 5 (id=13887): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0xfe6, 0x6a004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108005, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f00000000c0), 0xfffffff4) 1m2.02752162s ago: executing program 5 (id=13909): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) sendmmsg$inet6(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="abc9e8d4d11e2133413eff3eeea84b63fdbe46b4bb45e3f5", 0x18}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x4e21, 0x8001, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000600)="c266f67749addcc8de026ac68cba74e1790b622b68b51b12d0592a1baedb37dd9852aff25819f85ade7242da8ce4162dd7a402856283f934a1a7fe23924288d8c920aa9e8e227ae4bac3b84660c43cd9d573575273f065df3c5ec753a5f6e7edb6dfa2909f8d3c67", 0x68}, {&(0x7f0000000680)="9330bdb6e989c9e92fabe7690001b67485f6746c4dd17b63df1aa408729244bbc80daf2272d931a1b1ee8d49f2fbd835593130f23fa363e81e95996643a18485cbee76e3d1f02ac095ef80c901f6d8fe3ff1901a1c72", 0x56}, {&(0x7f0000000700)="d681b0d79a98e60c6f87db6819875f8cf45d03e12396f963e7259c63207a139744fd1e5f646ab7c028b291778b78ca480a4eb758e85fccc3a5b116332d8e154ab9df12e051337525f6941bc575aa852245cc714431cc897753c56afe01dd9671b6b40f220942c10045f8e9d5319a02773382926fd6e4b793bb27cf56956ba0733a0d583f273490893bb8301cfc4d13c3f0317b7030a89a737438b3166b0e62ec67c7c72ee4be10db63551078a6bba05f5304ef73b1b970e868", 0xb9}, {&(0x7f00000008c0)="d997880fd9beb79a33a9ca56adf9784c5fcee5f393fccd7e3d7f9877d40f52be4faa4af215e33428a55839d9d13837439368cf358d873bf8ea1d90c50b258a96af7d21691298ae58f1658ed2774c78d4f2ea3a137c9b656104f28ce4968d60398f0eaccaaecf8168dcb8df07eda2eee50e3e0d40fb4ec114a9deac04d4473cb6135c", 0x82}, {&(0x7f00000009c0)="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", 0xfe}, {&(0x7f0000000ac0)="600a3117985f9e04177d79b61baa7d6fe673d18843cfc5e348b35f466f27c30049c57d6a3d5bcac82689bcf432b357acd07108c117bc825f738ea760d4ef49046ecf9fa5b0f5eb0070faac01ddf95e61cf6ef836118bea5771b3d087ad1211704ac94618b33bd1675d8285e80cec75167c62ffb554095b4d996d8958ae68d1bed0f4fbef9ef844de993f94e2f8f58bb0a2b1806c91f189b9843e1a18bb5d7b752e7cbc7b86fbee99252d486bff89b75f2f8215baa8c8c0", 0xb7}, {&(0x7f0000000b80)="1718c7dec7469fbc58c7946aaa0d8e630c26607f90d5ebda1c312366be53f5c6e84da316f0fd1021699aefcf28aa17b0362d9737a8c963e98ceef115480619f813267517e0f0764369bae6bdc253f8e504bfbf12baf3b04a28c2dda385289ac6fa9b1f2d432cc7d8d95f5aba1c3eb83b9d9a59", 0x73}], 0x7, &(0x7f0000000440)}}, {{&(0x7f0000000500)={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f0000000f40)=[{&(0x7f0000000c80)="ae4baa843d27b6845762c7dbdc238328ca1b105c49d708fb", 0x18}, {&(0x7f0000000cc0)="02406e2bb99ec06aacd24e2dfb8b5f33be2dffba9a6b33eed7e13f2c740f3890c19f9ce11381972b3147ddac0a78ddad2aac40eae796e4049d1c58517662ee43540a606cb5cd5050f1bd5e1dc2c8e6e68c05824d430e1db3c75e27c03d1cb8a73dd5492eb253f6d0a974d4efa08d322274427c6cd2f527e962573e049aa9c397b235a79e8086ad67bdb0a4b5d4e5e8cb1e87cc6539bd7627dd2464b0176ff201f068", 0xa2}, {&(0x7f0000000d80)="e50f08837e2c05abaa152868147ae2bfa054b58e16727a5f5a36cd65a331eb9871fb8e8c856da600de404555d16e36b7c7f943032e9194de389a657a2f1feb95b81671e4b9b10c350c52e858889e154a3046ab498854a4303a730d454bc29654b00debd53f918a6841a7b365038933a824dc1c3574f8d7e9efbe128b6afe71c35c82f0703655cdd4d5e428dac60e6b80b9318d1631b7d8580b55d70c8b7cafe31da870eff58e0b21fe0f0155c55429b3cd818c21581be1a2abd5d3", 0xbb}, {&(0x7f0000002000)="e44df862270f15f8954a96cb2179fba63d29a2f1ef14880e1383838628ae24e42eed3e8618731cdc7c1fb26521132764235bfb0ca95657d6d2fe3fe471827eb64f7bf3653fe82a5ad8c83036d0c8370738ae83797ab2900d9011d20a95b93dff55fef1c4bb74e10b3962adfd4cbd62b352543360cab7369d1ddc2e7678ee1e3558c2a5b90f8b094889a704aeb1466ba56354509ed33438b19711f4cc64a34c38e93d0c0dea3071231b9fcb5aa05071129b70b40ac80713f8cc27029a93768e65d8ebb373af046076ad7052ae9e95657faa9caa24874fe17bd79a8976b466e5de2619cc63b6ca3ee73b2fbbd331b32f0fa479fe2d04b9c6fd8944ada01242c3f00ec874382e5e6f86166c02de93015c5d1c5080e63a084e416da582268dc015dcb9bfc1ce2336f135188b6131b0d4ef0fcbc5d2432435cc6d52df0ef6ba2b749319f1ac4bfe66b474989be426707705ccf95d98a72c9e10ea98f481d774a61165ba8ca55323ee8780ae1d44f47ed736aad24a26db2713b2e6a5e32645b082650033d8019a1d7b5ceb7102c5f994ffba846e1539cd9634f0ba60f999059f19c1c1614864582152603d5d41271d34781e2ff88992c19c00a2eb8375d599bf43815caa0c6b43964e74b9f8ab6848f065e5c51c9fe5f677de96f554e60ab828ceb5501463b21c094001eeb0e3ec72cf3c05fb28575f77ac3e1fe21776a3c8197c75c6645587ea02444b5066caec600615ccf79933a4906ea2564770062a1569feffcd2078d27057715d1c164289aa0053ce815d73f14ee554edc98d24e1383d3c519ef2e96d423219c3d88f50ee104b7f809d46e773386d568195174371b88213f9ea19f2c0c0b64296a5352ec0a2506f4c4f8f5c7d9467acfd9a0432a46ca3a3bc649810d13e4e43ef2f0558484759d7e6885b2ee5aaf175522eeab1e7377c13b609ff617b78b5c08fc88390306aced721fa70e4c2de0bb260f04f2f4cbcd67178732ee94e4d367d0cdb4e3173225722f6d4b1dd6d36fbcdeb91952621e1360f9a3d87c259f48280261f9c5994bcfe937418a46502865042f29800a5af51161b75ee39356549a71e623b81e3d043188b8f113718604ff1153c1878686580d6957ba4e24ca75395ce1803b8c2b4c9aacf7daa6acb9d59c038ec34b79fb83d11e632f59a29d7a719233c29f948f712eb6d4bf518f11672fbf8174c1d3df101520e708f65ba20a196dddc98021a2204b9df71163a99d8fac80584044ab7554d63664c060f502aa0ca58e115266563544192b2882a6a53f6731bb1410e144e0272cd6b007a077ae411a5e9eacaced858ae81dfaf679808a816c5ab27bc0568a411e03cdb861537e5cd92320f0e9324ca940c1c4abe54c47560e863b2be747623a5bc222aadb2788bb257b95d945b20b6e0f1930853c18fef29723b8718365f33d5c054d56009bd24d9b17f50da27c2e4ca344b6d78cbf7014a4a0ae5b1577d908799e73a1da35bf79e66cf34c3e1b156e5bb5a9744c7431e322bc46deac37bdd985f1f920d1de8a79ac1269d18a411877916e25b4dfaa083e63905549f9c11118f6134af4ba0db18b647497d17099ef7161f0509c20a4b8e44ec254d9f2d2f8c03b9ac918f0d0a2f6b26229a46d36256a132e7a979009f0ff5b8226e39079da0919230a47197ac861037f34192fd249982f26ab1e8ed40e73a933b012e3b875b6ca76bf8a12758bfeaad6be0567da8b9135d30cc3704aa9f92ca2d3741b3ffc76e5071b45b909313b94f17690b07bcd0fb8b457e58935d69000486a30f7b929cc996fb936ace3a45b0b83abe1749a12e0af7bac4ba23e8c9d639a2cf7f26e4995542a87957c7192d7f57265917247ad4b27e6e98188bd956c48af7655be5c2e8657ff9e25a9dbcc69f594b60c77f7f79700c78c4f70fa338e98d5a2642c8f528a3ef051b90b24448a24874873770e0299c1f726bc8abf0cd2ef35fc2e67d8a748d91c3e856695ee05d5cf0dd0f54f7d95b8063175c2d66ca68585bd93aff11733cd32782d250a8b93231e21bb7311a880edd884996870aa77f2783117e83fe77a8f281d06c088fd6c5172c3e1b5140413addbea6927a2121c46eb1b598abcb0b1f60633f1d61a575f773e0539ca408405920d99b1eaf86062e6a91267d590a2e9e668cbf86d3776f0feaee5072e7d4401ea846622b7276500b5be0f7c47fedb20f47d341daf209b55c0948b162a4f178a5728d66cd1c3c7915e20ae4ce8d481f91d5a81b4b91168bae7de78cc07b9ba2daf8884da3ea8de538dae0649726b3553ac5e1d9cdb5337dea69dd344e04acc05cee5c7ee787b38f92ac2e25deb40067c3845a900e24a28e33fd2823a398d36f30e72908b09a88900c21cadba08b318f397a13713444d4018c8ff5737e4c878b891e2e757d73d48ef2378581b8c942aaea428dd3e972a0c0efc8a59b1a1c7b1596aefc44dab897d3c3ea64cb6b4bdd43fae76e4db39caa8c47e609f789fa016c3d0609dd40bc709a2d1ae2195b3a4599d38ac54a33ca35963d22ab2323a1f38c21081874adc6bbb2024bec1d8bf94240e88aa1e889843161fe763b36746c3901103f140a4584919b8089408a64626c5fc81726e8f6612ff5c92d4c15ec8a5e43abd65301aea9fb168f3421f70852186539d58bf21cdd2f3d9d7399f7ad3955be4cf58a9cfcb57f0ab68d385c5b329d02030468b34500b532e7b805454a5889b3e6321d731be87a67182b628308658039ef2ac984a56c6027e95782915a1f04a29bb23e0b81d87dbe8ee6b6373b74742a7a8f3abf27c1bc76d767bfbdf298f3dfca5cae557ed93fceb44e8a8b18a59108a65a9652ad3899f530b3c77420622439c45efecb7a1a6712e4a2c043f79b6d3e3f6589dc", 0x800}, {&(0x7f0000000e40)="a2a859a894dd953137a7d5975a3e27b93e78f501b6cc73e874f6597e9e5a7eb5c147996b3f95f20818eefd795b77635e82d4d39e5874c69d8f23b21bd792f832d2cbba7255b6813aa86a9c9c7be0e858d761a565e20c7611b0b7088e932e72931e2d127b72bcb1719d31256b5a3ac244a07ac6d9d4e039559dc6", 0x7a}, {&(0x7f0000000ec0)="8f0c327bd38ed699f545a3137b2cb906cc939335157a0ea27b6625ad3ebb4b3aed2e9ccc0234fa4a39fb592f1390653be291ebeef0b7413644834da49f15a6f4829d64499f453bab29d58112db509287e4bdd5731aa468efae8ffa0e44d35122f2d9faa3d8053fac6f0bef33aa583ef8fe43a5467750947b77c15a9620b4", 0x7e}], 0x6}}], 0x3, 0x4040004) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001240)="171f5ea1979e99618446fa966991ae1c165e7e1b3b54ccf610910c7a39452eb82e341f753d58bd6086f05393050531511ddf3d790fde6f88745a14314e230b93233e99cfab85060000004ff2d523850edba96a84afe47600cfac2e7d852c95fd6a3e6b04a9d247ad1e61b44f584372e44d25c839aadf34327ccbfc360312fc12f533e436e840e8620810d154aab38b7175ced998b8094ba441697f1da7610e23fadcfc2ab7d0e5228cc48da6b10024044034ec8ad32c42f34bd424a0c2c6cd1392bbd32a3f2352d97439741fcd13ed5976c323977ab0a993939649f7485c363f4a35847f1c21a937a2f75cdf20672b6a4114e209cd2d86ea", &(0x7f0000001080)="21e5b22d034bb6e1248ed58b7b80adf0de113c3f06b1be892b29b87eec7e6352dd5ea7b02c44d208798f055828c717380da3dac2608973e5ed664e5391ecd7c8490fc25069cc5f284fde327cd6afa8f75edd8f4b5f82d181c85f5647b6903d555ffef43251c90b313d1cd820f2ccdfc41a3a9bebfc7243d36d96895e51045fb211", 0x5, r0}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) syz_mount_image$tmpfs(0x0, &(0x7f00000040c0)='./file0\x00', 0x810000, 0x0, 0x6, 0x0, &(0x7f0000000000)) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0x9, 0x400000) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000100)) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001140)=ANY=[@ANYBLOB="0c80000026e70000", @ANYRES16=r5, @ANYBLOB="fa34073fe4b9f71de8e3af35e3650465f97b4a8b22823f25feea205f12035a5043e23b8d921558aeb8fb21007b07825ecb42343921ddfe3517bbf65396d909eece54c296e1d1cc702774df3d"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x20048090) r6 = syz_io_uring_setup(0x121d, 0x0, &(0x7f0000000980)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m2.02703213s ago: executing program 47 (id=13909): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) sendmmsg$inet6(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="abc9e8d4d11e2133413eff3eeea84b63fdbe46b4bb45e3f5", 0x18}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x4e21, 0x8001, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000600)="c266f67749addcc8de026ac68cba74e1790b622b68b51b12d0592a1baedb37dd9852aff25819f85ade7242da8ce4162dd7a402856283f934a1a7fe23924288d8c920aa9e8e227ae4bac3b84660c43cd9d573575273f065df3c5ec753a5f6e7edb6dfa2909f8d3c67", 0x68}, {&(0x7f0000000680)="9330bdb6e989c9e92fabe7690001b67485f6746c4dd17b63df1aa408729244bbc80daf2272d931a1b1ee8d49f2fbd835593130f23fa363e81e95996643a18485cbee76e3d1f02ac095ef80c901f6d8fe3ff1901a1c72", 0x56}, {&(0x7f0000000700)="d681b0d79a98e60c6f87db6819875f8cf45d03e12396f963e7259c63207a139744fd1e5f646ab7c028b291778b78ca480a4eb758e85fccc3a5b116332d8e154ab9df12e051337525f6941bc575aa852245cc714431cc897753c56afe01dd9671b6b40f220942c10045f8e9d5319a02773382926fd6e4b793bb27cf56956ba0733a0d583f273490893bb8301cfc4d13c3f0317b7030a89a737438b3166b0e62ec67c7c72ee4be10db63551078a6bba05f5304ef73b1b970e868", 0xb9}, {&(0x7f00000008c0)="d997880fd9beb79a33a9ca56adf9784c5fcee5f393fccd7e3d7f9877d40f52be4faa4af215e33428a55839d9d13837439368cf358d873bf8ea1d90c50b258a96af7d21691298ae58f1658ed2774c78d4f2ea3a137c9b656104f28ce4968d60398f0eaccaaecf8168dcb8df07eda2eee50e3e0d40fb4ec114a9deac04d4473cb6135c", 0x82}, {&(0x7f00000009c0)="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", 0xfe}, {&(0x7f0000000ac0)="600a3117985f9e04177d79b61baa7d6fe673d18843cfc5e348b35f466f27c30049c57d6a3d5bcac82689bcf432b357acd07108c117bc825f738ea760d4ef49046ecf9fa5b0f5eb0070faac01ddf95e61cf6ef836118bea5771b3d087ad1211704ac94618b33bd1675d8285e80cec75167c62ffb554095b4d996d8958ae68d1bed0f4fbef9ef844de993f94e2f8f58bb0a2b1806c91f189b9843e1a18bb5d7b752e7cbc7b86fbee99252d486bff89b75f2f8215baa8c8c0", 0xb7}, {&(0x7f0000000b80)="1718c7dec7469fbc58c7946aaa0d8e630c26607f90d5ebda1c312366be53f5c6e84da316f0fd1021699aefcf28aa17b0362d9737a8c963e98ceef115480619f813267517e0f0764369bae6bdc253f8e504bfbf12baf3b04a28c2dda385289ac6fa9b1f2d432cc7d8d95f5aba1c3eb83b9d9a59", 0x73}], 0x7, &(0x7f0000000440)}}, {{&(0x7f0000000500)={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f0000000f40)=[{&(0x7f0000000c80)="ae4baa843d27b6845762c7dbdc238328ca1b105c49d708fb", 0x18}, {&(0x7f0000000cc0)="02406e2bb99ec06aacd24e2dfb8b5f33be2dffba9a6b33eed7e13f2c740f3890c19f9ce11381972b3147ddac0a78ddad2aac40eae796e4049d1c58517662ee43540a606cb5cd5050f1bd5e1dc2c8e6e68c05824d430e1db3c75e27c03d1cb8a73dd5492eb253f6d0a974d4efa08d322274427c6cd2f527e962573e049aa9c397b235a79e8086ad67bdb0a4b5d4e5e8cb1e87cc6539bd7627dd2464b0176ff201f068", 0xa2}, {&(0x7f0000000d80)="e50f08837e2c05abaa152868147ae2bfa054b58e16727a5f5a36cd65a331eb9871fb8e8c856da600de404555d16e36b7c7f943032e9194de389a657a2f1feb95b81671e4b9b10c350c52e858889e154a3046ab498854a4303a730d454bc29654b00debd53f918a6841a7b365038933a824dc1c3574f8d7e9efbe128b6afe71c35c82f0703655cdd4d5e428dac60e6b80b9318d1631b7d8580b55d70c8b7cafe31da870eff58e0b21fe0f0155c55429b3cd818c21581be1a2abd5d3", 0xbb}, {&(0x7f0000002000)="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", 0x800}, {&(0x7f0000000e40)="a2a859a894dd953137a7d5975a3e27b93e78f501b6cc73e874f6597e9e5a7eb5c147996b3f95f20818eefd795b77635e82d4d39e5874c69d8f23b21bd792f832d2cbba7255b6813aa86a9c9c7be0e858d761a565e20c7611b0b7088e932e72931e2d127b72bcb1719d31256b5a3ac244a07ac6d9d4e039559dc6", 0x7a}, {&(0x7f0000000ec0)="8f0c327bd38ed699f545a3137b2cb906cc939335157a0ea27b6625ad3ebb4b3aed2e9ccc0234fa4a39fb592f1390653be291ebeef0b7413644834da49f15a6f4829d64499f453bab29d58112db509287e4bdd5731aa468efae8ffa0e44d35122f2d9faa3d8053fac6f0bef33aa583ef8fe43a5467750947b77c15a9620b4", 0x7e}], 0x6}}], 0x3, 0x4040004) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001240)="171f5ea1979e99618446fa966991ae1c165e7e1b3b54ccf610910c7a39452eb82e341f753d58bd6086f05393050531511ddf3d790fde6f88745a14314e230b93233e99cfab85060000004ff2d523850edba96a84afe47600cfac2e7d852c95fd6a3e6b04a9d247ad1e61b44f584372e44d25c839aadf34327ccbfc360312fc12f533e436e840e8620810d154aab38b7175ced998b8094ba441697f1da7610e23fadcfc2ab7d0e5228cc48da6b10024044034ec8ad32c42f34bd424a0c2c6cd1392bbd32a3f2352d97439741fcd13ed5976c323977ab0a993939649f7485c363f4a35847f1c21a937a2f75cdf20672b6a4114e209cd2d86ea", &(0x7f0000001080)="21e5b22d034bb6e1248ed58b7b80adf0de113c3f06b1be892b29b87eec7e6352dd5ea7b02c44d208798f055828c717380da3dac2608973e5ed664e5391ecd7c8490fc25069cc5f284fde327cd6afa8f75edd8f4b5f82d181c85f5647b6903d555ffef43251c90b313d1cd820f2ccdfc41a3a9bebfc7243d36d96895e51045fb211", 0x5, r0}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) syz_mount_image$tmpfs(0x0, &(0x7f00000040c0)='./file0\x00', 0x810000, 0x0, 0x6, 0x0, &(0x7f0000000000)) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0x9, 0x400000) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000100)) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001140)=ANY=[@ANYBLOB="0c80000026e70000", @ANYRES16=r5, @ANYBLOB="fa34073fe4b9f71de8e3af35e3650465f97b4a8b22823f25feea205f12035a5043e23b8d921558aeb8fb21007b07825ecb42343921ddfe3517bbf65396d909eece54c296e1d1cc702774df3d"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x20048090) r6 = syz_io_uring_setup(0x121d, 0x0, &(0x7f0000000980)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.91709311s ago: executing program 0 (id=15071): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028008000240000000080500030000000000080001400000000d0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000001c0)={@val={0x0, 0xa00}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x3}, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0xfffc, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x3a) unshare(0x68040200) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x8031, 0xffffffffffffffff, 0xd0be6000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000fcebf340470501686f4301020301090212000100000000090400000008441300"], 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000700)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000900)={0x0, 0x7f, 0x9, 0x1}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r6, 0x50009418, &(0x7f0000001880)={{r7}, r8, 0x2, @unused=[0x8000000000000000, 0x3, 0x5, 0x4], @devid=r9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x0, 0x45c, &(0x7f0000002400)="$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") 1.032284415s ago: executing program 0 (id=15100): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sys_enter\x00', r0, 0x0, 0x5}, 0x18) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) 1.005673107s ago: executing program 0 (id=15103): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = fsmount(r1, 0x0, 0x0) fchdir(r4) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 974.595028ms ago: executing program 4 (id=15105): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000f100000005"], 0x48) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) (rerun: 32) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) (async) umount2(&(0x7f0000000280)='./file0\x00', 0xc) (async, rerun: 64) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async, rerun: 64) close(r0) (async) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffe, @mcast1, 0x20000007}, 0x1c) (async) add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x3, 0x1, 0x0, 0x4, 0x0, 0x7, [{0x8, 0x0, 0x7}]}]}, {0x0, [0x0, 0x5f, 0x5f, 0x5f, 0x61]}}, &(0x7f0000000280)=""/224, 0x37, 0xe0, 0x1, 0x8, 0x10000, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x1c0, 0x5, 0x80, 0x8, r0, 0x5, '\x00', 0x0, r2, 0x4, 0x2, 0x0, 0x8, @void, @value, @void, @value}, 0x50) (async, rerun: 64) r3 = inotify_init() (rerun: 64) inotify_add_watch(r3, &(0x7f0000000240)='./file0\x00', 0x8c7) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) (async) mlock2(&(0x7f0000947000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4, 0x0, 0x178}, 0x18) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000001a000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f616400340002800800044000000000080008400000000008000540000000080800024000000002080003"], 