last executing test programs: 1m50.037050805s ago: executing program 32 (id=15): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x19, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x24008804) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r7, 0x89e8) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) r9 = eventfd2(0x2, 0x80000) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000180)={0x4}) close_range(r8, 0xffffffffffffffff, 0x0) set_tid_address(&(0x7f00000001c0)) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r11 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r11, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r11, 0x80047210, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES64=r6], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) 1m48.917304933s ago: executing program 33 (id=26): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 1m38.48617558s ago: executing program 5 (id=301): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) setreuid(0xee01, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0x4, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xa9}, @generic={0x7, 0x7, 0x0, 0x3a0, 0x6}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f00000000c0)='GPL\x00', 0x1, 0x82, &(0x7f0000000300)=""/130, 0x41000, 0x42, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0xf, 0x7, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f00000003c0)=[r1, r0], &(0x7f0000000400)=[{0x1, 0x3, 0xa, 0xc}, {0x5, 0x4, 0xe, 0x8}, {0x1, 0x2, 0x4, 0x8}, {0x5, 0x2, 0x5, 0xa}, {0x2, 0x3, 0xe, 0x7}, {0x3, 0x4, 0x5, 0xa}, {0x5, 0x1, 0x0, 0x4}], 0x10, 0x210}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000100008005000000000000000000181101003ceaf55cf37ff9b4ef35e7755308c3a4fcd853162b789e28cbb8455b556c4fd7", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095", @ANYRES16=r0], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000080000009500000000000e00"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r6, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) 1m38.456763202s ago: executing program 5 (id=302): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f0000000740)=r4}, 0x22) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r6, &(0x7f00000001c0), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0xac5}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000eb99710c0000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8001}, 0x4004) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000a05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2) 1m38.308465883s ago: executing program 5 (id=303): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)='%-010d \x00'}, 0x20) (async) poll(&(0x7f00000001c0)=[{r0, 0x1049}, {r0, 0x80a0}], 0x2, 0x6) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=0x0, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='afs_make_vl_call\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) (async, rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) (async) io_setup(0x8f0, &(0x7f0000002400)) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000002001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r4}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x4}, 0xfffffffffffffdec) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/232, 0xf7}], 0x10, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mbind(&(0x7f00007ea000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000000)=0x101, 0x8, 0x4) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r5, @ANYRES8=r5, @ANYRES32=r1, @ANYBLOB="9762d8cfbfc227c44d8278a7beebbabb9c41e38aa6ec37cd9d67b8e2581775a94504fcf34f477b3ff023062d489b43594d10c3a3686ab2458f513e", @ANYRESHEX=r3, @ANYRES8=r3], 0x48) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={0x0, 0x0, 0x8b, 0x0, 0x8}, 0x28) write$P9_RVERSION(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000065ffff89"], 0x15) (async) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x30, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c) 1m24.80803334s ago: executing program 34 (id=279): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8a}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1276, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r2, &(0x7f00000013c0)=""/4100, 0x1004) 1m23.770760972s ago: executing program 35 (id=291): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x80003, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) fcntl$setlease(r2, 0x400, 0x1) open(&(0x7f0000000000)='./bus\x00', 0x22103, 0x6) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000006c0), 0x5, r3}, 0x38) 1m22.305747976s ago: executing program 36 (id=303): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)='%-010d \x00'}, 0x20) (async) poll(&(0x7f00000001c0)=[{r0, 0x1049}, {r0, 0x80a0}], 0x2, 0x6) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b70800000000040b000000da00007b5a70a0c8800000bfa200000000000007020000f8ffffffb703000008000000b70400000000000084fff6000100000095a2ee69cc277178bdbb68bd1dee90131311e2c534b4af014336606f6c5682129157feb5df6ff6137e4c721c20367cc4865a65a4b8cbd909472c2c7f9ca6089d30c57ec89d9147c00512466aaffc0981aae02051ccd9e05ec520c0dd6a25f9b3342c1198bf40782a81962b2c023b9b44f9931298d5e30766f30f68c0d1beec21b5e418680e9bb0ecdef72cbc67217e4f1e99b4172f63cb45d13bb79831326ed9afb051bb06226ab6f02e8bf7189edd4bd942d6c52b1f635b8efcaf93effe198accdd6739d56ed296171e20e43e589630165f1348f6a83733dc91a84adb7e5f59f8809aab0100a76f4bf7df85435c2f2ad189615ec1acc14cb90dd125e103c6684bc5339d1724082eccf6fc7f935e45a9f0f361fab4fbffdf55e184de3ac4b687319e5c2d29ceed95f5cf85e990f3ca5a2388db86ac6c4900ef0e7e2134a1d775d209a70a2a0468b67b0b5709"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='afs_make_vl_call\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) (async, rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) (async) io_setup(0x8f0, &(0x7f0000002400)) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000002001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r4}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x4}, 