last executing test programs: 8m16.358825504s ago: executing program 32 (id=1359): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) unshare(0xa000200) semtimedop(0x0, &(0x7f0000000380)=[{0x4, 0x3, 0x1000}], 0x1, 0x0) unshare(0x20060400) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x1000000000000}, 0x18) umount2(&(0x7f0000000080)='./file0\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_io_uring_setup(0x1118, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x1db}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r8, r8, r8) sendmsg$nl_netfilter(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x168, 0x8, 0x4, 0x201, 0x70bd25, 0x25dfdbfb, {0x2, 0x0, 0x8}, [@nested={0x89, 0x11a, 0x0, 0x1, [@nested={0x4, 0x59}, @nested={0x4, 0x98}, @generic="f2ea8c08fe8bd598f2687d04db08910e5d0d2ad8f9e07c0373cefeb641b037ad9f5a3572314f83646f2a52a07ada4ad04a50dc07a7a233e502bd139ca70c75011cba8af87f907f36f1a0cf1d02206e56655306b9c7bcbecb529d5b3a79356395d141aa9c9e3092feb3099ac7e26edc1ee5527fc73581d35c5e", @nested={0x4, 0x9f}]}, @typed={0x75, 0x14a, 0x0, 0x0, @binary="1c856f770c4913e3a6287824ea335a6e6e94c6f0ea83da91a8ef184db9d48ed1ca8070f25ec6104830dc74fef39dc35a610ec4052bc1937c094d35a21d31ede5d405363f216a38aeee01b37fc2250316c81d9c58dacb012271f0fea154a0d4f8d8059563a50d22eebf9a964433bf310fb2"}, @nested={0x48, 0x14e, 0x0, 0x1, [@nested={0x4, 0x53}, @nested={0x4, 0x98}, @typed={0x8, 0x74, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="b25751a58f11cb9df805bd731595f424b104ff718f0ca04071ab822f16715c266b1f64758a7511cede0e9f7291e67ebb", @nested={0x4, 0x6e}, @generic]}, @typed={0x8, 0xad, 0x0, 0x0, @uid=r8}]}, 0x168}, 0x1, 0x0, 0x0, 0x44010}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r10}, 0x18) sendto$inet6(r9, &(0x7f00000000c0)='\x00', 0x1, 0x4044005, &(0x7f0000000040)={0xa, 0x4e24, 0xb, @loopback, 0x9}, 0x1c) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r5, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r11, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 7m41.858655052s ago: executing program 33 (id=1923): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f0000000300), 0x0, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x6c, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000005c0)) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r7, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000007dce8ec9076e52debc89795fdb9b5587a164d47ea4d2b5f98208ccaaf5d6b7a8653215cc1da7e8984d0a862582ab22335b8a56fdf133a06bf50e18a313878b65818960acd21d41b18d5d6a3639f65a15ff00db3ce4e40c268ec625d10dfde41260ae55bc05a2d06453db78734d9f868bff6cbb628db09b46af9a62228aa447a069f96479b6d8b568dbc24d69479d73322d3a2966544375", @ANYRES16=r9, @ANYBLOB="010000000000ffffffff04740906050001000000000014000300ff02000000000000000000000000000114000200fc020000000000000000000000000001"], 0x44}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000300)={@multicast2, @empty, 0x0, "3fe9d01f251b860f75adb4f67afe88b65750f65610eab539e2bca075481bd075", 0x0, 0x0, 0x7, 0x1000}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f0000000300), 0x0, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x6c, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) (async) ioctl$int_in(r2, 0x5452, &(0x7f00000005c0)) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r7, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r8) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000007dce8ec9076e52debc89795fdb9b5587a164d47ea4d2b5f98208ccaaf5d6b7a8653215cc1da7e8984d0a862582ab22335b8a56fdf133a06bf50e18a313878b65818960acd21d41b18d5d6a3639f65a15ff00db3ce4e40c268ec625d10dfde41260ae55bc05a2d06453db78734d9f868bff6cbb628db09b46af9a62228aa447a069f96479b6d8b568dbc24d69479d73322d3a2966544375", @ANYRES16=r9, @ANYBLOB="010000000000ffffffff04740906050001000000000014000300ff02000000000000000000000000000114000200fc020000000000000000000000000001"], 0x44}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) (async) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000300)={@multicast2, @empty, 0x0, "3fe9d01f251b860f75adb4f67afe88b65750f65610eab539e2bca075481bd075", 0x0, 0x0, 0x7, 0x1000}, 0x3c) (async) 6m11.053983073s ago: executing program 34 (id=3160): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000240000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a3200"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 4m17.240811263s ago: executing program 35 (id=5131): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/uts\x00') sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x3c}}, 0x8000) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) close(r4) 4m16.845551101s ago: executing program 36 (id=5134): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}]}}}, @IFLA_MTU={0x8, 0x4, 0x76cf0e22}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x3}, 0x18) close(r2) getsockopt$inet_udp_int(r0, 0x88, 0x68, 0x0, &(0x7f0000000040)) 4m16.482688138s ago: executing program 37 (id=5136): clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x2000000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) 4m16.355544101s ago: executing program 38 (id=5137): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) 4m16.344068421s ago: executing program 39 (id=5139): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) openat$pidfd(0xffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf090000000000005509010000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca4000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) 3m5.308866437s ago: executing program 40 (id=5803): socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/icmp6\x00') fchdir(r4) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='./file1\x00', 0x8000041e) splice(r0, 0x0, r2, 0x0, 0x7151, 0x0) 2m40.548758261s ago: executing program 3 (id=6341): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$rds(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000000380)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='cpu<\t\t') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, r3, 0x1, 0x0, 0x2000000, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 2m40.498343502s ago: executing program 3 (id=6342): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x22, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x9c}}, 0x0) 2m40.405450434s ago: executing program 3 (id=6344): add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="0100000002", 0x5, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@resuid}, {@grpquota}, {@noload}, {@nobarrier}, {@usrquota}]}, 0xfe, 0x475, &(0x7f0000001600)="$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") 2m40.246819397s ago: executing program 3 (id=6347): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000060000850000007700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x221) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2m39.986678892s ago: executing program 3 (id=6356): ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000040)={@desc={0x1, 0x0, @desc1}}) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x1c6, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) read$eventfd(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback={0xffffffffffffff91}, 0xffffffff}, 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x2000c058) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="380000001800090400000000000000000ac11f007f0000040000000008001e000100000014000100ff"], 0x38}}, 0x0) 2m25.185940237s ago: executing program 3 (id=6362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r3, 0x1, 0x0, 0x100000, {{}, {0x0, 0x5, 0xea}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x1004) 2m25.185780027s ago: executing program 41 (id=6362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r3, 0x1, 0x0, 0x100000, {{}, {0x0, 0x5, 0xea}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x1004) 1m42.883629171s ago: executing program 9 (id=7116): statx(0xffffffffffffffff, &(0x7f0000001580)='./file0\x00', 0x2000, 0x2, &(0x7f00000015c0)) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) socket(0x10, 0x3, 0x0) setregid(0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800fc00031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x3) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES16=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r7 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0x13) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r9, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000004100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000ac0)=""/48, 0x30}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000007c0)=""/196, 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)=""/215, 0xd7}, {&(0x7f0000003100)=""/4096, 0x1000}], 0x2}}], 0x4, 0x400122a0, 0x0) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 1m42.031394698s ago: executing program 9 (id=7132): r0 = socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x3ffff) ioctl$BLKGETDISKSEQ(r2, 0x80081280, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) dup(0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1m41.770683533s ago: executing program 9 (id=7135): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f0000000780)}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4) sendto$inet(r2, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r2, 0x0, 0xb, 0x0, 0x0) 1m41.750026043s ago: executing program 9 (id=7136): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@dioread_lock}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88240, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000840)={[{@nobh}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@nojournal_checksum}, {@dax_never}, {@noload}]}, 0x3, 0x479, &(0x7f0000001300)="$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") unlink(&(0x7f0000000180)='./file1\x00') 1m41.703033434s ago: executing program 9 (id=7137): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) (async) sync() (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB, @ANYRESOCT], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r4, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffe}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x22fe01e044263ac8) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x10) syz_open_dev$vcsu(&(0x7f00000000c0), 0xc, 0x80400) getsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) (async) r6 = openat(0xffffffffffffff9c, 0x0, 0x1c5902, 0x2d) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r5, 0x40bc5311, &(0x7f0000000500)={0x7357, 0x1, 'client0\x00', 0x80000000, "55dac74e235df5b5", "2443c643061b2d2b931f38930b5bb1e6cb5905a42cd8e6c704e4b26f2113198a", 0x800, 0x7}) (async) write(r6, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$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") (async) fallocate(r3, 0x0, 0x0, 0x1001f0) (async) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, &(0x7f00000002c0)='./file0\x00') (async) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ff8000/0x2000)=nil) (async) mbind(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000240)=0x2, 0x4, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x800000000006}, 0x18) 1m41.290740573s ago: executing program 9 (id=7146): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f0000000780)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4) sendto$inet(r2, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r2, 0x0, 0xb, 0x0, 0x0) 1m41.290321582s ago: executing program 42 (id=7146): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f0000000780)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4) sendto$inet(r2, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r2, 0x0, 0xb, 0x0, 0x0) 1m10.106850324s ago: executing program 7 (id=7650): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x20000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000001a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001780)={&(0x7f0000001980)={0x68, r3, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}, @ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xc0000000}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xfffffff3}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040030}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0xf, &(0x7f0000001880)=ANY=[@ANYBLOB="1811000098998f050ec7760697fe881b19fb50431d8b27031110ad31f3d85e1cab0b3721c029f5a2925b119ceff67d39d66979acb873f308b9653c63b0c4e12ff494ac719f73705b546c1206fcda69639bc8", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000001800000003000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0xfd, &(0x7f0000000f80)=""/253, 0x40f00, 0x12, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000180)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x4, 0x101, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000010c0)=[r0, 0xffffffffffffffff, r0, r0, r0, r0, r1], &(0x7f0000001100)=[{0x2, 0x2, 0x2, 0x2}], 0x10, 0x3}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r8}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pwritev2(r2, &(0x7f0000001700)=[{&(0x7f0000001200)="5950b1590d682f8033ee5d3b44f341c3bc347eb711b6f07407179849abf218ef28b32b39e9b3e94fa71bac85286a54938265fec5d1b187fd6106abb6158d145c701d68236ae77dff6ea153bb0b8a73845b8ff276922044685527b57bb484b30e25c88be22d3e670633323439fef795da53173450a0b2f1d0d512be3ef52fb8d8503efb6ac5fe08dcff378af39cc846529269c2426656d38dec6984fbcacd7c6e40d986c81800df16213e7efdb578e9", 0xaf}, {&(0x7f00000012c0)="79e72a1cc6db67cffd8bceb0b63372b519fe8a24331e0a6fd2bb5320a771d98c7ef09fedbf1780defe4b370a6101f53cb29407353b35316bf5568367d64f167d44d9a7e23f660a248e362cbc6db29264dc413433a31093cbf37b8a70ee2bf8041f1ef383cb799473deae59d44db0798d710423da5eb223179f10ea3d9510038ea0be2e0a9e7c37dbf7e774a77a2b91700305dcf276971b5a9bd40c32aaf2cab7031a7719d851f4d0a40a859c5bfa86e031b09ea4dac3e9f7a8462a90d392b34a3330977a8a0843df45f29bcb9064152012be308fbfb2f7701565ae6076a27e56b2033b", 0xe3}, {&(0x7f00000013c0)="4e0a75e71f9755d14571d497af795c3080e1c51b966c2ea0da119dbc6806fec41b9ff3f2cb3c248d2175cb49e05b9d0c7d8a704d109909d22a9d64cfb29635c99781b2f9c7e9bb85c6b967b1c9baf7c61248211e5a704d3f76a8641f1fd95e94ee56177be964312176d26cc1d5cf857c8aaf4917209b067fee0547cdce7e2b04b5bfbfb7f5ab9616e580093a55f1e9ebb63af98db70d36bd428c96c2a609c36ab158b1f60d48df8d00e887205f2841e19dc7c463166f780187e326fe75e5b9ac7650f4ee9e81e204427c101082a69a0c3f520ce8fec65f182f059743678f18e2da81415338437f", 0xe7}, {&(0x7f00000014c0)="831de381c93224ef656e5def5f13ca14e5e470b78d21b9a2262af3c2bce7bfe67a1cebb96cbe88a2c58071921bb06137e866b7f4e2b158365c7aa04a7a546965f4cafbd00c32f750d9f1e9611677a555c56cfcd12c721e3bc9667dc9725a1025072aceba73340022754fc20e3b4def88fbcd079c47e3309643ebecd6df8e19fc707c1ffeef80d26d53ccf3d3076104f0ba97dd9babed4b873b18c7d7ce79350804d2f1019c3674887b13d89c1c6fa26471a827150969c9b5863198180f2bf9f5219ef8e23ef5d5a7ae345ee397f50a45c22e029e8f4b062bfdf02083220a", 0xde}, {&(0x7f00000015c0)="5a3218f54c7769cb7e5f8cacda08629a04944e1f2f7f1e0165bd4b76d9a6a10abb1ec5423c", 0x25}, {&(0x7f0000001600)="2b91cd53838ae69db22881fd010e1cd7d915d71bf083ce19c2d6e74fa87b5476325d9db4869ec300f136c40a618f2cac4b1ccd8da29093e8870b92b8cca9007c870a74dc2d9e9c968b4485d94f123c4375bd7ac62c97b714f5fbbc8423e334a177c6f46bf1b1c32943971ea1c13e760995e717df81bfc420ab4764cdc7c4f6b2da571b77b99fb6b9d9821ec30b20c6601f09", 0x92}, {&(0x7f00000016c0)="d7d0399af27ba72878bcd54bb2d1a9f91699d8b66926cb34b8268243fc9422e22809153a621fdb1b", 0x28}], 0x7, 0x94, 0x6, 0x62323040398cdf06) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 1m9.676052083s ago: executing program 7 (id=7657): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) socket$inet_icmp(0x2, 0x2, 0x1) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lstat(&(0x7f0000000440)='./file0\x00', 0x0) 1m9.661809403s ago: executing program 7 (id=7658): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}, {@grpquota}]}, 0x5, 0x4dd, &(0x7f0000000c40)="$eJzs3E9oXMUfAPDv2yRN+u/X/dVaba2aWsVgMWnTansQpKLgQUGsoB5D/pTYbSNNCrZU2YLUoxS8i0evHryqlyKeBK/1KEihSC9tBXHl7b79292kSTdZ0nw+sNmZefvezOy8eZk3s7sBbFjD6Z+kEr4eETsiItf6guHK051blybv3ro0GcVS6eRfSXm322k8kx0mtmaRkVxE7vOkvqHB/IWLpycKhelzWXxs4czHY/MXLr44O5SlHD9+9MjhYy+Pv7T8SrXJL63X7b2fze3b8+aHV9+e7K+mV3NrrEe3DMdwu6KUPdftzHpse0M46e9hQViW9PxPm2ug3P93RF8s1njFNSwZsNpKpVJpsPPmYqnV5XtSgHUriV6XAOiN6j/69P63+mg3EOhbneFHz908UbkBSut9J3tEPF1OrM6DDLTc33bTcER8UPz76/QRqzQPAQDQ6McTtemf5vFfvrIy8s/5a6+mz//L1lDyEfH/iNgZEY9ExK6IeDQidkfEYxHxeMvx03FjaZH8h1vitfxri1C5G12oZkfp+O+VbG2rPv5rKkC+L4ttj6gOmKcPZe/JSAwMzswWpg8vksdPr//2ZadtjeO/9JHmXx0LZuW40d8yQTc1sTCx4gq3uHk5Ym9/a/2T/oikthKQRMSeiNi7jOPmG8KzL3y7rxYZaH7d0vUvK7VdR+vCOlPpm4jnK+1fjKb2r+eYNK1Pnpk4NX1q+ux4bX1ybCgK04fGZjqW5pdfr7zTaduS9f/+j9Zd3jj2w8mu3ZGl7b+l4fyP6vptvf75JCKprdfOLz+PK79/0fGeZqXn/6bkvXJ4U5b2ycTCwrnDEZuSt+5NH6/vW42nz1Gs1H/kQPv+vzPbJ30nnoiI9CR+MiKeisodYlr2/RHxTEQcWKT+P7/27Ecrr//qSus/1XL9q7R8U/vX1+s7BZJsbbDNpr7T+6/f7XDxuL/2P1oOjWQp7a9/SdMlolNJq/Meacq/D/zuAQAAwPqQi4htDXNJ2yKXGx2tzAHtii25wtz8wsGZufNnp9JtEfkYyM3MFsrzn5X54IGkOv+Zb4iPt8SPZPPGX/VtLsdHJ+cKUz2tObC13OeT3GjE+30N/T/158P6oR+gzve1YONarP+ng/jdV9ewMMCauv///9c+XdWCAGuuof93+oZ/cQWf+wLWAff/QN3SP/TjmgHrX0lfhg1tWf3/oB8BhIdJf7xbC+d6WhJgrRn/w4a05Pf6HyhQGmy/aSjufXEMLX7AvlhZMTa3yasngXRk1ZPcN69kr+qvKXR8TeSWd8DB6E6bzjzgu1E8N39qd9dP/lL2Wflut+B3a9JP2wV6cjkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADouv8CAAD//0ZK174=") 1m9.150643353s ago: executing program 7 (id=7673): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1adc51, 0x0) (async) mount$bind(0x0, 0x0, 0x0, 0x1389899, 0x0) (async) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) (async, rerun: 64) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88f8d2, 0x0) (rerun: 64) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x14e7}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) dup(r4) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x46000, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d2f90c72c47c52186bcaf4a9891d2cbd56887fe16d9fd6fcc5ee953f82e2c59030d96f0ff4b9b9289d6f1053317c608ca5118fd3988d930bc8d75da3b1db26079d1ffb3c9087ad678191d29a89647b643f4d1d801ad459c631d58e30b735ae0650c27cc3df4a115a47a4f46a5badeb53bd9205031354b582f52c33da24fc89b154a3754bc7882a1d93d608e9f998fda247ade34", @ANYRESHEX=r3, @ANYBLOB=',wfdnq=', @ANYRESHEX=r5]) 1m4.627619593s ago: executing program 7 (id=7715): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='mm_page_free\x00', r0, 0x0, 0x1000}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x110, r1, 0x0) 1m3.670394553s ago: executing program 7 (id=7727): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newtfilter={0x9c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x5, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x6c, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @local}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8}]}}]}, 0x9c}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0xe4ffffffffffffff) socket(0x1, 0x3, 0x1ff) 1m3.670100033s ago: executing program 43 (id=7727): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newtfilter={0x9c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x5, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x6c, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @local}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8}]}}]}, 0x9c}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0xe4ffffffffffffff) socket(0x1, 0x3, 0x1ff) 35.269018449s ago: executing program 4 (id=8091): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) socket$inet_icmp(0x2, 0x2, 0x1) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lstat(&(0x7f0000000440)='./file0\x00', 0x0) 35.252492049s ago: executing program 4 (id=8092): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r6, 0x4e, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)={'#! ', './file1', [{0x20, '/dev/net/tun\x00'}]}, 0x19) 34.392293146s ago: executing program 4 (id=8098): socket$kcm(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) epoll_create(0xaf2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8) 33.525831494s ago: executing program 4 (id=8104): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r2, @ANYBLOB="000008000000850000001b000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x8, 0x82, 0x2, 0x5, 0x0, 0x6, 0x2400, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xef, 0x2, @perf_config_ext={0xfff, 0x4}, 0x900, 0x9, 0x6, 0x7, 0x8001, 0xffff, 0x3, 0x0, 0x7da, 0x0, 0x100000000}, 0x0, 0x2, r3, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x80, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4c, 0x2, [@TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x0, 0x5, 0xb, 0xfffff800, {0x3, 0x0, 0x10, 0x1390, 0x200}, {0x10, 0x1, 0x0, 0x1, 0x7, 0x7}, 0x9, 0xf9, 0x3}}]}, @TCA_BPF_FD={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}]}, 0x80}}, 0xfaffffffffffffff) 33.098531912s ago: executing program 4 (id=8109): openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x303d40, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2b, 0x1, 0x1) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000090601020000f9efffff00000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a3100000000050001000700"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x18) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b33000000000000000005"], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x38, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x38}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) getpid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) 32.614657912s ago: executing program 4 (id=8114): socket$inet6(0xa, 0x805, 0x0) (async) r0 = socket$inet6(0xa, 0x805, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0xfffffff7) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_open_dev$mouse(&(0x7f00000003c0), 0x8, 0x800) (async) r4 = syz_open_dev$mouse(&(0x7f00000003c0), 0x8, 0x800) clock_gettime(0x0, &(0x7f0000000400)) (async) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) write$evdev(r4, &(0x7f0000000480)=[{{}, 0x2, 0x1000, 0xb}, {{}, 0x16, 0xeb, 0x8}, {{r5, r6/1000+10000}, 0x4, 0x6068, 