0x9c}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0xfd86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 952.8621ms ago: executing program 0 (id=15108): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000740), 0x1, 0x0) write$selinux_validatetrans(r2, 0x0, 0x67) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r4}, 0x10) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 917.661533ms ago: executing program 4 (id=15110): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x4001}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) (fail_nth: 2) 904.877384ms ago: executing program 0 (id=15112): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x3d, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x26) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) utimes(&(0x7f0000000100)='./file0\x00', 0x0) 792.070702ms ago: executing program 4 (id=15113): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 691.951889ms ago: executing program 4 (id=15116): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 683.38105ms ago: executing program 4 (id=15118): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = fsmount(r1, 0x0, 0x0) fchdir(r4) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 632.979344ms ago: executing program 4 (id=15120): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x2, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r3) r4 = inotify_init1(0x800) fcntl$setstatus(r3, 0x4, 0x2c00) gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 462.369056ms ago: executing program 2 (id=15127): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x4}, 0xffffffffffffff51) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) bind$packet(r3, &(0x7f0000000280)={0x11, 0x7, 0x0, 0x1, 0xdf, 0x6, @local}, 0x14) (fail_nth: 2) 277.54344ms ago: executing program 2 (id=15131): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = fsmount(r1, 0x0, 0x0) fchdir(r4) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 263.912231ms ago: executing program 2 (id=15132): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x9135}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004080) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffff6606}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) gettid() r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) pidfd_getfd(0xffffffffffffffff, r4, 0x0) 261.972621ms ago: executing program 9 (id=15133): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000740), 0x1, 0x0) write$selinux_validatetrans(r2, 0x0, 0x67) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r4}, 0x10) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 236.342803ms ago: executing program 2 (id=15134): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x1}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x3}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) 228.943043ms ago: executing program 9 (id=15135): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x3, &(0x7f0000000040)=[0x0, r1, 0x0]) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 218.247674ms ago: executing program 2 (id=15137): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 205.309725ms ago: executing program 9 (id=15138): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ppoll(&(0x7f0000000280)=[{r2, 0x4000}], 0x1, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000b103000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4604030003000000000000000002003e00000000000103000038000000000000000f000000000020000100040000000000000000000300000008000000f30000008100000004"], 0x58) close(r4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000980)={'syztnl0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x40, 0x40, 0xae, 0x0, {{0x1a, 0x4, 0x0, 0x13, 0x68, 0x68, 0x0, 0xe1, 0x2f, 0x0, @loopback, @multicast1, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0xf5, [@loopback, @dev={0xac, 0x14, 0x14, 0x12}, @broadcast, @remote]}, @timestamp_addr={0x44, 0x3c, 0x91, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}, {@broadcast, 0x8}, {@remote, 0x2}, {@broadcast, 0xf}, {@broadcast, 0x7000000}, {@rand_addr=0x64010101, 0x9812}, {@rand_addr=0x64010102, 0xffffffcb}]}]}}}}}) sendmsg$inet(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000006c0)="35428fa8d35642802a0165139dd9f579d2a3b098dd5e591dbf5bf9ceb5c69463a67d8e6c0a7ac1eee9c7938587d163a56171345be6bbc7e94f753578a8d432f7cdb1f81618b302f4dc8bed44db1d671139bf8fac8d95f40d5ad88e3e189c4a87d157a3a52824c81c3e6fae4741", 0x6d}, {&(0x7f0000000740)="731b3cb29fe89ed78e073a1aa93527e4a1e1f70a99a516188a2f86be5cf74da70b8b051832fc35b3653015c8efb74d39667af7b2bbb04feb27f171b1cb6a1fcef8ce1b930f428afd56af3525413905e43a6229d1a0868e4844feb8fab1b1b3630ff377be4945de0768e7288c6c81fff2bde13ba2ec064ed65f922293abaa67e55c7012d70b05f7cf7afb48", 0x8b}], 0x2, &(0x7f0000000d00)=[@ip_ttl={{0x14, 0x0, 0x2, 0xd2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @broadcast, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}, @ip_retopts={{0x114, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x1a, 0x3, 0x9, [{@loopback, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x22}, 0xc}]}, @timestamp_addr={0x44, 0x4c, 0x5a, 0x1, 0x3, [{@broadcast, 0xe}, {@remote, 0x7fffffff}, {@private=0xa010102, 0xfffffffe}, {@private=0xa010100, 0x8}, {@multicast2, 0xd6a2}, {@private=0xa010100, 0x6}, {@broadcast, 0x2}, {@loopback, 0x3}, {@loopback, 0x7a2}]}, @ssrr={0x89, 0xf, 0x93, [@local, @remote, @multicast1]}, @timestamp_addr={0x44, 0xc, 0x58, 0x1, 0x6, [{@empty, 0x6}]}, @lsrr={0x83, 0xf, 0xda, [@local, @dev={0xac, 0x14, 0x14, 0x12}, @empty]}, @timestamp_prespec={0x44, 0x24, 0x87, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x28}, 0xd}, {@multicast1, 0xff}, {@broadcast, 0x40}, {@remote, 0xc}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x4f, 0x0, [{0x1, 0x9, "0537e048c1b1e2"}, {0x1, 0x12, "8b7d770dcd0c4ab4a5e38a17b8bde8cd"}, {0x0, 0xa, "c67e1b979ed12d5d"}, {0x2, 0x11, "cfb8f865ae0cff5c53f60df76f57e0"}, {0x1, 0x10, "74a8ecedd8f3ee32783885ea892b"}, {0x7, 0x3, "c8"}]}]}}}], 0x168}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x1a, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1be, 0x0, 0x0, 0x0, 0xfff}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x6}, @generic={0x2, 0x7, 0xf, 0x4, 0x4}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x6}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x2, 0x3c, &(0x7f0000000380)=""/60, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xe, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[r3, r3], &(0x7f0000000500)=[{0x3, 0x1, 0x9, 0xb}, {0x0, 0x1, 0x1000d, 0xb}, {0x2, 0x1, 0xfffffffe, 0x8}, {0x4, 0x1, 0x0, 0x1}, {0x8, 0x3, 0x5, 0x2}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='mm_page_free\x00', r6, 0x0, 0x4}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x2c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x7}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0xfffffffffffffe92, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @remote}}}]}]}, 0x2c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x7, &(0x7f0000000340)=[{0x9, 0x5b, 0x6, 0x6}, {0x5, 0x5, 0x4, 0x6}, {0x68f, 0x3, 0x2, 0x1}, {0x100, 0x3, 0x9, 0x8001}, {0x8000, 0xa, 0x3, 0x80000000}, {0x0, 0x9, 0x3, 0x6}, {0x6, 0x2, 0xf3, 0x7e32}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='kfree\x00', r10}, 0x18) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000406000140000100000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000040000000000000800"], 0x48}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) lsm_list_modules(&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000140)=0x10, 0x0) syz_open_dev$usbmon(&(0x7f00000005c0), 0x1, 0x84800) 145.503799ms ago: executing program 2 (id=15139): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x4}, 0xffffffffffffff51) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) pipe2$9p(0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x1c1c41, 0x6) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r2, 0x0, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x800}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x10001, 0x0, 0x8040000000000000}) close_range(r7, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000008000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r10}, &(0x7f0000000a00), &(0x7f0000000a40)=r11}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r12}, 0x10) close(r9) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 145.38829ms ago: executing program 6 (id=15140): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea4, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) getgroups(0x0, 0x0) 145.070239ms ago: executing program 6 (id=15141): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340), 0x4) syz_read_part_table(0x60d, &(0x7f0000002240)="$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") r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5409, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpid() shmctl$SHM_LOCK(0x0, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0xffffff8b) r1 = gettid() setrlimit(0x2, &(0x7f0000000000)={0x29ba7a52, 0x1e}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0x8, 0x1, 0x1, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000400)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}], 0x1, 0x0) tkill(r1, 0x7) 136.88761ms ago: executing program 6 (id=15142): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = fsmount(r1, 0x0, 0x0) fchdir(r4) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 108.276382ms ago: executing program 6 (id=15143): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10003, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x80a, &(0x7f0000000280), 0x1, 0x796, &(0x7f0000000c40)="$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") (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$rds(r1, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7130000000000007b8af0ff00000000bfa100000000000007010000f8ffffffafa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) io_setup(0x4, &(0x7f00000004c0)=0x0) (async) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) io_submit(r3, 0x1, &(0x7f0000000600)=[&(0x7f00000001c0)={0xfffffffffffffdef, 0x0, 0x0, 0x5, 0x4000, r4, 0x0}]) timer_create(0x7, &(0x7f0000000780)={0x0, 0x3f, 0x0, @thr={0x0, 0x0}}, &(0x7f00000007c0)=0x0) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) timer_settime(r5, 0x1, &(0x7f0000000840)={{r6, r7+10000000}, {0x0, 0x989680}}, 0x0) (async) rt_sigaction(0x3f, &(0x7f0000000940)={&(0x7f00000008c0)="c46279340cdbc4c261ad9a0c000000c4c2d503f264430fae54bcc0660f638d9b540000c482c5ac2c566742d0430366f30fbae70040d9fa90", 0x40000001, 0x0, {[0x40]}}, 0x0, 0x8, &(0x7f0000000a80)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x200000000200}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000004000000b705000008000000850000006a00000095", @ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYRES8=r8], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r10, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000880)=ANY=[@ANYBLOB="380000000209010200000000000000007c00000024000200140001800800010064010101080002aa0c000280050001"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x80) readv(r8, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/97, 0x61}, {&(0x7f0000000200)=""/155, 0x9b}, {&(0x7f0000000040)=""/56, 0x38}, {&(0x7f00000002c0)=""/124, 0x7c}, {&(0x7f00000003c0)=""/252, 0xfc}], 0x5) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="0900000000000000000000000000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 70.291505ms ago: executing program 6 (id=15144): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x9135}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004080) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffff6606}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) gettid() r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) pidfd_getfd(0xffffffffffffffff, r4, 0x0) 67.514955ms ago: executing program 9 (id=15145): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000740), 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r3}, 0x10) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 50.438866ms ago: executing program 6 (id=15146): socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="ffffffff00000000000000000000000000000000e0520b48016f92a27b38fe74066ccceca66a2b8c70fb55abc00a3e76ab2ff65b48980a87ee9ae4286ceea2114d56e9d24039302ab1f5859190e82b51fc432a3f825375934344f5039ef26a821d1f2e1e49575399f29c7896c6c84baedc4d66eb7655d9f795617f4a694b7942eac154cf41d3d8965a30e1d87e1f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000003000000000000000000000000000006005f16f58f00cc"], 0x50) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) clock_gettime(0xb, &(0x7f00000000c0)) pipe2$9p(0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3ea69faf6e9fa43c, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ed50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000030000005800018044000200000000000000000000000000fe800000000000000000000000000013f8000000200002000a00000000000000e0020000000000000000000000000001000000000d0001"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x18) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) r9 = getpid() ptrace$ARCH_SHSTK_UNLOCK(0x1e, r9, 0x1, 0x5004) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x7, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r10}, 0x10) link(&(0x7f0000000780)='./file2\x00', &(0x7f0000001740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) writev(r11, &(0x7f0000000400)=[{&(0x7f00000001c0)="33176ed4de07776e90de33341626dca877e4c095f2af40e8efcaa595e9c94b1c60ed0dc6d59a", 0x26}, {&(0x7f00000004c0)="ad5e91e3b5429beb977519c93951b12e022f2446e2473aace64a872120acffc148e78e41c6ced421aac312aaa249852f44259540d4cbc22f59789aae0501a60496d0f63ec1d794c1054988b75a741b418ffdd605dc963c70aba6a4a732a974860235e7af2b9710d63cfbd2ef17778fae75a453ec3323664ae43299e8e13c1470e53c98aee2661fde54850068523ebdd57b6fbf7ecf2ca4c2acb9db1c6399f914f938d1d9058833f96a8e1a096541867f2cc0b6ef2721", 0xb6}, {&(0x7f0000000340)="793632480a9879b401f726d5feaf9ddd89e9842c0e654774384fbe91bc6eca85ba02cea06247d8620813cfec77f5287a0903f83521940b1b08bb5e26952c93f80ec30de4e9d66f049d", 0x49}, {&(0x7f00000006c0)="a55dfe0c6017d3cc05c58dba006e0160b1be9523ed276b35fa1c31d4b993a9b4916800f34cd93ea4aa927c939887cffb5e1a9cc78b1de9090a0b9891057f0c9422821ca358ed0eb255da921a9b23f2f96188354416ebe2", 0x57}], 0x4) 35.234027ms ago: executing program 9 (id=15147): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 17.752639ms ago: executing program 0 (id=15148): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x1}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x3}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) 0s ago: executing program 9 (id=15149): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 0s ago: executing program 6 (id=15150): r0 = getpid() setreuid(0xee00, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_clone3(&(0x7f00000008c0)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0], 0x1, {r3}}, 0x58) kernel console output (not intermixed with test programs): nge from 0 to 512 [ 660.663944][T10887] ext4: Bad value for 'init_itable' [ 660.711781][T10895] netlink: 'syz.0.14132': attribute type 27 has an invalid length. [ 660.726369][T10897] loop2: detected capacity change from 0 to 512 [ 660.734282][T10897] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 660.742505][T10897] System zones: 1-12 [ 660.747214][T10897] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 33619980: comm syz.2.14131: invalid block [ 660.759357][T10897] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.14131: invalid indirect mapped block 1819239214 (level 1) [ 660.774437][T10897] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.14131: bg 0: block 361: padding at end of block bitmap is not set [ 660.789438][T10897] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 660.791102][T10895] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.805298][T10895] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.814803][T10897] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.14131: attempt to clear invalid blocks 33619980 len 1 [ 660.829027][T10897] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.14131: invalid indirect mapped block 1819239214 (level 0) [ 660.843650][T10897] EXT4-fs (loop2): 1 truncate cleaned up [ 660.850870][T10897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 660.876227][T10895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.884466][T10697] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.886133][T10895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 660.927568][T10895] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.936132][T10895] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.944514][T10895] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.953032][T10895] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.963075][T10895] bridge5: left promiscuous mode [ 660.970137][T10895] bridge6: left promiscuous mode [ 660.975765][T10895] bridge7: left promiscuous mode [ 660.982180][T10895] macvtap1: left promiscuous mode [ 661.010853][T10910] FAULT_INJECTION: forcing a failure. [ 661.010853][T10910] name failslab, interval 1, probability 0, space 0, times 0 [ 661.023498][T10910] CPU: 1 UID: 0 PID: 10910 Comm: syz.2.14135 Tainted: G W 6.14.0-rc2-syzkaller-00253-g78a632a2086c #0 [ 661.023523][T10910] Tainted: [W]=WARN [ 661.023528][T10910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 661.023534][T10910] Call Trace: [ 661.023539][T10910] [ 661.023544][T10910] dump_stack_lvl+0xf2/0x150 [ 661.023593][T10910] dump_stack+0x15/0x1a [ 661.023612][T10910] should_fail_ex+0x24a/0x260 [ 661.023636][T10910] should_failslab+0x8f/0xb0 [ 661.023652][T10910] kmem_cache_alloc_noprof+0x52/0x320 [ 