last executing test programs: 14.407476993s ago: executing program 4 (id=59): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 13.983218266s ago: executing program 4 (id=62): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/ipc\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x28, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x4, 0x0, 0x7, 0x3}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) memfd_create(&(0x7f0000000100)='GPL\x00', 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r6, @ANYRESDEC=r3], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r7}, 0x18) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) unshare(0x40000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x20050800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x451, &(0x7f0000000e00)="$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") 9.753226367s ago: executing program 3 (id=77): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$eJzs3U9rI2UcB/Bf2vTv2qbquroL4oNeFCFue/DkpcguiAWl2gUVhFmbamialCYUIuLWkyfBlyHq0ZsgvoFevHgWBJFePO5BHGmT1aZJu7ptU5HP5zIPzzzfeWYyzMCE+TF7L32+sb7WLK9lrRgpFKK4ORbFuylSjMRodOzEc7d+/OnJN956+9XFpaUbyyndXHxz/sWU0uxT373z0ddPf9+6dOub2W8nYnfu3b3fFn7evbJ7de+Pr6LaTNVmqjdaKUu3G41WdrtWSavV5no5pddrlaxZSdV6s7LVs36t1tjcbKesvjozvblVaTZTVm+n9Uo7tQqptdVO2ftZtZ7K5XKamQ5OY+XLu3meR+T5WIxHnuf5VEzHpXgoZmI2SjEXD8cj8WhcjsfiSjweT8TVg1EXvd8AAAAAAAAAAAAAAAAAAADw/3Kf+v+C+n8AAAAAAAAAAAAAAAAAAAA4f0fr/4sRvv8PAAAAAAAAAAAAAAAAAAAAQ3af7/8fqf9/Xv0/AAAAAAAAAAAAAAAAAAAAnIfJzmI5pcmIjU+3V7ZXOstO/+JaVKMWlbgepfg9Dqr/Ozrtm68s3bieDszFCxt3uvk72yujvfn5sVLMFQbm5zv51JufiOnD+YUoxeXB8y8MzE/Gs8/s5z/p5MtRih/ei0bUYjWi0D36g/zH8ym9/NrSVG/+2v64Y42e82kBAACAs1ROf+l/ft/pDhq4vrOq+3yeuiMLJ/w/cOT5vBjXihd11NzTbH+4ntVqla0HbIwfv53x0225r1GIiCwO98xO/7K8P/mZTfGgjdGhTjp28phTnNMo/gd+zDNo/PrFoZ7JGO7sI91LIqvt3z//WSp28vxcd2zgxThxUur4e0ZhCPclhuPvk37RewIAAAAAAAAAAMC/MfDtv6mI6Hsf8IO+nnuvh/fG+7d8/OyfDeEIAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mQHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFcBAAD///ME0UM=") syz_usb_connect(0x0, 0x41, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 5.306936681s ago: executing program 3 (id=86): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000140)='./cgroup\x00', 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0xc, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffe}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x108c0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './cgroup\x00'}) chown(&(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r5, 0x9}}, 0x10) close(r4) 4.911118318s ago: executing program 1 (id=88): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0xe0000000, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x1}}}, 0x24}}, 0x10) 4.393467695s ago: executing program 2 (id=90): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000bc0)=""/249) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) splice(r0, &(0x7f0000000180)=0x8, r0, &(0x7f0000000300)=0x7, 0x4, 0x3) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x4360}, 0x8, 0x9, 0x7d, 0x0, 0x1, 0x101, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setresuid(0xee01, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r3) 4.360633164s ago: executing program 3 (id=91): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) rmdir(0x0) 4.126880694s ago: executing program 1 (id=93): r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x2, 0x3bd}) close_range(r0, 0xffffffffffffffff, 0x0) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 3.999468053s ago: executing program 3 (id=94): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 3.834614159s ago: executing program 2 (id=95): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 3.711180261s ago: executing program 0 (id=96): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x200000000006, 0xbc, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) getrandom(0x0, 0x0, 0x3) 3.615469269s ago: executing program 5 (id=97): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readv(0xffffffffffffffff, &(0x7f0000000500), 0x100000000000031a) 3.551011026s ago: executing program 3 (id=98): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) 3.518393865s ago: executing program 5 (id=99): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) setitimer(0x1, &(0x7f0000001840)={{0x0, 0x2710}, {0x77359400}}, 0x0) mlockall(0x7) 3.413451329s ago: executing program 2 (id=100): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 3.30355466s ago: executing program 0 (id=101): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@quota}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[], 0x48) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800000, 0x8005, 0x0, 0x0, 0x9, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d10a00966d61fdcf335263bd9bffbcc2542ded71038259ca0400e1a311efec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) write$binfmt_misc(r0, &(0x7f00000003c0)='(', 0x1) 3.236498711s ago: executing program 4 (id=102): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r1, 0x5608) 3.122997245s ago: executing program 5 (id=103): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 3.104613667s ago: executing program 2 (id=104): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x80, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x1, 0x4, 0x14, 0x68, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010101, @loopback}}}}) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 2.908941179s ago: executing program 1 (id=105): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 2.907392434s ago: executing program 0 (id=106): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0xe0000000, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x1}}}, 0x24}}, 0x10) 2.684227605s ago: executing program 5 (id=107): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={'veth1_vlan\x00', {0x2, 0x4e22, @empty}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB="2f1500002000000004000000", @ANYRES32=r7, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0), 0x4) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f00000012c0)={0xc, 0x2, {0x6, @struct={0x6, 0x4}, 0x0, 0x1, 0x1, 0xb7, 0x732a, 0xfe, 0x0, @usage=0x5, 0x6, 0x9, [0xcbf5, 0x9ccc, 0x3, 0x81, 0x0, 0x3]}, {0x5, @usage=0x6, 0x0, 0xac0, 0x2, 0x6, 0x2000000000, 0x3, 0xc25, @struct={0x5, 0x6d9c}, 0x7, 0x3398, [0x1, 0x7, 0x6, 0x80000001, 0xa6, 0xf1]}, {0x0, @struct={0x4, 0x6}, 0x0, 0x1000000004, 0x9, 0x1, 0x1, 0xfff, 0x6c, @usage=0x2, 0x100, 0x81, [0x8, 0x16, 0x7fffffffffffffff, 0x2, 0x8]}, {0x2, 0x8000000040000000, 0x80}}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000090900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800b000100736f636b657400001400028008000140000000010800024000000017140000001100c39f8e17010000000000000014223282bd63a8d23e712ff53900000000000a58"], 