0x2}, {{0x77359400}, 0x3, 0x5, 0x10}, {{}, 0x0, 0x2, 0x6}], 0x78) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x18) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_9p2000}]}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r11, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000018c0)={0x18, 0x2, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x10) setpgid(r10, r10) (async) setpgid(r10, r10) waitid(0x2, r10, 0x0, 0x4, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x29c, 0x20, 0x300, 0x70bd29, 0x25dfdbfd, {0x1e}, [@nested={0x5a, 0x3, 0x0, 0x1, [@generic="df97463cab59f9831c513a8db14f21988e8cf3e2bf26eba8c1f518ac71168798656921b92a9d54b4aab073429dd6fdea300ae1e52a47ab6ba5bd9bfb88b23bf96568876622773f5099cd", @nested={0x4, 0xda}, @typed={0x8, 0xf, 0x0, 0x0, @pid=r2}]}, @nested={0x1fc, 0x122, 0x0, 0x1, [@typed={0x8, 0xe7, 0x0, 0x0, @pid=r10}, @generic="594f14cf0cf7b1e0370dfd17ce61de35cd2052f218151f28b17cac4646a87eec3bfcdc9a5378c4e06130035d0219f11d363da7130dd904dba8d5c65e84d7bdc09a0931243fd5fd8a2a6826041655c7cafc770303eb13310cc38e3aae20783719f9b7b7b6a5941b34a79725b4778e145a45aa2de28dda9c59a9ce5ca773d3b7f1882aa5b0dc500f6b248735a7d8b89faaaf2b3fcb7cfe37d60031757acdc72c68a31507cae33cae9ca5628d531ddb74bda6749e8ef20a490dc59717cc3a611463dcce6aff2360ea5912ef01b25f290dca17fb158c2fdcab31400078fb4acca498c89d0617b6b1f329c9755332a7bba445ce11e0ace5dd25b3", @typed={0xf5, 0x81, 0x0, 0x0, @binary="2126cbdfed166b1aaa0cf8b7582720d47cf2e348f0bb240b916d08c14304b96af6cadbdcf6d2adc24a00f17049fdd79083e68580e7c30e985dc6acd60e222b5705c6f4dcdef7cca32cce284d6bc30f07711508f838766c2ca4fb0d07a97378cf3aa0ad1cb56a7d173095523df76efab69bac9f7b2b3f8676d9a4abe90f055eceeb5f0d4360ecb70d889eb82257ad6060950e7a7422153754c76e2d1b33d41aa5e35e1bc614de4899271376416177cff81d3548dd2f0cc0144390719782da316021cb3b9db76677b7db0104f731236749cb438b63bd0212824c6934bdf67267c07a7c8d689fcdb3ca7984490339ee5fcae8"}]}, @generic="636a79195cb8688a6f7d22d4e2e4b2cdbdf8c48c2a70f8942288f6ad554a2667fccb842492055fc2ca2747ca51d64e"]}, 0x29c}, 0x1, 0x0, 0x0, 0x20000001}, 0xc004) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000002b00)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x0, 0x7, 0x14, @mcast2, @loopback={0xffffffffffffffe0, 0xffff888101827518}, 0x1, 0x20, 0x38dc5865, 0x10001}}) 25.062717942s ago: executing program 0 (id=8190): syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0xa54a9d76e5e2e84, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 24.661306241s ago: executing program 0 (id=8191): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) io_setup(0x8, &(0x7f0000000600)=0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f00000000c0)="01", 0x400000}]) socket$nl_generic(0x11, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ustat(0x1, &(0x7f0000000180)) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x8000) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 23.469881054s ago: executing program 0 (id=8195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) 23.353463707s ago: executing program 0 (id=8197): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c757466383d302c696f636861727365743d63703836302c696f636861727365743d6d616363726f617469616e2c756e695f786c6174653d312c747a3d5554432c6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d6d697865642c6e6f636173652c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c736d61636b66736465663d757466383d302c64697273796e632c736d61636b66736861743d262c657569643e807d6dc634ae06b292a3825c7626caa45b7a39a81660437a556646a082c54e8cf9c81260f6a760b9f06d5738818ee5a4503b0364b0f4c56abfe2", @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f726f6c653d2c686173682ca8ea26de004d2208fc414d630834ec2191519244adb53cec31ddc7b9b58f32238fac4fbdc332b1719e34"], 0x25, 0x34f, &(0x7f0000000840)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) utimes(&(0x7f0000000340)='./file0\x00', 0x0) 23.121006501s ago: executing program 0 (id=8199): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb0ffffff, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000240)='GPL\x00', 0x9, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 22.757478618s ago: executing program 0 (id=8203): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 22.751714609s ago: executing program 44 (id=8203): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 17.594136012s ago: executing program 45 (id=8114): socket$inet6(0xa, 0x805, 0x0) (async) r0 = socket$inet6(0xa, 0x805, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0xfffffff7) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_open_dev$mouse(&(0x7f00000003c0), 0x8, 0x800) (async) r4 = syz_open_dev$mouse(&(0x7f00000003c0), 0x8, 0x800) clock_gettime(0x0, &(0x7f0000000400)) (async) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) write$evdev(r4, &(0x7f0000000480)=[{{}, 0x2, 0x1000, 0xb}, {{}, 0x16, 0xeb, 0x8}, {{r5, r6/1000+10000}, 0x4, 0x6068, 0x2}, {{0x77359400}, 0x3, 0x5, 0x10}, {{}, 0x0, 0x2, 0x6}], 0x78) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x18) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_9p2000}]}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r11, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000018c0)={0x18, 0x2, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x10) setpgid(r10, r10) (async) setpgid(r10, r10) waitid(0x2, r10, 0x0, 0x4, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x29c, 0x20, 0x300, 0x70bd29, 0x25dfdbfd, {0x1e}, [@nested={0x5a, 0x3, 0x0, 0x1, [@generic="df97463cab59f9831c513a8db14f21988e8cf3e2bf26eba8c1f518ac71168798656921b92a9d54b4aab073429dd6fdea300ae1e52a47ab6ba5bd9bfb88b23bf96568876622773f5099cd", @nested={0x4, 0xda}, @typed={0x8, 0xf, 0x0, 0x0, @pid=r2}]}, @nested={0x1fc, 0x122, 0x0, 0x1, [@typed={0x8, 0xe7, 0x0, 0x0, @pid=r10}, @generic="594f14cf0cf7b1e0370dfd17ce61de35cd2052f218151f28b17cac4646a87eec3bfcdc9a5378c4e06130035d0219f11d363da7130dd904dba8d5c65e84d7bdc09a0931243fd5fd8a2a6826041655c7cafc770303eb13310cc38e3aae20783719f9b7b7b6a5941b34a79725b4778e145a45aa2de28dda9c59a9ce5ca773d3b7f1882aa5b0dc500f6b248735a7d8b89faaaf2b3fcb7cfe37d60031757acdc72c68a31507cae33cae9ca5628d531ddb74bda6749e8ef20a490dc59717cc3a611463dcce6aff2360ea5912ef01b25f290dca17fb158c2fdcab31400078fb4acca498c89d0617b6b1f329c9755332a7bba445ce11e0ace5dd25b3", @typed={0xf5, 0x81, 0x0, 0x0, @binary="2126cbdfed166b1aaa0cf8b7582720d47cf2e348f0bb240b916d08c14304b96af6cadbdcf6d2adc24a00f17049fdd79083e68580e7c30e985dc6acd60e222b5705c6f4dcdef7cca32cce284d6bc30f07711508f838766c2ca4fb0d07a97378cf3aa0ad1cb56a7d173095523df76efab69bac9f7b2b3f8676d9a4abe90f055eceeb5f0d4360ecb70d889eb82257ad6060950e7a7422153754c76e2d1b33d41aa5e35e1bc614de4899271376416177cff81d3548dd2f0cc0144390719782da316021cb3b9db76677b7db0104f731236749cb438b63bd0212824c6934bdf67267c07a7c8d689fcdb3ca7984490339ee5fcae8"}]}, @generic="636a79195cb8688a6f7d22d4e2e4b2cdbdf8c48c2a70f8942288f6ad554a2667fccb842492055fc2ca2747ca51d64e"]}, 0x29c}, 0x1, 0x0, 0x0, 0x20000001}, 0xc004) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000002b00)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x0, 0x7, 0x14, @mcast2, @loopback={0xffffffffffffffe0, 0xffff888101827518}, 0x1, 0x20, 0x38dc5865, 0x10001}}) 5.477729123s ago: executing program 1 (id=8405): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) time(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000006000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 5.375735785s ago: executing program 1 (id=8406): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000580)=0x5) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r3 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x20000, 0x2, 0x5e, 0x0, r0}, &(0x7f0000000540)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r3, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) (async) io_uring_enter(r3, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000180)=0x28) (async) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000180)=0x28) semget$private(0x0, 0x0, 0x440) (async) r6 = semget$private(0x0, 0x0, 0x440) semtimedop(r6, &(0x7f0000000140)=[{0x0, 0xb, 0x1000}, {0x0, 0x4, 0x1000}, {0x2, 0xff8}, {0x4, 0x1, 0x1000}], 0x4, &(0x7f0000000380)={0x0, 0x989680}) (async) semtimedop(r6, &(0x7f0000000140)=[{0x0, 0xb, 0x1000}, {0x0, 0x4, 0x1000}, {0x2, 0xff8}, {0x4, 0x1, 0x1000}], 0x4, &(0x7f0000000380)={0x0, 0x989680}) unshare(0x2c020400) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x19, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x19, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0xfffffffffffff001}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x6}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x6}, 0x94) openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x2880, 0x0, 0xa}, 0x18) (async) r9 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x2880, 0x0, 0xa}, 0x18) write$cgroup_pressure(r9, &(0x7f0000000280)={'full', 0x20, 0x1000, 0x20, 0x7fffffffffffffff}, 0x2f) 5.245027517s ago: executing program 1 (id=8411): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) socket$inet_icmp(0x2, 0x2, 0x1) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lstat(0x0, 0x0) 5.195919058s ago: executing program 1 (id=8413): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfff7ffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="0039936da8abb4625380b974"], 0x1, 0x539, &(0x7f00000005c0)="$eJzs3V9v01YfwPGfS8tT5ZHQo+d5hFBV4FA2qZVKcBIIirjBc07SA44d2Q5qr1BFW1SRwkSZtPaOG7ZJ24vgdi9id7va7d4G2kvY5D8tKW2S0pIGVd9PBOfEPjnnd1LLPzmJbQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGK5ddsuWeIZv7Os+nPrYdAasH4i72/hQDFgXBEr+SfT03IlW3Tl/x9WX07+m5NZkT9FZFamk+fTsvvvy/+5/7/Jib3XDwjoTGzv7D5f7XbXX407kDFpat9EgWk5Ta1MFKhatWrfXmpEqmE8Ha1EsW4pN9ROHIRq3l1QpVqtonRxJej4zbrj6b2F926VbbuqHhbb2gmjwL/9sBi5S8bzjN9M2ySrkzb3kg3xkYlVrJ2WUhub3fXKsCCTRqXjNCoPa1S2y+VSqVwuVe/W7t6z7clDC+yPyKEW499oMV4j2IsDJzOR53/xxIgvHVkWdeTDlbqEEkjrwNIH+7VcmvgnZOHr2w8Gjtub/2ezRbNXPqyekTT/X8ueXeuX//vEenaPbdmRXXkuq9KVrqzLq5P2dH38cznJoylafDESSSBGWuKkS1S+RElNqlIVW57IkjQkEiUNMeKJlkhWJJJYdLpFuRKKFkdiCSQUJfPiyoIoKUlNalIRJVqKsiKBdMSXptTFSXvZkM30fa8MiHG/Uek4jcoDGpH/cXqj2I0DJ/L3Xv4HAAAAAADnlpV++p4c/0/J1bTWMJ62xx0WAAAAAAD4jNJv/meTYiqpXRWL438AAAAAAM4bKz3HzhKRglzPantnQvEhAAAAAAAA50T6/f+1pCgkteticfwPAAAAAMB58+P+1Xf7XWM3av/L+u0vCcMp6017+Stry0naOVsXstdd+LjHuDFjXco7SYvqZP7M1bNWfvXL/Ytgvs+LjWFxWJ8hAPlZbmRtbqxl5dremmyUQsN4uugG3v2SOM6liVgvx9+92Pxe0un/5LcuWbKx2V0vPn3ZXUtjeZP08mYrv4DioesoDojldXq9hfSciyNnPJWeiJGPW8jGtXvnn99yYeITxnwrc1mbuUJWFg7OfzoZs1S8X5LJo2afR1E65czfys2szc35m1lxRBTl4oe/wR95nweiKPdGcaL34hhRVIr9toQ8isopowCAcdkYkoWsw4n/BHu5Q9n94iiy+1uZz9rMz6Q71smZI/bo9rA9un3K7PbroXsg9cuxybi/fJRV3yUveNd33MgrW8lbeOH11rdyeXtn99bm1uqz9WfrL8rlStW+Y9t3yzKVTiMvyD0AgCMMv8fO0BbWnSFH1f/d/0lBUZ7KS+nKmiymZxukvzg4stdCz88QFocctRZ67vCyOOSortBzo5fjt62cwV8CAICzMzckDx8n/y8OOe4+mMsHHx335vIhBt9gEAAA9KXD91Yh/sEKQ9N+UqrVSk68pFUYuI9UaOpNrYwf69BdcvymVu0wiAM38JLKY1PXkYo67XYQxqoRhKodRGY5vfO7ym/9HumW48fGjdqediKt3MCPHTdWdRO5qt35xjPRkg7TF0dt7ZqG+T3/xDvohK4uKhVp3dPQ1LUfm4ZJqr5qh6blhCvqceB1WlrVdeSGph0HWYd7Yxm/EYQtJzaBXxz3mw0AwBdie2f3+Wq3u/5qhJVxzxEAABxElgYAAAAAAAAAAAAAAAAAAAAA4Ms3stP+LuYDjPTMQiojrHzqtjHxBcRM5eSVi3JgyZh3TABG7p8AAAD//xR6Tls=") 4.861423315s ago: executing program 1 (id=8415): syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007"], 0x0, 0x4, 0x0, 0x0, 0xa54a9d76e5e2e84, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 2.960876563s ago: executing program 5 (id=8447): socket(0x1e, 0x80004, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x30, 0x0, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfffffffa}}}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x30}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) getxattr(0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000000c0)={0x0, 'ip_vti0\x00', {0x4}, 0x7}) r2 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r2, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) 2.765748306s ago: executing program 8 (id=8449): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000080)="00000000000400000000", 0xa, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) 1.935307223s ago: executing program 8 (id=8453): r0 = eventfd2(0xb, 0x800) tee(0xffffffffffffffff, r0, 0xa6ed, 0x0) r1 = getpid() request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0xfffffffffffffffd) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7fff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000039000200000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800024000000000080001"], 0x244c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x64000600) 1.534192961s ago: executing program 2 (id=8460): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaa5044d3af7a381004e0008004982bdcf4765000000299078ac1414bbac14140f860d0000001000075288ec3e6b000000"], 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f00000001c0), 0x1, 0x61d, &(0x7f0000001680)="$eJzs3c9rHGUfAPDv7CZp0uZ90768iA2KAQ8tSNOkFqtebOvBHgoW7EHEQ0OT1NDtD5oUbC20BQ8KCiJei/TiP+BdevcmgnrzLFSRioKWrMzsbLtJZps07e4mnc8Hdnfmmdl5nu8+fTrPs5NnJ4DSGkufKhE7IxZPJBEjLduGo7FxLN/vzu9XTqaPJOr1t35LIsnTmvsv5q/b0qckYjAivjsc8b/qynznL10+PVWrN1yN2Ltw5vze+UuX98ydmTo1c2rm7OS+l/cfmHhlcv/kY4lzW/565Oibz3z64XsvzX5f25PEwTje/8F0LItjHepJQeJYjMViHmJrel9EHEgXCj6XzWZNIWzpfDlYn2r+77E/Ip6Kkahmaw0jMfdJTwsHdFS9GlEHSirR/qGkmv2A5th+bePg4x3ulXTP7UONAdDK+Psa343EYDY22nonaRkZNb7b2P4Y8k/zuHtl9Eb6iCXfQ/x1r3b6HkM+7Vy7HhFPF8WfZGXbnkWaxl9ZMtZPImIiIgby8r2+jqxbj9X0iN/DPHwhHiL+1nqoRMTB/DVNP7zO/MeWrXc7fgDK6dah/ESenY3vn//Svkez/xMF/Z/hgnPXevT6/Ne+/9c83w9m/Z7Ksn5Y2mc5VnzI/uUJP3985PN2+bf2/+5eSbJyNPuC3XD7esTosvg/SoPN+z9p/ElB/ae7nDi4tjze+OHXI+22LY1/9Ea346/fjNhVOP653ytNlx5wfXLv7FxtZqLxXJjHN9+++1W7/Hsdf1r/W9vE31L/leXvSz+T82vM4+tjN88MtNk2vGr8lV8GksZ4s3mM96cWFi5MRgwkR/NdWtL3PbgszX2ax0jj3/18cftf8u//+tLjDLUOYFZx/u3Td9ptW0/9t1xMXqyvsQztpPFPr17/K9p/mvbZGvP4852Lz7bbVhB/RB7/0KMEBgAAAAAAACVUya7BJpXxe8uVyvh4Y77s/2NrpXZufuGF2XMXz05H7M7+HrK/0rzSPdJYT9L1yfzvYZvr+5atvxgROyLii+pQtj5+8lxtutfBAwAAAAAAAAAAAAAAAAAAwAaxLZ//37xP9R/Vxvx/oCQ6eYM5YGPT/qG8sva/4hZPQBk4/0N5af9QXto/lJf2D+Wl/UN5af9QXto/lJf2DwAAAABPpB3P3fopiYhrrw5lj9RAvq3a05IBndZfkFa/2oOCAF3nHA/lde/Sv+n/UDpF/f8V/s5/HLDzxQF6IClKzDoH9Qc3/luF7wQAAAAAAAAAAAAAOmDXzvbz/9c0NwDYtEz7g/J6hPn/fjoANjk//Q/lZYwPrDaLf7DdBvP/AQAAAAAAAAAAAKBrhrNHUhnP5wIPR6UyPh7xn4jYHv3J7FxtZiIi/hsRP1b7t6Trk70uNAAAAAAAAAAAAAAAAAAAADxh5i9dPj1Vq81caF34Z0XKk73QvAtqF/J6LR7yXZF0/2MZioieV0rHFvpaUpKIa2nNb4iCXZiPjVGMbKHH/zEBAAAAAAAAAAAAAAAAAEAJtcw9Ljb6ZZdLBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADdd//+/51b6HWMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDm9G8AAAD//yhFQh8=") syz_emit_ethernet(0x1015, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000001080)={0x1, 0x2, [0x7a0, 0x6c0, 0x2b7, 0xd30]}) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r4, 0x0, 0x100000000}, 0x18) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x80000) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x157]}, 0x8) r6 = syz_io_uring_setup(0x6934, &(0x7f0000000300)={0x0, 0x125a, 0x8000, 0xffffffff, 0x100000, 0x0, r5}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffe}}) io_uring_enter(r6, 0x44fd, 0x3, 0x1, 0x0, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)=0x0) timer_settime(r10, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r11 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mq_timedreceive(r11, &(0x7f00000100c0)=""/102385, 0x18ff1, 0x6, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x4) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r13}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 1.490097641s ago: executing program 6 (id=8461): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x74, r1, 0x28, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r1, 0x701, 0x0, 0x0, {0x45}}, 0x14}, 0x1, 0x0, 0x0, 0xffffffa6}, 0x0) 1.460011742s ago: executing program 6 (id=8462): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a4"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe88000000000000e6ffffffffffff00fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1.390707574s ago: executing program 6 (id=8463): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000080000000000000003000000180600000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={r3, 0x0, r2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0xfd45}}, 0x0) close(0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e22, 0x4, @loopback, 0x9}, 0x1c) 1.148289119s ago: executing program 5 (id=8464): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000076000020000401002700efffffe900009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0xd, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc62, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) 1.145466189s ago: executing program 1 (id=8465): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="fc0000000000ad29ccbe5e31ecb80000889202c92cd035744c", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="3303120081fd120000007ef52f555f2a0c09000000fd88a800f788a83baa9900", 0x20, 0x40008c1, &(0x7f00000000c0)={0x11, 0x1, r5, 0x1, 0xcf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="ad3c39575d8262775656fd53149247128d64aa6b57713fe3e5af2a8017ff1101d723b2afe5e54fc030fa26806950385c9eefc9331df73872affa470c276a2ea8dcf2ca7c6a7520c7d29afcafb246c7fa855f69463ed9450daf2d45d3a963407187408ff30d3e4d78bf144430f8a57bc72e3491cf8a13a865a9c212d5201c17c7639d7b3d3e7160ad91d5842e1e51d98e97c6385191dd0704e766af7e372b74f00962a95460", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095", @ANYRESDEC=r2, @ANYRES32=0x0, @ANYRES64=r0, @ANYRES16=r1], 0x0, 0x100005, 0x0, 0x0, 0x41100, 0x25}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000000008010300000000000000000700000a0600024000f70000050003008800000004000480090001000f007a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4890}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000400)='kfree\x00', r9}, 0x18) sendmsg$IPSET_CMD_GET_BYNAME(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x60040000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="286101000e060500000000000000000000000060000002007300"/40], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20008104) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r11}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12, 0x0, 0x10000002}, 0x18) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xfc}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r14, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="9c000907", @ANYRES16=r15, @ANYBLOB="20022cbd7000fbdbdf25090000000400038008000500030000007c00038014000600fc02000000000000000000000000000008000500ac1414bb14000600fe8000000000000000000000000000aa0500080007000000140006002001000000000000000000000000000105000800a1000000140002006e657464657673696d30000000000000060007004e22000008000500e0000002"], 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) 1.034823501s ago: executing program 5 (id=8466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x18, 0x0, 0x1, 0x401, 0xf5, 0xfff5, {0x2}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 1.034250561s ago: executing program 5 (id=8467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000000c060101000010000000000005000002050001"], 0x34}, 0x1, 0x0, 0x0, 0x10040}, 0x2) unshare(0x4020400) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000880)={0x2, 0xffffffffffffffff, 'id0\x00'}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x9, [@enum64={0x8, 0x2, 0x0, 0x13, 0x1, 0x3, [{0x4, 0x4}, {0x2, 0xee, 0x7ff}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x8, 0x2}, {0xa, 0x3}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xb, 0x1}, {0x8, 0x1}]}, @typedef={0x0, 0x0, 0x0, 0x8, 0x2}, @var={0xc, 0x0, 0x0, 0xe, 0x4, 0x1}]}, {0x0, [0x5f, 0x5f, 0x0, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f00000007c0)=""/151, 0x99, 0x97, 0x1, 0xf65, 0x10000, @value=r1}, 0x28) syz_emit_ethernet(0x12, &(0x7f00000004c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@llc={0x4, {@llc={0x42, 0x42, "f3", "f4"}}}}}, 0x0) r3 = inotify_init() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r4, &(0x7f00000003c0)="2b5464c5a06e14d1b7c5d6c207374f6c043ecadb8992e8c13f0c98421fa72ca742cbcebcbaa2e751f3a0eb099080cdd2e320c9bbd514dc303863afaded458bc1c24b24e3f09eacef357d338e8b6dc101a92fe8f1787d8cbb339e2de2f24838dcabff93954c1bd452b9d2620157655e6de7ef736671dc0046613397bb68c6466700dc0fff98dc49b26a0b27661583dc7204828e2d71f8a42d5abbe2000840b66912ce8585d4a1bcba490b0bb25a05e2c76e536c16079c9ffb6369c51fc6f7e0d22b9325120cdd3d8168780c", &(0x7f00000004c0)=""/159}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x18) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x3, 0x801, 0x0, 0x0, 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a80)={0x20f, 0x0}, 0x8) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b80)='GPL\x00', 0x3, 0x62, &(0x7f0000000bc0)=""/98, 0x41000, 0x1, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000c40)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000c80)={0x1, 0x9, 0x81, 0x1}, 0x10, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000cc0)=[r6, r6, r4, r4, r6, r4, 0xffffffffffffffff, r4, r1, r4], &(0x7f0000000d00)=[{0x1, 0x5, 0x5, 0x5}, {0x4, 0x5, 0x9, 0xc}, {0x0, 0x1, 0x6, 0x6}, {0x3, 0x2, 0x6, 0xb}, {0x1, 0x1, 0xd, 0x2}, {0x3, 0x2, 0x6, 0x2}], 0x10, 0x1ff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ec0)={{r4, 0xffffffffffffffff}, &(0x7f0000000e40), &(0x7f0000000e80)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1a, 0x11, &(0x7f0000000900)=@raw=[@map_idx={0x18, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ldst={0x2, 0x1, 0x0, 0x9, 0xb, 0x4, 0xffffffffffffffff}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x4c, &(0x7f0000000a00)=""/76, 0x40f00, 0x25, '\x00', 0x0, @fallback=0x6, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x1, 0xf, 0x6, 0x4f}, 0x10, r8, r9, 0x4, &(0x7f0000000f00)=[r10, r4], &(0x7f0000000f40)=[{0x4, 0x5, 0x8, 0x9}, {0x5, 0x5, 0x8, 0x6}, {0x3, 0x5, 0xc, 0x2}, {0x4, 0x1, 0xa, 0x7}], 0x10, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r4, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x9) ppoll(&(0x7f0000000300)=[{r3, 0x1000}], 0x1, 0x0, 0x0, 0x0) 1.003209842s