0xfffffffffffffdec) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/232, 0xf7}], 0x10, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mbind(&(0x7f00007ea000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000000)=0x101, 0x8, 0x4) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r5, @ANYRES8=r5, @ANYRES32=r1, @ANYBLOB="9762d8cfbfc227c44d8278a7beebbabb9c41e38aa6ec37cd9d67b8e2581775a94504fcf34f477b3ff023062d489b43594d10c3a3686ab2458f513e", @ANYRESHEX=r3, @ANYRES8=r3], 0x48) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={0x0, 0x0, 0x8b, 0x0, 0x8}, 0x28) write$P9_RVERSION(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000065ffff89"], 0x15) (async) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x30, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c) 1m18.80836861s ago: executing program 37 (id=333): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014003900b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newtaction={0x80, 0x30, 0x1, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0xffffffffffffffff}}, @TCA_CT_MARK={0x8, 0x10, 0x80000000}, @TCA_CT_LABELS={0x14, 0x7, "0118aae167fe4bb4d318e45cb16cfc7a"}, @TCA_CT_ACTION={0x6, 0x3, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) 1m16.808105837s ago: executing program 38 (id=345): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x36, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) syz_open_dev$mouse(&(0x7f00000005c0), 0x9, 0x40) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) pipe(&(0x7f00000006c0)) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='.\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$usbmon(r2, &(0x7f0000000000)=""/103, 0x67) fsetxattr(r1, 0x0, &(0x7f0000000080)='@\x00', 0x2, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{0x8, 0x80, 0x6, 0x81}, {0x8, 0x5, 0x3, 0x4}, {0x0, 0x7f, 0x9, 0x3}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xe, '\x00', 0x0, r3, 0x4, 0x1, 0x5}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x99) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20400) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 1m10.541605857s ago: executing program 39 (id=411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x48) 1m0.587765027s ago: executing program 40 (id=356): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) setreuid(0xee01, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0x4, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xa9}, @generic={0x7, 0x7, 0x0, 0x3a0, 0x6}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f00000000c0)='GPL\x00', 0x1, 0x82, &(0x7f0000000300)=""/130, 0x41000, 0x42, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0xf, 0x7, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f00000003c0)=[r1, r0], &(0x7f0000000400)=[{0x1, 0x3, 0xa, 0xc}, {0x5, 0x4, 0xe, 0x8}, {0x1, 0x2, 0x4, 0x8}, {0x5, 0x2, 0x5, 0xa}, {0x2, 0x3, 0xe, 0x7}, {0x3, 0x4, 0x5, 0xa}, {0x5, 0x1, 0x0, 0x4}], 0x10, 0x210}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000100008005000000000000000000181101003ceaf55cf37ff9b4ef35e7755308c3a4fcd853162b789e28cbb8455b556c4fd7", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095", @ANYRES16=r0], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000080000009500000000000e00"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r4, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) 56.219773279s ago: executing program 41 (id=401): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 51.409112925s ago: executing program 5 (id=515): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000180), 0x5, 0x46b, &(0x7f0000000a00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) lseek(r1, 0x3d6, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000200, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00'}, 0x10) fallocate(r1, 0x3, 0x1, 0x8000c62) 51.145500345s ago: executing program 5 (id=539): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f0000000740)=r4}, 0x22) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r6, &(0x7f00000001c0), 0x0}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0xac5}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000eb99710c0000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8001}, 0x4004) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000a05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2) 50.985597838s ago: executing program 5 (id=540): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000001440)={0x2, 0x4e23, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x4000000, @empty, 0x7da8}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001200add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 48.719352186s ago: executing program 1 (id=546): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x1000000000000008}, 0x18) r4 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) r5 = getpid() r6 = getpid() setpgid(r5, r6) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000580)='dE\x00', 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r7, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400000000000200"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 48.66714058s ago: executing program 1 (id=547): futex(0x0, 0x9, 