0xd8}}, 0x4000040) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.611067254s ago: executing program 4 (id=108): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x11, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 2.565763145s ago: executing program 1 (id=109): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00'}, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) 2.56431965s ago: executing program 2 (id=110): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='io_uring_create\x00', r0, 0x0, 0x7}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) io_uring_setup(0x7ac9, &(0x7f00000000c0)={0x0, 0x45d6}) 2.380318279s ago: executing program 0 (id=111): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readv(0xffffffffffffffff, &(0x7f0000000500), 0x100000000000031a) 2.319390597s ago: executing program 3 (id=112): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r2, 0x0, &(0x7f00000003c0)='sched_switch\x00') sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[], 0x18}, 0xfc00) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) socket$key(0xf, 0x3, 0x2) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="5d8a6b699a6ab94398108462e24e3f546dfe1eb97b96c94509e6f783ea"], 0x1c}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000028000008400128009000100766c616e0000000074000280060001000200000034000480580001000500000009000000cafd010008000000020000000c000100010000008c0000000c0001000900000004000000340003800c000100050000005af800000c000100ffff0000a3efffff0b0001"], 0xac}}, 0x0) 2.198034401s ago: executing program 0 (id=113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.222611307s ago: executing program 5 (id=114): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x14}, 0x94) 1.189174354s ago: executing program 1 (id=115): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff3e10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xee8f010b3d1e850f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) personality(0x410000e) 1.150116238s ago: executing program 4 (id=116): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 975.472015ms ago: executing program 0 (id=117): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="34000000000801010000000000000000000000000600024000f60000040004800500030001000000090001"], 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) 902.980303ms ago: executing program 2 (id=118): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) syz_mount_image$msdos(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="4c742189dc2d6a5f220b2800"], 0x1, 0x52e, &(0x7f0000002b80)="$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") mount$nfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 887.235536ms ago: executing program 4 (id=119): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1, 0x0, 0x0, 0x10000120}, 0x4048043) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 19.462507ms ago: executing program 5 (id=120): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40880) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r12], 0x4) 0s ago: executing program 1 (id=121): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r1, 0x5608) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.12' (ED25519) to the list of known hosts. [ 101.591655][ T838] cfg80211: failed to load regulatory.db [ 101.859825][ T5827] cgroup: Unknown subsys name 'net' [ 102.014465][ T5827] cgroup: Unknown subsys name 'cpuset' [ 102.024176][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 103.667670][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 108.442769][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.450648][ T5863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.458214][ T5863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.465957][ T5863] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 108.474553][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.481814][ T5863] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 108.489460][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.491217][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.496758][ T5863] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 108.509460][ T5867] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.512145][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.517961][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.532410][ T5867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.540040][ T5863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.540450][ T5867] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.555591][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.562783][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.564082][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.578453][ T5870] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 108.579855][ T5160] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.586330][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.600291][ T5870] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 108.606288][ T5868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.615703][ T5868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.624500][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.637918][ T5868] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.645119][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.653296][ T5868] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.662226][ T5868] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.670734][ T5869] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 109.426843][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 109.596147][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 109.774263][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 109.838443][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 109.863539][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 109.917684][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 110.056192][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.063991][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.071775][ T5848] bridge_slave_0: entered allmulticast mode [ 110.079280][ T5848] bridge_slave_0: entered promiscuous mode [ 110.087607][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.094840][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.102383][ T5847] bridge_slave_0: entered allmulticast mode [ 110.110025][ T5847] bridge_slave_0: entered promiscuous mode [ 110.173515][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.184753][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.191995][ T5848] bridge_slave_1: entered allmulticast mode [ 110.199517][ T5848] bridge_slave_1: entered promiscuous mode [ 110.221735][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.228876][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.236215][ T5847] bridge_slave_1: entered allmulticast mode [ 110.245356][ T5847] bridge_slave_1: entered promiscuous mode [ 110.329020][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.421873][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.437919][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.447308][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.454926][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.462351][ T5850] bridge_slave_0: entered allmulticast mode [ 110.470035][ T5850] bridge_slave_0: entered promiscuous mode [ 110.500753][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.507883][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.515437][ T5846] bridge_slave_0: entered allmulticast mode [ 110.523409][ T5846] bridge_slave_0: entered promiscuous mode [ 110.547517][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.572131][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.579264][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.586566][ T5850] bridge_slave_1: entered allmulticast mode [ 110.594571][ T5850] bridge_slave_1: entered promiscuous mode [ 110.621400][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.628506][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.635990][ T51] Bluetooth: hci2: command tx timeout [ 110.642164][ T5849] bridge_slave_0: entered allmulticast mode [ 110.650597][ T5849] bridge_slave_0: entered promiscuous mode [ 110.674065][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.681486][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.688833][ T5846] bridge_slave_1: entered allmulticast mode [ 110.696747][ T5846] bridge_slave_1: entered promiscuous mode [ 110.714040][ T5859] Bluetooth: hci4: command tx timeout [ 110.714076][ T5864] Bluetooth: hci0: command tx timeout [ 110.719847][ T51] Bluetooth: hci3: command tx timeout [ 110.725000][ T5869] Bluetooth: hci5: command tx timeout [ 110.761075][ T5848] team0: Port device team_slave_0 added [ 110.789783][ T5869] Bluetooth: hci1: command tx timeout [ 110.821581][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.828698][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.837402][ T5849] bridge_slave_1: entered allmulticast mode [ 110.845463][ T5849] bridge_slave_1: entered promiscuous mode [ 110.884023][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.891342][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.898521][ T5845] bridge_slave_0: entered allmulticast mode [ 110.906970][ T5845] bridge_slave_0: entered promiscuous mode [ 110.933087][ T5848] team0: Port device team_slave_1 added [ 110.942507][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.958071][ T5847] team0: Port device team_slave_0 added [ 110.967523][ T5847] team0: Port device team_slave_1 added [ 110.977719][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.002848][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.012859][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.020775][ T5845] bridge_slave_1: entered allmulticast mode [ 111.028270][ T5845] bridge_slave_1: entered promiscuous mode [ 111.054009][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.098287][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.112980][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.221186][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.249467][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.260110][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.267076][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.293509][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.309205][ T5846] team0: Port device team_slave_0 added [ 111.316749][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.325900][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.352844][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.399174][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.409105][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.417095][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.444323][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.457588][ T5846] team0: Port device team_slave_1 added [ 111.464399][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.471505][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.497932][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.519979][ T5850] team0: Port device team_slave_0 added [ 111.528897][ T5849] team0: Port device team_slave_0 added [ 111.625248][ T5850] team0: Port device team_slave_1 added [ 111.637530][ T5849] team0: Port device team_slave_1 added [ 111.646179][ T5845] team0: Port device team_slave_0 added [ 111.709587][ T5848] hsr_slave_0: entered promiscuous mode [ 111.716647][ T5848] hsr_slave_1: entered promiscuous mode [ 111.754845][ T5845] team0: Port device team_slave_1 added [ 111.789233][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.796612][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.822561][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.835584][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.842596][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.868554][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.904078][ T5847] hsr_slave_0: entered promiscuous mode [ 111.910726][ T5847] hsr_slave_1: entered promiscuous mode [ 111.916865][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.925262][ T5847] Cannot create hsr debugfs directory [ 111.963873][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.970875][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.997226][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.067490][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.078368][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.104939][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.116784][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.124286][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.150460][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.169489][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.176778][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.202872][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.215700][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.222719][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.248659][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.276497][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.283638][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.310288][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.484592][ T5846] hsr_slave_0: entered promiscuous mode [ 112.491334][ T5846] hsr_slave_1: entered promiscuous mode [ 112.497500][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.505505][ T5846] Cannot create