ago: executing program 8 (id=8468): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000130000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) ioctl$KDDELIO(r0, 0x4b34, 0x3bf) ioctl$KDDISABIO(r0, 0x4b37) 979.492312ms ago: executing program 8 (id=8469): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f0000000000ffffff80000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff0100000000000000000000000000010000000000000000010018"], 0x78}}, 0x0) 876.199354ms ago: executing program 8 (id=8470): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) (async) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, 0x0, 0x0) (async) connect$inet6(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r4) sendmsg$802154_raw(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)="11a32ed688eb47", 0x7}, 0x1, 0x0, 0x0, 0x24008011}, 0x80) recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0xfffffe01}], 0x1, 0x122, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0xe, 0x4, 0x490, 0xffffffff, 0x0, 0x210, 0xf8, 0xffffffff, 0xffffffff, 0x3f8, 0x3f8, 0x3f8, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ip={@loopback, @empty, 0x0, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {}, 0x6c, 0x1, 0x29}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0xe, "20d6"}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x0, 0x4, 0xc, 0x7, 0x1, 0x7], 0x3, 0x5}, {0x3, [0x2, 0x1, 0x2, 0x1, 0x2, 0x6], 0x0, 0x4}}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x5]}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x0, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ip={@multicast2, @multicast1, 0xff000000, 0xffffff00, 'ipvlan0\x00', 'tunl0\x00', {}, {0xff}, 0xc, 0x1, 0x1}, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'veth1_to_bridge\x00', {0x6, 0x3, 0x24, 0x7, 0x8, 0x3c38, 0x4, 0x40, 0x48}, {0x80000001}}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x18, 0x3, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0xe, 0x4, 0x490, 0xffffffff, 0x0, 0x210, 0xf8, 0xffffffff, 0xffffffff, 0x3f8, 0x3f8, 0x3f8, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ip={@loopback, @empty, 0x0, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {}, 0x6c, 0x1, 0x29}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0xe, "20d6"}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x0, 0x4, 0xc, 0x7, 0x1, 0x7], 0x3, 0x5}, {0x3, [0x2, 0x1, 0x2, 0x1, 0x2, 0x6], 0x0, 0x4}}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x5]}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x0, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ip={@multicast2, @multicast1, 0xff000000, 0xffffff00, 'ipvlan0\x00', 'tunl0\x00', {}, {0xff}, 0xc, 0x1, 0x1}, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'veth1_to_bridge\x00', {0x6, 0x3, 0x24, 0x7, 0x8, 0x3c38, 0x4, 0x40, 0x48}, {0x80000001}}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x18, 0x3, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x3}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40010160, 0x0) socket$kcm(0xa, 0x2, 0x0) (async) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4dfc, 0x3, 'ovf\x00', 0x22, 0x80000ca, 0x8}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4dfc, 0x3, 'ovf\x00', 0x22, 0x80000ca, 0x8}, 0x2c) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000033000000000a00603000000000", @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="00000000000000007f0000001f9a85e8803fea65e2b8ddc53ef4671e00000000030000000000000000000000000000000000000000000000ffffffffffffffff0002000000000000fffffffffffffffe0300ee00000000000000000000000000000000000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks}]}, 0xff, 0x240, &(0x7f00000002c0)="$eJzs3T1oO2UcB/DvXRL/tg1SdRHEFxARLZS6CS51UShIKSKCChURF6UVaotb6+TioLNKJ5ciblZH6VJcFMGpaoe6CFocLA46RJJrpbYRX1Jz4n0+cLm75J77Pcfd97kQOBKgsaaTzCdpJZlJ0klSnN/gzmqaPl3dnthfTnq9x34oBttV65WzdlNJtpI8kGSvLPJCO9nYferop4NH7nl9vXP3u7tPToz1IE8dHx0+evLO4msfLNy/8dkX3y0WmU/3d8d19Yoh77WL5KZ/o9h/RNGuuwf8FUuvvP9lP/c3J7lrkP9OylQn74216/Y6ue/tP2r75vef3zrOvgJXr9fr9O+BWz2gccok3RTlbJJquSxnZ6vv8F+1JssXV9dennl+dX3lubpHKuCqdJPDhz+69uHUhfx/26ryD/xPVT9KHT6+tPN1f+GkVXeHgLG4rZr17/8zz2zeG/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmH5pJ/aC75h+aSf2iu8/kHAJqld63uJ5CButQ9/gAAAAAAAAAAAAAAAAAAAJdtT+wvn03jqvnJW8nxQ0naw+q3Bv9HnFw/eJ38sehv9puiajaSp+8YcQcjeq/mp69v+Kbe+p/eXm/9zZVk69Ukc+325euvOL3+/rkb/+TzzrMjFvibigvrDz4x3voX/bJTb/2Fg+Tj/vgzN2z8KXPLYD58/On2z9+I9V/6ecQdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDa/BgAA//8YZW08") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810754, &(0x7f00000012c0)={[{@jqfmt_vfsold}, {@errors_continue}, {@usrquota}, {@auto_da_alloc}, {@sb={'sb', 0x3d, 0x7fff}}, {@resuid={'resuid', 0x3d, 0xee00}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0x10001}}, {@dioread_nolock}, {@sysvgroups}], [{@flag='posixacl'}, {@subj_type={'subj_type', 0x3d, 'msdos\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}, 0xff, 0x46e, &(0x7f0000000e40)="$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") (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810754, &(0x7f00000012c0)={[{@jqfmt_vfsold}, {@errors_continue}, {@usrquota}, {@auto_da_alloc}, {@sb={'sb', 0x3d, 0x7fff}}, {@resuid={'resuid', 0x3d, 0xee00}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0x10001}}, {@dioread_nolock}, {@sysvgroups}], [{@flag='posixacl'}, {@subj_type={'subj_type', 0x3d, 'msdos\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}, 0xff, 0x46e, &(0x7f0000000e40)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 679.742758ms ago: executing program 2 (id=8471): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) name_to_handle_at(r1, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="200000000000000000007fff0000ad5c000001000100000000003771195e58a452231c3024ff5bee"], &(0x7f00000001c0), 0x200) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb4}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) sigaltstack(0x0, 0x0) connect$vsock_stream(r4, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @local}, 0x31) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x600, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @host}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x4, [@volatile={0x4, 0x0, 0x0, 0x9, 0x1}, @const={0x2}, @union={0x5, 0x2, 0x0, 0x5, 0x0, 0x7, [{0x5, 0x4, 0x8}, {0xe, 0x2, 0x2}]}]}, {0x0, [0x5f, 0x0]}}, &(0x7f0000000180)=""/31, 0x58, 0x1f, 0x0, 0x1}, 0x28) 655.036518ms ago: executing program 2 (id=8472): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x258, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x85, 0x6e}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "b9a3bccd24664fbacdd711f8"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "80bd292464c6034f2aa233a578"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "79fe9eadaa9f28a51bae5d24f525"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x40}, @NL80211_ATTR_FILS_ERP_REALM={0x73, 0xfa, "b9e3c08369ce3f195e8094ff410a43c6eb1c0d9f9c6cb4a715687b5af786ea36d8c54b859908734ac4d56d4c5dd75fd53973f488b81d94283ae33725343c7d7b5a8954a01ae2396f8958da81a7fe7beadc216911bf701e2e8be00fe65d311ead39ab8d9abf1a94eecbd20b641ded7b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "499d96"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "62cf982876f0b3c5d2c602"}, @NL80211_ATTR_FILS_ERP_REALM={0x8a, 0xfa, "5fec40b67b17d31a01cc99938743b3e92f61a503849f1078224084a18dbca077718512a43a76700f911ed7ee2316010e9632f0c60d8d79097ab402a7d77937fd8b92758e7a935b19eb2b4860ccdc72d27f973859b966a740f090a6fc524cbf577d139f1dbe29c2057054426c16856087c4643e3a2a8df1ed6ff36230c2922186e2c8a67f0cc2"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x100}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xb2, 0xfa, "792826efea83e96c5f0a601f2682248f66b58dce950dd0534f958f2a882a4056201c4908bdb30bc0893e5a59e04968abde494d1a1ee6d4f82d96a7b6d8bfd8045a9e5ce2e5798a8036b7de29778f961bc754f6bb351946ad7f4289ab03307e651e2b3ac5e3bedc1d6c0a782ad7a260d0c18efe8e2359615e2da51b651ea8a826a492f785cc708acf5d81fd8fdf63a68ed579fd5dbd72eabefe5b04d43c22ea6c93511bb46dcd19497ebd405a4199"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xb, 0xf9, "5f717cd83de6cd"}]]}, 0x258}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000500)={&(0x7f0000000340), 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd8, r1, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x657, 0x58}}}}, [@NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="1e69b5a919cb0377991ab605c7b314d3"}]}, @NL80211_ATTR_REKEY_DATA={0x98, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9f27cd29dbc60d87"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="bf9944b230af2a2283ad71a6fc3342bb"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9fc97a52ec893238"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e472b9d73fa0d339"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e848062d41dfa8eb"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6536fa0d747b3108"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f833d87cf9837214802db62327bdc1bf"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bbc70c67339fe04b"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="de839277027a734971d16e10169f7c50cd7cfb4d791158a47dd5b9a826ec3fc9"}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x8080) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xfc, r3, 0x0, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000880)={r0, 0x1f, 0x3, 0xf}) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f00000008c0)={@rand_addr, @private, 0x0}, &(0x7f0000000900)=0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xb, 0x1ff, 0x70000, 0x77d8, 0x10940, 0x1, 0x0, '\x00', r5, r4, 0x3, 0x3, 0x4, 0x0, @void, @value, @value=r4}, 0x50) openat$autofs(0xffffffffffffff9c, &(0x7f00000009c0), 0x20200, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000c40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a80)={0x170, r7, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff81}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x170}, 0x1, 0x0, 0x0, 0x40}, 0x20004080) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000cc0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x64, r8, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x6}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7ff}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@base={0xe, 0x9, 0x7, 0x1, 0x110, 0x1, 0x2, '\x00', r5, r4, 0x3, 0x3, 0x1}, 0x50) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x60, r7, 0x805, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x93de}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff7fff}]}, 0x60}, 0x1, 0x0, 0x0, 0x20020000}, 0x4000000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r10, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x28, r11, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x38, r12, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x80, 0x73}}}}, [@NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x4000040) sendmsg(r0, &(0x7f0000001480)={&(0x7f0000001280)=@xdp={0x2c, 0xc, r5, 0xf}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001300)="f74320d2f6ebb6496780a759a0d46637d37d7d4195bebd46de90940441798a9d794f4e823223759acf364fcf27beb819b8ac883a4b4ca0dabb98cf0a7b0b66a8ea846c762b88325586523d255ed2feebeb24d11cea8116161b5a90c0afd79a7c20e364b12d2f94a7e8fe483942c92eef93478db02d66fe", 0x77}, {&(0x7f0000001380)="2165cc078d4d05660d009682a7c007899b72d95b582b50607e364935476302b0ece39fda8b1461f1310f7bea39d6f1a81536937a7851b2b4050782253a72593f9d8047a03a4eb500eb", 0x49}, {&(0x7f0000001400)="03c76df1d7c203af39457a1f4c938d3fe171d57131f02f28e2", 0x19}], 0x3}, 0x20040040) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000015c0)={@map=r9, 0xf, 0x1, 0xffff0001, &(0x7f00000014c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000001500)=[0x0, 0x0], &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001600)={@map=r6, r4, 0x2c, 0x0, r4, @void, @value=r4, @void, @void, r14}, 0x20) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x20, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}]}, 0x20}}, 0x24000089) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000001740)={@dev, @multicast2}, &(0x7f0000001780)=0xc) 568.85313ms ago: executing program 2 (id=8473): syz_mount_image$iso9660(&(0x7f0000000300), &(0x7f0000000080)='./file1\x00', 0x1808004, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x7, 0x7e2, &(0x7f0000001740)="$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") r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f00000001c0)=0xc000, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180900000020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x18) r2 = io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x0, 0x1, 0x8}) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, 0x0, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x40100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5, 0x0, 0x2}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) creat(&(0x7f0000000000)='./file1\x00', 0x69) 567.92286ms ago: executing program 6 (id=8474): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000200)=0xc) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000002540)=@loop={'/dev/loop', 0x0}, r1, &(0x7f0000000200)={0x1, 0x8, 0x9, 0x20000007ec, 0xfffffffffffffff7, 0x2000000000002, 0x100000000000000, 0x4, 0x80000000}) open$dir(&(0x7f0000000000)='./file0\x00', 0x40440, 0xe3) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000080)=0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000040)={0x0, 0x0, 0xd1, 0xb1, ""/177}, &(0x7f0000000140)=0xd1, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r8, 0x0, 0x5, &(0x7f0000000240)={@remote, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) r9 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="c60a0100000000006111b400000000008510000002000000850000000700000095000e000000000095000000000000003764e7be95cd1b051a0f3cd983c673d1cc389e632d686ff6bfc1884d28861b616a4e21cc0c6b735256c1d8389642393b41331d67072eac14cc61e5392e2bfdb6c35de43684005670f403f1fc05a286a2029fb37849d0ec6f224dd3578c7a5f29bfec9c769e5eb33f3737ee2f36d9d6bd53f70c048c0985405510c8994db5"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) 510.6429ms ago: executing program 2 (id=8475): syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007"], 0x0, 0x4, 0x0, 0x0, 0xa54a9d76e5e2e84, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 510.116221ms ago: executing program 2 (id=8476): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x4, @void}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x3a, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000007000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000043302000f0000007d7702000400000085000000be0000008520000002000000181a0000", @ANYRES32=r0, @ANYBLOB="000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x9878, 0x6a, &(0x7f00000002c0)=""/106, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x6, 0x8, 0xd}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000c80)=[{0x0, 0x4, 0xb, 0x6}, {0x5, 0x2, 0x1, 0x7}, {0x4, 0x5, 0x0, 0x6}, {0x1, 0x3, 0xc, 0x7}, {0x5, 0x1, 0xe, 0x1}, {0x0, 0x1, 0x7, 0xb}], 0x10, 0x5}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x11, &(0x7f0000000dc0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0xc, 0x5, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000b40)=[r0, r0, r0], &(0x7f0000000c00)=[{0x3, 0x4, 0x7, 0x9}, {0x3, 0x4, 0x5, 0xa}, {0x4, 0x1, 0x5, 0x7}, {0x4, 0x3, 0x1, 0xc}], 0x10, 0x9}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000f40)={r1, r2, 0x0, r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000340), 0x0, 0x46c, &(0x7f00000004c0)="$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") r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 146.300097ms ago: executing program 5 (id=8477): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0xf9ff}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x9, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000, @void, @value=0xfff9}, 0x6d) 113.961708ms ago: executing program 5 (id=8478): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x142, 0x6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x8, 0x10, 0xff, 0x19}]}) syz_clone3(&(0x7f00000001c0)={0x42323080, &(0x7f00000000c0), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 66.721399ms ago: executing program 6 (id=8479): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000130000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) ioctl$KDDELIO(r0, 0x4b34, 0x3bf) ioctl$KDDISABIO(r0, 0x4b37) 31.69484ms ago: executing program 8 (id=8480): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kyber_adjust\x00', r4, 0x0, 0x7}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) 0s ago: executing program 6 (id=8481): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001900)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r4, @ANYBLOB="0500000000000000000001000000060006004e240000901008809005008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691cb40409807c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030000000000f4000080060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000a00000014000200fc0200000000000000000000000000010500030000000000060001000200000008000200e00000020500030003000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030002000000060001000a00000014000200fc0200000000000000000000000000000500030003000000340000800600010002000000080002000a0101010500030004000000060001000200000008000200ac1414aa050003000300000064000080060001000a00000014000200200100000000000000000000000000000500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff010000000000000000000000000001050003000200000094000080060001000200000008000200ac1e00010500030002000000060001000200000008000200e00000010500030002000000060001000a00000014000200fc0000000000000000000000000000000500030002000000060001000200000008000200000000000500030003000000060001000a00000014000200fe80000000000000000000000000000e050003000000000040000080060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000200000008000200ac1414aa050003000000000064000080060001000a00000014000200200100000000000000000000000000020500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002000a010100050003000200000070000080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000a0000001400020000000000000000000000000000000001050003000000000000010080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000200000008000200000000000500030003000000060001000200000008000200640101000500030002000000060001000200000008000200640101010500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8000000000000000000000000000bb05000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000200000008000200640101010500030001000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e1803008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39220600050005000000e802098058000080060001000200000008000200ac1e00010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300010000007c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb0500030002000000060001000a000000140002000000000000000000000000000000000105000300020000000600010002000000080002000a0101010500030003000000f4000080060001000a0000001400020000000000000000000000ffffac1414aa0500030003000000060001000200000008000200ac1414aa05000300000000000600010002000000080002000a01010205000300020000000600010002000000080002007f00000105000300000000000600010002000000080002000a0101010500030003000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc01000000000000000000000000000005000300010000000600010002000000080002000a0101000500030000000000060001000200000008000200ac1e0101050003000200000094000080060001000a00000014000200fc0200000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030002000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ffffffff050003000200000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200ff02000000000000000000000000000105000300020000007c000080200004000a004e2100000006fc0100000000000000000000000000010400000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000300000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549780000800800030001000000080003000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000e4060080dc020980f4000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000200000008000200ffffffff050003000100000006d4e23d7500000008000200ac1e00010500030001000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000a00000014000200fc010000000000000000000000000001050003000300000034000080060001000200000008000200640101000500030001000000060001000200000008000200ac1414bb050003000200000000010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc0100000000000000000000000000010500030000000000940000800600010002000000080002006401010005000300010000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000200000008000200e00000020500030003000000060001000200000008000200ac1414120500030002000000060001000200000008000200ac14142d05000300020000001c000080060001000200000008000200ffffffff05000300030000000800030002000000200004000a004e2000000005fc010000000000000000000000000001000000009403098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030003000000060001000a00000014000200fe8800000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200fe880000000000000000000000000101050003000100000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030001000000060001000a0000001400020000000000000000000000ffffe00000020500030003000000f4000080060001000200000008000200000000000500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe80000000000000000000000000003e05000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e0000001050003000000000058000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414410500030010000000060001000200000008000200ac1e00010500030001000000f4000080060001000200000008000200640101000500030002000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414270500030000000000060001000a0000001400020020010000000000000000000000000002050003000100000058000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe8000000000000000000000000000140500030000000000060001000200000008000200e0000001050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030006000000060006004e24000008000100", @ANYRES32=r5, @ANYBLOB="240003"], 