0x80001, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00~R\r4\x00'/20, @ANYRESDEC, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/28], 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000740)={'gretap0\x00', &(0x7f00000007c0)={'ip_vti0\x00', 0x0, 0x700, 0x40, 0x8, 0x5, {{0x35, 0x4, 0x2, 0x8, 0xd4, 0x66, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010100, @loopback, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x93, 0x3, 0x3, [{@multicast2, 0x1}, {@local, 0x1ff}]}, @ssrr={0x89, 0x13, 0xf2, [@multicast1, @rand_addr=0x64010101, @local, @remote]}, @timestamp_prespec={0x44, 0xc, 0x45, 0x3, 0x3, [{@private=0xa010100, 0xfff}]}, @timestamp_addr={0x44, 0x1c, 0x44, 0x1, 0xc, [{@rand_addr=0x64010101, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x4c}, {@loopback, 0x5}]}, @timestamp_prespec={0x44, 0x44, 0x1e, 0x3, 0x6, [{@multicast2, 0x6}, {@loopback, 0xaa03}, {@rand_addr=0x64010101, 0x6}, {@empty, 0x53}, {@multicast1, 0x6}, {@broadcast, 0x7d}, {@empty}, {@empty}]}, @end, @timestamp_prespec={0x44, 0x24, 0x48, 0x3, 0x8, [{@multicast1, 0x4}, {@rand_addr=0x64010100, 0x400}, {@private=0xa010100, 0xd8}, {@remote, 0x3}]}, @ra={0x94, 0x4, 0x1}]}}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r5, 0x0, 0x80}, 0x18) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syz_tun\x00', @random="f401401000"}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r3], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x1e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000600)='ack_update_msk\x00', r6}, 0x18) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) close(r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095000000000000004f25e537c1965a0a29f249000d767934f7b5155502809c98ab693f6be99b558821d84b9edf06a110a470daaf8fe55848928ea5431c8b1a08b3c805979f84908d8f5b2a60b5b3dbad45f599cc1685c5134438b91d8c53824e31e4161ca80c309eeef6c700e8087a3cc079b98257d42ba0ae77ebca46799e8bc159def82c876f35f19700415f62716a3e917d3f7b6e87e855c7b72a114bfb68af0e3ae35394a3d80998ff0544f2d15c321cd4e0aaa5d496ff1456efae8ae8d0e697e41d3051a8f176c60a72da0db27c563b752c"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4e402, 0x0) sendmsg$AUDIT_DEL_RULE(r9, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x2, &(0x7f0000000240)=[{0xc, 0x0, 0x47, 0x7}, {0x7, 0xf, 0x1, 0x3}]}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xf8}}, 0x0) socket$rds(0x15, 0x5, 0x0) 48.260403311s ago: executing program 42 (id=473): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) 47.872696772s ago: executing program 1 (id=549): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="1400"], &(0x7f0000000100), 0x600) 47.808575726s ago: executing program 1 (id=550): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) 47.751356211s ago: executing program 1 (id=551): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f0000000740)=r4}, 0x22) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r6, &(0x7f00000001c0), 0x0}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0xac5}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000eb99710c0000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8001}, 0x4004) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000a05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2) 47.566698886s ago: executing program 1 (id=552): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) io_uring_setup(0x7265, &(0x7f00000004c0)={0x0, 0x108b899, 0x10000, 0x0, 0x237}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf000000", @ANYRESOCT, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r0], 0x40}, 0x1, 0x0, 0x0, 0x40048c1}, 0x4008054) fchdir(r3) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$packet(0x11, 0x2, 0x300) r6 = memfd_secret(0x0) fchownat(r6, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f00000001c0)) ioctl$BLKGETNRZONES(r6, 0x80041285, &(0x7f0000000100)=0xf) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000005c0)={@remote, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r7}) syz_emit_ethernet(0x72, &(0x7f0000000640)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa808100100086dd60f53a0400383a00fe8000000000000000000000000000bbff020000000000000000000000000001020090780000050060000000004084fffc010000000000000000000000000000ff010000000000000400000000000001f4c638bed6f068cc"], 0x0) socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xffff}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x1, 0x0, 0x2000008, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000740)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRES16, @ANYRESDEC, @ANYRES8, @ANYRESDEC=0x0], 0x1, 0x343, &(0x7f0000000bc0)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 46.762177249s ago: executing program 43 (id=492): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) io_uring_setup(0x7265, &(0x7f00000004c0)={0x0, 0x108b899, 0x10000, 0x0, 0x237}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf000000", @ANYRESOCT, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r0], 0x40}, 0x1, 0x0, 0x0, 0x40048c1}, 0x4008054) fchdir(r3) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$packet(0x11, 0x2, 0x300) r6 = memfd_secret(0x0) fchownat(r6, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f00000001c0)) ioctl$BLKGETNRZONES(r6, 0x80041285, &(0x7f0000000100)=0xf) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000005c0)={@remote, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r7}) syz_emit_ethernet(0x72, &(0x7f0000000640)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa808100100086dd60f53a0400383a00fe8000000000000000000000000000bbff020000000000000000000000000001020090780000050060000000004084fffc010000000000000000000000000000ff010000000000000400000000000001f4c638bed6f068cc"], 