661.023663][T10910] ? security_inode_alloc+0x37/0x100 [ 661.023677][T10910] security_inode_alloc+0x37/0x100 [ 661.023689][T10910] inode_init_always_gfp+0x4a2/0x4f0 [ 661.023705][T10910] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 661.023718][T10910] alloc_inode+0x82/0x160 [ 661.023805][T10910] new_inode+0x1e/0x100 [ 661.023820][T10910] shmem_get_inode+0x24e/0x730 [ 661.023894][T10910] __shmem_file_setup+0x127/0x1f0 [ 661.023911][T10910] shmem_file_setup+0x3b/0x50 [ 661.023928][T10910] __se_sys_memfd_create+0x2e1/0x5a0 [ 661.024009][T10910] __x64_sys_memfd_create+0x31/0x40 [ 661.024063][T10910] x64_sys_call+0x2d4c/0x2dc0 [ 661.024076][T10910] do_syscall_64+0xc9/0x1c0 [ 661.024091][T10910] ? clear_bhb_loop+0x55/0xb0 [ 661.024120][T10910] ? clear_bhb_loop+0x55/0xb0 [ 661.024155][T10910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.024229][T10910] RIP: 0033:0x7f57a9c0cde9 [ 661.024238][T10910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.024248][T10910] RSP: 002b:00007f57a8276e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 661.024258][T10910] RAX: ffffffffffffffda RBX: 00000000000004c2 RCX: 00007f57a9c0cde9 [ 661.024265][T10910] RDX: 00007f57a8276ef0 RSI: 0000000000000000 RDI: 00007f57a9c8ec51 [ 661.024344][T10910] RBP: 0000400000000980 R08: 00007f57a8276bb7 R09: 00007f57a8276e40 [ 661.024355][T10910] R10: 000000000000000a R11: 0000000000000202 R12: 0000400000000480 [ 661.024362][T10910] R13: 00007f57a8276ef0 R14: 00007f57a8276eb0 R15: 00004000000000c0 [ 661.024372][T10910] [ 661.274506][T10920] bridge8: entered promiscuous mode [ 661.291460][T10922] bridge23: entered promiscuous mode [ 661.479715][T10935] FAULT_INJECTION: forcing a failure. [ 661.479715][T10935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.492829][T10935] CPU: 1 UID: 0 PID: 10935 Comm: syz.9.14146 Tainted: G W 6.14.0-rc2-syzkaller-00253-g78a632a2086c #0 [ 661.492860][T10935] Tainted: [W]=WARN [ 661.492867][T10935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 661.492879][T10935] Call Trace: [ 661.492886][T10935] [ 661.492896][T10935] dump_stack_lvl+0xf2/0x150 [ 661.492920][T10935] dump_stack+0x15/0x1a [ 661.492940][T10935] should_fail_ex+0x24a/0x260 [ 661.492967][T10935] should_fail+0xb/0x10 [ 661.492991][T10935] should_fail_usercopy+0x1a/0x20 [ 661.493065][T10935] _copy_to_user+0x20/0xa0 [ 661.493094][T10935] simple_read_from_buffer+0xa0/0x110 [ 661.493173][T10935] proc_fail_nth_read+0xf9/0x140 [ 661.493243][T10935] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 661.493265][T10935] vfs_read+0x19b/0x6f0 [ 661.493284][T10935] ? __rcu_read_unlock+0x4e/0x70 [ 661.493302][T10935] ? __fget_files+0x17c/0x1c0 [ 661.493331][T10935] ksys_read+0xe8/0x1b0 [ 661.493436][T10935] __x64_sys_read+0x42/0x50 [ 661.493459][T10935] x64_sys_call+0x2874/0x2dc0 [ 661.493519][T10935] do_syscall_64+0xc9/0x1c0 [ 661.493547][T10935] ? clear_bhb_loop+0x55/0xb0 [ 661.493569][T10935] ? clear_bhb_loop+0x55/0xb0 [ 661.493589][T10935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.493672][T10935] RIP: 0033:0x7f055146b7fc [ 661.493687][T10935] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 661.493703][T10935] RSP: 002b:00007f054fad1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 661.493720][T10935] RAX: ffffffffffffffda RBX: 00007f0551685fa0 RCX: 00007f055146b7fc [ 661.493732][T10935] RDX: 000000000000000f RSI: 00007f054fad10a0 RDI: 0000000000000003 [ 661.493742][T10935] RBP: 00007f054fad1090 R08: 0000000000000000 R09: 0000000000000000 [ 661.493752][T10935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.493762][T10935] R13: 0000000000000001 R14: 00007f0551685fa0 R15: 00007ffe90c9d118 [ 661.493775][T10935] [ 661.734443][T10938] FAULT_INJECTION: forcing a failure. [ 661.734443][T10938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.747660][T10938] CPU: 1 UID: 0 PID: 10938 Comm: syz.2.14149 Tainted: G W 6.14.0-rc2-syzkaller-00253-g78a632a2086c #0 [ 661.747686][T10938] Tainted: [W]=WARN [ 661.747693][T10938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 661.747766][T10938] Call Trace: [ 661.747772][T10938] [ 661.747779][T10938] dump_stack_lvl+0xf2/0x150 [ 661.747806][T10938] dump_stack+0x15/0x1a [ 661.747826][T10938] should_fail_ex+0x24a/0x260 [ 661.747854][T10938] should_fail+0xb/0x10 [ 661.747963][T10938] should_fail_usercopy+0x1a/0x20 [ 661.747987][T10938] _copy_from_user+0x1c/0xa0 [ 661.748018][T10938] snd_seq_ioctl+0x11b/0x2a0 [ 661.748052][T10938] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 661.748188][T10938] __se_sys_ioctl+0xc9/0x140 [ 661.748208][T10938] __x64_sys_ioctl+0x43/0x50 [ 661.748226][T10938] x64_sys_call+0x1690/0x2dc0 [ 661.748250][T10938] do_syscall_64+0xc9/0x1c0 [ 661.748276][T10938] ? clear_bhb_loop+0x55/0xb0 [ 661.748304][T10938] ? clear_bhb_loop+0x55/0xb0 [ 661.748324][T10938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.748345][T10938] RIP: 0033:0x7f57a9c0cde9 [ 661.748359][T10938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.748376][T10938] RSP: 002b:00007f57a8277038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 661.748397][T10938] RAX: ffffffffffffffda RBX: 00007f57a9e25fa0 RCX: 00007f57a9c0cde9 [ 661.748410][T10938] RDX: 0000400000000580 RSI: 00000000408c5333 RDI: 0000000000000006 [ 661.748453][T10938] RBP: 00007f57a8277090 R08: 0000000000000000 R09: 0000000000000000 [ 661.748494][T10938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.748506][T10938] R13: 0000000000000000 R14: 00007f57a9e25fa0 R15: 00007ffcfdc5f9d8 [ 661.748529][T10938] [ 662.002199][T10828] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.024716][T10828] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.050672][T10828] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.059733][T10948] 9pnet_fd: Insufficient options for proto=fd [ 662.077407][T10828] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.141405][T10958] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14157'. [ 662.150518][T10958] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14157'. [ 662.157513][T10959] bridge23: entered promiscuous mode [ 662.172050][T10956] loop9: detected capacity change from 0 to 512 [ 662.198694][T10956] __quota_error: 373 callbacks suppressed [ 662.198897][T10956] Quota error (device loop9): v2_read_file_info: Free block number 1 out of range (1, 6). [ 662.219875][T10956] EXT4-fs warning (device loop9): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 662.235156][T10956] EXT4-fs (loop9): mount failed [ 662.298390][ T29] audit: type=1400 audit(1739620128.207:43822): avc: denied { bind } for pid=10972 comm="syz.4.14161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 662.330519][T10973] loop4: detected capacity change from 0 to 512 [ 662.547078][T10946] loop0: detected capacity change from 0 to 512 [ 662.559930][ T29] audit: type=1400 audit(1739620128.467:43823): avc: denied { unmount } for pid=3718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 662.575534][T10946] EXT4-fs: Ignoring removed mblk_io_submit option [ 662.586417][T10946] EXT4-fs: quotafile must be on filesystem root [ 662.609852][T10981] 9pnet_fd: Insufficient options for proto=fd [ 662.730328][T10989] loop9: detected capacity change from 0 to 512 [ 662.737429][T10989] EXT4-fs: inline encryption not supported [ 662.743389][T10989] EXT4-fs: Ignoring removed bh option [ 662.750820][T10989] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 662.760810][T10989] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 662.906968][T10990] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 662.913507][T10990] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 662.921201][T10990] vhci_hcd vhci_hcd.0: Device attached [ 663.009228][T10995] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 663.099063][T10997] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14168'. [ 663.108345][T10997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14168'. [ 663.194999][ T3371] usb 10-1: SetAddress Request (2) to port 0 [ 663.210594][ T3371] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 663.317110][T11004] loop2: detected capacity change from 0 to 1024 [ 663.358691][T11004] EXT4-fs: Ignoring removed mblk_io_submit option [ 663.423292][T11004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 663.492490][T10992] vhci_hcd: connection reset by peer [ 663.501584][T31231] vhci_hcd: stop threads [ 663.505866][T31231] vhci_hcd: release socket [ 663.510352][T31231] vhci_hcd: disconnect device [ 663.580857][T11014] 9pnet_fd: Insufficient options for proto=fd [ 663.611081][T10697] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.662079][T11017] 9pnet_fd: Insufficient options for proto=fd [ 663.699661][T11017] netlink: 56 bytes leftover after parsing attributes in process `syz.6.14177'. [ 663.709193][ T29] audit: type=1326 audit(1739620129.607:43824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11018 comm="syz.0.14178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7692a6cde9 code=0x7ffc0000 [ 663.784646][T10989] loop9: detected capacity change from 0 to 512 [ 663.815992][T10989] EXT4-fs: Ignoring removed orlov option [ 663.872819][T10989] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 663.884431][T10989] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 663.894567][T10989] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.14166: Corrupt directory, running e2fsck is recommended [ 663.911318][T11023] loop2: detected capacity change from 0 to 1024 [ 663.917985][ T29] audit: type=1326 audit(1739620129.647:43825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11018 comm="syz.0.14178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7692a6b750 code=0x7ffc0000 [ 663.941716][ T29] audit: type=1326 audit(1739620129.647:43826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11018 comm="syz.0.14178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7692a6cde9 code=0x7ffc0000 [ 663.965411][ T29] audit: type=1326 audit(1739620129.647:43827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11018 comm="syz.0.14178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7692a6cde9 code=0x7ffc0000 [ 663.989983][ T29] audit: type=1326 audit(1739620129.647:43828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11018 comm="syz.0.14178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f7692a6cde9 code=0x7ffc0000 [ 664.014022][ T29] audit: type=1326 audit(1739620129.647:43829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11018 comm="syz.0.14178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7692a6cde9 code=0x7ffc0000 [ 664.037726][ T29] audit: type=1326 audit(1739620129.647:43830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11018 comm="syz.0.14178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7692a6cde9 code=0x7ffc0000 [ 664.065916][T11023] EXT4-fs: Ignoring removed mblk_io_submit option [ 664.143508][T10989] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 664.159994][T10989] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.14166: corrupted in-inode xattr: invalid ea_ino [ 664.176093][T10989] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.14166: couldn't read orphan inode 15 (err -117) [ 664.176460][T11023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.188720][T10989] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.234845][T10697] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.250113][T10989] ext4: Unknown parameter 'usrjquota5XÝø*' [ 664.263812][T11034] ext4: Unknown parameter 'usrjquota5XÝø*' [ 664.269700][T11037] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 664.297709][T10253] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.328693][T11046] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.367287][T11046] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.374222][T11039] loop4: detected capacity change from 0 to 8192 [ 664.419542][T11046] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.476844][T11046] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.478384][T11064] hub 2-0:1.0: USB hub found [ 664.491474][T11064] hub 2-0:1.0: 8 ports detected [ 664.539154][T11046] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.551503][T11046] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.563427][T11046] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.577379][T11046] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.588025][T11069] SELinux: syz.2.14195 (11069) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 664.672851][T11089] bridge24: entered promiscuous mode [ 664.728348][T11096] loop2: detected capacity change from 0 to 512 [ 664.736126][T11096] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.14204: bg 0: block 35: padding at end of block bitmap is not set [ 664.751482][T11096] EXT4-fs (loop2): Remounting filesystem read-only [ 664.764810][T11096] EXT4-fs (loop2): 1 truncate cleaned up [ 664.779387][T11096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 664.798975][T11101] hub 2-0:1.0: USB hub found [ 664.804834][T11101] hub 2-0:1.0: 8 ports detected [ 664.814870][T11105] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.828198][T11096] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 664.836386][T11096] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.868718][T11111] tmpfs: Bad value for 'mpol' [ 664.917932][T11105] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.968095][T11105] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.018664][T11105] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.072684][T11105] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.096194][T11105] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.108048][T11105] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.111103][T11105] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.204068][T11119] loop9: detected capacity change from 0 to 512 [ 665.217644][T11119] EXT4-fs warning (device loop9): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 665.217993][T11119] EXT4-fs (loop9): mount failed [ 665.328905][T11125] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14213'. [ 665.338072][T11125] netlink: 68 bytes leftover after parsing attributes in process `syz.4.14213'. [ 665.410706][T11125] infiniband syz!: set active [ 665.410722][T11125] infiniband syz!: added team_slave_0 [ 665.422980][T11125] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 665.423180][T11125] infiniband syz!: Couldn't open port 1 [ 665.440187][T11125] RDS/IB: syz!: added [ 665.440203][T11125] smc: adding ib device syz! with port count 1 [ 665.440215][T11125] smc: ib device syz! port 1 has pnetid [ 665.620341][T11136] bridge1: entered promiscuous mode [ 665.670973][T11141] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14219'. [ 665.697134][T11142] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.14216' sets config #0 [ 665.706662][T11141] vlan2: entered promiscuous mode [ 665.711821][T11141] syz_tun: entered promiscuous mode [ 665.713503][T11142] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.14216' sets config #1 [ 665.756817][T11146] loop9: detected capacity change from 0 to 512 [ 665.768663][T11147] loop2: detected capacity change from 0 to 1024 [ 665.777130][T11147] EXT4-fs: Ignoring removed mblk_io_submit option [ 665.789035][T11146] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.805342][T11147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.829462][T11146] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 665.864735][T10697] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.885354][T11146] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #2: comm syz.9.14221: corrupted inode contents [ 665.919470][T11146] EXT4-fs error (device loop9): ext4_dirty_inode:6042: inode #2: comm syz.9.14221: mark_inode_dirty error [ 665.931539][T11167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.940416][T11167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.951665][T11146] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #2: comm syz.9.14221: corrupted inode contents [ 665.972551][T11146] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #2: comm syz.9.14221: mark_inode_dirty error [ 665.985753][T11165] 9pnet_fd: Insufficient options for proto=fd [ 666.005993][T11169] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.026157][T10253] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.036897][T11176] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14232'. [ 666.039415][T11174] bridge9: entered promiscuous mode [ 666.074731][T11184] loop2: detected capacity change from 0 to 512 [ 666.089300][T11169] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.110058][T11184] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 666.126560][T11184] EXT4-fs (loop2): mount failed [ 666.149314][T11169] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.170693][T11197] FAULT_INJECTION: forcing a failure. [ 666.170693][T11197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 666.183856][T11197] CPU: 1 UID: 0 PID: 11197 Comm: syz.9.14238 Tainted: G W 6.14.0-rc2-syzkaller-00253-g78a632a2086c #0 [ 666.183984][T11197] Tainted: [W]=WARN [ 666.183991][T11197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 666.184001][T11197] Call Trace: [ 666.184050][T11197] [ 666.184058][T11197] dump_stack_lvl+0xf2/0x150 [ 666.184085][T11197] dump_stack+0x15/0x1a [ 666.184137][T11197] should_fail_ex+0x24a/0x260 [ 666.184160][T11197] should_fail+0xb/0x10 [ 666.184179][T11197] should_fail_usercopy+0x1a/0x20 [ 666.184202][T11197] _copy_from_user+0x1c/0xa0 [ 666.184253][T11197] tipc_ioctl+0xc2/0x1d0 [ 666.184338][T11197] sock_do_ioctl+0x81/0x260 [ 666.184362][T11197] sock_ioctl+0x40f/0x600 [ 666.184380][T11197] ? __pfx_sock_ioctl+0x10/0x10 [ 666.184426][T11197] __se_sys_ioctl+0xc9/0x140 [ 666.184448][T11197] __x64_sys_ioctl+0x43/0x50 [ 666.184468][T11197] x64_sys_call+0x1690/0x2dc0 [ 666.184489][T11197] do_syscall_64+0xc9/0x1c0 [ 