0x10e0}}, 0x0) kernel console output (not intermixed with test programs): 7801) did not claim interface 0 before use [ 544.298758][T10762] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 544.373299][T10762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.378130][T10762] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.406357][ T7444] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.406401][ T7444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.407560][ T7444] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.407582][ T7444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.474311][T10762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.665523][T10762] veth0_vlan: entered promiscuous mode [ 544.680036][T10762] veth1_vlan: entered promiscuous mode [ 544.706570][T10762] veth0_macvtap: entered promiscuous mode [ 544.707581][T11393] lo speed is unknown, defaulting to 1000 [ 544.714225][T10762] veth1_macvtap: entered promiscuous mode [ 544.762560][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 544.762578][ T29] audit: type=1326 audit(1758049752.308:37713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11377 comm="syz.2.7805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 544.762628][ T29] audit: type=1326 audit(1758049752.308:37714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11377 comm="syz.2.7805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 544.762925][ T29] audit: type=1326 audit(1758049752.308:37715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11377 comm="syz.2.7805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 544.763029][ T29] audit: type=1326 audit(1758049752.308:37716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11377 comm="syz.2.7805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 544.763351][ T29] audit: type=1326 audit(1758049752.308:37717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11377 comm="syz.2.7805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 544.763377][ T29] audit: type=1326 audit(1758049752.308:37718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11377 comm="syz.2.7805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 544.763432][ T29] audit: type=1326 audit(1758049752.308:37719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11377 comm="syz.2.7805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 544.764324][ T29] audit: type=1326 audit(1758049752.308:37720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11377 comm="syz.2.7805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 544.764438][ T29] audit: type=1326 audit(1758049752.308:37721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11377 comm="syz.2.7805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 544.764468][ T29] audit: type=1326 audit(1758049752.308:37722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11377 comm="syz.2.7805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 544.766521][T10762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.826317][ T5236] hid_parser_main: 18 callbacks suppressed [ 544.826336][ T5236] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 544.846322][T11393] lo speed is unknown, defaulting to 1000 [ 544.918401][T10762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.042058][ T5236] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 545.045455][T11393] lo speed is unknown, defaulting to 1000 [ 545.074763][T18242] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.074838][T18242] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.074923][T18242] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.075007][T18242] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.647327][T11477] loop5: detected capacity change from 0 to 512 [ 545.660102][T11477] EXT4-fs: Ignoring removed nomblk_io_submit option [ 545.666755][T11477] ext4: Unknown parameter 'nombcache..' [ 545.761440][T11487] tipc: New replicast peer: 255.255.255.255 [ 545.767550][T11487] tipc: Enabled bearer , priority 10 [ 545.878256][ T5236] net_ratelimit: 9 callbacks suppressed [ 545.878274][ T5236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.894485][T11498] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7831'. [ 545.947697][ T5236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.632803][T11553] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7848'. [ 546.914323][ T7442] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.985052][T11512] lo speed is unknown, defaulting to 1000 [ 547.034152][ T7442] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.054121][T11570] tipc: Started in network mode [ 547.054150][T11570] tipc: Node identity 00000000220000000000000000000001, cluster identity 4711 [ 547.054170][T11570] tipc: Enabling of bearer rejected, failed to enable media [ 547.055065][T11512] lo speed is unknown, defaulting to 1000 [ 547.101973][T11512] lo speed is unknown, defaulting to 1000 [ 547.109944][T11572] netlink: 'syz.6.7853': attribute type 4 has an invalid length. [ 547.125709][T11572] netlink: 17 bytes leftover after parsing attributes in process `syz.6.7853'. [ 547.149842][ T7442] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.253853][ T7442] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.365680][T11512] chnl_net:caif_netlink_parms(): no params data found [ 547.663711][T11512] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.663745][T11512] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.663967][T11512] bridge_slave_0: entered allmulticast mode [ 547.664417][T11512] bridge_slave_0: entered promiscuous mode [ 547.693541][T11512] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.693577][T11512] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.693776][T11512] bridge_slave_1: entered allmulticast mode [ 547.694385][T11512] bridge_slave_1: entered promiscuous mode [ 547.768587][T11749] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 547.890733][T11512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.892411][T11512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.066196][T11813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7864'. [ 548.388907][ T7442] bond0 (unregistering): Released all slaves [ 548.397142][ T7442] bond1 (unregistering): Released all slaves [ 548.405734][ T7442] bond2 (unregistering): Released all slaves [ 548.518535][T11512] team0: Port device team_slave_0 added [ 548.525701][T11512] team0: Port device team_slave_1 added [ 548.664553][T11880] netlink: 'syz.2.7868': attribute type 4 has an invalid length. [ 548.672469][T11880] netlink: 17 bytes leftover after parsing attributes in process `syz.2.7868'. [ 548.757301][ T7442] tipc: Disabling bearer [ 548.762310][ T7442] tipc: Disabling bearer [ 548.767316][ T7442] tipc: Disabling bearer [ 548.772648][ T7442] tipc: Left network mode [ 548.905554][T11512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.912723][T11512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.938793][T11512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.998161][T11512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.005294][T11512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.031271][T11512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.137486][T11907] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 549.409556][ T7442] veth1_macvtap: left promiscuous mode [ 549.415141][ T7442] veth0_macvtap: left promiscuous mode [ 549.730174][T11512] hsr_slave_0: entered promiscuous mode [ 549.736426][T11512] hsr_slave_1: entered promiscuous mode [ 549.744426][T11512] debugfs: 'hsr0' already exists in 'hsr' [ 549.750205][T11512] Cannot create hsr debugfs directory [ 549.757986][ T7443] smc: removing ib device syz! [ 549.770162][ T7444] smc: removing ib device sz1 [ 549.827865][T16768] lo speed is unknown, defaulting to 1000 [ 549.833655][T16768] sz1: Port: 1 Link DOWN [ 550.039345][T16768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.058294][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 550.058311][ T29] audit: type=1400 audit(1758049757.608:37800): avc: denied { write } for pid=12001 comm="syz.6.7880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 550.121121][T11910] lo speed is unknown, defaulting to 1000 [ 550.216249][T12046] loop6: detected capacity change from 0 to 512 [ 550.239475][T12046] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 550.252688][T12046] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 550.254456][ T29] audit: type=1400 audit(1758049757.798:37801): avc: denied { create } for pid=12064 comm="syz.2.7884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 550.310301][ T29] audit: type=1326 audit(1758049757.858:37802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12064 comm="syz.2.7884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 550.334512][ T29] audit: type=1326 audit(1758049757.858:37803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12064 comm="syz.2.7884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 550.358240][ T29] audit: type=1326 audit(1758049757.858:37804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12064 comm="syz.2.7884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 550.382327][ T29] audit: type=1326 audit(1758049757.858:37805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12064 comm="syz.2.7884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 550.406016][ T29] audit: type=1326 audit(1758049757.858:37806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12064 comm="syz.2.7884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 550.429714][ T29] audit: type=1326 audit(1758049757.858:37807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12064 comm="syz.2.7884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 550.453386][ T29] audit: type=1326 audit(1758049757.858:37808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12064 comm="syz.2.7884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 550.477156][ T29] audit: type=1326 audit(1758049757.858:37809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12064 comm="syz.2.7884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 550.559177][T16768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.577740][T12046] C: renamed from team_slave_0 (while UP) [ 550.609116][T12046] netlink: 'syz.6.7883': attribute type 3 has an invalid length. [ 550.616897][T12046] netlink: 152 bytes leftover after parsing attributes in process `syz.6.7883'. [ 550.626140][T12067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7884'. [ 550.635218][T12067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7884'. [ 550.899312][T12116] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7890'. [ 550.908305][T12116] netlink: 348 bytes leftover after parsing attributes in process `syz.6.7890'. [ 550.917374][T12113] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 550.917399][T12116] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7890'. [ 550.933455][T12116] netlink: 348 bytes leftover after parsing attributes in process `syz.6.7890'. [ 550.942846][ T1049] IPVS: starting estimator thread 0... [ 550.942865][T12116] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7890'. [ 550.966912][T12116] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7890'. [ 550.975944][T12116] netlink: 348 bytes leftover after parsing attributes in process `syz.6.7890'. [ 551.031826][T12113] lo speed is unknown, defaulting to 1000 [ 551.047699][T12119] IPVS: using max 2928 ests per chain, 146400 per kthread [ 551.121444][T11512] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 551.152416][T11512] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 551.189670][T12153] lo speed is unknown, defaulting to 1000 [ 551.190200][T11512] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 551.236796][T11512] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 551.243770][T12176] netlink: 'syz.2.7894': attribute type 10 has an invalid length. [ 551.417222][T12188] loop5: detected capacity change from 0 to 128 [ 551.592980][T11512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.628606][T11512] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.657546][T18242] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.664705][T18242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.727388][T12237] bridge0: port 1(ip6gretap0) entered blocking state [ 551.734151][T12237] bridge0: port 1(ip6gretap0) entered disabled state [ 551.742432][T12237] ip6gretap0: entered allmulticast mode [ 551.749337][T12237] ip6gretap0: entered promiscuous mode [ 551.755356][T12237] bridge0: port 1(ip6gretap0) entered blocking state [ 551.762169][T12237] bridge0: port 1(ip6gretap0) entered forwarding state [ 551.804021][T18242] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.811210][T18242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.859692][T11512] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 551.870281][T11512] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 552.054703][T12258] lo speed is unknown, defaulting to 1000 [ 552.150021][T12255] hub 9-0:1.0: USB hub found [ 552.176206][T12255] hub 9-0:1.0: 8 ports detected [ 552.451212][T11512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.498507][T12299] netlink: 'syz.5.7917': attribute type 13 has an invalid length. [ 552.537786][T12303] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.657939][T12303] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.696064][T12326] netlink: 'syz.6.7920': attribute type 10 has an invalid length. [ 552.706251][T12326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.714858][T12326] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 552.768407][T12303] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.867430][T12303] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.926194][T11512] veth0_vlan: entered promiscuous mode [ 552.934972][T11512] veth1_vlan: entered promiscuous mode [ 553.055461][T12360] loop5: detected capacity change from 0 to 512 [ 553.068163][T12360] EXT4-fs (loop5): too many log groups per flexible block group [ 553.076023][T12360] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 553.086620][T11512] veth0_macvtap: entered promiscuous mode [ 553.092684][T12360] EXT4-fs (loop5): mount failed [ 553.103420][T11512] veth1_macvtap: entered promiscuous mode [ 553.114720][T11512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.125251][T11512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.138875][ T7446] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.179819][ T7446] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.279925][ T7446] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.296320][ T7446] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.305737][ T7443] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.357194][ T7443] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.365506][ T7443] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.394863][ T7443] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.399004][T12387] loop0: detected capacity change from 0 to 512 [ 553.412031][T12387] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 553.426751][T12387] EXT4-fs (loop0): 1 truncate cleaned up [ 553.432895][T12387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.482600][T12395] lo speed is unknown, defaulting to 1000 [ 553.628817][ T2191] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.781855][T12441] loop0: detected capacity change from 0 to 512 [ 553.798214][T12441] EXT4-fs: Ignoring removed orlov option [ 553.798843][T12441] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 553.805194][T12441] EXT4-fs (loop0): orphan cleanup on readonly fs [ 553.805672][T12441] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7938: bg 0: block 248: padding at end of block bitmap is not set [ 553.805907][T12441] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.7938: Failed to acquire dquot type 1 [ 553.806356][T12441] EXT4-fs (loop0): 1 truncate cleaned up [ 553.847811][T12441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 553.897165][ T2191] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.922842][T12453] loop0: detected capacity change from 0 to 1024 [ 553.923145][T12453] EXT4-fs: Ignoring removed oldalloc option [ 553.923227][T12453] EXT4-fs: Ignoring removed bh option [ 553.943564][T12453] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.020042][T12453] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.7941: Allocating blocks 497-513 which overlap fs metadata [ 554.108901][T12453] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 257:freeing already freed block (bit 16); block bitmap corrupt. [ 554.362447][T12472] 0ªX¹¦D: renamed from 30ªî{X¹¦ [ 554.364100][T12476] netlink: 'syz.4.7947': attribute type 10 has an invalid length. [ 554.388672][T12472] 0ªX¹¦D: entered allmulticast mode [ 554.389431][T12472] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 554.424726][T12476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.436778][T12476] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 554.478105][ T2191] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.660339][T12494] can0: slcan on ptm0. [ 555.143193][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 555.143209][ T29] audit: type=1326 audit(1758049762.689:38153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12492 comm="syz.5.7952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb4e075d65f code=0x7ffc0000 [ 555.143326][ T29] audit: type=1326 audit(1758049762.689:38154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.0.7954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8044c2eba9 code=0x7ffc0000 [ 555.143358][ T29] audit: type=1326 audit(1758049762.689:38155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.0.7954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8044c2eba9 code=0x7ffc0000 [ 555.143853][ T29] audit: type=1326 audit(1758049762.689:38156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.0.7954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8044c2eba9 code=0x7ffc0000 [ 555.144401][ T29] audit: type=1326 audit(1758049762.689:38157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.0.7954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8044c2eba9 code=0x7ffc0000 [ 555.144529][ T29] audit: type=1326 audit(1758049762.689:38158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.0.7954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8044c2eba9 code=0x7ffc0000 [ 555.144882][ T29] audit: type=1326 audit(1758049762.689:38159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.0.7954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8044c2eba9 code=0x7ffc0000 [ 555.145068][ T29] audit: type=1326 audit(1758049762.689:38160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.0.7954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8044c2eba9 code=0x7ffc0000 [ 555.145340][ T29] audit: type=1326 audit(1758049762.689:38161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.0.7954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8044c2eba9 code=0x7ffc0000 [ 555.145497][ T29] audit: type=1326 audit(1758049762.689:38162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.0.7954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8044c30ac7 code=0x7ffc0000 [ 555.152841][T12494] loop5: detected capacity change from 0 to 2048 [ 555.286592][T12494] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.701420][T12492] can0 (unregistered): slcan off ptm0. [ 555.737160][T12478] Set syz1 is full, maxelem 65536 reached [ 555.787439][T28721] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.553064][T12561] __nla_validate_parse: 16 callbacks suppressed [ 556.553084][T12561] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7968'. [ 556.553294][T12560] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7968'. [ 556.553861][T12561] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7968'. [ 556.554313][T12560] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7968'. [ 556.748165][T12554] lo speed is unknown, defaulting to 1000 [ 556.838960][T12590] loop6: detected capacity change from 0 to 512 [ 556.850967][T12590] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.888551][T12596] 9pnet_fd: Insufficient options for proto=fd [ 556.950927][T12590] netlink: 'syz.6.7971': attribute type 21 has an invalid length. [ 556.950986][T12590] netlink: 156 bytes leftover after parsing attributes in process `syz.6.7971'. [ 557.038402][T12602] netlink: 'syz.5.7974': attribute type 10 has an invalid length. [ 557.038422][T12602] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7974'. [ 557.078687][T12590] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 557.127061][T12602] veth1_vlan: left promiscuous mode [ 557.129584][T12602] batman_adv: batadv0: Adding interface: veth1_vlan [ 557.140240][T12602] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.169385][T12602] batman_adv: batadv0: Interface activated: veth1_vlan [ 557.264492][T12609] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 557.271636][T12609] batman_adv: batadv0: Removing interface: veth1_vlan [ 557.282622][T10762] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.355343][T12614] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7978'. [ 557.737124][T12625] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.929107][T12625] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.149164][T12625] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.186512][T12656] netlink: 'syz.6.7990': attribute type 10 has an invalid length. [ 558.225678][T12658] netlink: 'syz.2.7991': attribute type 10 has an invalid length. [ 558.225697][T12658] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7991'. [ 558.343415][T12658] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 558.467297][T12625] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.528365][T12673] netlink: 