0x0) socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xffff}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x1, 0x0, 0x2000008, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000740)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRES16, @ANYRESDEC, @ANYRES8, @ANYRESDEC=0x0], 0x1, 0x343, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_enter(0xffffffffffffffff, 0x5ddb, 0xf3cd, 0x4a655ec10deb0804, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 39.687465082s ago: executing program 0 (id=560): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000700000000000000000101000000000000000000000abe09839f6819f671af145003888ec752512aaec1c16acc27d04406839b5665f444b4dd4885c7b930aab762707d80e3a0ca0913bdc16ec4398bd6306ce726d2e28e400b43929fa73d0908a7174ddfab6368aa3d58bb4ea66b58043366ad5f6172d53c8e3e72d7ca1c552b3e1335b0e4c2628f624500a59dbe62f519c8fb9e2e2a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r2, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x3b1, @time={0x5}, 0x42, {0xc0, 0x3}, 0x46, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000000000000000081"], 0x0, 0x34, 0x0, 0x1, 0x2}, 0x28) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000400)={0xfffb, 0x0, 0x14, 0x0, 0x5}, 0xc) fcntl$setpipe(r4, 0x407, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="a126ffad2a000000bdc15e18b7737ff90d7911ed4f62ffa90001000004ec000004a44332a07d373d679eafe100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x54, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000580)={0x2, 0x1}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x4d9e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$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") 39.124361816s ago: executing program 0 (id=563): r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r0, 0x0, 0xa00, 0x0, 0x0) 39.018867655s ago: executing program 0 (id=564): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000180)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000080000009500000000000e00"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r2, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) 38.971980629s ago: executing program 0 (id=565): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000002"], 0x48) 38.30815538s ago: executing program 0 (id=566): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f0000000740)=r4}, 0x22) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r6, &(0x7f00000001c0), 0x0}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0xac5}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000eb99710c0000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8001}, 0x4004) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000a05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2) 38.283454442s ago: executing program 44 (id=530): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) link(0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x10, 0x7f4, &(0x7f0000000d80)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r2, &(0x7f0000000080)=""/43, 0x2b) getdents(r2, 0xfffffffffffffffd, 0xbb) r3 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000000c0)=@ieee802154={0x24, @short={0x2, 0x0, 0xffff}}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0xf5, 0x0, 0x0, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r6, 0x0, 0x1820) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, 0x0, 0x4c080) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000fb1850cbdbdf25250000000e0001006e657464657673696d0000000f0002006e65745808890d696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)={0x124, r10, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5f3d}, {0x6, 0x11, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfff}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x422}, {0x6, 0x11, 0x9}}]}, 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) fcntl$getownex(r7, 0x10, &(0x7f0000000180)={0x0, 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, r11}}, 0x40) 38.097945137s ago: executing program 0 (id=569): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[], 0x110}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = socket(0x2, 0x2, 0x1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x508, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x438, 0x2e0, 0x2e0, 0x438, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x0, 0x8400}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {0x1}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000004009c00000000000100000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) syz_emit_ethernet(0x8c, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r7, 0x4b4a, &(0x7f0000000840)=""/242) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r10, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x45833af92e4b38ff, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYRESDEC=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r11}, &(0x7f0000000200), &(0x7f0000000240)=r12}, 0x20) 35.339692143s ago: executing program 45 (id=540): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000001440)={0x2, 0x4e23, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x4000000, @empty, 0x7da8}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001200add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 32.088439058s ago: executing program 46 (id=552): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) io_uring_setup(0x7265, &(0x7f00000004c0)={0x0, 0x108b899, 0x10000, 0x0, 0x237}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf000000", @ANYRESOCT, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r0], 