hsr debugfs directory [ 112.518026][ T5849] hsr_slave_0: entered promiscuous mode [ 112.524876][ T5849] hsr_slave_1: entered promiscuous mode [ 112.531159][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.538731][ T5849] Cannot create hsr debugfs directory [ 112.648955][ T5850] hsr_slave_0: entered promiscuous mode [ 112.655569][ T5850] hsr_slave_1: entered promiscuous mode [ 112.663112][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.671553][ T5850] Cannot create hsr debugfs directory [ 112.710300][ T5869] Bluetooth: hci2: command tx timeout [ 112.772540][ T5845] hsr_slave_0: entered promiscuous mode [ 112.779003][ T5845] hsr_slave_1: entered promiscuous mode [ 112.786075][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.792890][ T5864] Bluetooth: hci0: command tx timeout [ 112.799035][ T5864] Bluetooth: hci3: command tx timeout [ 112.799656][ T51] Bluetooth: hci4: command tx timeout [ 112.804704][ T5869] Bluetooth: hci5: command tx timeout [ 112.810411][ T5845] Cannot create hsr debugfs directory [ 112.870449][ T5869] Bluetooth: hci1: command tx timeout [ 113.435274][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 113.449106][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 113.471439][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 113.494573][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 113.553235][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.591436][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.614797][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.632394][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.701546][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 113.722865][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 113.735859][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 113.780811][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 113.875797][ T5849] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 113.909338][ T5849] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 113.952992][ T5849] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 113.964903][ T5849] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 114.060031][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 114.074875][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 114.114884][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.123144][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 114.136806][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 114.224205][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.258074][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.282478][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.298929][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.318256][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.328452][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.397044][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.429192][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.436566][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.478665][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.485823][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.501845][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.508964][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.536998][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.544169][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.586022][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.730264][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.761706][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.790574][ T5869] Bluetooth: hci2: command tx timeout [ 114.806797][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.814007][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.832250][ T5848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.871168][ T5869] Bluetooth: hci5: command tx timeout [ 114.876603][ T5869] Bluetooth: hci3: command tx timeout [ 114.882964][ T5864] Bluetooth: hci4: command tx timeout [ 114.883060][ T51] Bluetooth: hci0: command tx timeout [ 114.950408][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.951384][ T51] Bluetooth: hci1: command tx timeout [ 114.959300][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.969564][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.065083][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.139155][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.146386][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.169232][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.211944][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.219134][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.259597][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.266789][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.315405][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.322611][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.462553][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.505699][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.614373][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.658153][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.689194][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.772984][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.780229][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.816952][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.824210][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.117303][ T5848] veth0_vlan: entered promiscuous mode [ 116.163889][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.301803][ T5848] veth1_vlan: entered promiscuous mode [ 116.465230][ T5850] veth0_vlan: entered promiscuous mode [ 116.524043][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.545508][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.560237][ T5850] veth1_vlan: entered promiscuous mode [ 116.631088][ T5848] veth0_macvtap: entered promiscuous mode [ 116.699433][ T5848] veth1_macvtap: entered promiscuous mode [ 116.724074][ T5847] veth0_vlan: entered promiscuous mode [ 116.762446][ T5850] veth0_macvtap: entered promiscuous mode [ 116.783993][ T5847] veth1_vlan: entered promiscuous mode [ 116.822720][ T5850] veth1_macvtap: entered promiscuous mode [ 116.870294][ T51] Bluetooth: hci2: command tx timeout [ 116.875314][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.949596][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.949997][ T51] Bluetooth: hci3: command tx timeout [ 116.951749][ T5869] Bluetooth: hci4: command tx timeout [ 116.960301][ T51] Bluetooth: hci0: command tx timeout [ 116.966968][ T5864] Bluetooth: hci5: command tx timeout [ 116.989945][ T5848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.998733][ T5848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.008989][ T5848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.019105][ T5848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.038630][ T5845] veth0_vlan: entered promiscuous mode [ 117.044878][ T5864] Bluetooth: hci1: command tx timeout [ 117.075562][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.107132][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.162405][ T5845] veth1_vlan: entered promiscuous mode [ 117.188976][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.216480][ T5847] veth0_macvtap: entered promiscuous mode [ 117.236426][ T5850] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.249346][ T5850] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.259912][ T5850] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.268651][ T5850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.289277][ T5847] veth1_macvtap: entered promiscuous mode [ 117.382130][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.396927][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.428568][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.477163][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.484407][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.496751][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.501579][ T5847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.513972][ T5847] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.525433][ T5847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.534433][ T5847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.572138][ T5849] veth0_vlan: entered promiscuous mode [ 117.596275][ T5845] veth0_macvtap: entered promiscuous mode [ 117.619591][ T5846] veth0_vlan: entered promiscuous mode [ 117.653875][ T5845] veth1_macvtap: entered promiscuous mode [ 117.722249][ T5846] veth1_vlan: entered promiscuous mode [ 117.735941][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 117.756123][ T5849] veth1_vlan: entered promiscuous mode [ 117.872031][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.939242][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.965757][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.013236][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.056625][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.065563][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.067330][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.075178][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.094234][ T5991] loop3: detected capacity change from 0 to 1024 [ 118.098611][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.109433][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.128920][ T5991] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 118.191312][ T5965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.206810][ T5991] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 118.209901][ T5846] veth0_macvtap: entered promiscuous mode [ 118.218880][ T5965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.230703][ T5991] JBD2: no valid journal superblock found [ 118.236474][ T5991] EXT4-fs (loop3): Could not load journal inode [ 118.257074][ T5846] veth1_macvtap: entered promiscuous mode [ 118.408478][ T5849] veth0_macvtap: entered promiscuous mode [ 118.453488][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.493494][ T5849] veth1_macvtap: entered promiscuous mode [ 118.536520][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.571938][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.618970][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.680816][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.689595][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.736672][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.769698][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.826638][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.970822][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.049740][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.057617][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.144002][ T5849] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.170385][ T5849] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.196466][ T5849] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.218474][ T5849] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.454150][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.476880][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.517466][ T6010] netlink: 224 bytes leftover after parsing attributes in process `syz.4.14'. [ 119.534782][ T6010] ksmbd: Unknown IPC event: 1, ignore. [ 119.585709][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.622660][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.854912][ T5965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.916282][ T5965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.959424][ T5965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.976317][ T5965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.185872][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.215511][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.672214][ T6031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 121.950599][ T6041] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.665338][ T6043] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 122.675022][ T6043] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 122.684681][ T6043] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 122.703418][ T30] audit: type=1800 audit(1753220688.545:2): pid=6043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 123.970385][ T6061] loop4: detected capacity change from 0 to 512 [ 124.011035][ T6061] ======================================================= [ 124.011035][ T6061] WARNING: The mand mount option has been deprecated and [ 124.011035][ T6061] and is ignored by this kernel. Remove the mand [ 124.011035][ T6061] option from the mount to silence this warning. [ 124.011035][ T6061] ======================================================= [ 124.222464][ T6065] loop1: detected capacity change from 0 to 512 [ 124.231654][ T30] audit: type=1326 audit(1753220690.105:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9ed8e9a9 code=0x7ffc0000 [ 124.255047][ T30] audit: type=1326 audit(1753220690.105:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9ed8e9a9 code=0x7ffc0000 [ 124.282483][ T30] audit: type=1326 audit(1753220690.125:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f6c9ed8e9a9 code=0x7ffc0000 [ 124.305015][ T30] audit: type=1326 audit(1753220690.125:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9ed8e9a9 code=0x7ffc0000 [ 124.323402][ T6061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.359706][ T30] audit: type=1326 