'syz.5.7995': attribute type 10 has an invalid length. [ 558.574482][T12674] netlink: 'syz.5.7995': attribute type 10 has an invalid length. [ 558.587898][T12665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 558.591373][T12674] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 558.647691][T12676] 9pnet_fd: Insufficient options for proto=fd [ 558.663989][T12678] loop5: detected capacity change from 0 to 256 [ 558.681674][ T7457] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.703386][ T7457] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.716332][T12687] loop0: detected capacity change from 0 to 256 [ 558.719589][T12678] FAT-fs (loop5): Directory bread(block 64) failed [ 558.736246][T12678] FAT-fs (loop5): Directory bread(block 65) failed [ 558.736298][ T7457] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.752652][T12678] FAT-fs (loop5): Directory bread(block 66) failed [ 558.761696][T12687] FAT-fs (loop0): Directory bread(block 64) failed [ 558.769479][T12687] FAT-fs (loop0): Directory bread(block 65) failed [ 558.770672][T12678] FAT-fs (loop5): Directory bread(block 67) failed [ 558.779516][ T7457] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.786078][T12678] FAT-fs (loop5): Directory bread(block 68) failed [ 558.797832][T12687] FAT-fs (loop0): Directory bread(block 66) failed [ 558.797862][T12687] FAT-fs (loop0): Directory bread(block 67) failed [ 558.814188][T12678] FAT-fs (loop5): Directory bread(block 69) failed [ 558.821553][T12678] FAT-fs (loop5): Directory bread(block 70) failed [ 558.826195][T12687] FAT-fs (loop0): Directory bread(block 68) failed [ 558.828811][T12678] FAT-fs (loop5): Directory bread(block 71) failed [ 558.838710][T12687] FAT-fs (loop0): Directory bread(block 69) failed [ 558.847377][T12694] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7999'. [ 558.851224][T12687] FAT-fs (loop0): Directory bread(block 70) failed [ 558.857886][T12692] bond0: (slave batadv0): Releasing backup interface [ 558.864432][T12687] FAT-fs (loop0): Directory bread(block 71) failed [ 558.871167][T12678] FAT-fs (loop5): Directory bread(block 72) failed [ 558.878354][T12687] FAT-fs (loop0): Directory bread(block 72) failed [ 558.884232][T12678] FAT-fs (loop5): Directory bread(block 73) failed [ 558.890730][T12687] FAT-fs (loop0): Directory bread(block 73) failed [ 558.933152][T12692] bridge_slave_0: left allmulticast mode [ 558.938919][T12692] bridge_slave_0: left promiscuous mode [ 558.944614][T12692] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.047045][T12692] bridge_slave_1: left allmulticast mode [ 559.052939][T12692] bridge_slave_1: left promiscuous mode [ 559.058789][T12692] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.139357][T12712] netlink: 'syz.2.8002': attribute type 10 has an invalid length. [ 559.156505][T12692] bond0: (slave bond_slave_0): Releasing backup interface [ 559.226441][T12692] bond0: (slave bond_slave_1): Releasing backup interface [ 559.307830][T12692] team0: Failed to send options change via netlink (err -105) [ 559.315947][T12692] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 559.320392][T12718] loop0: detected capacity change from 0 to 256 [ 559.325859][T12692] team0: Port device team_slave_0 removed [ 559.344513][T12718] FAT-fs (loop0): Directory bread(block 64) failed [ 559.351566][T12718] FAT-fs (loop0): Directory bread(block 65) failed [ 559.357817][T12692] team0: Failed to send options change via netlink (err -105) [ 559.358787][T12718] FAT-fs (loop0): Directory bread(block 66) failed [ 559.367231][T12692] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 559.372470][T12718] FAT-fs (loop0): Directory bread(block 67) failed [ 559.382069][T12692] team0: Port device team_slave_1 removed [ 559.389310][T12718] FAT-fs (loop0): Directory bread(block 68) failed [ 559.395358][T12692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.400896][T12718] FAT-fs (loop0): Directory bread(block 69) failed [ 559.407864][T12692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.414560][T12718] FAT-fs (loop0): Directory bread(block 70) failed [ 559.428471][T12718] FAT-fs (loop0): Directory bread(block 71) failed [ 559.435084][T12718] FAT-fs (loop0): Directory bread(block 72) failed [ 559.441691][T12718] FAT-fs (loop0): Directory bread(block 73) failed [ 559.443103][T12692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.455725][T12692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.513393][T12694] team0: Failed to send options change via netlink (err -105) [ 559.520920][T12694] team0: Mode changed to "loadbalance" [ 559.567960][T12723] loop4: detected capacity change from 0 to 128 [ 559.574760][T12723] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 559.587627][T12723] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 559.602570][T12726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8007'. [ 559.656311][ T7443] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 559.677061][T12731] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0 [ 559.677156][T12730] IPVS: stopping master sync thread 12731 ... [ 560.116731][T12762] lo speed is unknown, defaulting to 1000 [ 560.220056][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 560.220085][ T29] audit: type=1400 audit(1758049767.769:38369): avc: denied { unmount } for pid=28721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 560.300673][T12791] lo speed is unknown, defaulting to 1000 [ 560.505046][ T29] audit: type=1400 audit(1758049768.049:38370): avc: denied { mounton } for pid=12820 comm="syz.2.8024" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 560.505053][T12822] tmpfs: Bad value for 'mpol' [ 560.550632][ T29] audit: type=1400 audit(1758049768.099:38371): avc: denied { create } for pid=12823 comm="syz.2.8025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 560.626471][ T29] audit: type=1400 audit(1758049768.179:38372): avc: denied { bind } for pid=12818 comm="syz.5.8023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 561.059656][T12829] lo speed is unknown, defaulting to 1000 [ 561.154103][T12869] loop4: detected capacity change from 0 to 256 [ 561.169393][T12869] FAT-fs (loop4): Directory bread(block 64) failed [ 561.176319][T12869] FAT-fs (loop4): Directory bread(block 65) failed [ 561.182948][T12869] FAT-fs (loop4): Directory bread(block 66) failed [ 561.189614][T12869] FAT-fs (loop4): Directory bread(block 67) failed [ 561.196274][T12869] FAT-fs (loop4): Directory bread(block 68) failed [ 561.202959][T12869] FAT-fs (loop4): Directory bread(block 69) failed [ 561.210014][T12869] FAT-fs (loop4): Directory bread(block 70) failed [ 561.216670][T12869] FAT-fs (loop4): Directory bread(block 71) failed [ 561.223223][T12869] FAT-fs (loop4): Directory bread(block 72) failed [ 561.229845][T12869] FAT-fs (loop4): Directory bread(block 73) failed [ 561.350383][ T29] audit: type=1326 audit(1758049768.890:38373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12868 comm="syz.4.8030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb309faeba9 code=0x7ffc0000 [ 561.374048][ T29] audit: type=1326 audit(1758049768.890:38374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12868 comm="syz.4.8030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb309faeba9 code=0x7ffc0000 [ 561.406283][ T29] audit: type=1326 audit(1758049768.890:38375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12868 comm="syz.4.8030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fb309faeba9 code=0x7ffc0000 [ 561.429947][ T29] audit: type=1326 audit(1758049768.890:38376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12868 comm="syz.4.8030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb309faeba9 code=0x7ffc0000 [ 561.453623][ T29] audit: type=1326 audit(1758049768.890:38377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12868 comm="syz.4.8030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb309faeba9 code=0x7ffc0000 [ 561.596902][ T29] audit: type=1400 audit(1758049769.140:38378): avc: denied { create } for pid=12878 comm="syz.5.8033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 561.621060][T12879] netlink: 'syz.5.8033': attribute type 4 has an invalid length. [ 561.642436][T12881] __nla_validate_parse: 5 callbacks suppressed [ 561.642453][T12881] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8034'. [ 561.657723][T12881] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8034'. [ 561.750446][T12883] ip6gretap0: left allmulticast mode [ 561.756073][T12883] ip6gretap0: left promiscuous mode [ 561.761439][T12883] bridge0: port 1(ip6gretap0) entered disabled state [ 561.794686][T12889] loop5: detected capacity change from 0 to 2048 [ 561.826172][T12893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.835110][T12893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.854792][T12905] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8035'. [ 561.865969][T12889] loop5: p1 < > p4 [ 561.874094][T12889] loop5: p4 size 8388608 extends beyond EOD, truncated [ 561.883683][T12902] loop0: detected capacity change from 0 to 1024 [ 561.895974][T12902] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 561.915737][T12902] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 561.924523][T12902] EXT4-fs (loop0): failed to initialize system zone (-117) [ 561.945562][T12902] EXT4-fs (loop0): mount failed [ 561.962773][T12921] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8042'. [ 561.979891][T12902] loop0: detected capacity change from 0 to 512 [ 562.004692][T12902] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 562.033857][T12921] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8042'. [ 562.053804][T12902] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.8041: Failed to acquire dquot type 1 [ 562.067755][T12902] EXT4-fs (loop0): 1 truncate cleaned up [ 562.068311][T12902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.123789][T12921] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8042'. [ 562.136770][ T2191] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.173757][T12939] netlink: 'syz.0.8044': attribute type 10 has an invalid length. [ 562.174946][T12939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.191568][T12939] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 562.266628][T12947] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8048'. [ 562.557573][T12967] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12967 comm=syz.4.8053 [ 562.689655][T12959] lo speed is unknown, defaulting to 1000 [ 563.373538][T13007] loop0: detected capacity change from 0 to 512 [ 563.402436][T13007] EXT4-fs: Ignoring removed oldalloc option [ 563.426663][T13007] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 563.450726][T13007] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.8061: bad orphan inode 15 [ 563.459088][T13015] loop4: detected capacity change from 0 to 512 [ 563.486308][T13015] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 563.508982][T13007] ext4_test_bit(bit=14, block=4) = 1 [ 563.514326][T13007] is_bad_inode(inode)=0 [ 563.518570][T13007] NEXT_ORPHAN(inode)=4294967295 [ 563.523440][T13007] max_ino=32 [ 563.526671][T13007] i_nlink=1 [ 563.536336][T13015] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 563.583059][T13007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.764342][T13032] loop4: detected capacity change from 0 to 512 [ 563.787056][T13032] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 563.802216][T13032] EXT4-fs (loop4): mount failed [ 563.822800][T13040] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8070'. [ 564.069622][T13017] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.091718][ T2191] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.133840][T13057] netlink: 'syz.0.8073': attribute type 4 has an invalid length. [ 564.185486][T13066] netlink: 'syz.0.8073': attribute type 4 has an invalid length. [ 564.256404][T13017] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.344976][T13076] loop0: detected capacity change from 0 to 512 [ 564.358438][T13076] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 564.366842][T13076] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 564.467072][T13081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8078'. [ 564.586120][T13017] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.624277][T13093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8079'. [ 564.683477][T13094] loop0: detected capacity change from 0 to 2048 [ 564.692448][T13027] lo speed is unknown, defaulting to 1000 [ 564.698911][T13093] team0 (uninitialized): Failed to send options change via netlink (err -105) [ 564.717919][T13094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.732197][T13093] team0: entered promiscuous mode [ 564.734223][T13094] ext4 filesystem being mounted at /438/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 564.737399][T13093] team0: entered allmulticast mode [ 564.754181][T13017] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.806017][ T2191] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.821981][T13065] lo speed is unknown, defaulting to 1000 [ 564.836904][T13152] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 564.944477][T18242] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.006539][T18242] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.021040][T18242] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.029369][T18242] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.285883][ T7446] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 565.326706][ T7446] bond0 (unregistering): Released all slaves [ 565.339247][ T7446] bond1 (unregistering): Released all slaves [ 565.353335][ T7446] bond2 (unregistering): Released all slaves [ 565.364657][ T7446] bond3 (unregistering): Released all slaves [ 565.398837][T13283] loop6: detected capacity change from 0 to 1024 [ 565.448969][T13283] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.467681][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 565.467696][ T29] audit: type=1400 audit(1758049773.010:38466): avc: denied { read write } for pid=13282 comm="syz.6.8084" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 565.496750][ T29] audit: type=1400 audit(1758049773.010:38467): avc: denied { open } for pid=13282 comm="syz.6.8084" path="/61/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 565.541231][T13027] chnl_net:caif_netlink_parms(): no params data found [ 565.551645][ T7446] tipc: Left network mode [ 565.666075][ T7446] IPVS: stopping backup sync thread 7810 ... [ 565.709331][T13350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13350 comm=syz.2.8088 [ 565.745924][T13027] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.753032][T13027] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.760374][T13027] bridge_slave_0: entered allmulticast mode [ 565.768860][T13027] bridge_slave_0: entered promiscuous mode [ 566.035647][ T7446] lo (unregistering): left allmulticast mode [ 566.058196][T13027] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.065386][T13027] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.066707][T10762] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.073011][T13027] bridge_slave_1: entered allmulticast mode [ 566.088911][T13027] bridge_slave_1: entered promiscuous mode [ 566.297622][T13397] netlink: 'syz.6.8094': attribute type 21 has an invalid length. [ 566.348860][T13027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.350257][T13027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.351188][ T29] audit: type=1326 audit(1758049773.890:38468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13382 comm="syz.6.8094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8247a8eba9 code=0x7ffc0000 [ 566.392487][ T29] audit: type=1326 audit(1758049773.890:38469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13382 comm="syz.6.8094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8247a8eba9 code=0x7ffc0000 [ 566.392684][ T29] audit: type=1326 audit(1758049773.910:38470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13382 comm="syz.6.8094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f8247a8eba9 code=0x7ffc0000 [ 566.392713][ T29] audit: type=1326 audit(1758049773.910:38471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13382 comm="syz.6.8094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8247a8eba9 code=0x7ffc0000 [ 566.392791][ T29] audit: type=1326 audit(1758049773.910:38472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13382 comm="syz.6.8094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8247a8eba9 code=0x7ffc0000 [ 566.487844][ T29] audit: type=1326 audit(1758049773.910:38473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13382 comm="syz.6.8094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8247a8eba9 code=0x7ffc0000 [ 566.511633][ T29] audit: type=1326 audit(1758049773.910:38474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13382 comm="syz.6.8094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8247a8eba9 code=0x7ffc0000 [ 566.546175][T13397] netlink: 'syz.6.8094': attribute type 1 has an invalid length. [ 566.627977][T13027] team0: Port device team_slave_0 added [ 566.728634][T13027] team0: Port device team_slave_1 added [ 566.886791][T13027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.886855][T13027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.886880][T13027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.889455][T13027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.938565][T13027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.964547][T13027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.096168][ T29] audit: type=1326 audit(1758049774.640:38475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13479 comm="syz.2.8099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 567.098656][T13027] hsr_slave_0: entered promiscuous mode [ 567.126360][T13027] hsr_slave_1: entered promiscuous mode [ 567.133003][T13027] debugfs: 'hsr0' already exists in 'hsr' [ 567.138802][T13027] Cannot create hsr debugfs directory [ 567.481065][T13526] loop0: detected capacity change from 0 to 128 [ 567.564615][T13542] __nla_validate_parse: 4 callbacks suppressed [ 567.564628][T13542] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 567.579516][T13542] netlink: 312 bytes leftover after parsing attributes in process `+}[@'. [ 567.588177][T13542] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 567.617364][T13557] loop6: detected capacity change from 0 to 164 [ 568.050762][T13613] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8109'. [ 568.060139][T13613] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13613 comm=syz.4.8109 [ 568.073760][T13613] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13613 comm=syz.4.8109 [ 568.104368][T13620] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8111'. [ 568.496544][T13612] Set syz1 is full, maxelem 65536 reached [ 568.513975][T13027] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 568.546906][T13027] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 568.586858][T13027] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 568.617268][T13027] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 568.693578][T13027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.714800][T13027] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.726191][ T7439] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.733362][ T7439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.746664][ T7439] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.753835][ T7439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.846742][T13027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.030765][T13027] veth0_vlan: entered promiscuous mode [ 569.051945][T13027] veth1_vlan: entered promiscuous mode [ 569.070414][T13027] veth0_macvtap: entered promiscuous mode [ 569.080186][T13027] veth1_macvtap: entered promiscuous mode [ 569.135189][ T2191] syz_tun (unregistering): left allmulticast mode [ 569.179731][T13027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.192507][T13027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.205065][ T7443] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.276317][ T7443] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.329378][ T7443] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.343880][ T7443] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.534852][T13699] chnl_net:caif_netlink_parms(): no params data found [ 569.631483][T13840] netlink: 'syz.5.8119': attribute type 1 has an invalid length. [ 569.795528][T13699] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.802862][T13699] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.811333][T13699] bridge_slave_0: entered allmulticast mode [ 569.818119][T13699] bridge_slave_0: entered promiscuous mode [ 569.834608][T13699] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.841833][T13699] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.874948][T13699] bridge_slave_1: entered allmulticast mode [ 569.892350][T13699] bridge_slave_1: entered promiscuous mode [ 569.961304][T13898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8124'. [ 570.046966][T13699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.078101][T13699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.147462][T13920] macvlan1: entered promiscuous mode [ 570.154208][T13920] ipvlan0: entered promiscuous mode [ 570.161882][T13920] ipvlan0: left promiscuous mode [ 570.195725][T13920] macvlan1: left promiscuous mode [ 570.301545][T13951] 9pnet_fd: Insufficient options for proto=fd [ 570.326216][T13699] team0: Port device team_slave_0 added [ 570.333350][T13699] team0: Port device team_slave_1 added [ 570.510113][T13699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.517174][T13699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.543521][T13699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.568212][T13699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.575505][T13699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.601460][T13699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.838283][T13699] hsr_slave_0: entered promiscuous mode [ 570.845956][T13699] hsr_slave_1: entered promiscuous mode [ 570.852049][T13699] debugfs: 'hsr0' already exists in 'hsr' [ 570.857849][T13699] Cannot create hsr debugfs directory [ 571.154614][T14038] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8127'. [ 571.163607][T14038] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8127'. [ 571.195589][T14045] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8128'. [ 571.395060][T13699] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.545101][T13699] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.705131][T13699] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.835107][T13699] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.868541][T14129] IPv6: NLM_F_CREATE should be specified when creating new route [ 572.021065][T13699] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 572.066531][T13699] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 572.106783][T13699] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 572.154982][T13699] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 572.266040][T13699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.292956][T13699] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.314943][ T7395] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.322145][ T7395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.345279][T14169] loop5: detected capacity change from 0 to 164 [ 572.356206][ T7395] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.363366][ T7395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.372833][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 572.372850][ T29] audit: type=1400 audit(1758049779.911:38532): avc: denied { mounton } for pid=14168 comm="syz.5.8137" path="/15/file0" dev="tmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 572.461133][T13699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.469189][T14177] netlink: 'syz.5.8137': attribute type 2 has an invalid length. [ 572.477054][T14177] netlink: 15 bytes leftover after parsing attributes in process `syz.5.8137'. [ 572.600680][T13699] veth0_vlan: entered promiscuous mode [ 572.611504][T13699] veth1_vlan: entered promiscuous mode [ 572.631230][T13699] veth0_macvtap: entered promiscuous mode [ 572.639503][T13699] veth1_macvtap: entered promiscuous mode [ 572.652797][T13699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.667659][T13699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.679357][ T7443] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.689069][ T7443] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.756859][ T7443] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.767459][ T7443] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.872275][ T29] audit: type=1400 audit(1758049780.411:38533): avc: denied { mount } for pid=14187 comm="syz.0.8118" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 573.272221][ T29] audit: type=1326 audit(1758049780.811:38534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14204 comm="syz.6.8140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8247a8eba9 code=0x7ffc0000 [ 573.324586][ T29] audit: type=1326 audit(1758049780.811:38535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14204 comm="syz.6.8140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8247a8eba9 code=0x7ffc0000 [ 573.393252][ T29] audit: type=1326 audit(1758049780.921:38536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14204 comm="syz.6.8140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8247a8eba9 code=0x7ffc0000 [ 573.416934][ T29] audit: type=1326 audit(1758049780.921:38537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14204 comm="syz.6.8140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8247a8eba9 code=0x7ffc0000 [ 573.440774][ T29] audit: type=1326 audit(1758049780.921:38538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14204 comm="syz.6.8140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f8247a8eba9 code=0x7ffc0000 [ 573.464965][ T29] audit: type=1326 audit(1758049780.921:38539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14204 comm="syz.6.8140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8247a8eba9 code=0x7ffc0000 [ 573.488924][ T29] audit: type=1326 audit(1758049780.921:38540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14204 comm="syz.6.8140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8247a8eba9 code=0x7ffc0000 [ 573.706586][ T29] audit: type=1326 audit(1758049781.251:38541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14214 comm="syz.2.8143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 573.744980][T14215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8143'. [ 574.091967][T14237] hub 9-0:1.0: USB hub found [ 574.092095][T14237] hub 9-0:1.0: 8 ports detected [ 574.203861][T14241] 9pnet_fd: Insufficient options for proto=fd [ 574.333736][T14245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14245 comm=syz.5.8149 [ 574.336188][T14245] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8149'. [ 574.377017][T14245] af_packet: tpacket_rcv: packet too big, clamped from 65340 to 3944. macoff=96 [ 574.379893][T14245] 9p: Unknown uid 00000000004294967295 [ 574.433961][T14245] loop5: detected capacity change from 0 to 512 [ 574.463316][T14245] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.463402][T14245] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 574.465372][T14245] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.8149: Failed to acquire dquot type 1 [ 574.645288][T13027] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.678612][T14259] loop5: detected capacity change from 0 to 256 [ 574.692543][T14259] FAT-fs (loop5): Directory bread(block 64) failed [ 574.710920][T14259] FAT-fs (loop5): Directory bread(block 65) failed [ 574.710958][T14259] FAT-fs (loop5): Directory bread(block 66) failed [ 574.710980][T14259] FAT-fs (loop5): Directory bread(block 67) failed [ 574.711006][T14259] FAT-fs (loop5): Directory bread(block 68) failed [ 574.711067][T14259] FAT-fs (loop5): Directory bread(block 69) failed [ 574.711093][T14259] FAT-fs (loop5): Directory bread(block 70) failed [ 574.711112][T14259] FAT-fs (loop5): Directory bread(block 71) failed [ 574.711137][T14259] FAT-fs (loop5): Directory bread(block 72) failed [ 574.711188][T14259] FAT-fs (loop5): Directory bread(block 73) failed [ 574.916942][T14272] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8157'. [ 574.953395][T14274] 9pnet_fd: Insufficient options for proto=fd [ 574.975916][T14279] loop0: detected capacity change from 0 to 128 [ 575.012786][T14283] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8162'. [ 575.043401][T14288] FAULT_INJECTION: forcing a failure. [ 575.043401][T14288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.056709][T14288] CPU: 0 UID: 0 PID: 14288 Comm: syz.0.8161 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 575.056787][T14288] Tainted: [W]=WARN [ 575.056796][T14288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 575.056810][T14288] Call Trace: [ 575.056815][T14288] [ 575.056823][T14288] __dump_stack+0x1d/0x30 [ 575.056845][T14288] dump_stack_lvl+0xe8/0x140 [ 575.056982][T14288] dump_stack+0x15/0x1b [ 575.056999][T14288] should_fail_ex+0x265/0x280 [ 575.057022][T14288] should_fail+0xb/0x20 [ 575.057049][T14288] should_fail_usercopy+0x1a/0x20 [ 575.057151][T14288] _copy_to_user+0x20/0xa0 [ 575.057180][T14288] simple_read_from_buffer+0xb5/0x130 [ 575.057201][T14288] proc_fail_nth_read+0x10e/0x150 [ 575.057232][T14288] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 575.057329][T14288] vfs_read+0x1a8/0x770 [ 575.057353][T14288] ? __fput+0x555/0x650 [ 575.057444][T14288] ? __rcu_read_unlock+0x4f/0x70 [ 575.057474][T14288] ? __fget_files+0x184/0x1c0 [ 575.057505][T14288] ksys_read+0xda/0x1a0 [ 575.057531][T14288] __x64_sys_read+0x40/0x50 [ 575.057588][T14288] x64_sys_call+0x27bc/0x2ff0 [ 575.057664][T14288] do_syscall_64+0xd2/0x200 [ 575.057694][T14288] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 575.057718][T14288] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 575.057778][T14288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.057799][T14288] RIP: 0033:0x7f5e54ebd5bc [ 575.057817][T14288] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 575.057844][T14288] RSP: 002b:00007f5e53927030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 575.057868][T14288] RAX: ffffffffffffffda RBX: 00007f5e55105fa0 RCX: 00007f5e54ebd5bc [ 575.057881][T14288] RDX: 000000000000000f RSI: 00007f5e539270a0 RDI: 0000000000000007 [ 575.057893][T14288] RBP: 00007f5e53927090 R08: 0000000000000000 R09: 0000000000000000 [ 575.057905][T14288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.057960][T14288] R13: 00007f5e55106038 R14: 00007f5e55105fa0 R15: 00007ffc7867c448 [ 575.057978][T14288] [ 575.278013][T14294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14294 comm=syz.6.8164 [ 575.298829][T14296] loop0: detected capacity change from 0 to 512 [ 575.412247][T14317] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8170'. [ 575.421301][T14317] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8170'. [ 575.430356][T14317] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8170'. [ 575.439462][T14317] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8170'. [ 575.451580][T14317] loop0: detected capacity change from 0 to 256 [ 575.492385][T14324] 9pnet_fd: Insufficient options for proto=fd [ 575.515387][T14320] loop6: detected capacity change from 0 to 512 [ 575.540271][T14320] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.553053][T14320] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 575.558551][T14335] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14335 comm=syz.0.8176 [ 575.580852][T14320] EXT4-fs: Cannot change journaled quota options when quota turned on [ 575.590272][T14320] EXT4-fs error (device loop6): ext4_lookup:1787: inode #12: comm syz.6.8171: iget: bad i_size value: 2533274857506816 [ 575.599347][T14337] loop0: detected capacity change from 0 to 512 [ 575.722664][T14356] 9pnet_fd: Insufficient options for proto=fd [ 575.735201][T10762] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.755902][T14359] @: renamed from vlan0 (while UP) [ 575.786042][T14364] sch_fq: defrate 4294967295 ignored. [ 575.805934][T14364] loop6: detected capacity change from 0 to 2048 [ 575.817825][T14372] loop0: detected capacity change from 0 to 512 [ 575.824650][T14372] EXT4-fs: Ignoring removed nobh option [ 575.838783][T14372] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.855971][T14364] loop6: p1 < > p4 [ 575.865293][T14364] loop6: p4 size 8388608 extends beyond EOD, truncated [ 575.884982][T14372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8189'. [ 575.928106][T14364] SELinux: policydb magic number 0x6d656d6b does not match expected magic number 0xf97cff8c [ 575.956465][T14364] SELinux: failed to load policy [ 576.056520][T13699] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.074318][T14364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.083091][T14364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.134880][T14364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.142325][T14364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.285405][T14364] bond0: (slave batadv0): Releasing backup interface [ 576.533187][T14393] infiniband syz!: set active [ 576.538372][T14393] infiniband syz!: added team_slave_0 [ 576.559877][T14393] RDS/IB: syz!: added [ 576.573457][T14393] smc: adding ib device syz! with port count 1 [ 576.582557][T14393] smc: ib device syz! port 1 has pnetid [ 576.638868][T14405] netlink: 'syz.6.8193': attribute type 1 has an invalid length. [ 576.845970][T14379] syz.2.8188 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 576.860160][T14379] CPU: 1 UID: 0 PID: 14379 Comm: syz.2.8188 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 576.860200][T14379] Tainted: [W]=WARN [ 576.860208][T14379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 576.860223][T14379] Call Trace: [ 576.860232][T14379] [ 576.860242][T14379] __dump_stack+0x1d/0x30 [ 576.860265][T14379] dump_stack_lvl+0xe8/0x140 [ 576.860347][T14379] dump_stack+0x15/0x1b [ 576.860367][T14379] dump_header+0x81/0x220 [ 576.860428][T14379] oom_kill_process+0x342/0x400 [ 576.860510][T14379] out_of_memory+0x979/0xb80 [ 576.860545][T14379] try_charge_memcg+0x5e6/0x9e0 [ 576.860573][T14379] obj_cgroup_charge_pages+0xa6/0x150 [ 576.860641][T14379] __memcg_kmem_charge_page+0x9f/0x170 [ 576.860672][T14379] __alloc_frozen_pages_noprof+0x188/0x360 [ 576.860850][T14379] alloc_pages_mpol+0xb3/0x250 [ 576.860943][T14379] alloc_pages_noprof+0x90/0x130 [ 576.860978][T14379] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 576.861062][T14379] __kvmalloc_node_noprof+0x30f/0x4e0 [ 576.861091][T14379] ? ip_set_alloc+0x1f/0x30 [ 576.861114][T14379] ? ip_set_alloc+0x1f/0x30 [ 576.861138][T14379] ? __kmalloc_cache_noprof+0x189/0x320 [ 576.861173][T14379] ip_set_alloc+0x1f/0x30 [ 576.861248][T14379] hash_netiface_create+0x282/0x740 [ 576.861347][T14379] ? __pfx_hash_netiface_create+0x10/0x10 [ 576.861376][T14379] ip_set_create+0x3cc/0x960 [ 576.861415][T14379] ? __nla_parse+0x40/0x60 [ 576.861449][T14379] nfnetlink_rcv_msg+0x4c6/0x590 [ 576.861526][T14379] netlink_rcv_skb+0x120/0x220 [ 576.861555][T14379] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 576.861584][T14379] nfnetlink_rcv+0x16b/0x1690 [ 576.861605][T14379] ? nlmon_xmit+0x4f/0x60 [ 576.861703][T14379] ? consume_skb+0x49/0x150 [ 576.861729][T14379] ? nlmon_xmit+0x4f/0x60 [ 576.861772][T14379] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 576.861800][T14379] ? __dev_queue_xmit+0x1200/0x2000 [ 576.861874][T14379] ? __dev_queue_xmit+0x182/0x2000 [ 576.861904][T14379] ? ref_tracker_free+0x37d/0x3e0 [ 576.861932][T14379] ? __netlink_deliver_tap+0x4dc/0x500 [ 576.861959][T14379] netlink_unicast+0x5c0/0x690 [ 576.862027][T14379] netlink_sendmsg+0x58b/0x6b0 [ 576.862132][T14379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.862236][T14379] __sock_sendmsg+0x142/0x180 [ 576.862275][T14379] ____sys_sendmsg+0x31e/0x4e0 [ 576.862305][T14379] ___sys_sendmsg+0x17b/0x1d0 [ 576.862363][T14379] __x64_sys_sendmsg+0xd4/0x160 [ 576.862401][T14379] x64_sys_call+0x191e/0x2ff0 [ 576.862495][T14379] do_syscall_64+0xd2/0x200 [ 576.862531][T14379] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 576.862639][T14379] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 576.862742][T14379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.862769][T14379] RIP: 0033:0x7f456612eba9 [ 576.862789][T14379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.862812][T14379] RSP: 002b:00007f4564b55038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 576.862837][T14379] RAX: ffffffffffffffda RBX: 00007f4566376180 RCX: 00007f456612eba9 [ 576.862911][T14379] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 576.862926][T14379] RBP: 00007f45661b1e19 R08: 0000000000000000 R09: 0000000000000000 [ 576.862942][T14379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.862958][T14379] R13: 00007f4566376218 R14: 00007f4566376180 R15: 00007ffce28e6e78 [ 576.862980][T14379] [ 576.862987][T14379] memory: usage 307200kB, limit 307200kB, failcnt 500 [ 577.212946][T14379] memory+swap: usage 307876kB, limit 9007199254740988kB, failcnt 0 [ 577.221013][T14379] kmem: usage 303044kB, limit 9007199254740988kB, failcnt 0 [ 577.228337][T14379] Memory cgroup stats for /syz2: [ 577.229057][T14379] cache 0 [ 577.237028][T14379] rss 4247552 [ 577.240515][T14379] shmem 0 [ 577.243460][T14379] mapped_file 0 [ 577.246954][T14379] dirty 0 [ 577.249895][T14379] writeback 0 [ 577.253185][T14379] workingset_refault_anon 2525 [ 577.257990][T14379] workingset_refault_file 651 [ 577.262810][T14379] swap 692224 [ 577.266118][T14379] swapcached 0 [ 577.269572][T14379] pgpgin 617863 [ 577.273045][T14379] pgpgout 616824 [ 577.276705][T14379] pgfault 617149 [ 577.280350][T14379] pgmajfault 378 [ 577.281144][T14442] loop6: detected capacity change from 0 to 512 [ 577.284017][T14379] inactive_anon 0 [ 577.284029][T14379] active_anon 0 [ 577.284042][T14379] inactive_file 4255744 [ 577.291063][T14442] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 577.294029][T14379] active_file 0 [ 577.299599][T14442] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.8194: bg 0: block 4: invalid block bitmap [ 577.301607][T14379] unevictable 0 [ 577.301618][T14379] hierarchical_memory_limit 314572800 [ 577.301629][T14379] hierarchical_memsw_limit 9223372036854771712 [ 577.311654][T14442] EXT4-fs (loop6): Remounting filesystem read-only [ 577.315039][T14379] total_cache 0 [ 577.315050][T14379] total_rss 4247552 [ 577.315060][T14379] total_shmem 0 [ 577.328282][T14442] EXT4-fs (loop6): 1 truncate cleaned up [ 577.330847][T14379] total_mapped_file 0 [ 577.336648][T14442] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.342398][T14379] total_dirty 0 [ 577.385567][T14379] total_writeback 0 [ 577.389386][T14379] total_workingset_refault_anon 2525 [ 577.394687][T14379] total_workingset_refault_file 651 [ 577.399974][T14379] total_swap 692224 [ 577.403774][T14379] total_swapcached 0 [ 577.407757][T14379] total_pgpgin 617863 [ 577.411833][T14379] total_pgpgout 616824 [ 577.416011][T14379] total_pgfault 617149 [ 577.420090][T14379] total_pgmajfault 378 [ 577.424161][T14379] total_inactive_anon 0 [ 577.428363][T14379] total_active_anon 0 [ 577.432382][T14379] total_inactive_file 4255744 [ 577.437066][T14379] total_active_file 0 [ 577.441047][T14379] total_unevictable 0 [ 577.445028][T14379] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.8188,pid=14368,uid=0 [ 577.460188][T14379] Memory cgroup out of memory: Killed process 14368 (syz.2.8188) total-vm:98260kB, anon-rss:5296kB, file-rss:26408kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 577.695783][T14448] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8195'. [ 577.705405][T10762] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.766487][T14452] 9pnet_fd: Insufficient options for proto=fd [ 577.798027][T14454] loop0: detected capacity change from 0 to 256 [ 577.851587][T14454] FAT-fs (loop0): Directory bread(block 64) failed [ 577.865103][T14454] FAT-fs (loop0): Directory bread(block 65) failed [ 577.871960][T14454] FAT-fs (loop0): Directory bread(block 66) failed [ 577.903857][T14454] FAT-fs (loop0): Directory bread(block 67) failed [ 577.910423][T14454] FAT-fs (loop0): Directory bread(block 68) failed [ 577.927000][T14454] FAT-fs (loop0): Directory bread(block 69) failed [ 577.933562][T14454] FAT-fs (loop0): Directory bread(block 70) failed [ 577.941556][T14454] FAT-fs (loop0): Directory bread(block 71) failed [ 577.948152][T14454] FAT-fs (loop0): Directory bread(block 72) failed [ 577.955444][T14454] FAT-fs (loop0): Directory bread(block 73) failed [ 577.971090][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 577.971108][ T29] audit: type=1326 audit(1758049785.512:38691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14453 comm="syz.0.8197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e54ebeba9 code=0x7ffc0000 [ 578.012844][ T29] audit: type=1326 audit(1758049785.552:38692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14453 comm="syz.0.8197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f5e54ebeba9 code=0x7ffc0000 [ 578.017770][T13699] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 578.036882][ T29] audit: type=1326 audit(1758049785.552:38693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14453 comm="syz.0.8197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e54ebeba9 code=0x7ffc0000 [ 578.044388][T13699] FAT-fs (loop0): Filesystem has been set read-only [ 578.074765][ T29] audit: type=1326 audit(1758049785.552:38694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14453 comm="syz.0.8197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e54ebeba9 code=0x7ffc0000 [ 578.254202][ T29] audit: type=1400 audit(1758049785.792:38695): avc: denied { getopt } for pid=14459 comm="syz.2.8200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 578.437190][T14473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.450236][T14473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.656986][T14471] chnl_net:caif_netlink_parms(): no params data found [ 578.844682][T14471] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.851810][T14471] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.859144][T14471] bridge_slave_0: entered allmulticast mode [ 578.866020][T14471] bridge_slave_0: entered promiscuous mode [ 578.872845][T14471] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.879996][T14471] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.888788][T14471] bridge_slave_1: entered allmulticast mode [ 578.895820][T14471] bridge_slave_1: entered promiscuous mode [ 578.895977][T14643] 9pnet_fd: Insufficient options for proto=fd [ 578.977417][ T29] audit: type=1400 audit(1758049786.522:38696): avc: denied { unmount } for pid=4304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 579.031722][ T29] audit: type=1326 audit(1758049786.572:38697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.2.8211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 579.056124][ T29] audit: type=1326 audit(1758049786.572:38698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.2.8211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 579.064579][T14471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.079874][ T29] audit: type=1326 audit(1758049786.572:38699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.2.8211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 579.093083][T14471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.112717][ T29] audit: type=1326 