0x40}, 0x1, 0x0, 0x0, 0x40048c1}, 0x4008054) fchdir(r3) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$packet(0x11, 0x2, 0x300) r6 = memfd_secret(0x0) fchownat(r6, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f00000001c0)) ioctl$BLKGETNRZONES(r6, 0x80041285, &(0x7f0000000100)=0xf) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000005c0)={@remote, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r7}) syz_emit_ethernet(0x72, &(0x7f0000000640)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa808100100086dd60f53a0400383a00fe8000000000000000000000000000bbff020000000000000000000000000001020090780000050060000000004084fffc010000000000000000000000000000ff010000000000000400000000000001f4c638bed6f068cc"], 0x0) socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xffff}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x1, 0x0, 0x2000008, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000740)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRES16, @ANYRESDEC, @ANYRES8, @ANYRESDEC=0x0], 0x1, 0x343, &(0x7f0000000bc0)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 27.770868765s ago: executing program 9 (id=596): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x3}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='io_uring_file_get\x00'}, 0x18) add_key(&(0x7f0000000400)='cifs.spnego\x00', 0x0, &(0x7f0000000800)="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", 0x15c, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000006000000000000000000180100002020702500000000002020207b1af8ff0000665b55ae2f5800719e97428681e97b318700bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f0000000440)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) setgroups(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r5, 0x400, 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="0200000008000000000000000400050000000000100000000000000020"], 0x24, 0x3) fcntl$setlease(r5, 0x400, 0x2) fchmodat(r5, &(0x7f00000001c0)='./file0\x00', 0x60) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000fd2bfe", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r3], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="ed4f0c0c23076ad5f113ec0b8ec518000000000000000000bf62244a56b4343977cca0953ac49740"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) 27.685413382s ago: executing program 9 (id=597): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r3, @ANYBLOB="010000000000ffffffff0c000000180001801400020076657468315f746f5f62617461647600d0000380"], 0xfc}}, 0x804) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r4, 0x89f0, &(0x7f0000000080)={'bond0\x00', @ifru_names='bond0\x00'}) 27.537421254s ago: executing program 9 (id=598): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x4000) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003240)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x25df9bfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}, @filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_bpf={0x44, 0x16, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x3, 0x101, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x6}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000002c0)='kmem_cache_free\x00', r3}, 0x18) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000240)={0x0, 0x0, 0x83, 0x7}) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 26.496008555s ago: executing program 9 (id=611): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0xff8c) 26.390361583s ago: executing program 9 (id=613): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f0000000740)=r4}, 0x22) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r6, &(0x7f00000001c0), 0x0}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0xac5}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000eb99710c0000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8001}, 0x4004) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000a05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2) 26.263035033s ago: executing program 9 (id=617): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0, 0x0, {0x1000000}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000440)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x4058534c, &(0x7f00000000c0)={0x80, 0x2, {0x0, 0x0, 0x4}}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket(0x1, 0x5, 0x0) close(r5) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)={0xe0002014}) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 25.877658113s ago: executing program 7 (id=619): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6012000800783afffe8000000000000000000000000000bbff02000000000000000000000000000186009078004006598080a8030037004023493b87aafaffffffff43ba9e9ea619ffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af18030001fee9ff010ef50000000000000101"], 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 25.494121144s ago: executing program 7 (id=621): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r1, r0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000540)=@l2={0x1f, 0xee, @any, 0x81, 0x2}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000005c0)="10898f97222ffa87a70b9ea5dc709d8ff17bf33b09cb59356201d7b09b30fce295400d9b22dd3929bae4e2fe155798914add48db768ce7fd9f61902c907bab", 0x3f}], 0x1}}], 0x6, 0x200000d1) (fail_nth: 1) 24.618166582s ago: executing program 7 (id=625): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000040)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400dd7b01050102000000000000000001000080"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x961}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r4, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000030601020000ffffffff00000a00000105000180"], 