audit(1753220690.125:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9ed8e9a9 code=0x7ffc0000 [ 124.362614][ T6065] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 124.406247][ T6061] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.419734][ T30] audit: type=1326 audit(1753220690.125:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c9ed8e9a9 code=0x7ffc0000 [ 124.578477][ T30] audit: type=1326 audit(1753220690.125:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9ed8e9a9 code=0x7ffc0000 [ 124.645111][ T30] audit: type=1326 audit(1753220690.125:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c9ed8e9a9 code=0x7ffc0000 [ 124.687703][ T30] audit: type=1326 audit(1753220690.385:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9ed8e9a9 code=0x7ffc0000 [ 124.833118][ T6065] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.29: corrupted inode contents [ 124.858686][ T6065] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.29: mark_inode_dirty error [ 124.954086][ T6065] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.29: corrupted inode contents [ 125.018213][ T6065] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.29: mark_inode_dirty error [ 125.063977][ T6065] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.29: corrupted inode contents [ 125.125179][ T6065] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 125.153512][ T6065] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.29: corrupted inode contents [ 125.161800][ T5847] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.279818][ T6065] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.29: mark_inode_dirty error [ 125.401434][ T6065] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 125.515970][ T6065] EXT4-fs (loop1): 1 truncate cleaned up [ 125.533683][ T6095] netlink: 24 bytes leftover after parsing attributes in process `syz.3.34'. [ 125.538005][ T1334] EXT4-fs error (device loop1): ext4_release_dquot:6967: comm kworker/u8:7: Failed to release dquot type 1 [ 125.705209][ T6096] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 126.348031][ T6082] sctp: failed to load transform for md5: -2 [ 126.388280][ T6065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.491822][ T6065] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.611632][ T6065] netlink: 48 bytes leftover after parsing attributes in process `syz.1.29'. [ 126.958485][ T6108] loop5: detected capacity change from 0 to 128 [ 127.237729][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.378363][ T6115] loop3: detected capacity change from 0 to 512 [ 129.886898][ T6115] EXT4-fs: error -4 creating inode table initialization thread [ 129.895092][ T6115] EXT4-fs (loop3): mount failed [ 130.210221][ T6122] syz.5.40: attempt to access beyond end of device [ 130.210221][ T6122] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 130.269158][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 130.269181][ T30] audit: type=1326 audit(1753220696.145:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7f58e9a9 code=0x7ffc0000 [ 130.296554][ T6122] syz.5.40: attempt to access beyond end of device [ 130.296554][ T6122] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 130.387493][ T6122] syz.5.40: attempt to access beyond end of device [ 130.387493][ T6122] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 130.450944][ T30] audit: type=1326 audit(1753220696.215:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7f58e9a9 code=0x7ffc0000 [ 130.453388][ T6122] syz.5.40: attempt to access beyond end of device [ 130.453388][ T6122] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 130.475750][ T30] audit: type=1326 audit(1753220696.245:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f2d7f58e9a9 code=0x7ffc0000 [ 130.510786][ T30] audit: type=1326 audit(1753220696.245:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7f58e9a9 code=0x7ffc0000 [ 130.589047][ T6122] syz.5.40: attempt to access beyond end of device [ 130.589047][ T6122] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 130.604169][ T6130] netlink: 'syz.2.45': attribute type 13 has an invalid length. [ 130.631389][ T30] audit: type=1326 audit(1753220696.245:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7f58e9a9 code=0x7ffc0000 [ 130.711446][ T6122] syz.5.40: attempt to access beyond end of device [ 130.711446][ T6122] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 130.720564][ T30] audit: type=1326 audit(1753220696.245:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f2d7f58e9a9 code=0x7ffc0000 [ 130.790624][ T6131] loop4: detected capacity change from 0 to 512 [ 130.795780][ T30] audit: type=1326 audit(1753220696.245:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7f58e9a9 code=0x7ffc0000 [ 130.810858][ T6131] EXT4-fs: Ignoring removed orlov option [ 130.830692][ T6122] syz.5.40: attempt to access beyond end of device [ 130.830692][ T6122] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 130.844359][ T6130] gretap0: refused to change device tx_queue_len [ 130.852923][ T6130] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 130.909391][ T6131] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.915460][ T30] audit: type=1326 audit(1753220696.245:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7f58e9a9 code=0x7ffc0000 [ 131.000476][ T6131] EXT4-fs (loop4): orphan cleanup on readonly fs [ 131.048618][ T6131] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.47: bg 0: block 248: padding at end of block bitmap is not set [ 131.085882][ T6063] kworker/u8:10: attempt to access beyond end of device [ 131.085882][ T6063] loop5: rw=1, sector=265, nr_sectors = 1 limit=128 [ 131.149038][ T6131] Quota error (device loop4): write_blk: dquota write failed [ 131.222746][ T6137] xt_CT: You must specify a L4 protocol and not use inversions on it [ 131.231217][ T6131] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 131.257443][ T6131] EXT4-fs error (device loop4): ext4_acquire_dquot:6931: comm syz.4.47: Failed to acquire dquot type 1 [ 131.269155][ T6134] loop1: detected capacity change from 0 to 8192 [ 131.332022][ T6131] EXT4-fs (loop4): 1 truncate cleaned up [ 131.363050][ T6131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.809213][ T5847] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.641839][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.61'. [ 134.682096][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.61'. [ 135.058220][ T6178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.63'. [ 135.120495][ T6182] loop5: detected capacity change from 0 to 512 [ 135.212706][ T6182] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.327519][ T6182] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.387474][ T6182] EXT4-fs error (device loop5): ext4_empty_dir:3075: inode #12: comm syz.5.68: invalid size [ 136.539797][ T6182] netlink: 40 bytes leftover after parsing attributes in process `syz.5.68'. [ 136.707326][ T6199] loop1: detected capacity change from 0 to 512 [ 136.822413][ T5849] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.843543][ T6199] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.72: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 136.908986][ T6199] EXT4-fs error (device loop1): ext4_quota_enable:7126: comm syz.1.72: Bad quota inode: 3, type: 0 [ 136.964261][ T6207] loop3: detected capacity change from 0 to 128 [ 137.035254][ T6199] EXT4-fs warning (device loop1): ext4_enable_quotas:7164: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 137.102621][ T6199] EXT4-fs (loop1): mount failed [ 137.386772][ T6207] syz.3.73: attempt to access beyond end of device [ 137.386772][ T6207] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 137.386973][ T6207] syz.3.73: attempt to access beyond end of device [ 137.386973][ T6207] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 137.387154][ T6207] syz.3.73: attempt to access beyond end of device [ 137.387154][ T6207] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 137.387386][ T6207] syz.3.73: attempt to access beyond end of device [ 137.387386][ T6207] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 137.387565][ T6207] syz.3.73: attempt to access beyond end of device [ 137.387565][ T6207] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 137.387787][ T6207] syz.3.73: attempt to access beyond end of device [ 137.387787][ T6207] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 137.529160][ T6218] loop4: detected capacity change from 0 to 512 [ 137.531989][ T6218] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.532029][ T6218] EXT4-fs: Ignoring removed bh option [ 137.559686][ T6218] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 137.592010][ T6218] EXT4-fs (loop4): 1 truncate cleaned up [ 137.632736][ T6218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.754319][ T12] kworker/u8:0: attempt to access beyond end of device [ 137.754319][ T12] loop3: rw=1, sector=249, nr_sectors = 1 limit=128 [ 138.138287][ T6230] netlink: 52 bytes leftover after parsing attributes in process `syz.2.79'. [ 138.445199][ T6226] loop3: detected capacity change from 0 to 8192 [ 138.605229][ T6241] netlink: 'syz.2.82': attribute type 13 has an invalid length. [ 140.557112][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.565695][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.556297][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.567919][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.587817][ T6241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.618574][ T6241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.644943][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 142.690711][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'. [ 142.699538][ T6263] netlink: 'syz.0.89': attribute type 5 has an invalid length. [ 142.707750][ T6263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.89'. [ 142.844270][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.88'. [ 142.858223][ T6241] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.878794][ T6241] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.892448][ T6241] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.901893][ T6241] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.011613][ T6263] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 143.025013][ T6263] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 143.039872][ T6263] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 143.048539][ T6263] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 143.077322][ T6263] geneve2: entered promiscuous mode [ 143.083493][ T6263] geneve2: entered allmulticast mode [ 143.205484][ T30] audit: type=1326 audit(1753220709.085:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9ed8e9a9 code=0x7ffc0000 [ 143.240769][ T30] audit: type=1326 audit(1753220709.085:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9ed8e9a9 code=0x7ffc0000 [ 143.339775][ T30] audit: type=1326 audit(1753220709.145:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f6c9ed8e9a9 code=0x7ffc0000 [ 143.439766][ T30] audit: type=1326 audit(1753220709.145:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9ed8e9a9 code=0x7ffc0000 [ 143.497675][ T6272] Zero length message leads to an empty skb [ 143.537467][ T30] audit: type=1326 audit(1753220709.145:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9ed8e9a9 code=0x7ffc0000 [ 143.599909][ T30] audit: type=1326 audit(1753220709.185:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c9ed8e9a9 code=0x7ffc0000 [ 143.622239][ T30] audit: type=1326 audit(1753220709.185:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9ed8e9a9 code=0x7ffc0000 [ 143.644646][ T30] audit: type=1326 audit(1753220709.185:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9ed8e9a9 code=0x7ffc0000 [ 143.668429][ T30] audit: type=1326 audit(1753220709.195:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f6c9ed8e9a9 code=0x7ffc0000 [ 143.740292][ T30] audit: type=1326 audit(1753220709.195:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9ed8e9a9 code=0x7ffc0000 [ 144.224993][ T5847] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.235166][ T6288] loop3: detected capacity change from 0 to 2048 [ 144.374988][ T6288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.804207][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.106'. [ 144.872415][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.106'. [ 145.133523][ T6313] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 145.255464][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.431982][ T6318] netlink: 224 bytes leftover after parsing attributes in process `syz.5.107'. [ 145.441183][ T6318] ksmbd: Unknown IPC event: 4, ignore. [ 146.967253][ T6337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.112'. [ 146.976350][ T6337] netlink: 48 bytes leftover after parsing attributes in process `syz.3.112'. [ 147.372771][ T6341] BUG: assuming non migratable context at ./include/linux/filter.h:703 [ 147.442028][ T6342] loop2: detected capacity change from 0 to 2048 [ 147.474219][ T6341] in_atomic(): 0, irqs_disabled(): 0, migration_disabled() 0 pid: 6341, name: syz.4.119 [ 147.487173][ T6341] 3 locks held by syz.4.119/6341: [ 147.492279][ T6341] #0: ffff88814c4ad598 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sctp_sendmsg+0xd8c/0x1ee0 [ 147.518508][ T6341] #1: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: sctp_v6_xmit+0xbac/0x11a0 [ 147.526622][ T6342] msdos: Unknown parameter 'Lt!