666.184511][T11197] ? clear_bhb_loop+0x55/0xb0 [ 666.184612][T11197] ? clear_bhb_loop+0x55/0xb0 [ 666.184632][T11197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.184653][T11197] RIP: 0033:0x7f055146cde9 [ 666.184666][T11197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.184702][T11197] RSP: 002b:00007f054fad1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 666.184761][T11197] RAX: ffffffffffffffda RBX: 00007f0551685fa0 RCX: 00007f055146cde9 [ 666.184771][T11197] RDX: 0000000000000000 RSI: 00000000000089e0 RDI: 0000000000000003 [ 666.184838][T11197] RBP: 00007f054fad1090 R08: 0000000000000000 R09: 0000000000000000 [ 666.184879][T11197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.184891][T11197] R13: 0000000000000000 R14: 00007f0551685fa0 R15: 00007ffe90c9d118 [ 666.184911][T11197] [ 666.400460][T11169] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.416123][T11204] 9pnet_fd: Insufficient options for proto=fd [ 666.458587][T11211] vlan2: entered allmulticast mode [ 666.464024][T11211] bond0: entered allmulticast mode [ 666.469263][T11211] bond_slave_1: entered allmulticast mode [ 666.479852][T11211] bond0: left allmulticast mode [ 666.484722][T11211] bond_slave_1: left allmulticast mode [ 666.536921][T11218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11218 comm=syz.9.14246 [ 666.560129][T11220] loop0: detected capacity change from 0 to 1024 [ 666.567152][T11220] EXT4-fs: Ignoring removed mblk_io_submit option [ 666.573804][T11218] loop9: detected capacity change from 0 to 1024 [ 666.582396][T11218] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 666.593366][T11218] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 666.604076][T11220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.604703][T11218] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 666.628325][T11218] EXT4-fs (loop9): invalid journal inode [ 666.634267][T11218] EXT4-fs (loop9): can't get journal size [ 666.644763][ T8474] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.653899][T11218] EXT4-fs error (device loop9): ext4_protect_reserved_inode:182: inode #3: comm syz.9.14246: blocks 2-2 from inode overlap system zone [ 666.668118][T11218] EXT4-fs (loop9): failed to initialize system zone (-117) [ 666.675468][T11218] EXT4-fs (loop9): mount failed [ 666.692124][T11230] loop0: detected capacity change from 0 to 2048 [ 666.702913][T11232] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14251'. [ 666.714812][T11232] vlan0: entered promiscuous mode [ 666.719988][T11232] syz_tun: entered promiscuous mode [ 666.726993][T11230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 666.744300][T11218] Invalid ELF header magic: != ELF [ 666.822350][ T8474] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.854486][T11241] 9pnet_fd: Insufficient options for proto=fd [ 666.887390][T11244] loop4: detected capacity change from 0 to 2048 [ 666.906498][T11244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 666.997123][ T3718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.086342][T11250] loop4: detected capacity change from 0 to 8192 [ 667.098653][T11252] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 667.107113][T11252] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 667.115482][T11252] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 667.123757][T11252] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 667.148772][T11254] FAULT_INJECTION: forcing a failure. [ 667.148772][T11254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.161971][T11254] CPU: 0 UID: 0 PID: 11254 Comm: syz.0.14259 Tainted: G W 6.14.0-rc2-syzkaller-00253-g78a632a2086c #0 [ 667.162001][T11254] Tainted: [W]=WARN [ 667.162007][T11254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 667.162017][T11254] Call Trace: [ 667.162023][T11254] [ 667.162030][T11254] dump_stack_lvl+0xf2/0x150 [ 667.162124][T11254] dump_stack+0x15/0x1a [ 667.162144][T11254] should_fail_ex+0x24a/0x260 [ 667.162166][T11254] should_fail+0xb/0x10 [ 667.162202][T11254] should_fail_usercopy+0x1a/0x20 [ 667.162310][T11254] _copy_from_user+0x1c/0xa0 [ 667.162343][T11254] do_sock_getsockopt+0xd3/0x260 [ 667.162372][T11254] __x64_sys_getsockopt+0x18c/0x200 [ 667.162421][T11254] x64_sys_call+0x1288/0x2dc0 [ 667.162446][T11254] do_syscall_64+0xc9/0x1c0 [ 667.162507][T11254] ? clear_bhb_loop+0x55/0xb0 [ 667.162534][T11254] ? clear_bhb_loop+0x55/0xb0 [ 667.162559][T11254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.162583][T11254] RIP: 0033:0x7f7692a6cde9 [ 667.162597][T11254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.162614][T11254] RSP: 002b:00007f76910d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 667.162710][T11254] RAX: ffffffffffffffda RBX: 00007f7692c85fa0 RCX: 00007f7692a6cde9 [ 667.162720][T11254] RDX: 0000000000000000 RSI: 0000000000000084 RDI: 0000000000000003 [ 667.162730][T11254] RBP: 00007f76910d1090 R08: 0000400000000280 R09: 0000000000000000 [ 667.162740][T11254] R10: 00004000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 667.162789][T11254] R13: 0000000000000000 R14: 00007f7692c85fa0 R15: 00007ffff214c3f8 [ 667.162806][T11254] [ 667.385472][T11264] loop9: detected capacity change from 0 to 256 [ 667.392580][T11264] vfat: Unknown parameter '' [ 667.424449][T11269] FAULT_INJECTION: forcing a failure. [ 667.424449][T11269] name failslab, interval 1, probability 0, space 0, times 0 [ 667.437215][T11269] CPU: 1 UID: 0 PID: 11269 Comm: syz.0.14264 Tainted: G W 6.14.0-rc2-syzkaller-00253-g78a632a2086c #0 [ 667.437245][T11269] Tainted: [W]=WARN [ 667.437252][T11269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 667.437263][T11269] Call Trace: [ 667.437270][T11269] [ 667.437277][T11269] dump_stack_lvl+0xf2/0x150 [ 667.437381][T11269] dump_stack+0x15/0x1a [ 667.437460][T11269] should_fail_ex+0x24a/0x260 [ 667.437483][T11269] should_failslab+0x8f/0xb0 [ 667.437506][T11269] __kmalloc_noprof+0xab/0x3f0 [ 667.437593][T11269] ? nla_strdup+0x7b/0xc0 [ 667.437628][T11269] nla_strdup+0x7b/0xc0 [ 667.437651][T11269] nf_tables_newtable+0x3e7/0xee0 [ 667.437755][T11269] nfnetlink_rcv+0xb3e/0x15d0 [ 667.437813][T11269] netlink_unicast+0x599/0x670 [ 667.437884][T11269] netlink_sendmsg+0x5cc/0x6e0 [ 667.437901][T11269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.437916][T11269] __sock_sendmsg+0x140/0x180 [ 667.437994][T11269] ____sys_sendmsg+0x326/0x4b0 [ 667.438008][T11269] __sys_sendmsg+0x19d/0x230 [ 667.438026][T11269] __x64_sys_sendmsg+0x46/0x50 [ 667.438041][T11269] x64_sys_call+0x2734/0x2dc0 [ 667.438054][T11269] do_syscall_64+0xc9/0x1c0 [ 667.438069][T11269] ? clear_bhb_loop+0x55/0xb0 [ 667.438083][T11269] ? clear_bhb_loop+0x55/0xb0 [ 667.438098][T11269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.438122][T11269] RIP: 0033:0x7f7692a6cde9 [ 667.438131][T11269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.438141][T11269] RSP: 002b:00007f76910d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 667.438153][T11269] RAX: ffffffffffffffda RBX: 00007f7692c85fa0 RCX: 00007f7692a6cde9 [ 667.438159][T11269] RDX: 0000000020000080 RSI: 00004000000000c0 RDI: 0000000000000003 [ 667.438185][T11269] RBP: 00007f76910d1090 R08: 0000000000000000 R09: 0000000000000000 [ 667.438196][T11269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.438207][T11269] R13: 0000000000000000 R14: 00007f7692c85fa0 R15: 00007ffff214c3f8 [ 667.438223][T11269] [ 667.450204][T11271] 9pnet_fd: Insufficient options for proto=fd [ 667.540993][T11274] xt_hashlimit: max too large, truncated to 1048576 [ 667.691158][ T29] kauditd_printk_skb: 332 callbacks suppressed [ 667.691224][ T29] audit: type=1326 audit(1739620133.597:44161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11281 comm="syz.0.14268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7692a6cde9 code=0x7ffc0000 [ 667.721372][ T29] audit: type=1326 audit(1739620133.597:44162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11281 comm="syz.0.14268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7692a6cde9 code=0x7ffc0000 [ 667.745199][ T29] audit: type=1326 audit(1739620133.597:44163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11281 comm="syz.0.14268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7692a6cde9 code=0x7ffc0000 [ 667.768921][ T29] audit: type=1326 audit(1739620133.597:44164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11281 comm="syz.0.14268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7692a6cde9 code=0x7ffc0000 [ 667.792686][ T29] audit: type=1326 audit(1739620133.597:44165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11281 comm="syz.0.14268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7692a6cde9 code=0x7ffc0000 [ 667.816504][ T29] audit: type=1326 audit(1739620133.597:44166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11281 comm="syz.0.14268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7692a6cde9 code=0x7ffc0000 [ 667.855137][ T29] audit: type=1326 audit(1739620133.757:44167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11281 comm="syz.0.14268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7692a6cde9 code=0x7ffc0000 [ 667.878959][ T29] audit: type=1326 audit(1739620133.757:44168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11281 comm="syz.0.14268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7692a6cde9 code=0x7ffc0000 [ 667.902831][ T29] audit: type=1326 audit(1739620133.757:44169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11281 comm="syz.0.14268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7692a6cde9 code=0x7ffc0000 [ 667.926679][ T29] audit: type=1326 audit(1739620133.757:44170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11281 comm="syz.0.14268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f7692a6cde9 code=0x7ffc0000 [ 667.957921][T11287] __nla_validate_parse: 1 callbacks suppressed [ 667.957937][T11287] netlink: 28 bytes leftover after parsing attributes in process `syz.9.14269'. [ 667.983372][T11291] bridge10: entered promiscuous mode [ 667.991174][T11293] netlink: 56 bytes leftover after parsing attributes in process `syz.2.14270'. [ 668.013936][T11293] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 668.022921][T11293] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 668.031831][T11293] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 668.040639][T11293] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 668.053850][T11295] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.14269' sets config #0 [ 668.082210][T11295] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.14269' sets config #1 [ 668.218440][T11306] 9pnet_fd: Insufficient options for proto=fd [ 668.241375][T11313] bridge11: entered promiscuous mode [ 668.306977][ T3371] usb 10-1: device descriptor read/8, error -110 [ 668.402926][T11332] bridge12: entered promiscuous mode [ 668.415282][ T3371] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 668.435993][ T3371] usb 10-1: enqueue for inactive port 0 [ 668.446285][ T3371] usb 10-1: enqueue for inactive port 0 [ 668.457197][ T3371] usb 10-1: enqueue for inactive port 0 [ 668.566526][T11339] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14289'. [ 668.651323][T11347] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.14289' sets config #0 [ 668.668684][T11347] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.14289' sets config #1 [ 668.739989][T11358] loop0: detected capacity change from 0 to 1024 [ 668.757457][T11358] EXT4-fs: quotafile must be on filesystem root [ 668.850098][T11362] netlink: 28 bytes leftover after parsing attributes in process `syz.9.14297'. [ 668.876554][T11368] bridge2: entered promiscuous mode [ 668.914573][T11364] loop0: detected capacity change from 0 to 8192 [ 669.209141][T11378] hub 2-0:1.0: USB hub found [ 669.215898][T11378] hub 2-0:1.0: 8 ports detected [ 669.269349][T11387] netlink: 12 bytes leftover after parsing attributes in process `syz.9.14301'. [ 669.278533][T11387] netlink: 12 bytes leftover after parsing attributes in process `syz.9.14301'. [ 669.369513][T11391] Failed to initialize the IGMP autojoin socket (err -2) [ 669.377093][T11395] netlink: 120 bytes leftover after parsing attributes in process `syz.2.14310'. [ 669.475617][ T3371] usb usb10-port1: attempt power cycle [ 669.491580][T11400] loop4: detected capacity change from 0 to 512 [ 669.492925][T11169] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.531630][T11400] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 669.540002][T11169] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.565321][T11400] EXT4-fs (loop4): mount failed [ 669.642289][T11169] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.653995][T11169] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.854757][T11424] netlink: 120 bytes leftover after parsing attributes in process `syz.0.14321'. [ 670.406765][T11453] 9pnet_fd: Insufficient options for proto=fd [ 670.573969][T11465] netlink: 40 bytes leftover after parsing attributes in process `syz.9.14337'. [ 670.687260][T11478] 9pnet_fd: Insufficient options for proto=fd [ 670.703583][T11478] netlink: 56 bytes leftover after parsing attributes in process `syz.9.14342'. [ 671.026482][T11497] loop9: detected capacity change from 0 to 1024 [ 671.044196][T11497] EXT4-fs: Ignoring removed mblk_io_submit option [ 671.077725][T11497] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.159310][T10253] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.251771][T11513] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.308557][T11513] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.318855][ T3371] usb usb10-port1: unable to enumerate USB device [ 671.348367][T11521] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.14357' sets config #0 [ 671.377037][T11513] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.395032][T11521] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.14357' sets config #1 [ 671.457620][T11513] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.552838][T11513] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.582939][T11513] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.583584][T11535] loop2: detected capacity change from 0 to 764 [ 671.608342][T11513] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.631804][T11513] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.751517][T11546] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 671.758017][T11546] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 671.881426][T11551] bridge3: entered promiscuous mode [ 671.954069][T11552] Failed to initialize the IGMP autojoin socket (err -2) [ 672.026937][T11553] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 672.033493][T11553] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 672.041187][T11553] vhci_hcd vhci_hcd.0: Device attached [ 672.049813][T11553] wireguard: wg0: Could not create IPv4 socket [ 672.325098][ T3371] usb 10-1: SetAddress Request (6) to port 0 [ 672.339022][ T3371] usb 10-1: new SuperSpeed USB device number 6 using vhci_hcd [ 672.622893][T11554] vhci_hcd: connection reset by peer [ 672.630561][T31230] vhci_hcd: stop threads [ 672.634844][T31230] vhci_hcd: release socket [ 672.639320][T31230] vhci_hcd: disconnect device [ 672.958900][ T29] kauditd_printk_skb: 329 callbacks suppressed [ 672.958914][ T29] audit: type=1326 audit(1739620138.867:44499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11579 comm="syz.9.14378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055146cde9 code=0x7ffc0000 [ 673.010879][T11572] __nla_validate_parse: 1 callbacks suppressed [ 673.010896][T11572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14374'. [ 673.026220][T11572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14374'. [ 673.140326][ T29] audit: type=1326 audit(1739620138.907:44500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11579 comm="syz.9.14378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f055146cde9 code=0x7ffc0000 [ 673.164017][ T29] audit: type=1326 audit(1739620138.907:44501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11579 comm="syz.9.14378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055146cde9 code=0x7ffc0000 [ 673.187711][ T29] audit: type=1326 audit(1739620138.907:44502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11579 comm="syz.9.14378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055146cde9 code=0x7ffc0000 [ 673.211427][ T29] audit: type=1326 audit(1739620138.907:44503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11579 comm="syz.9.14378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f055146cde9 code=0x7ffc0000 [ 673.235191][ T29] audit: type=1326 audit(1739620138.907:44504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11579 comm="syz.9.14378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055146cde9 code=0x7ffc0000 [ 673.258986][ T29] audit: type=1326 audit(1739620138.907:44505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11579 comm="syz.9.14378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055146cde9 code=0x7ffc0000 [ 673.282780][ T29] audit: type=1326 audit(1739620138.907:44506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11579 comm="syz.9.14378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f055146cde9 code=0x7ffc0000 [ 673.306616][ T29] audit: type=1326 audit(1739620138.907:44507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11579 comm="syz.9.14378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055146cde9 code=0x7ffc0000 [ 673.330453][ T29] audit: type=1326 audit(1739620138.907:44508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11579 comm="syz.9.14378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055146cde9 code=0x7ffc0000 [ 674.229866][T31230] bridge_slave_1: left allmulticast mode [ 674.235618][T31230] bridge_slave_1: left promiscuous mode [ 674.241245][T31230] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.261008][T11602] FAULT_INJECTION: forcing a failure. [ 674.261008][T11602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 674.274194][T11602] CPU: 0 UID: 0 PID: 11602 Comm: syz.9.14388 Tainted: G W 6.14.0-rc2-syzkaller-00253-g78a632a2086c #0 [ 674.274221][T11602] Tainted: [W]=WARN [ 674.274228][T11602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 674.274240][T11602] Call Trace: [ 674.274246][T11602] [ 674.274253][T11602] dump_stack_lvl+0xf2/0x150 [ 674.274358][T11602] dump_stack+0x15/0x1a [ 674.274379][T11602] should_fail_ex+0x24a/0x260 [ 674.274407][T11602] should_fail+0xb/0x10 [ 674.274430][T11602] should_fail_usercopy+0x1a/0x20 [ 674.274535][T11602] _copy_from_user+0x1c/0xa0 [ 674.274564][T11602] kstrtouint_from_user+0x76/0xe0 [ 674.274585][T11602] ? 