0x1c}, 0x1, 0x200000000000000, 0x0, 0x4004810}, 0x840) 24.558103007s ago: executing program 7 (id=626): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x1, 0x13, r1, 0x28e2d000) 24.457031685s ago: executing program 7 (id=627): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f0000000740)=r4}, 0x22) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r6, &(0x7f00000001c0), 0x0}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0xac5}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000eb99710c0000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8001}, 0x4004) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000a05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2) 24.355073623s ago: executing program 7 (id=628): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000a00), &(0x7f0000000400)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300300004a00d7270a00805175f7ff0000040000", @ANYRES32=0x0, @ANYBLOB="7f00000014000100fe80000000000000000000000000000e"], 0x30}, 0x1, 0x0, 0x0, 0x20000014}, 0x40c0) setsockopt$inet6_int(r3, 0x29, 0x13, &(0x7f0000000080)=0x9, 0x4) memfd_create(0x0, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_setup(0x6, &(0x7f0000001000)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) io_getevents(r5, 0x2, 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000180)={r6, r7+10000000}) io_getevents(r5, 0x1, 0x0, &(0x7f0000000000), 0x0) 23.028341667s ago: executing program 47 (id=569): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[], 0x110}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = socket(0x2, 0x2, 0x1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x508, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x438, 0x2e0, 0x2e0, 0x438, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x0, 0x8400}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {0x1}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000004009c00000000000100000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) syz_emit_ethernet(0x8c, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r7, 0x4b4a, &(0x7f0000000840)=""/242) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r10, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x45833af92e4b38ff, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYRESDEC=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r11}, &(0x7f0000000200), &(0x7f0000000240)=r12}, 0x20) 15.585814799s ago: executing program 8 (id=679): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0, 0xa4ff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) 14.979615547s ago: executing program 8 (id=681): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=""/183, 0x0, 0xb7, 0x0, 0x6}, 0x28) 14.885855174s ago: executing program 8 (id=682): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_MTU={0x8, 0x4, 0x3f9}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a0000000000000000181200", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="b8", 0x1}], 0x1}}], 0x2, 0x20040017) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0xf) close(r6) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) r8 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x4, &(0x7f0000000680)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) r9 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r5) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x6c, r12, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x50, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}, @ETHTOOL_A_BITSET_VALUE={0x33, 0x4, "fd4e00353b526168899bdd206946aae8b62ca7be08680e84c6847f542f9c468f3f135a0ba038378cdc45fba8a78022"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}]}, 0x6c}}, 0x8000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r9, 0x47bc, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) signalfd4(r13, &(0x7f0000000200), 0x8, 0x80000) 14.408527532s ago: executing program 8 (id=684): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r3], 0x4c}}, 0x0) 14.325076558s ago: executing program 8 (id=685): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f0000000740)=r4}, 0x22) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r6, &(0x7f00000001c0), 0x0}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0xac5}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000eb99710c0000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8001}, 0x4004) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000a05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2) 14.186063189s ago: executing program 8 (id=688): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x1, 0x13, r2, 0x28e2d000) 14.166988751s ago: executing program 6 (id=689): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) socket(0x5, 0x800, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffee1, 0x0, 0x0, 0x5}, 0x28) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7]}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x102000, 0x0) flock(r3, 0x1) r4 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r4, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d6, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000340)=ANY=[@ANYRES8=r2, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000040)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2f, &(0x7f0000001940)={0x2, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x2000, @initdev={0xac, 0x1e, 0xfd, 0x0}}}}, 0x108) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x5, 0x0, 0x2}, 