‰Ü-j_" (' [ 147.528034][ T6341] #2: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: nf_hook+0xb2/0x780 [ 147.549721][ T6341] CPU: 0 UID: 0 PID: 6341 Comm: syz.4.119 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 147.549766][ T6341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.549789][ T6341] Call Trace: [ 147.549801][ T6341] [ 147.549814][ T6341] dump_stack_lvl+0x16c/0x1f0 [ 147.549857][ T6341] __cant_migrate+0x1c7/0x250 [ 147.549913][ T6341] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 147.549975][ T6341] ? __pfx___cant_migrate+0x10/0x10 [ 147.550039][ T6341] nf_hook_run_bpf+0x83/0x1e0 [ 147.550098][ T6341] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 147.550151][ T6341] ? nf_nat_ipv6_out+0x3cc/0x4c0 [ 147.550211][ T6341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.550263][ T6341] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 147.550313][ T6341] nf_hook_slow+0xbe/0x200 [ 147.550356][ T6341] nf_hook+0x45e/0x780 [ 147.550407][ T6341] ? __pfx_ip6_finish_output+0x10/0x10 [ 147.550463][ T6341] ? __pfx_nf_hook+0x10/0x10 [ 147.550511][ T6341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.550556][ T6341] ? nf_hook+0x497/0x780 [ 147.550609][ T6341] ? __pfx_ip6_finish_output+0x10/0x10 [ 147.550661][ T6341] ? __pfx_nf_hook+0x10/0x10 [ 147.550708][ T6341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.550772][ T6341] ip6_output+0x33f/0x540 [ 147.550825][ T6341] ? __pfx_ip6_finish_output+0x10/0x10 [ 147.550886][ T6341] ? __pfx_ip6_output+0x10/0x10 [ 147.550938][ T6341] ip6_xmit+0x12d7/0x2320 [ 147.550989][ T6341] ? __kasan_slab_free+0x51/0x70 [ 147.551041][ T6341] ? kmem_cache_free+0x2d1/0x4d0 [ 147.551112][ T6341] ? __pfx_ip6_xmit+0x10/0x10 [ 147.551178][ T6341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.551228][ T6341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.551290][ T6341] sctp_v6_xmit+0xcab/0x11a0 [ 147.551345][ T6341] ? __entry_text_end+0x1020b5/0x1020b9 [ 147.551393][ T6341] ? kasan_quarantine_put+0x10a/0x240 [ 147.551443][ T6341] ? __pfx_sctp_v6_xmit+0x10/0x10 [ 147.551492][ T6341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.551543][ T6341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.551588][ T6341] ? kmem_cache_free+0x2d1/0x4d0 [ 147.551636][ T6341] ? sctp_chunk_put+0x205/0x2c0 [ 147.551691][ T6341] sctp_packet_transmit+0x1ef9/0x3040 [ 147.551790][ T6341] sctp_packet_singleton+0x19e/0x370 [ 147.551847][ T6341] ? __pfx_sctp_packet_singleton+0x10/0x10 [ 147.551921][ T6341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.551968][ T6341] ? sctp_outq_select_transport+0x208/0x740 [ 147.552035][ T6341] sctp_outq_flush+0x53d/0x3350 [ 147.552097][ T6341] ? _raw_spin_unlock_irq+0x1/0x50 [ 147.552172][ T6341] ? __pfx_sctp_outq_flush+0x10/0x10 [ 147.552238][ T6341] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 147.552280][ T6341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.552326][ T6341] ? sctp_outq_tail+0x671/0xa30 [ 147.552382][ T6341] ? sctp_endpoint_add_asoc+0x225/0x2f0 [ 147.552440][ T6341] sctp_do_sm+0x1792/0x5c80 [ 147.552512][ T6341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.552559][ T6341] ? kasan_save_stack+0x42/0x60 [ 147.552609][ T6341] ? kasan_save_stack+0x33/0x60 [ 147.552657][ T6341] ? kasan_save_track+0x14/0x30 [ 147.552709][ T6341] ? __pfx_sctp_do_sm+0x10/0x10 [ 147.552766][ T6341] ? sctp_sendmsg+0xef5/0x1ee0 [ 147.552821][ T6341] ? ____sys_sendmsg+0x973/0xc70 [ 147.552874][ T6341] ? do_syscall_64+0xcd/0x4c0 [ 147.552914][ T6341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.553004][ T6341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.553052][ T6341] ? sk_leave_memory_pressure+0xdd/0x130 [ 147.553112][ T6341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.553159][ T6341] ? __sk_mem_raise_allocated+0x94d/0x1670 [ 147.553216][ T6341] sctp_primitive_ASSOCIATE+0x9c/0xd0 [ 147.553285][ T6341] sctp_sendmsg_to_asoc+0xa45/0x1bf0 [ 147.553334][ T6341] ? sctp_assoc_set_primary+0x177/0x300 [ 147.553404][ T6341] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 147.553459][ T6341] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 147.553525][ T6341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.553574][ T6341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.553631][ T6341] sctp_sendmsg+0xef5/0x1ee0 [ 147.553684][ T6341] ? lockdep_hardirqs_on+0x7c/0x110 [ 147.553722][ T6341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.553783][ T6341] ? __pfx_sctp_sendmsg+0x10/0x10 [ 147.553837][ T6341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.553885][ T6341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.553934][ T6341] ? __pfx___might_resched+0x10/0x10 [ 147.554002][ T6341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.554048][ T6341] ? import_ubuf+0x1b6/0x220 [ 147.554095][ T6341] ? __pfx_aa_sk_perm+0x10/0x10 [ 147.554148][ T6341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.554195][ T6341] ? __import_iovec+0x1dd/0x650 [ 147.554244][ T6341] ? __pfx_sctp_sendmsg+0x10/0x10 [ 147.554305][ T6341] inet_sendmsg+0x11c/0x140 [ 147.554371][ T6341] ____sys_sendmsg+0x973/0xc70 [ 147.554425][ T6341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.554470][ T6341] ? copy_msghdr_from_user+0x10a/0x160 [ 147.554510][ T6341] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.554560][ T6341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.554619][ T6341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.554665][ T6341] ? try_to_wake_up+0xa2f/0x1680 [ 147.554724][ T6341] ___sys_sendmsg+0x134/0x1d0 [ 147.554760][ T6341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.554812][ T6341] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.554848][ T6341] ? __lock_acquire+0x622/0x1c90 [ 147.554943][ T6341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.555027][ T6341] __sys_sendmsg+0x16d/0x220 [ 147.555077][ T6341] ? __pfx___sys_sendmsg+0x10/0x10 [ 147.555118][ T6341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.555166][ T6341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.555233][ T6341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.555291][ T6341] do_syscall_64+0xcd/0x4c0 [ 147.555336][ T6341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.555375][ T6341] RIP: 0033:0x7f093818e9a9 [ 147.555403][ T6341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.555440][ T6341] RSP: 002b:00007f0939021038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.555474][ T6341] RAX: ffffffffffffffda RBX: 00007f09383b5fa0 RCX: 00007f093818e9a9 [ 147.555500][ T6341] RDX: 0000000004048043 RSI: 0000200000000800 RDI: 0000000000000003 [ 147.555524][ T6341] RBP: 00007f0938210d69 R08: 0000000000000000 R09: 0000000000000000 [ 147.555547][ T6341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.555570][ T6341] R13: 0000000000000000 R14: 00007f09383b5fa0 R15: 00007fffdb230ea8 [ 147.555620][ T6341]