0xffffffff81000000 [ 674.274598][T11602] ? selinux_file_permission+0x22a/0x360 [ 674.274701][T11602] proc_fail_nth_write+0x4f/0x150 [ 674.274728][T11602] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 674.274754][T11602] vfs_write+0x27d/0x920 [ 674.274773][T11602] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 674.274817][T11602] ? __fget_files+0x17c/0x1c0 [ 674.274884][T11602] ksys_write+0xe8/0x1b0 [ 674.274911][T11602] __x64_sys_write+0x42/0x50 [ 674.274944][T11602] x64_sys_call+0x287e/0x2dc0 [ 674.274999][T11602] do_syscall_64+0xc9/0x1c0 [ 674.275024][T11602] ? clear_bhb_loop+0x55/0xb0 [ 674.275050][T11602] ? clear_bhb_loop+0x55/0xb0 [ 674.275104][T11602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.275192][T11602] RIP: 0033:0x7f055146b89f [ 674.275205][T11602] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 674.275219][T11602] RSP: 002b:00007f054fad1030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 674.275235][T11602] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f055146b89f [ 674.275247][T11602] RDX: 0000000000000001 RSI: 00007f054fad10a0 RDI: 0000000000000003 [ 674.275335][T11602] RBP: 00007f054fad1090 R08: 0000000000000000 R09: 0000000000000000 [ 674.275347][T11602] R10: 0000000000000010 R11: 0000000000000293 R12: 0000000000000001 [ 674.275359][T11602] R13: 0000000000000000 R14: 00007f0551685fa0 R15: 00007ffe90c9d118 [ 674.275375][T11602] [ 674.682576][T31230] bridge_slave_0: left allmulticast mode [ 674.688275][T31230] bridge_slave_0: left promiscuous mode [ 674.693987][T31230] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.742472][T11605] 9pnet_fd: Insufficient options for proto=fd [ 674.766326][T11605] netlink: 56 bytes leftover after parsing attributes in process `syz.4.14389'. [ 674.774794][T11611] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14390'. [ 674.897153][T31230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 674.916084][T31230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.936448][T31230] bond0 (unregistering): Released all slaves [ 674.957618][T31230] bond1 (unregistering): (slave bond2): Releasing backup interface [ 674.975691][T31230] bond2 (unregistering): left promiscuous mode [ 674.982043][T31230] bond1 (unregistering): Released all slaves [ 674.997931][T31230] bond2 (unregistering): Released all slaves [ 675.049397][T11611] bond1: entered promiscuous mode [ 675.054482][T11611] bond1: entered allmulticast mode [ 675.073964][T11611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 675.097779][T11611] bond1 (unregistering): Released all slaves [ 675.146928][T31230] hsr_slave_0: left promiscuous mode [ 675.176502][T31230] hsr_slave_1: left promiscuous mode [ 675.188586][T11623] loop4: detected capacity change from 0 to 512 [ 675.204351][T11625] dccp_invalid_packet: P.Data Offset(0) too small [ 675.205404][T31230] veth1_macvtap: left promiscuous mode [ 675.225037][T31230] veth0_macvtap: left promiscuous mode [ 675.230718][T31230] veth1_vlan: left promiscuous mode [ 675.246925][T31230] veth0_vlan: left promiscuous mode [ 675.270141][T11623] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 675.325075][T11623] EXT4-fs (loop4): mount failed [ 675.350295][T11636] loop2: detected capacity change from 0 to 1024 [ 675.383338][T11633] loop9: detected capacity change from 0 to 8192 [ 675.385292][T11636] EXT4-fs: Ignoring removed mblk_io_submit option [ 675.421143][T31230] team0 (unregistering): Port device team_slave_1 removed [ 675.438589][T11636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 675.455289][T31230] team0 (unregistering): Port device team_slave_0 removed [ 675.481534][T10697] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.579875][T11643] loop2: detected capacity change from 0 to 2048 [ 675.631195][T11647] netlink: 120 bytes leftover after parsing attributes in process `syz.6.14406'. [ 675.647008][T11643] loop2: p1 < > p4 [ 675.651260][T11643] loop2: p4 size 8388608 extends beyond EOD, truncated [ 675.774429][T11658] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.826582][T11658] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.927357][T11658] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.984126][T11672] netlink: 88 bytes leftover after parsing attributes in process `syz.6.14416'. [ 676.026925][T11658] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.094203][T11680] netlink: 120 bytes leftover after parsing attributes in process `syz.6.14421'. [ 676.116369][T11658] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.137961][T11658] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.151260][T11686] bridge25: entered promiscuous mode [ 676.169833][T11658] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.182695][T11658] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.216883][T11688] loop2: detected capacity change from 0 to 2048 [ 676.249327][T11688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 676.318313][T10697] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.442204][T11711] 9pnet_fd: Insufficient options for proto=fd [ 676.456679][T11711] netlink: 56 bytes leftover after parsing attributes in process `syz.4.14432'. [ 676.520785][T11720] bridge26: entered promiscuous mode [ 676.538442][T11723] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.580973][T11726] loop4: detected capacity change from 0 to 2048 [ 676.597416][T11726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 676.616827][T11723] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.665478][ T3718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.678325][T11723] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.747066][T11723] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.963135][T11758] 8021q: adding VLAN 0 to HW filter on device bond1 [ 677.011149][T11758] 8021q: adding VLAN 0 to HW filter on device bond1 [ 677.029780][T11758] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 677.043966][T11758] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 677.058384][T11763] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.14450' sets config #0 [ 677.082246][T11763] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.14450' sets config #1 [ 677.098406][T11765] bridge24: entered promiscuous mode [ 677.166585][T11767] loop0: detected capacity change from 0 to 2048 [ 677.183757][T11767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 677.226593][ T8474] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.278122][T11780] loop4: detected capacity change from 0 to 8192 [ 677.372877][T11799] netlink: 128 bytes leftover after parsing attributes in process `syz.2.14466'. [ 677.381866][T11801] loop0: detected capacity change from 0 to 8192 [ 677.425567][ T3371] usb 10-1: device descriptor read/8, error -110 [ 677.534954][ T3371] usb 10-1: new SuperSpeed USB device number 6 using vhci_hcd [ 677.555025][ T3371] usb 10-1: enqueue for inactive port 0 [ 677.576283][ T3371] usb 10-1: enqueue for inactive port 0 [ 677.588038][T11723] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.596628][ T3371] usb 10-1: enqueue for inactive port 0 [ 677.607238][T11799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14466'. [ 677.620345][T11723] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.635677][T11799] bridge0: port 3(batadv1) entered blocking state [ 677.642167][T11799] bridge0: port 3(batadv1) entered disabled state [ 677.666204][T11799] batadv1: entered allmulticast mode [ 677.695724][T11799] batadv1: entered promiscuous mode [ 677.745645][T11723] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.785332][T11723] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.830004][T11813] netlink: 'syz.9.14470': attribute type 1 has an invalid length. [ 677.862177][T11813] 8021q: adding VLAN 0 to HW filter on device bond1 [ 677.899864][T11813] 8021q: adding VLAN 0 to HW filter on device bond1 [ 677.937502][T11813] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 677.958751][T11817] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.14470' sets config #0 [ 677.983011][T11813] bond1: (slave wireguard1): Error -95 calling set_mac_address [ 677.992480][T11817] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.14470' sets config #1 [ 678.135593][T31280] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 678.144820][T31280] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 678.298188][ T29] kauditd_printk_skb: 468 callbacks suppressed [ 678.298204][ T29] audit: type=1326 audit(1739620144.207:44976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11830 comm="syz.9.14475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055146cde9 code=0x7ffc0000 [ 678.339414][ T29] audit: type=1326 audit(1739620144.247:44977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11830 comm="syz.9.14475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f055146cde9 code=0x7ffc0000 [ 678.363218][ T29] audit: type=1326 audit(1739620144.247:44978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11830 comm="syz.9.14475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055146cde9 code=0x7ffc0000 [ 678.386911][ T29] audit: type=1326 audit(1739620144.247:44979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11830 comm="syz.9.14475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055146cde9 code=0x7ffc0000 [ 678.455464][ T29] audit: type=1326 audit(1739620144.367:44980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11838 comm="syz.6.14480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ad11cde9 code=0x7ffc0000 [ 678.479281][ T29] audit: type=1326 audit(1739620144.367:44981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11838 comm="syz.6.14480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ad11cde9 code=0x7ffc0000 [ 678.560573][T11841] hub 2-0:1.0: USB hub found [ 678.565991][T11841] hub 2-0:1.0: 8 ports detected [ 678.585639][ T29] audit: type=1326 audit(1739620144.367:44982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11838 comm="syz.6.14480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f62ad11cde9 code=0x7ffc0000 [ 678.609576][ T29] audit: type=1326 audit(1739620144.367:44983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11838 comm="syz.6.14480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ad11cde9 code=0x7ffc0000 [ 678.633552][ T29] audit: type=1326 audit(1739620144.367:44984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11838 comm="syz.6.14480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ad11cde9 code=0x7ffc0000 [ 678.657567][ T29] audit: type=1326 audit(1739620144.367:44985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11838 comm="syz.6.14480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f62ad11cde9 code=0x7ffc0000 [ 678.684199][ T3371] usb usb10-port1: attempt power cycle [ 678.756722][T11867] 9pnet: p9_errstr2errno: server reported unknown error @í [ 678.802531][T11867] netlink: 648 bytes leftover after parsing attributes in process `+}[@'. [ 678.802609][T11868] hub 2-0:1.0: USB hub found [ 678.816354][T11868] hub 2-0:1.0: 8 ports detected [ 679.095043][T11898] loop7: detected capacity change from 512 to 511 [ 679.356413][T11927] 9pnet_fd: Insufficient options for proto=fd [ 679.362896][T11927] netlink: 56 bytes leftover after parsing attributes in process `syz.0.14515'. [ 679.621418][T11934] 9pnet_fd: Insufficient options for proto=fd [ 679.666811][T11937] netlink: 88 bytes leftover after parsing attributes in process `syz.0.14519'. [ 679.681745][T11933] hub 2-0:1.0: USB hub found [ 679.709181][T11933] hub 2-0:1.0: 8 ports detected [ 679.849837][T11947] Failed to initialize the IGMP autojoin socket (err -2) [ 679.906109][T11954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.918892][T11953] loop4: detected capacity change from 0 to 2048 [ 679.938781][T11954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.958643][T11953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 679.977911][T11947] loop0: detected capacity change from 0 to 512 [ 679.991510][T11947] journal_path: Non-blockdev passed as './bus' [ 679.997800][T11947] EXT4-fs: error: could not find journal device path [ 680.025449][ T3718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.057290][T11962] bridge25: entered promiscuous mode [ 680.143667][T11969] netlink: 88 bytes leftover after parsing attributes in process `syz.4.14531'. [ 680.388725][T11991] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.629959][T11994] netlink: 88 bytes leftover after parsing attributes in process `syz.0.14543'. [ 680.742467][T12001] netlink: 'syz.0.14546': attribute type 1 has an invalid length. [ 680.773647][T12001] 8021q: adding VLAN 0 to HW filter on device bond4 [ 680.797581][T12001] 8021q: adding VLAN 0 to HW filter on device bond4 [ 680.809183][T12001] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 680.820883][T12001] bond4: (slave wireguard0): Error -95 calling set_mac_address [ 680.846997][T12006] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.14546' sets config #0 [ 680.858382][T12006] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.14546' sets config #1 [ 680.948422][T11991] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.054512][T11991] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.075388][T12027] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.110974][T12029] bridge13: entered promiscuous mode [ 681.120868][T12023] hub 2-0:1.0: USB hub found [ 681.125358][ T3371] usb usb10-port1: unable to enumerate USB device [ 681.127086][T12023] hub 2-0:1.0: 8 ports detected [ 681.139169][T11991] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.158516][T12027] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.213466][T11991] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.242755][T12027] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.253834][T12033] loop2: detected capacity change from 0 to 8192 [ 681.264573][T11991] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.290082][T11991] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.302658][T12027] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.322406][T11991] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.383776][T12027] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.408699][T12027] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.461875][T12027] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.475352][T12027] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.542531][T12065] loop9: detected capacity change from 0 to 2048 [ 681.580598][T12065] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 681.594215][T12076] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.629687][T10253] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.657011][T12076] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.683795][T12085] loop9: detected capacity change from 0 to 2048 [ 681.707077][T12076] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.729605][T12085] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 681.746662][T12076] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.764073][T10253] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.802377][T12101] bridge26: entered promiscuous mode [ 681.938657][T12116] loop9: detected capacity change from 0 to 2048 [ 681.959033][T12116] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 681.982554][T12118] hub 2-0:1.0: USB hub found [ 681.987784][T12118] hub 2-0:1.0: 8 ports detected [ 682.000524][T10253] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.059141][T12132] bridge4: entered promiscuous mode [ 682.311474][T12155] Failed to initialize the IGMP autojoin socket (err -2) [ 682.435388][T12155] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 682.441965][T12155] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 682.449796][T12155] vhci_hcd vhci_hcd.0: Device attached [ 682.569381][T12160] loop4: detected capacity change from 0 to 2048 [ 682.619219][T12160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 682.661583][T12162] loop9: detected capacity change from 0 to 8192 [ 682.724964][ T9] usb 2-1: SetAddress Request (2) to port 0 [ 682.738728][ T3718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.753822][ T9] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 683.086175][T12157] vhci_hcd: connection reset by peer [ 683.120844][T31280] vhci_hcd: stop threads [ 683.125183][T31280] vhci_hcd: release socket [ 683.129593][T31280] vhci_hcd: disconnect device [ 683.349342][T12174] wireguard: wg0: Could not create IPv4 socket [ 683.694994][ T7346] syz_tun (unregistering): left promiscuous mode [ 683.761668][T12176] Failed to initialize the IGMP autojoin socket (err -2) [ 683.959733][T12176] chnl_net:caif_netlink_parms(): no params data found [ 684.023280][ T29] kauditd_printk_skb: 439 callbacks suppressed [ 684.023292][ T29] audit: type=1326 audit(1739620149.927:45425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12193 comm="syz.9.14614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055146cde9 code=0x7ffc0000 [ 684.062352][ T29] audit: type=1326 audit(1739620149.967:45426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12193 