audit(1758049786.572:38700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.2.8211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 579.177504][T14684] __nla_validate_parse: 1 callbacks suppressed [ 579.177524][T14684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8211'. [ 579.225186][T14471] team0: Port device team_slave_0 added [ 579.234166][T14471] team0: Port device team_slave_1 added [ 579.375087][T14471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.382056][T14471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.408144][T14471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.419724][T14471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.426829][T14471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.452868][T14471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.600676][T14471] hsr_slave_0: entered promiscuous mode [ 579.607058][T14471] hsr_slave_1: entered promiscuous mode [ 579.612834][T14471] debugfs: 'hsr0' already exists in 'hsr' [ 579.618706][T14471] Cannot create hsr debugfs directory [ 579.998644][T14828] netlink: 196 bytes leftover after parsing attributes in process `syz.6.8215'. [ 580.027475][T14831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=14831 comm=syz.2.8214 [ 580.115409][T14845] netlink: 14528 bytes leftover after parsing attributes in process `syz.6.8216'. [ 580.152702][T14849] 9pnet_fd: Insufficient options for proto=fd [ 580.301516][T14854] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 580.519386][T14471] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 580.555616][T14471] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 580.595998][T14471] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 580.635766][T14471] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 580.684321][T14471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.697105][T14471] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.706971][ T7395] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.714107][ T7395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.725254][ T7439] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.732311][ T7439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.797534][T14471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.858693][T14471] veth0_vlan: entered promiscuous mode [ 580.866686][T14471] veth1_vlan: entered promiscuous mode [ 580.884894][T14471] veth0_macvtap: entered promiscuous mode [ 580.893267][T14471] veth1_macvtap: entered promiscuous mode [ 580.907127][T14471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.920771][T14471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.929947][T14898] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8220'. [ 580.946500][ T7442] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.956630][ T7442] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.984324][ T7442] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.017048][T14906] netlink: 'syz.6.8224': attribute type 4 has an invalid length. [ 581.024817][T14906] netlink: 17 bytes leftover after parsing attributes in process `syz.6.8224'. [ 581.026252][ T7442] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.133768][T14912] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8225'. [ 581.142733][T14912] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8225'. [ 581.212298][T14943] netlink: 256 bytes leftover after parsing attributes in process `syz.6.8226'. [ 581.243505][T14918] syzkaller1: entered promiscuous mode [ 581.249014][T14918] syzkaller1: entered allmulticast mode [ 581.438724][T14957] loop1: detected capacity change from 0 to 512 [ 581.445353][T14957] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 581.518862][T14966] loop1: detected capacity change from 0 to 1024 [ 581.525877][T14966] EXT4-fs: Ignoring removed orlov option [ 581.539749][T14966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.572043][T14966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8230'. [ 581.581917][T14966] netlink: 196 bytes leftover after parsing attributes in process `syz.1.8230'. [ 581.772262][T14971] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 581.935043][T14471] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.154419][T14973] smc: net device bond0 erased user defined pnetid SYZ0 [ 582.474660][T15005] netlink: 'syz.2.8240': attribute type 6 has an invalid length. [ 582.578746][T15014] loop6: detected capacity change from 0 to 512 [ 582.696228][T15025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=15025 comm=syz.2.8242 [ 583.226850][T15042] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 583.248907][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 583.248928][ T29] audit: type=1400 audit(1758049790.792:38806): avc: denied { listen } for pid=15043 comm="syz.6.8254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 583.305905][ T29] audit: type=1400 audit(1758049790.852:38807): avc: denied { accept } for pid=15045 comm="syz.6.8255" lport=58868 faddr=::ffff:172.20.255.187 fport=65532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 583.580475][ T29] audit: type=1400 audit(1758049791.122:38808): avc: denied { watch watch_reads } for pid=15058 comm="syz.5.8260" path="/30/file0" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 583.692507][ T29] audit: type=1400 audit(1758049791.232:38809): avc: denied { write } for pid=15072 comm="syz.5.8262" name="file0" dev="tmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 583.715142][ T29] audit: type=1400 audit(1758049791.232:38810): avc: denied { open } for pid=15072 comm="syz.5.8262" path="/31/file0" dev="tmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 583.738621][T15073] blktrace: Concurrent blktraces are not allowed on loop11 [ 583.746457][ T29] audit: type=1400 audit(1758049791.292:38811): avc: denied { ioctl } for pid=15072 comm="syz.5.8262" path="/31/file0" dev="tmpfs" ino=182 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 583.799028][ T29] audit: type=1400 audit(1758049791.342:38812): avc: denied { shutdown } for pid=15072 comm="syz.5.8262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 583.821011][T15103] serio: Serial port ptm0 [ 583.827455][ T29] audit: type=1400 audit(1758049791.372:38813): avc: denied { read } for pid=15072 comm="syz.5.8262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 583.847451][ T29] audit: type=1400 audit(1758049791.372:38814): avc: denied { ioctl } for pid=15072 comm="syz.5.8262" path="socket:[101516]" dev="sockfs" ino=101516 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 583.877239][T15062] chnl_net:caif_netlink_parms(): no params data found [ 583.907465][ T29] audit: type=1400 audit(1758049791.442:38815): avc: denied { read } for pid=15179 comm="syz.6.8263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 584.001410][T15199] netlink: 'syz.2.8264': attribute type 29 has an invalid length. [ 584.094565][T15062] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.101837][T15062] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.110420][T15062] bridge_slave_0: entered allmulticast mode [ 584.117215][T15062] bridge_slave_0: entered promiscuous mode [ 584.126510][T15062] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.133737][T15062] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.141149][T15062] bridge_slave_1: entered allmulticast mode [ 584.148912][T15062] bridge_slave_1: entered promiscuous mode [ 584.176829][T15253] bridge_slave_0: left allmulticast mode [ 584.182597][T15253] bridge_slave_0: left promiscuous mode [ 584.188317][T15253] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.204656][T15259] __nla_validate_parse: 7 callbacks suppressed [ 584.204676][T15259] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8270'. [ 584.244517][T15253] bridge_slave_1: left allmulticast mode [ 584.250397][T15253] bridge_slave_1: left promiscuous mode [ 584.256244][T15253] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.343360][T15253] bond0: (slave bond_slave_0): Releasing backup interface [ 584.403835][T15253] bond0: (slave bond_slave_1): Releasing backup interface [ 584.484564][T15253] team0: Failed to send options change via netlink (err -105) [ 584.492263][T15253] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 584.502236][T15253] team0: Port device team_slave_0 removed [ 584.544600][T15253] team0: Failed to send options change via netlink (err -105) [ 584.552337][T15253] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 584.562036][T15253] team0: Port device team_slave_1 removed [ 584.569295][T15253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.576757][T15253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.624589][T15253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.632054][T15253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.815960][T15259] team0: Failed to send options change via netlink (err -105) [ 584.823507][T15259] team0: Mode changed to "loadbalance" [ 584.837516][T15062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.861179][T15062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.993567][T15313] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8279'. [ 584.999210][T15329] bridge_slave_0: left allmulticast mode [ 585.008482][T15329] bridge_slave_0: left promiscuous mode [ 585.014230][T15329] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.016899][T15334] netlink: 88 bytes leftover after parsing attributes in process `syz.6.8283'. [ 585.082023][T15342] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 585.088556][T15342] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 585.096184][T15342] vhci_hcd vhci_hcd.0: Device attached [ 585.105417][T15329] bridge_slave_1: left allmulticast mode [ 585.111118][T15329] bridge_slave_1: left promiscuous mode [ 585.119430][T15329] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.140143][T15344] vhci_hcd: connection closed [ 585.140498][ T7395] vhci_hcd: stop threads [ 585.149684][ T7395] vhci_hcd: release socket [ 585.154187][ T7395] vhci_hcd: disconnect device [ 585.204135][T15329] bond0: (slave bond_slave_0): Releasing backup interface [ 585.283915][T15329] bond0: (slave bond_slave_1): Releasing backup interface [ 585.364305][T15329] team0: Failed to send options change via netlink (err -105) [ 585.372088][T15329] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 585.382218][T15329] team0: Port device team_slave_0 removed [ 585.414669][T15329] team0: Failed to send options change via netlink (err -105) [ 585.422352][T15329] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 585.431871][T15329] team0: Port device team_slave_1 removed [ 585.438872][T15329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.446291][T15329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.484964][T15329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.492401][T15329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.536445][T15062] team0: Port device team_slave_0 added [ 585.542364][T15313] IPVS: Error connecting to the multicast addr [ 585.551854][T15330] pimreg: entered allmulticast mode [ 585.567472][T15346] pimreg: left allmulticast mode [ 585.626476][T15364] loop6: detected capacity change from 0 to 512 [ 585.633452][T15364] EXT4-fs: Ignoring removed orlov option [ 585.639597][T15364] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 585.649000][T15364] EXT4-fs (loop6): orphan cleanup on readonly fs [ 585.652627][T15366] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8290'. [ 585.657065][T15364] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8291: bg 0: block 248: padding at end of block bitmap is not set [ 585.670615][T15062] team0: Port device team_slave_1 added [ 585.680125][T15364] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.8291: Failed to acquire dquot type 1 [ 585.697670][T15364] EXT4-fs (loop6): 1 truncate cleaned up [ 585.775143][T15364] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 585.803202][T15399] netlink: 'syz.5.8294': attribute type 1 has an invalid length. [ 585.833881][T15062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.840863][T15062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.866959][T15062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.877740][T15401] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8294'. [ 585.887051][T10762] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.907847][T15405] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8295'. [ 585.919932][T15406] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8294'. [ 586.040555][T15399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 586.245132][T15401] bond1 (unregistering): Released all slaves [ 586.289134][T15062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.296277][T15062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.322456][T15062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.348765][T15405] 8021q: adding VLAN 0 to HW filter on device bond2 [ 586.369545][T15408] vlan0: entered allmulticast mode [ 586.375092][T15408] bond2: entered allmulticast mode [ 586.606177][T15062] hsr_slave_0: entered promiscuous mode [ 586.621576][T15062] hsr_slave_1: entered promiscuous mode [ 586.628409][T15062] debugfs: 'hsr0' already exists in 'hsr' [ 586.634237][T15062] Cannot create hsr debugfs directory [ 586.658377][T15575] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8301'. [ 586.734557][T15575] veth0_macvtap: left promiscuous mode [ 586.937433][T15622] loop6: detected capacity change from 0 to 1024 [ 586.977578][T15622] loop6: detected capacity change from 0 to 2048 [ 587.007418][T15622] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 587.161019][T15692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8314'. [ 587.183555][T10762] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.196305][T15696] FAULT_INJECTION: forcing a failure. [ 587.196305][T15696] name failslab, interval 1, probability 0, space 0, times 0 [ 587.209056][T15696] CPU: 1 UID: 0 PID: 15696 Comm: syz.2.8317 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 587.209094][T15696] Tainted: [W]=WARN [ 587.209225][T15696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 587.209238][T15696] Call Trace: [ 587.209245][T15696] [ 587.209252][T15696] __dump_stack+0x1d/0x30 [ 587.209275][T15696] dump_stack_lvl+0xe8/0x140 [ 587.209294][T15696] dump_stack+0x15/0x1b [ 587.209350][T15696] should_fail_ex+0x265/0x280 [ 587.209373][T15696] should_failslab+0x8c/0xb0 [ 587.209397][T15696] kmem_cache_alloc_noprof+0x50/0x310 [ 587.209461][T15696] ? __kernfs_new_node+0x6d/0x350 [ 587.209489][T15696] __kernfs_new_node+0x6d/0x350 [ 587.209513][T15696] ? __rcu_read_unlock+0x4f/0x70 [ 587.209535][T15696] ? __rcu_read_unlock+0x4f/0x70 [ 587.209556][T15696] ? __rcu_read_unlock+0x4f/0x70 [ 587.209640][T15696] ? kernfs_next_descendant_post+0xd3/0x110 [ 587.209782][T15696] kernfs_new_node+0xd0/0x140 [ 587.209806][T15696] __kernfs_create_file+0x4b/0x180 [ 587.209839][T15696] ? __pfx_slab_attr_show+0x10/0x10 [ 587.209861][T15696] ? __pfx_slab_attr_store+0x10/0x10 [ 587.209919][T15696] sysfs_add_file_mode_ns+0x132/0x1c0 [ 587.209958][T15696] internal_create_group+0x441/0x9e0 [ 587.210038][T15696] sysfs_create_group+0x1f/0x30 [ 587.210064][T15696] sysfs_slab_add+0x14d/0x290 [ 587.210198][T15696] do_kmem_cache_create+0x3c8/0x530 [ 587.210311][T15696] __kmem_cache_create_args+0x148/0x270 [ 587.210355][T15696] p9_client_create+0x8e5/0xbc0 [ 587.210391][T15696] v9fs_session_init+0xf7/0xde0 [ 587.210536][T15696] ? avc_has_perm_noaudit+0x1b1/0x200 [ 587.210564][T15696] ? should_fail_ex+0xdb/0x280 [ 587.210589][T15696] ? v9fs_mount+0x51/0x5c0 [ 587.210618][T15696] ? should_failslab+0x8c/0xb0 [ 587.210719][T15696] ? __kmalloc_cache_noprof+0x189/0x320 [ 587.210778][T15696] v9fs_mount+0x67/0x5c0 [ 587.210807][T15696] ? selinux_capable+0x31/0x40 [ 587.210833][T15696] ? __pfx_v9fs_mount+0x10/0x10 [ 587.210913][T15696] legacy_get_tree+0x75/0xd0 [ 587.210938][T15696] vfs_get_tree+0x54/0x1d0 [ 587.210964][T15696] do_new_mount+0x207/0x5e0 [ 587.210990][T15696] ? security_capable+0x83/0x90 [ 587.211038][T15696] path_mount+0x4a4/0xb20 [ 587.211062][T15696] ? user_path_at+0x109/0x130 [ 587.211097][T15696] __se_sys_mount+0x28f/0x2e0 [ 587.211198][T15696] ? fput+0x8f/0xc0 [ 587.211261][T15696] __x64_sys_mount+0x67/0x80 [ 587.211283][T15696] x64_sys_call+0x2b4d/0x2ff0 [ 587.211335][T15696] do_syscall_64+0xd2/0x200 [ 587.211377][T15696] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 587.211406][T15696] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 587.211438][T15696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.211489][T15696] RIP: 0033:0x7f456612eba9 [ 587.211507][T15696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.211525][T15696] RSP: 002b:00007f4564b97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 587.211546][T15696] RAX: ffffffffffffffda RBX: 00007f4566375fa0 RCX: 00007f456612eba9 [ 587.211586][T15696] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000000000000000 [ 587.211600][T15696] RBP: 00007f4564b97090 R08: 0000200000000400 R09: 0000000000000000 [ 587.211614][T15696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 587.211628][T15696] R13: 00007f4566376038 R14: 00007f4566375fa0 R15: 00007ffce28e6e78 [ 587.211647][T15696] [ 587.211886][T15696] SLUB: Unable to add cache 9p-fcall-cache-164 to sysfs [ 587.711326][T15724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15724 comm=syz.5.8326 [ 587.724926][T15724] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8326'. [ 587.870727][T15738] team0: Unable to change to the same mode the team is in [ 588.067209][T15062] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 588.088072][T15062] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 588.126651][T15062] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 588.193788][T15808] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.220424][T15817] loop6: detected capacity change from 0 to 512 [ 588.227556][T15062] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 588.280728][T15806] netlink: 'syz.1.8334': attribute type 3 has an invalid length. [ 588.293143][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 588.293248][ T29] audit: type=1400 audit(2000000003.370:38868): avc: denied { read } for pid=15821 comm="syz.6.8337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 588.297616][T15806] netlink: 'syz.1.8334': attribute type 3 has an invalid length. [ 588.343926][T15808] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.354185][T15827] loop6: detected capacity change from 0 to 1764 [ 588.360965][T15827] iso9660: Bad value for 'map' [ 588.444779][T15062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.475188][T15808] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.517973][T15062] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.528793][ T7443] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.535940][ T7443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.548544][ T7457] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.555661][ T7457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.570580][T15843] 9pnet_fd: Insufficient options for proto=fd [ 588.578497][T15062] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 588.588929][T15062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 588.602213][T15843] loop1: detected capacity change from 0 to 512 [ 588.617696][T15843] EXT4-fs: Ignoring removed mblk_io_submit option [ 588.625346][T15808] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.637413][T15843] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 588.657921][T15843] EXT4-fs (loop1): 1 truncate cleaned up [ 588.664125][T15843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.684246][ T29] audit: type=1400 audit(2000000003.760:38869): avc: denied { read } for pid=15838 comm="syz.1.8338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 588.737866][T15062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.893228][ T7442] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.915748][ T7442] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.550163][T15062] veth0_vlan: entered promiscuous mode [ 589.556060][ T7442] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.573189][ T7442] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.583933][T15062] veth1_vlan: entered promiscuous mode [ 589.740649][T15062] veth0_macvtap: entered promiscuous mode [ 589.749173][T15914] 9pnet: Could not find request transport: fd0x0000000000000003 [ 589.759397][T15062] veth1_macvtap: entered promiscuous mode [ 589.786888][T15062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.811882][T15062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.821780][T15918] __nla_validate_parse: 1 callbacks suppressed [ 589.821798][T15918] netlink: 9 bytes leftover after parsing attributes in process `syz.5.8347'. [ 589.844312][ T7457] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.916029][ T7457] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.925279][T15918] ..0·: renamed from hsr0 (while UP) [ 589.954642][T15918] ..0·: entered allmulticast mode [ 589.959766][T15918] hsr_slave_0: entered allmulticast mode [ 589.965627][T15918] hsr_slave_1: entered allmulticast mode [ 589.983037][T15918] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check. [ 590.018340][ T7457] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.057495][T14471] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.106241][ T7457] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.180982][T15934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15934 comm=syz.1.8349 [ 590.199091][T15934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8349'. [ 590.212722][ T29] audit: type=1326 audit(2000000005.270:38870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.8.8259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70fb89eba9 code=0x7ffc0000 [ 590.218515][T15940] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8352'. [ 590.236483][ T29] audit: type=1326 