comm="syz.9.14614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f055146cde9 code=0x7ffc0000 [ 684.086077][ T29] audit: type=1326 audit(1739620149.967:45427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12193 comm="syz.9.14614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055146cde9 code=0x7ffc0000 [ 684.109798][ T29] audit: type=1326 audit(1739620149.967:45428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12193 comm="syz.9.14614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055146cde9 code=0x7ffc0000 [ 684.133445][ T29] audit: type=1326 audit(1739620149.967:45429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12193 comm="syz.9.14614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f055146cde9 code=0x7ffc0000 [ 684.157189][ T29] audit: type=1326 audit(1739620149.967:45430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12193 comm="syz.9.14614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055146cde9 code=0x7ffc0000 [ 684.180835][ T29] audit: type=1326 audit(1739620149.967:45431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12193 comm="syz.9.14614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055146cde9 code=0x7ffc0000 [ 684.204545][ T29] audit: type=1326 audit(1739620149.967:45432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12193 comm="syz.9.14614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f055146cde9 code=0x7ffc0000 [ 684.228268][ T29] audit: type=1326 audit(1739620149.967:45433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12193 comm="syz.9.14614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055146cde9 code=0x7ffc0000 [ 684.251941][ T29] audit: type=1326 audit(1739620149.967:45434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12193 comm="syz.9.14614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055146cde9 code=0x7ffc0000 [ 684.288628][T12176] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.295742][T12176] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.320872][T12176] bridge_slave_0: entered allmulticast mode [ 684.327595][T12176] bridge_slave_0: entered promiscuous mode [ 684.334476][T12176] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.341686][T12176] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.350906][T12176] bridge_slave_1: entered allmulticast mode [ 684.357542][T12176] bridge_slave_1: entered promiscuous mode [ 684.379501][T12176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.395421][T12176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.419329][T12176] team0: Port device team_slave_0 added [ 684.430460][T12176] team0: Port device team_slave_1 added [ 684.448532][T12176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.455546][T12176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.481774][T12176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.496118][T12176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.503085][T12176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.529123][T12176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.560038][T12176] hsr_slave_0: entered promiscuous mode [ 684.566058][T12176] hsr_slave_1: entered promiscuous mode [ 684.626299][T12176] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.660319][T12203] netlink: 'syz.9.14616': attribute type 1 has an invalid length. [ 684.669097][T12176] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.752451][T12176] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.766048][T12206] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.14616' sets config #0 [ 684.782024][T12206] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.14616' sets config #1 [ 684.793050][T12203] 8021q: adding VLAN 0 to HW filter on device bond2 [ 684.876742][T12176] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.954704][T12209] 9pnet_fd: Insufficient options for proto=fd [ 684.961341][T12209] netlink: 56 bytes leftover after parsing attributes in process `syz.9.14617'. [ 685.127558][T12221] loop9: detected capacity change from 0 to 2048 [ 685.167113][T12221] loop9: p1 < > p4 [ 685.171662][T12221] loop9: p4 size 8388608 extends beyond EOD, truncated [ 685.827651][T12256] netlink: 'syz.9.14636': attribute type 1 has an invalid length. [ 685.840541][T12256] 8021q: adding VLAN 0 to HW filter on device bond3 [ 685.856291][T12256] 8021q: adding VLAN 0 to HW filter on device bond3 [ 685.863268][T12256] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address [ 685.874931][T12256] bond3: (slave wireguard1): Error -95 calling set_mac_address [ 685.905733][T12259] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.14636' sets config #0 [ 685.917422][T12259] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.14636' sets config #1 [ 686.024954][T12269] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14641'. [ 686.087067][T12271] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.14641' sets config #0 [ 686.096597][T12271] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.14641' sets config #1 [ 687.369721][T12296] loop0: detected capacity change from 0 to 2048 [ 687.435416][T12296] loop0: p1 < > p4 [ 687.439910][T12296] loop0: p4 size 8388608 extends beyond EOD, truncated [ 687.824999][ T9] usb 2-1: device descriptor read/8, error -110 [ 687.934950][ T9] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 687.954947][ T9] usb 2-1: enqueue for inactive port 0 [ 687.960599][ T9] usb 2-1: enqueue for inactive port 0 [ 687.961987][T12176] netdevsim netdevsim4 netdevsim0: renamed from eth5 [ 687.966579][ T9] usb 2-1: enqueue for inactive port 0 [ 687.981223][T12176] netdevsim netdevsim4 netdevsim1: renamed from eth9 [ 688.002706][T12076] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.011130][T12176] netdevsim netdevsim4 netdevsim2: renamed from eth10 [ 688.024180][T12076] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.035379][T12176] netdevsim netdevsim4 netdevsim3: renamed from eth11 [ 688.048015][T12076] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.058566][T12076] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.137426][T12176] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.151450][T31264] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.158578][T31264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.181079][T31264] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.188159][T31264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.280270][T31215] batadv3: left allmulticast mode [ 688.285448][T31215] batadv3: left promiscuous mode [ 688.290684][T31215] bridge0: port 5(batadv3) entered disabled state [ 688.298950][T31215] batadv2: left allmulticast mode [ 688.304096][T31215] batadv2: left promiscuous mode [ 688.309471][T31215] bridge0: port 4(batadv2) entered disabled state [ 688.320073][T31215] batadv1: left allmulticast mode [ 688.325563][T31215] batadv1: left promiscuous mode [ 688.330770][T31215] bridge0: port 3(batadv1) entered disabled state [ 688.340021][T31215] bridge_slave_1: left allmulticast mode [ 688.345824][T31215] bridge_slave_1: left promiscuous mode [ 688.351688][T31215] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.379900][T12325] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.14659' sets config #0 [ 688.397846][T12325] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.14659' sets config #1 [ 688.397879][T31215] bridge_slave_0: left allmulticast mode [ 688.412640][T31215] bridge_slave_0: left promiscuous mode [ 688.418523][T31215] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.005409][ T9] usb usb2-port1: attempt power cycle [ 689.676747][T31215] bond1 (unregistering): Released all slaves [ 689.684838][T31215] bond2 (unregistering): Released all slaves [ 689.693748][T31215] bond3 (unregistering): Released all slaves [ 689.702178][T31215] bond0 (unregistering): Released all slaves [ 689.710868][T31215] bond4 (unregistering): Released all slaves [ 689.719411][T31215] bond5 (unregistering): Released all slaves [ 689.729137][T31215] bond6 (unregistering): Released all slaves [ 689.738646][T31215] bond7 (unregistering): Released all slaves [ 689.747555][T31215] bond8 (unregistering): Released all slaves [ 689.756378][T31215] bond9 (unregistering): Released all slaves [ 689.764706][T31215] bond10 (unregistering): Released all slaves [ 689.774160][T31215] bond11 (unregistering): Released all slaves [ 689.783380][T31215] bond12 (unregistering): Released all slaves [ 689.792334][T31215] bond13 (unregistering): Released all slaves [ 689.801162][T31215] bond14 (unregistering): Released all slaves [ 689.809972][T31215] bond15 (unregistering): Released all slaves [ 689.819685][T12318] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 689.825774][T12176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.848913][T12335] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.873430][T12341] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 689.908489][T12335] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.946648][T12341] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 689.985161][T31215] hsr_slave_0: left promiscuous mode [ 689.993679][T31215] hsr_slave_1: left promiscuous mode [ 689.999510][T31215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.007144][T31215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.025486][T31215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.032942][T31215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.056835][T31215] veth1_macvtap: left promiscuous mode [ 690.062331][T31215] veth0_macvtap: left promiscuous mode [ 690.082537][T31215] veth1_vlan: left promiscuous mode [ 690.087909][T31215] veth0_vlan: left promiscuous mode [ 690.122737][T12359] loop9: detected capacity change from 0 to 2048 [ 690.155872][T12359] loop9: p1 < > p4 [ 690.160907][T12359] loop9: p4 size 8388608 extends beyond EOD, truncated [ 690.171164][T31215] team0 (unregistering): Port device team_slave_1 removed [ 690.184188][T31215] team0 (unregistering): Port device team_slave_0 removed [ 690.191863][T31230] smc: removing ib device syz! [ 690.215207][T12335] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.229760][T12341] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 690.297367][T12335] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.336936][T12341] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 690.381059][T12176] veth0_vlan: entered promiscuous mode [ 690.399671][T12176] veth1_vlan: entered promiscuous mode [ 690.425627][T12341] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 690.441294][T12341] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 690.452565][T12341] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 690.468327][T12341] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 690.479893][T12176] veth0_macvtap: entered promiscuous mode [ 690.489510][T12176] veth1_macvtap: entered promiscuous mode [ 690.506647][T12176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.517300][T12176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.527169][T12176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.537718][T12176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.550359][T12176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 690.563619][T12176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.574098][T12176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.584022][T12176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.594584][T12176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.607892][T12176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 690.618147][T12176] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 690.636176][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 690.636189][ T29] audit: type=1326 audit(1739620156.547:45619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12374 comm="syz.0.14671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7692a6cde9 code=0x7ffc0000 [ 690.667851][ T29] audit: type=1326 audit(1739620156.547:45620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12374 comm="syz.0.14671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7692a6cde9 code=0x7ffc0000 [ 690.691749][ T29] audit: type=1326 audit(1739620156.547:45621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12374 comm="syz.0.14671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7692a6cde9 code=0x7ffc0000 [ 690.715418][ T29] audit: type=1326 audit(1739620156.547:45622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12374 comm="syz.0.14671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7692a6cde9 code=0x7ffc0000 [ 690.739129][ T29] audit: type=1326 audit(1739620156.547:45623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12374 comm="syz.0.14671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7692a6cde9 code=0x7ffc0000 [ 690.763005][ T29] audit: type=1326 audit(1739620156.547:45624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12374 comm="syz.0.14671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7692a6cde9 code=0x7ffc0000 [ 690.786715][ T29] audit: type=1326 audit(1739620156.547:45625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12374 comm="syz.0.14671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7692a6cde9 code=0x7ffc0000 [ 690.810513][ T29] audit: type=1326 audit(1739620156.547:45626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12374 comm="syz.0.14671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7692a6cde9 code=0x7ffc0000 [ 690.834218][ T29] audit: type=1326 audit(1739620156.547:45627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12374 comm="syz.0.14671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7692a6cde9 code=0x7ffc0000 [ 690.836246][ T9] usb usb2-port1: unable to enumerate USB device [ 690.857913][ T29] audit: type=1326 audit(1739620156.547:45628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12374 comm="syz.0.14671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7692a6cde9 code=0x7ffc0000 [ 690.860026][T12176] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 690.907288][T12176] wireguard: wg0: Could not create IPv4 socket [ 690.916037][T12176] wireguard: wg1: Could not create IPv4 socket [ 690.923687][T12176] wireguard: wg2: Could not create IPv4 socket [ 691.126147][T12392] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.14675' sets config #0 [ 691.167369][T12386] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.14675' sets config #1 [ 691.298552][T12402] loop2: detected capacity change from 0 to 512 [ 691.326164][T12402] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 691.358283][T12402] EXT4-fs (loop2): mount failed [ 691.477613][T12417] loop2: detected capacity change from 0 to 2048 [ 691.535586][T12417] loop2: p1 < > p4 [ 691.540363][T12417] loop2: p4 size 8388608 extends beyond EOD, truncated [ 691.713072][T12438] netlink: 88 bytes leftover after parsing attributes in process `syz.9.14691'. [ 691.971283][T12455] loop9: detected capacity change from 0 to 2048 [ 691.975950][T12453] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.987973][T12453] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 692.006264][T12455] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 692.032868][T10253] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.056578][T12453] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.067006][T12453] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 692.128974][T12453] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.139482][T12453] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 692.157724][T12464] netlink: 88 bytes leftover after parsing attributes in process `syz.4.14702'. [ 692.198347][T12453] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.208721][T12453] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 692.222946][T12468] netlink: 16 bytes leftover after parsing attributes in process `syz.9.14704'. [ 692.266274][T12453] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 692.274584][T12453] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 692.317053][T12453] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 692.325522][T12453] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 692.347878][T12453] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 692.356174][T12453] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 692.378896][T12453] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 692.387268][T12453] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 692.519338][T12494] netlink: 88 bytes leftover after parsing attributes in process `syz.2.14714'. [ 692.543445][T12496] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14715'. [ 692.736557][T12502] IPv6: Can't replace route, no match found [ 692.799732][T12335] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.834707][T12335] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.863919][T12335] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.902604][T12335] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.921317][T12510] IPv6: Can't replace route, no match found [ 693.057207][T12520] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14726'. [ 693.126609][T12525] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.155446][T12526] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.14727' sets config #0 [ 693.195525][T12526] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.14727' sets config #1 [ 693.227052][T12525] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.248298][ T9] usb usb2-port1: attempt power cycle [ 693.298705][T12525] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.376859][T12525] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.684049][T12538] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.736961][T12538] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.786906][T12538] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.837106][T12538] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.861015][T12551] loop4: detected capacity change from 0 to 512 [ 693.877078][T12551] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 693.896172][T12551] EXT4-fs (loop4): mount failed [ 693.902838][T12538] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.914682][T12538] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.927221][T12538] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.939001][T12538] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.971472][T12557] 9pnet_fd: Insufficient options for proto=fd [ 693.979268][T12557] netlink: 56 bytes leftover after parsing attributes in process `syz.4.14739'. [ 694.358926][T12589] loop9: detected capacity change from 0 to 2048 [ 694.378265][T12589] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 694.420136][T10253] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.602825][T12600] loop4: detected capacity change from 0 to 2048 [ 694.617833][T12600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 694.646249][T12176] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.698178][T12606] loop4: detected capacity change from 0 to 8192 [ 695.075650][ T9] usb usb2-port1: unable to enumerate USB device [ 695.169445][T12615] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.14756' sets config #0 [ 695.179703][T12615] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.14756' sets config #1 [ 695.305966][T12625] loop0: detected capacity change from 0 to 2048 [ 695.322669][T12625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 695.388905][ T8474] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.417666][T12635] loop9: detected capacity change from 0 to 2048 [ 695.436070][T12637] 9pnet_fd: Insufficient options for proto=fd [ 695.442812][T12637] netlink: 56 bytes leftover after parsing attributes in process `syz.0.14763'. [ 695.452395][T12635] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 695.493341][T10253] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.840902][T12673] Failed to initialize the IGMP autojoin socket (err -2) [ 695.884023][T12677] loop4: detected capacity change from 0 to 2048 [ 695.891081][T12678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.899700][T12678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.912061][T12678] loop2: detected capacity change from 0 to 512 [ 695.919312][T12678] journal_path: Non-blockdev passed as './bus' [ 695.925512][T12678] EXT4-fs: error: could not find journal device path [ 695.934985][T12677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 695.979214][T12176] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.004774][ T29] kauditd_printk_skb: 423 callbacks suppressed [ 696.004788][ T29] audit: type=1326 audit(1739620161.907:46050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12681 comm="syz.4.14781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac893acde9 code=0x7ffc0000 [ 696.041012][ T29] audit: type=1326 audit(1739620161.947:46051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12681 comm="syz.4.14781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fac893acde9 code=0x7ffc0000 [ 696.064859][ T29] audit: type=1326 audit(1739620161.947:46052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12681 comm="syz.4.14781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac893acde9 code=0x7ffc0000 [ 696.088790][ T29] audit: type=1326 audit(1739620161.947:46053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12681 comm="syz.4.14781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac893acde9 code=0x7ffc0000 [ 696.112478][ T29] audit: type=1326 audit(1739620161.947:46054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12681 comm="syz.4.14781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fac893acde9 code=0x7ffc0000 [ 696.136206][ T29] audit: type=1326 audit(1739620161.947:46055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12681 comm="syz.4.14781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac893acde9 code=0x7ffc0000 [ 696.160046][ T29] audit: type=1326 audit(1739620161.947:46056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12681 comm="syz.4.14781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac893acde9 code=0x7ffc0000 [ 696.183870][ T29] audit: type=1326 audit(1739620161.947:46057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12681 comm="syz.4.14781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac893acde9 code=0x7ffc0000 [ 696.207627][ T29] audit: type=1326 audit(1739620161.947:46058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12681 comm="syz.4.14781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac893acde9 code=0x7ffc0000 [ 696.231390][ T29] audit: type=1326 audit(1739620161.947:46059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12681 comm="syz.4.14781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac893acde9 code=0x7ffc0000 [ 696.245108][T12684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14782'. [ 696.331665][T12686] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.14782' sets config #0 [ 696.341731][T12686] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.14782' sets config #1 [ 696.546675][T12696] loop4: detected capacity change from 0 to 2048 [ 696.567038][T12696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 696.592731][T12176] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.649664][T12705] netlink: 68 bytes leftover after parsing attributes in process `syz.2.14790'. [ 696.683973][T12711] 9pnet_fd: Insufficient options for proto=fd [ 696.700030][T12713] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 696.724862][T12715] loop9: detected capacity change from 0 to 2048 [ 696.755442][T12715] loop9: p1 < > p4 [ 696.759815][T12715] loop9: p4 size 8388608 extends beyond EOD, truncated [ 696.901063][T12525] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.912740][T12525] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.925556][T12525] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.942153][T12525] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.978193][T12729] loop4: detected capacity change from 0 to 512 [ 696.996600][T12732] Failed to initialize the IGMP autojoin socket (err -2) [ 696.996814][T12729] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 697.019539][T12729] EXT4-fs (loop4): mount failed [ 697.047749][T12738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.074794][T12740] __nla_validate_parse: 3 callbacks suppressed [ 697.074808][T12740] netlink: 68 bytes leftover after parsing attributes in process `syz.4.14803'. [ 697.091382][T12738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.109403][T12732] loop2: detected capacity change from 0 to 512 [ 697.134571][T12732] journal_path: Non-blockdev passed as './bus' [ 697.140908][T12732] EXT4-fs: error: could not find journal device path [ 697.163083][T12747] 9pnet_fd: Insufficient options for proto=fd [ 697.169579][T12747] netlink: 56 bytes leftover after parsing attributes in process `syz.9.14806'. [ 697.300325][T12766] netlink: 68 bytes leftover after parsing attributes in process `syz.4.14815'. [ 697.354727][T12773] IPv6: Can't replace route, no match found [ 697.380407][T12775] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14819'. [ 697.444536][T12781] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.14819' sets config #0 [ 697.465461][T12781] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.14819' sets config #1 [ 697.585532][ T9559] usb usb2-port1: attempt power cycle [ 697.737331][T12803] loop4: detected capacity change from 0 to 512 [ 697.744391][T12805] bridge1: entered promiscuous mode [ 697.757801][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14833'. [ 697.789199][T12803] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 697.806229][T12803] EXT4-fs (loop4): mount failed [ 697.841449][T12811] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.14833' sets config #0 [ 697.861744][T12811] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.14833' sets config #1 [ 698.018608][T12831] loop9: detected capacity change from 0 to 8192 [ 698.019072][T12833] loop2: detected capacity change from 0 to 2048 [ 698.085502][T12833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 698.178292][T10697] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.320544][T12859] loop2: detected capacity change from 0 to 512 [ 698.346326][T12859] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 698.375646][T12859] EXT4-fs (loop2): mount failed [ 698.481224][T12877] loop2: detected capacity change from 0 to 2048 [ 698.511902][T12877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 698.545423][T10697] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.569154][T12889] 9pnet_fd: Insufficient options for proto=fd [ 698.581637][T12889] netlink: 56 bytes leftover after parsing attributes in process `syz.2.14866'. [ 698.616767][T12895] loop2: detected capacity change from 0 to 512 [ 698.636948][T12895] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 698.652544][T12895] EXT4-fs (loop2): mount failed [ 698.686120][T12902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14871'. [ 698.756604][T12908] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.14871' sets config #0 [ 698.768856][T12908] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.14871' sets config #1 [ 698.877843][T12919] 9pnet_fd: Insufficient options for proto=fd [ 698.890530][T12919] netlink: 56 bytes leftover after parsing attributes in process `syz.2.14879'. [ 698.967776][T12937] loop2: detected capacity change from 0 to 2048 [ 698.996622][T12937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 699.021854][T10697] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.041223][T12944] IPv6: Can't replace route, no match found [ 699.062168][T12946] FAULT_INJECTION: forcing a failure. [ 699.062168][T12946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 699.075405][T12946] CPU: 1 UID: 0 PID: 12946 Comm: syz.2.14887 Tainted: G W 6.14.0-rc2-syzkaller-00253-g78a632a2086c #0 [ 699.075495][T12946] Tainted: [W]=WARN [ 699.075504][T12946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 699.075513][T12946] Call Trace: [ 699.075520][T12946] [ 699.075527][T12946] dump_stack_lvl+0xf2/0x150 [ 699.075642][T12946] dump_stack+0x15/0x1a [ 699.075663][T12946] should_fail_ex+0x24a/0x260 [ 699.075689][T12946] should_fail+0xb/0x10 [ 699.075708][T12946] should_fail_usercopy+0x1a/0x20 [ 699.075793][T12946] strncpy_from_user+0x25/0x210 [ 699.075812][T12946] ? __kmalloc_cache_noprof+0x186/0x320 [ 699.075834][T12946] __se_sys_memfd_create+0x218/0x5a0 [ 699.075859][T12946] __x64_sys_memfd_create+0x31/0x40 [ 699.075882][T12946] x64_sys_call+0x2d4c/0x2dc0 [ 699.075989][T12946] do_syscall_64+0xc9/0x1c0 [ 699.076016][T12946] ? clear_bhb_loop+0x55/0xb0 [ 699.076038][T12946] ? clear_bhb_loop+0x55/0xb0 [ 699.076096][T12946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.076253][T12946] RIP: 0033:0x7f57a9c0cde9 [ 699.076262][T12946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 699.076272][T12946] RSP: 002b:00007f57a8276e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 699.076283][T12946] RAX: ffffffffffffffda RBX: 0000000000000618 RCX: 00007f57a9c0cde9 [ 699.076374][T12946] RDX: 00007f57a8276ef0 RSI: 0000000000000000 RDI: 00007f57a9c8ec51 [ 699.076380][T12946] RBP: 0000400000000640 R08: 00007f57a8276bb7 R09: 00007f57a8276e40 [ 699.076387][T12946] R10: 000000000000000a R11: 0000000000000202 R12: 0000400000000580 [ 699.076393][T12946] R13: 00007f57a8276ef0 R14: 00007f57a8276eb0 R15: 0000400000000480 [ 699.076403][T12946] [ 699.286976][T12954] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14889'. [ 699.309460][T12958] Failed to initialize the IGMP autojoin socket (err -2) [ 699.346549][T12958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.355993][T12958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.357092][T12960] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.14889' sets config #0 [ 699.376307][T12960] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.14889' sets config #1 [ 699.388522][T12958] loop4: detected capacity change from 0 to 512 [ 699.396089][T12958] journal_path: Non-blockdev passed as './bus' [ 699.402275][T12958] EXT4-fs: error: could not find journal device path [ 699.413771][T12964] 9pnet_fd: Insufficient options for proto=fd [ 699.420155][T12964] netlink: 56 bytes leftover after parsing attributes in process `syz.2.14893'. [ 699.465685][ T9559] usb usb2-port1: unable to enumerate USB device [ 699.476717][T12972] IPv6: Can't replace route, no match found [ 699.506714][T12980] loop2: detected capacity change from 0 to 2048 [ 699.519142][T12978] loop0: detected capacity change from 0 to 8192 [ 699.527882][T12980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 699.577899][T10697] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.598179][T12989] loop2: detected capacity change from 0 to 512 [ 699.616740][T12989] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 699.633447][T12989] EXT4-fs (loop2): mount failed [ 699.690776][T13001] 9pnet_fd: Insufficient options for proto=fd [ 699.750518][T13011] loop2: detected capacity change from 0 to 2048 [ 699.778957][T13011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 699.810556][T10697] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.994853][T13040] loop4: detected capacity change from 0 to 512 [ 700.036923][T13040] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 700.065321][T13040] EXT4-fs (loop4): mount failed [ 700.305581][T13070] 9pnet_fd: Insufficient options for proto=fd [ 700.319149][T13067] loop2: detected capacity change from 0 to 8192 [ 700.626655][T13086] loop4: detected capacity change from 0 to 8192 [ 700.898180][T13108] loop9: detected capacity change from 0 to 2048 [ 700.955505][T13108] loop9: p1 < > p4 [ 700.963226][T13108] loop9: p4 size 8388608 extends beyond EOD, truncated [ 701.015432][ T29] kauditd_printk_skb: 359 callbacks suppressed [ 701.015446][ T29] audit: type=1326 audit(1739620166.927:46413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.6.14949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ad11cde9 code=0x7ffc0000 [ 701.051108][ T29] audit: type=1326 audit(1739620166.927:46414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.6.14949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ad11cde9 code=0x7ffc0000 [ 701.074967][ T29] audit: type=1326 audit(1739620166.957:46415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.6.14949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62ad11cde9 code=0x7ffc0000 [ 701.098795][ T29] audit: type=1326 audit(1739620166.957:46416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.6.14949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ad11cde9 code=0x7ffc0000 [ 701.122576][ T29] audit: type=1326 audit(1739620166.957:46417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.6.14949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62ad11cde9 code=0x7ffc0000 [ 701.146476][ T29] audit: type=1326 audit(1739620166.957:46418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.6.14949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ad11cde9 code=0x7ffc0000 [ 701.170188][ T29] audit: type=1326 audit(1739620166.957:46419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.6.14949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ad11cde9 code=0x7ffc0000 [ 701.195952][ T29] audit: type=1326 audit(1739620166.957:46420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.6.14949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ad11cde9 code=0x7ffc0000 [ 701.257369][T13121] loop2: detected capacity change from 0 to 2048 [ 701.276976][T13121] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 701.294274][ T29] audit: type=1326 audit(1739620167.207:46421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13120 comm="syz.2.14950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a9c0cde9 code=0x7ffc0000 [ 701.318068][ T29] audit: type=1326 audit(1739620167.207:46422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13120 comm="syz.2.14950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a9c0cde9 code=0x7ffc0000 [ 701.358154][T10697] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.415942][T13126] loop9: detected capacity change from 0 to 8192 [ 701.583841][T13145] loop4: detected capacity change from 0 to 1024 [ 701.591532][T13145] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 701.638162][T13145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.736696][T12176] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.786967][T13151] loop4: detected capacity change from 0 to 2048 [ 701.837240][T13151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 701.862857][T13153] loop2: detected capacity change from 0 to 8192 [ 701.893474][T12176] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.936162][T13163] loop4: detected capacity change from 0 to 1024 [ 701.945292][T13163] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 701.957604][T13163] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 702.002275][T13163] EXT4-fs (loop4): orphan cleanup on readonly fs [ 702.032346][T13163] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 702.054037][T13163] EXT4-fs (loop4): Remounting filesystem read-only [ 702.060835][T13163] EXT4-fs (loop4): 1 orphan inode deleted [ 702.069458][T13163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 702.091878][T13163] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 702.099140][T13163] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.193869][T13186] loop0: detected capacity change from 0 to 2048 [ 702.216562][T13186] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 702.238177][T13189] loop4: detected capacity change from 0 to 512 [ 702.256326][T13189] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 702.272370][T13189] EXT4-fs (loop4): mount failed [ 702.277917][ T8474] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.346658][T13196] __nla_validate_parse: 2 callbacks suppressed [ 702.346674][T13196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14978'. [ 702.396991][T13206] loop0: detected capacity change from 0 to 2048 [ 702.423773][T13206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 702.441515][T13211] loop4: detected capacity change from 0 to 512 [ 702.461903][T13211] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 702.485706][T13211] EXT4-fs (loop4): mount failed [ 702.491231][ T8474] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.573300][T13224] netlink: 88 bytes leftover after parsing attributes in process `syz.0.14987'. [ 702.635880][T13228] loop0: detected capacity change from 0 to 512 [ 702.657260][T13228] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 702.696783][T13228] EXT4-fs (loop0): mount failed [ 702.742796][T13242] 9pnet_fd: Insufficient options for proto=fd [ 702.743137][T13234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14990'. [ 702.749571][T13242] netlink: 56 bytes leftover after parsing attributes in process `syz.0.14994'. [ 702.822474][T13247] loop0: detected capacity change from 0 to 512 [ 702.849354][T13247] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 702.875542][T13256] netlink: 88 bytes leftover after parsing attributes in process `syz.2.14999'. [ 702.895897][T13247] EXT4-fs (loop0): mount failed [ 702.944438][T13262] 9pnet_fd: Insufficient options for proto=fd [ 702.952807][T13262] netlink: 56 bytes leftover after parsing attributes in process `syz.4.15002'. [ 703.049939][T13260] loop0: detected capacity change from 0 to 8192 [ 703.065486][T13270] 9pnet_fd: Insufficient options for proto=fd [ 703.071765][T13268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15005'. [ 703.086334][T13270] netlink: 56 bytes leftover after parsing attributes in process `syz.6.15006'. [ 703.203921][T13279] bridge2: entered promiscuous mode [ 703.748627][T13317] 9pnet_fd: Insufficient options for proto=fd [ 703.753265][T13315] loop4: detected capacity change from 0 to 2048 [ 703.761913][T13317] netlink: 56 bytes leftover after parsing attributes in process `syz.9.15021'. [ 703.806414][T13315] loop4: p1 < > p4 [ 703.810924][T13315] loop4: p4 size 8388608 extends beyond EOD, truncated [ 703.850475][T13323] loop0: detected capacity change from 0 to 8192 [ 704.054976][T13334] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 704.064974][T13334] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 704.119089][T13334] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 704.129174][T13334] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 704.198454][T13334] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 704.208416][T13334] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 704.272407][T13346] loop4: detected capacity change from 0 to 512 [ 704.288161][T13346] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 704.308869][T13334] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 704.318825][T13334] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 704.335379][T13346] EXT4-fs (loop4): mount failed [ 704.422289][T13334] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 704.430698][T13334] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 704.443028][T13362] bridge1: entered promiscuous mode [ 704.456193][T13334] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 704.464498][T13334] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 704.508859][T13334] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 704.517328][T13334] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 704.549250][T13334] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 704.557736][T13334] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 704.654974][T13366] Failed to initialize the IGMP autojoin socket (err -2) [ 704.697688][T13366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.707572][T13366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.732248][T13368] loop0: detected capacity change from 0 to 2048 [ 704.742144][T13366] loop2: detected capacity change from 0 to 512 [ 704.759188][T13366] journal_path: Non-blockdev passed as './bus' [ 704.765401][T13366] EXT4-fs: error: could not find journal device path [ 704.796349][T13368] loop0: p1 < > p4 [ 704.800658][T13368] loop0: p4 size 8388608 extends beyond EOD, truncated [ 705.126419][T13386] loop0: detected capacity change from 0 to 512 [ 705.156504][T13386] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 705.188270][T13386] EXT4-fs (loop0): mount failed [ 705.217634][T13395] loop9: detected capacity change from 0 to 2048 [ 705.237754][T13395] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 705.280196][T10253] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.392218][T13408] loop9: detected capacity change from 0 to 1024 [ 705.414020][T13408] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 705.444468][T13408] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 705.491991][T10253] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.581638][T13426] Failed to initialize the IGMP autojoin socket (err -2) [ 705.599458][T13431] bridge5: entered promiscuous mode [ 705.630176][T13432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.648388][T13432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.660071][T13429] loop0: detected capacity change from 0 to 8192 [ 705.672864][T13432] loop2: detected capacity change from 0 to 512 [ 705.718788][T13434] Failed to initialize the IGMP autojoin socket (err -2) [ 705.721044][T13432] journal_path: Non-blockdev passed as './bus' [ 705.732125][T13432] EXT4-fs: error: could not find journal device path [ 706.387861][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 706.387874][ T29] audit: type=1326 audit(1739620172.297:46690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.6.15062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ad11cde9 code=0x7ffc0000 [ 706.429616][ T29] audit: type=1326 audit(1739620172.337:46691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.6.15062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62ad11cde9 code=0x7ffc0000 [ 706.453456][ T29] audit: type=1326 audit(1739620172.337:46692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.6.15062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ad11cde9 code=0x7ffc0000 [ 706.477235][ T29] audit: type=1326 audit(1739620172.337:46693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.6.15062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ad11cde9 code=0x7ffc0000 [ 706.500894][ T29] audit: type=1326 audit(1739620172.337:46694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.6.15062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62ad11cde9 code=0x7ffc0000 [ 706.522067][T13447] 9pnet_fd: Insufficient options for proto=fd [ 706.524528][ T29] audit: type=1326 audit(1739620172.337:46695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.6.15062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ad11cde9 code=0x7ffc0000 [ 706.524556][ T29] audit: type=1326 audit(1739620172.337:46696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.6.15062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ad11cde9 code=0x7ffc0000 [ 706.542351][T13447] netlink: 56 bytes leftover after parsing attributes in process `syz.9.15066'. [ 706.554285][ T29] audit: type=1326 audit(1739620172.337:46697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.6.15062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62ad11cde9 code=0x7ffc0000 [ 706.610852][ T29] audit: type=1326 audit(1739620172.337:46698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.6.15062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ad11cde9 code=0x7ffc0000 [ 706.634566][ T29] audit: type=1326 audit(1739620172.337:46699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.6.15062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ad11cde9 code=0x7ffc0000 [ 706.767417][T13462] Failed to initialize the IGMP autojoin socket (err -2) [ 706.793623][T13470] loop4: detected capacity change from 0 to 512 [ 706.808046][T13462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.819825][T13462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.827920][T13466] loop9: detected capacity change from 0 to 8192 [ 706.834434][T13462] loop0: detected capacity change from 0 to 512 [ 706.852761][T13462] journal_path: Non-blockdev passed as './bus' [ 706.859068][T13462] EXT4-fs: error: could not find journal device path [ 706.866785][T13470] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 706.887041][T13470] EXT4-fs (loop4): mount failed [ 706.930137][T13483] Failed to initialize the IGMP autojoin socket (err -2) [ 707.077975][T13494] 9pnet_fd: Insufficient options for proto=fd [ 707.115484][T13498] loop4: detected capacity change from 0 to 2048 [ 707.136464][T13498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 707.179274][T12176] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.203537][T13506] FAULT_INJECTION: forcing a failure. [ 707.203537][T13506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.216818][T13506] CPU: 0 UID: 0 PID: 13506 Comm: syz.4.15090 Tainted: G W 6.14.0-rc2-syzkaller-00253-g78a632a2086c #0 [ 707.216847][T13506] Tainted: [W]=WARN [ 707.216859][T13506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 707.216905][T13506] Call Trace: [ 707.216912][T13506] [ 707.216918][T13506] dump_stack_lvl+0xf2/0x150 [ 707.216944][T13506] dump_stack+0x15/0x1a [ 707.216964][T13506] should_fail_ex+0x24a/0x260 [ 707.216997][T13506] should_fail+0xb/0x10 [ 707.217068][T13506] should_fail_usercopy+0x1a/0x20 [ 707.217091][T13506] _copy_from_user+0x1c/0xa0 [ 707.217119][T13506] memdup_user+0x64/0xc0 [ 707.217159][T13506] security_setselfattr+0x8f/0x260 [ 707.217179][T13506] __x64_sys_lsm_set_self_attr+0x51/0x60 [ 707.217216][T13506] x64_sys_call+0x5b0/0x2dc0 [ 707.217237][T13506] do_syscall_64+0xc9/0x1c0 [ 707.217335][T13506] ? clear_bhb_loop+0x55/0xb0 [ 707.217360][T13506] ? clear_bhb_loop+0x55/0xb0 [ 707.217406][T13506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.217429][T13506] RIP: 0033:0x7fac893acde9 [ 707.217444][T13506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 707.217468][T13506] RSP: 002b:00007fac87a17038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cc [ 707.217484][T13506] RAX: ffffffffffffffda RBX: 00007fac895c5fa0 RCX: 00007fac893acde9 [ 707.217497][T13506] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000066 [ 707.217530][T13506] RBP: 00007fac87a17090 R08: 0000000000000000 R09: 0000000000000000 [ 707.217541][T13506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.217553][T13506] R13: 0000000000000000 R14: 00007fac895c5fa0 R15: 00007ffd69cf85a8 [ 707.217567][T13506] [ 707.417422][T13511] loop4: detected capacity change from 0 to 512 [ 707.475035][T13514] atomic_op ffff888117be7928 conn xmit_atomic 0000000000000000 [ 707.483683][T13511] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 707.516343][T13511] EXT4-fs (loop4): mount failed [ 707.647257][T13529] 9pnet_fd: Insufficient options for proto=fd [ 707.656611][T13529] __nla_validate_parse: 1 callbacks suppressed [ 707.656623][T13529] netlink: 56 bytes leftover after parsing attributes in process `syz.2.15099'. [ 707.743791][T13553] FAULT_INJECTION: forcing a failure. [ 707.743791][T13553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.757078][T13553] CPU: 1 UID: 0 PID: 13553 Comm: syz.4.15110 Tainted: G W 6.14.0-rc2-syzkaller-00253-g78a632a2086c #0 [ 707.757166][T13553] Tainted: [W]=WARN [ 707.757172][T13553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 707.757182][T13553] Call Trace: [ 707.757188][T13553] [ 707.757195][T13553] dump_stack_lvl+0xf2/0x150 [ 707.757218][T13553] dump_stack+0x15/0x1a [ 707.757236][T13553] should_fail_ex+0x24a/0x260 [ 707.757282][T13553] should_fail+0xb/0x10 [ 707.757342][T13553] should_fail_usercopy+0x1a/0x20 [ 707.757413][T13553] _copy_from_user+0x1c/0xa0 [ 707.757439][T13553] kstrtouint_from_user+0x76/0xe0 [ 707.757465][T13553] ? 0xffffffff81000000 [ 707.757476][T13553] ? selinux_file_permission+0x22a/0x360 [ 707.757553][T13553] proc_fail_nth_write+0x4f/0x150 [ 707.757605][T13553] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 707.757627][T13553] vfs_write+0x27d/0x920 [ 707.757646][T13553] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 707.757687][T13553] ? __fget_files+0x17c/0x1c0 [ 707.757718][T13553] ksys_write+0xe8/0x1b0 [ 707.757747][T13553] __x64_sys_write+0x42/0x50 [ 707.757771][T13553] x64_sys_call+0x287e/0x2dc0 [ 707.757795][T13553] do_syscall_64+0xc9/0x1c0 [ 707.757881][T13553] ? clear_bhb_loop+0x55/0xb0 [ 707.757907][T13553] ? clear_bhb_loop+0x55/0xb0 [ 707.757932][T13553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.757953][T13553] RIP: 0033:0x7fac893ab89f [ 707.757990][T13553] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 707.758008][T13553] RSP: 002b:00007fac87a17030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 707.758027][T13553] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fac893ab89f [ 707.758039][T13553] RDX: 0000000000000001 RSI: 00007fac87a170a0 RDI: 0000000000000005 [ 707.758051][T13553] RBP: 00007fac87a17090 R08: 0000000000000000 R09: 0000000000000000 [ 707.758063][T13553] R10: 00004000000006c0 R11: 0000000000000293 R12: 0000000000000001 [ 707.758156][T13553] R13: 0000000000000000 R14: 00007fac895c5fa0 R15: 00007ffd69cf85a8 [ 707.758172][T13553] [ 707.798540][T13556] loop0: detected capacity change from 0 to 8192 [ 708.132142][T13597] FAULT_INJECTION: forcing a failure. [ 708.132142][T13597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.145435][T13597] CPU: 0 UID: 0 PID: 13597 Comm: syz.2.15127 Tainted: G W 6.14.0-rc2-syzkaller-00253-g78a632a2086c #0 [ 708.145464][T13597] Tainted: [W]=WARN [ 708.145471][T13597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 708.145482][T13597] Call Trace: [ 708.145488][T13597] [ 708.145575][T13597] dump_stack_lvl+0xf2/0x150 [ 708.145602][T13597] dump_stack+0x15/0x1a [ 708.145622][T13597] should_fail_ex+0x24a/0x260 [ 708.145650][T13597] should_fail+0xb/0x10 [ 708.145750][T13597] should_fail_usercopy+0x1a/0x20 [ 708.145779][T13597] _copy_to_user+0x20/0xa0 [ 708.145811][T13597] simple_read_from_buffer+0xa0/0x110 [ 708.145838][T13597] proc_fail_nth_read+0xf9/0x140 [ 708.145925][T13597] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 708.146043][T13597] vfs_read+0x19b/0x6f0 [ 708.146063][T13597] ? __rcu_read_unlock+0x4e/0x70 [ 708.146081][T13597] ? __fget_files+0x17c/0x1c0 [ 708.146108][T13597] ksys_read+0xe8/0x1b0 [ 708.146153][T13597] __x64_sys_read+0x42/0x50 [ 708.146172][T13597] x64_sys_call+0x2874/0x2dc0 [ 708.146217][T13597] do_syscall_64+0xc9/0x1c0 [ 708.146241][T13597] ? clear_bhb_loop+0x55/0xb0 [ 708.146269][T13597] ? clear_bhb_loop+0x55/0xb0 [ 708.146294][T13597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.146319][T13597] RIP: 0033:0x7f57a9c0b7fc [ 708.146335][T13597] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 708.146369][T13597] RSP: 002b:00007f57a8277030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 708.146388][T13597] RAX: ffffffffffffffda RBX: 00007f57a9e25fa0 RCX: 00007f57a9c0b7fc [ 708.146400][T13597] RDX: 000000000000000f RSI: 00007f57a82770a0 RDI: 0000000000000005 [ 708.146409][T13597] RBP: 00007f57a8277090 R08: 0000000000000000 R09: 0000000000000000 [ 708.146499][T13597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.146511][T13597] R13: 0000000000000000 R14: 00007f57a9e25fa0 R15: 00007ffcfdc5f9d8 [ 708.146528][T13597] [ 708.511108][T13627] netlink: 20 bytes leftover after parsing attributes in process `syz.9.15138'. [ 708.528948][T13620] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15138'. [ 708.552428][T13620] netlink: 52 bytes leftover after parsing attributes in process `syz.9.15138'. [ 708.554823][T13624] +: renamed from syzkaller0 [ 708.614483][T13641] netlink: 64 bytes leftover after parsing attributes in process `syz.6.15146'. [ 708.658759][T13650] ================================================================== [ 708.666877][T13650] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 708.674597][T13650] [ 708.676909][T13650] write to 0xffff88810c3b8810 of 8 bytes by task 13648 on cpu 1: [ 708.684633][T13650] mas_wr_store_entry+0x1222/0x23f0 [ 708.689826][T13650] mas_store_prealloc+0x6bf/0x960 [ 708.694856][T13650] commit_merge+0x441/0x740 [ 708.699353][T13650] vma_expand+0x211/0x360 [ 708.703676][T13650] vma_merge_new_range+0x2da/0x340 [ 708.708778][T13650] mmap_region+0x7e0/0x1620 [ 708.713270][T13650] do_mmap+0x98a/0xc30 [ 708.717329][T13650] vm_mmap_pgoff+0x16d/0x2d0 [ 708.721910][T13650] ksys_mmap_pgoff+0xd0/0x330 [ 708.726589][T13650] x64_sys_call+0x1940/0x2dc0 [ 708.731270][T13650] do_syscall_64+0xc9/0x1c0 [ 708.735774][T13650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.741670][T13650] [ 708.743982][T13650] read to 0xffff88810c3b8810 of 8 bytes by task 13650 on cpu 0: [ 708.751600][T13650] mtree_range_walk+0x1b4/0x460 [ 708.756448][T13650] mas_walk+0x16e/0x320 [ 708.760595][T13650] lock_vma_under_rcu+0x95/0x270 [ 708.765518][T13650] exc_page_fault+0x150/0x650 [ 708.770183][T13650] asm_exc_page_fault+0x26/0x30 [ 708.775020][T13650] [ 708.777326][T13650] value changed: 0x00007f62ab745fff -> 0x00007f62ab724fff [ 708.784412][T13650] [ 708.786720][T13650] Reported by Kernel Concurrency Sanitizer on: [ 708.792851][T13650] CPU: 0 UID: 0 PID: 13650 Comm: syz.6.15150 Tainted: G W 6.14.0-rc2-syzkaller-00253-g78a632a2086c #0 [ 708.805161][T13650] Tainted: [W]=WARN [ 708.808946][T13650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 708.818989][T13650] ==================================================================