audit(2000000005.270:38871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.8.8259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70fb89eba9 code=0x7ffc0000 [ 590.255544][T15941] loop5: detected capacity change from 0 to 512 [ 590.269240][ T29] audit: type=1326 audit(2000000005.270:38872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.8.8259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70fb89eba9 code=0x7ffc0000 [ 590.299453][ T29] audit: type=1326 audit(2000000005.270:38873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.8.8259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f70fb89eba9 code=0x7ffc0000 [ 590.304421][T15941] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 590.323106][ T29] audit: type=1326 audit(2000000005.270:38874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.8.8259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70fb89eba9 code=0x7ffc0000 [ 590.355399][ T29] audit: type=1326 audit(2000000005.270:38875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.8.8259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f70fb89eba9 code=0x7ffc0000 [ 590.379194][ T29] audit: type=1326 audit(2000000005.270:38876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.8.8259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70fb89eba9 code=0x7ffc0000 [ 590.403082][ T29] audit: type=1326 audit(2000000005.270:38877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15935 comm="syz.8.8259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f70fb89eba9 code=0x7ffc0000 [ 590.488215][T15982] 9pnet: Could not find request transport: fd0x0000000000000003 [ 590.504607][T15980] loop1: detected capacity change from 0 to 2048 [ 590.530784][T15989] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8358'. [ 590.652827][T15992] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8360'. [ 591.111614][T15992] netlink: 'syz.8.8360': attribute type 27 has an invalid length. [ 591.176407][T16001] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8362'. [ 591.475634][T15992] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.483013][T15992] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.500925][T16004] loop5: detected capacity change from 0 to 8192 [ 591.573387][T16004] loop5: p1 p2 p4 < > [ 591.585924][T16004] loop5: p1 start 4261412864 is beyond EOD, truncated [ 591.592839][T16004] loop5: p2 start 4009754624 is beyond EOD, truncated [ 591.659490][T16033] 9pnet_fd: Insufficient options for proto=fd [ 592.056118][T15992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.066481][T15992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 592.767919][T16054] netlink: 256 bytes leftover after parsing attributes in process `syz.6.8375'. [ 593.052938][T16002] syz_tun: entered allmulticast mode [ 593.306661][ T7442] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.315719][T16051] lo speed is unknown, defaulting to 1000 [ 593.321469][T16051] lo speed is unknown, defaulting to 1000 [ 593.327515][T16051] lo speed is unknown, defaulting to 1000 [ 593.335590][T16051] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 593.351877][T16051] lo speed is unknown, defaulting to 1000 [ 593.358202][T16051] lo speed is unknown, defaulting to 1000 [ 593.358791][ T7442] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.373318][T16051] lo speed is unknown, defaulting to 1000 [ 593.374995][ T7442] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.387990][T16051] lo speed is unknown, defaulting to 1000 [ 593.388145][ T7442] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.402751][T16051] lo speed is unknown, defaulting to 1000 [ 593.409075][T16051] lo speed is unknown, defaulting to 1000 [ 593.415393][T16051] lo speed is unknown, defaulting to 1000 [ 593.421649][T16051] lo speed is unknown, defaulting to 1000 [ 593.427726][T16051] lo speed is unknown, defaulting to 1000 [ 593.433397][T16078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8380'. [ 593.433888][T16051] lo speed is unknown, defaulting to 1000 [ 593.448660][T16051] lo speed is unknown, defaulting to 1000 [ 593.454982][T16051] lo speed is unknown, defaulting to 1000 [ 593.461455][T16051] lo speed is unknown, defaulting to 1000 [ 593.467578][T16051] lo speed is unknown, defaulting to 1000 [ 593.474066][T16051] lo speed is unknown, defaulting to 1000 [ 593.479656][T16066] loop1: detected capacity change from 0 to 512 [ 593.480284][T16051] lo speed is unknown, defaulting to 1000 [ 593.492485][T16051] lo speed is unknown, defaulting to 1000 [ 593.533321][T16082] syzkaller1: entered promiscuous mode [ 593.538901][T16082] syzkaller1: entered allmulticast mode [ 593.571648][T16082] SELinux: Context system_u:object_r:framebuf_device_t:s0 is not valid (left unmapped). [ 593.571837][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 593.571912][ T29] audit: type=1400 audit(2000000008.640:38934): avc: denied { relabelfrom } for pid=16081 comm="syz.2.8382" name="UNIX" dev="sockfs" ino=104180 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 593.571942][ T29] audit: type=1400 audit(2000000008.640:38935): avc: denied { mac_admin } for pid=16081 comm="syz.2.8382" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 593.571968][ T29] audit: type=1400 audit(2000000008.640:38936): avc: denied { relabelto } for pid=16081 comm="syz.2.8382" name="UNIX" dev="sockfs" ino=104180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_dgram_socket permissive=1 trawcon="system_u:object_r:framebuf_device_t:s0" [ 593.573279][ T29] audit: type=1400 audit(2000000008.650:38937): avc: denied { append } for pid=16091 comm="syz.8.8385" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 593.591328][T16066] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 593.591439][T16066] EXT4-fs (loop1): orphan cleanup on readonly fs [ 593.592996][T16066] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8378: corrupted inode contents [ 593.593448][T16066] EXT4-fs (loop1): Remounting filesystem read-only [ 593.593550][T16066] EXT4-fs (loop1): 1 truncate cleaned up [ 593.648305][ T7442] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 593.648384][ T7442] Quota error (device loop1): write_blk: dquota write failed [ 593.648399][ T7442] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 593.648417][ T7442] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 593.648436][ T7442] Quota error (device loop1): write_blk: dquota write failed [ 593.648447][ T7442] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 593.648469][ T7442] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 593.648561][ T7442] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 593.648603][ T7442] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 593.652325][T16066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 593.854398][T14471] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.944770][T16104] ref_ctr_offset mismatch. inode: 0xcc offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 594.530301][T16130] loop8: detected capacity change from 0 to 128 [ 594.583717][T16130] Invalid logical block size (2340) [ 594.600492][T16132] loop5: detected capacity change from 0 to 1024 [ 594.623969][T16132] EXT4-fs: Ignoring removed bh option [ 594.640920][T16132] EXT4-fs: inline encryption not supported [ 594.666689][T16132] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 594.694329][T16132] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 594.714220][T16132] EXT4-fs (loop5): orphan cleanup on readonly fs [ 594.715051][T16132] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.8393: lblock 2 mapped to illegal pblock 2 (length 1) [ 594.715375][T16132] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.8393: lblock 0 mapped to illegal pblock 48 (length 1) [ 594.715469][T16132] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.8393: Failed to acquire dquot type 0 [ 594.715658][T16132] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 594.715735][T16132] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.8393: mark_inode_dirty error [ 594.715947][T16132] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 594.715976][T16132] EXT4-fs (loop5): 1 orphan inode deleted [ 594.743740][T16149] 9pnet_fd: Insufficient options for proto=fd [ 594.753025][ T7442] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:56: lblock 1 mapped to illegal pblock 1 (length 1) [ 594.881375][T16139] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.903155][ T7442] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:56: Failed to release dquot type 0 [ 594.903171][T16121] lo speed is unknown, defaulting to 1000 [ 594.903710][T16132] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 595.075631][T16139] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.246212][T13027] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.264670][T16139] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.454157][T16139] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.515764][T16188] loop5: detected capacity change from 0 to 512 [ 595.556788][T16188] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.556985][T16188] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 595.609049][ T7395] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.609154][ T7395] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.634615][ T7443] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.635141][ T7443] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.685348][T16208] netlink: 'syz.1.8405': attribute type 10 has an invalid length. [ 595.685368][T16208] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8405'. [ 595.685410][T16208] team0: Device geneve1 is up. Set it down before adding it as a team port [ 595.686128][T16208] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 595.868724][T16227] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8412'. [ 596.009568][T16231] bridge_slave_0: left allmulticast mode [ 596.015371][T16231] bridge_slave_0: left promiscuous mode [ 596.021040][T16231] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.073582][T16233] netlink: 64 bytes leftover after parsing attributes in process `syz.6.8414'. [ 596.156668][T16231] bridge_slave_1: left allmulticast mode [ 596.162445][T16231] bridge_slave_1: left promiscuous mode [ 596.168327][T16231] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.180700][T16235] loop1: detected capacity change from 0 to 164 [ 596.293326][T16231] bond0: (slave bond_slave_0): Releasing backup interface [ 596.306269][T16242] loop8: detected capacity change from 0 to 128 [ 596.319784][T16242] EXT4-fs: test_dummy_encryption option not supported [ 596.365408][T16242] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8416'. [ 596.419241][T16247] netlink: 36 bytes leftover after parsing attributes in process `syz.8.8416'. [ 596.428663][T16231] bond0: (slave bond_slave_1): Releasing backup interface [ 596.526417][T16247] loop8: detected capacity change from 0 to 512 [ 596.538371][T16247] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 596.565122][T16247] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 596.574922][T16247] EXT4-fs (loop8): orphan cleanup on readonly fs [ 596.581750][T16247] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #11: comm syz.8.8416: attempt to clear invalid blocks 1024 len 1 [ 596.597631][T16247] EXT4-fs (loop8): Remounting filesystem read-only [ 596.604683][T16247] EXT4-fs (loop8): 1 truncate cleaned up [ 596.611087][T16188] Set syz1 is full, maxelem 65536 reached [ 596.620800][T16247] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 596.653865][T13027] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.654480][T16231] team0: Failed to send options change via netlink (err -105) [ 596.683287][T16231] team0: Failed to send port change of device C via netlink (err -105) [ 596.691839][T16231] team0: Port device C removed [ 596.797946][T16231] team0: Failed to send options change via netlink (err -105) [ 596.812335][T16231] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 596.822137][T16231] team0: Port device team_slave_1 removed [ 596.843402][T16233] team0: Mode changed to "loadbalance" [ 596.849405][T16259] netlink: 'syz.2.8419': attribute type 1 has an invalid length. [ 596.917122][T16242] macsec1: entered promiscuous mode [ 596.917152][T16242] bond0: entered promiscuous mode [ 596.917167][T16242] bond_slave_0: entered promiscuous mode [ 596.917305][T16242] bond_slave_1: entered promiscuous mode [ 596.933313][T16242] bond0: left promiscuous mode [ 596.933357][T16242] bond_slave_0: left promiscuous mode [ 596.933499][T16242] bond_slave_1: left promiscuous mode [ 596.967619][T16274] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8424'. [ 596.997425][T16759] syz1: Port: 1 Link DOWN [ 597.134668][T15062] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 597.152488][T16289] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8427'. [ 597.432645][T16310] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 597.544444][T16321] bridge_slave_0: left allmulticast mode [ 597.544476][T16321] bridge_slave_0: left promiscuous mode [ 597.544735][T16321] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.595926][T16322] netlink: 64 bytes leftover after parsing attributes in process `syz.8.8437'. [ 597.616793][T16321] bridge_slave_1: left allmulticast mode [ 597.616895][T16321] bridge_slave_1: left promiscuous mode [ 597.617041][T16321] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.714629][T16321] bond0: (slave bond_slave_0): Releasing backup interface [ 597.793516][T16321] bond0: (slave bond_slave_1): Releasing backup interface [ 597.863254][T16321] team0: Failed to send options change via netlink (err -105) [ 597.870785][T16321] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 597.880407][T16321] team0: Port device team_slave_0 removed [ 597.923867][T16321] team0: Failed to send options change via netlink (err -105) [ 597.931422][T16321] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 597.941113][T16321] team0: Port device team_slave_1 removed [ 597.947080][T16321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.983580][T16321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.024397][T16322] team0: Failed to send options change via netlink (err -105) [ 598.031986][T16322] team0: Mode changed to "loadbalance" [ 598.156596][T16341] 9pnet_fd: Insufficient options for proto=fd [ 598.186841][T16346] loop5: detected capacity change from 0 to 1024 [ 598.194481][T16346] EXT4-fs: Ignoring removed orlov option [ 598.202305][T16346] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.059016][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 599.059034][ T29] audit: type=1326 audit(2000000014.130:39127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16364 comm="syz.2.8452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 599.059556][ T29] audit: type=1326 audit(2000000014.130:39128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16364 comm="syz.2.8452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 599.060011][ T29] audit: type=1326 audit(2000000014.130:39129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16364 comm="syz.2.8452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 599.060112][ T29] audit: type=1326 audit(2000000014.130:39130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16364 comm="syz.2.8452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 599.060290][ T29] audit: type=1326 audit(2000000014.130:39131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16364 comm="syz.2.8452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 599.060448][ T29] audit: type=1326 audit(2000000014.130:39132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16364 comm="syz.2.8452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 599.060629][ T29] audit: type=1326 audit(2000000014.130:39133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16364 comm="syz.2.8452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 599.060759][ T29] audit: type=1326 audit(2000000014.130:39134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16364 comm="syz.2.8452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 599.060915][ T29] audit: type=1326 audit(2000000014.130:39135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16364 comm="syz.2.8452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 599.061104][ T29] audit: type=1326 audit(2000000014.130:39136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16364 comm="syz.2.8452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f456612eba9 code=0x7ffc0000 [ 599.069289][T16365] tipc: Enabling of bearer rejected, already enabled [ 599.353171][T16374] loop6: detected capacity change from 0 to 2048 [ 599.374003][T16374] EXT4-fs (loop6): failed to initialize system zone (-117) [ 599.381402][T16374] EXT4-fs (loop6): mount failed [ 599.613550][T16388] lo speed is unknown, defaulting to 1000 [ 599.682795][T16418] netlink: 72 bytes leftover after parsing attributes in process `syz.6.8462'. [ 599.973084][T16346] 8021q: VLANs not supported on ip_vti0 [ 600.024485][T13027] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.104631][T16443] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8467'. [ 600.226065][T16452] tipc: Started in network mode [ 600.230991][T16452] tipc: Node identity ac14140f, cluster identity 4711 [ 600.240003][T16452] tipc: New replicast peer: 255.255.255.83 [ 600.245991][T16452] tipc: Enabled bearer , priority 10 [ 600.252000][T16451] tipc: Enabling of bearer rejected, already enabled [ 600.323262][T16453] netlink: 'syz.8.8470': attribute type 3 has an invalid length. [ 600.333331][T16452] loop8: detected capacity change from 0 to 128 [ 600.340061][T16452] EXT4-fs: Ignoring removed nobh option [ 600.348044][T16452] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 600.361829][T16452] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 600.377650][T16453] ext4: Unknown parameter 'T' [ 600.463106][T16457] IPv6: Can't replace route, no match found [ 600.585360][T16463] loop6: detected capacity change from 0 to 512 [ 600.595616][T16463] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 600.629004][T16463] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.647246][T16463] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.668560][T16463] lo speed is unknown, defaulting to 1000 [ 600.675094][T16463] lo speed is unknown, defaulting to 1000 [ 600.681077][T16463] lo speed is unknown, defaulting to 1000 [ 600.691714][T16463] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 600.709855][T16463] lo speed is unknown, defaulting to 1000 [ 600.724741][T16463] lo speed is unknown, defaulting to 1000 [ 600.736507][T16463] lo speed is unknown, defaulting to 1000 [ 600.753091][T16463] lo speed is unknown, defaulting to 1000 [ 600.765052][T16463] lo speed is unknown, defaulting to 1000 [ 600.779072][T16463] lo speed is unknown, defaulting to 1000 [ 600.795454][T16463] lo speed is unknown, defaulting to 1000 [ 600.809419][T16463] lo speed is unknown, defaulting to 1000 [ 600.827109][T16463] lo speed is unknown, defaulting to 1000 [ 600.840962][T16463] lo speed is unknown, defaulting to 1000 [ 600.853912][T16463] lo speed is unknown, defaulting to 1000 [ 600.867951][T16463] lo speed is unknown, defaulting to 1000 [ 600.881062][T16463] lo speed is unknown, defaulting to 1000 [ 600.893856][T16463] lo speed is unknown, defaulting to 1000 [ 600.908160][T16463] lo speed is unknown, defaulting to 1000 [ 600.924392][T16463] lo speed is unknown, defaulting to 1000 [ 600.940783][T16463] lo speed is unknown, defaulting to 1000 [ 600.961557][T16463] lo speed is unknown, defaulting to 1000 [ 600.981250][T16463] lo speed is unknown, defaulting to 1000 [ 601.063865][T10762] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.125795][T15062] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 601.173947][T16489] __nla_validate_parse: 2 callbacks suppressed [ 601.173967][T16489] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8480'. [ 601.227192][T16490] random: crng reseeded on system resumption [ 601.245037][ T7457] ================================================================== [ 601.253143][ T7457] BUG: KCSAN: data-race in prepare_kernel_cred / prepare_kernel_cred [ 601.261398][ T7457] [ 601.263724][ T7457] write to 0xffffffff86860490 of 4 bytes by task 7395 on cpu 0: [ 601.271472][ T7457] prepare_kernel_cred+0xf5/0x680 [ 601.276507][ T7457] _request_firmware+0x446/0xbb0 [ 601.281462][ T7457] __async_dev_cache_fw_image+0x66/0x160 [ 601.287101][ T7457] async_run_entry_fn+0x52/0x180 [ 601.292189][ T7457] process_scheduled_works+0x4cb/0x9d0 [ 601.297662][ T7457] worker_thread+0x582/0x770 [ 601.302274][ T7457] kthread+0x489/0x510 [ 601.306350][ T7457] ret_from_fork+0x11f/0x1b0 [ 601.310946][ T7457] ret_from_fork_asm+0x1a/0x30 [ 601.315717][ T7457] [ 601.318045][ T7457] read to 0xffffffff868603e8 of 184 bytes by task 7457 on cpu 1: [ 601.325763][ T7457] prepare_kernel_cred+0x114/0x680 [ 601.330880][ T7457] _request_firmware+0x446/0xbb0 [ 601.335834][ T7457] __async_dev_cache_fw_image+0x66/0x160 [ 601.341469][ T7457] async_run_entry_fn+0x52/0x180 [ 601.346427][ T7457] process_scheduled_works+0x4cb/0x9d0 [ 601.351899][ T7457] worker_thread+0x582/0x770 [ 601.356507][ T7457] kthread+0x489/0x510 [ 601.360582][ T7457] ret_from_fork+0x11f/0x1b0 [ 601.365176][ T7457] ret_from_fork_asm+0x1a/0x30 [ 601.369944][ T7457] [ 601.372276][ T7457] Reported by Kernel Concurrency Sanitizer on: [ 601.378431][ T7457] CPU: 1 UID: 0 PID: 7457 Comm: kworker/u8:66 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 601.389985][ T7457] Tainted: [W]=WARN [ 601.393790][ T7457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 601.403846][ T7457] Workqueue: async async_run_entry_fn [ 601.409236][ T7457] ================================================================== [ 601.433425][T16759] tipc: Node number set to 2886997007 [ 601.645318][T16485] lo speed is unknown, defaulting to 1000 [ 601.651512][T16485] lo speed is unknown, defaulting to 1000