0x10}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYRESOCT=r6, @ANYRES16], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x8, '\x00', r6, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='io_uring_file_get\x00', r7, 0x0, 0x1}, 0x18) 13.296350969s ago: executing program 6 (id=696): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8=r0], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0x1, &(0x7f0000000180)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='9p_protocol_dump\x00', r1, 0x0, 0xffffffffffffefff}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x4c}}, 0x4) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) fspick(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ftruncate(0xffffffffffffffff, 0xc17a) chroot(&(0x7f0000000000)='./file0/../file0\x00') 13.245985042s ago: executing program 6 (id=697): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8=r0], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0x1, &(0x7f0000000180)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='9p_protocol_dump\x00', r1, 0x0, 0xffffffffffffefff}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x4c}}, 0x4) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) fspick(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ftruncate(0xffffffffffffffff, 0xc17a) chroot(&(0x7f0000000000)='./file0/../file0\x00') 13.214481445s ago: executing program 6 (id=698): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000180)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000080000009500000000000e00"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r2, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) 13.191111837s ago: executing program 6 (id=699): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f0000000740)=r4}, 0x22) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r6, &(0x7f00000001c0), 0x0}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0xac5}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000eb99710c0000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8001}, 0x4004) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000a05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2) 13.054346328s ago: executing program 6 (id=700): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) r1 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x50, 0x3, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x7f, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4a, 0xf}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x9, 0x1, 0xf, 0x0, 0x7}, 0x1f, &(0x7f00000000c0)={0x5, 0xf, 0x1f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x8, 0x3, 0x8001}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0xb, 0xf00f, 0x7, [0x180]}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x455}}]}) syz_usb_disconnect(r1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r2, 0xffffffffffffffff}, 0x4) syz_usb_ep_write(r1, 0x0, 0xfe, &(0x7f0000000200)="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") r4 = syz_io_uring_setup(0x5eb7, &(0x7f0000000300)={0x0, 0xe0ef, 0x2000, 0x3, 0x25e}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000440)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x200, &(0x7f0000000400)=[r3, r2, r2], 0x3, 0x0, 0x0, {0x0, r6}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@func={0x7, 0x0, 0x0, 0xc, 0x2}, @float={0x4, 0x0, 0x0, 0x10, 0x2}, @ptr={0x3, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x30, 0x5f, 0x5f, 0x61, 0x2e, 0x0, 0x5f]}}, &(0x7f0000000500)=""/4096, 0x45, 0x1000, 0x0, 0x7}, 0x28) r7 = syz_genetlink_get_family_id$team(&(0x7f0000001580), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001640)={'syztnl2\x00', &(0x7f00000015c0)={'syztnl0\x00', r0, 0x80, 0x40, 0x1, 0x9, {{0xa, 0x4, 0x2, 0x8, 0x28, 0x68, 0x0, 0x2b, 0x0, 0x0, @private=0xa010102, @loopback, {[@cipso={0x86, 0x12, 0x0, [{0x2, 0x5, "2512f8"}, {0x7, 0x7, "e9cc5680a6"}]}, @noop]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000001680)={@empty, 0x0}, &(0x7f00000016c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001700)={'vxcan1\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001740)={0x0, @initdev, @broadcast}, &(0x7f0000001780)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001540), 0xc, &(0x7f0000001cc0)={&(0x7f00000017c0)={0x4f0, r7, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x21c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}]}}, {{0x8, 0x1, r0}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x85e}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r0}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r0}}}]}}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x40005}, 0x4000000) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000001d40), 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r12, 0x5000940e, &(0x7f0000001d80)={{r3}, "d8100c80e109c3a096668519a1f9579d31a6ebdf4dfd323b6474447f2c37b53fa25e0769b908af6e655d5ccd3cdd3c4afc4634bbf95d968e538dc3ea84a87f65b7919aa1cefb52e49694667fce0137a49183f1e6f9c8ee3b9706c62b0daec6f0e725b5d1d547bdd53de5ac427992df5add9c7d4b0e7503235b7f5d7c7c1db354ed70fb24e6ca71d09a02aed9595c7c2a764cb6e3a96883dc156877a4cef810220a40f7d5072a4a379001f3e2982be28b390f934cca29aaabfb202b414fb0a2fce2967a777cc170c8f3ed9e67be1862485ef12f585893cb5406ea8e73dabb57697f354cff4ef02743991bf9caa1aad8ccdf8f3034a30cbe2b985476847fb51299e1333361e361f512bf1c2c8e5a8db580e1fd801968738465a3fe249e22ae1f09b178f57e86bf4fdc5a627f52ce43059f42ab57704f3cb38fecff3b9ad00199a130659f92dec905574467e0ca9f76fe8a3b2718492e00c67f071dd6af362ca99f96d2bc57438ea1bcdb859b0cfb6e407acaf6b5b5c028255ec61f08620501a7152755f4a7bf7b140e84b748cec551eba07d7e53a0e63af49020b49c6da538a53ba4ea82b6598300cd2cb2b789909660838d55965e46285fc3c419e77c826ae2a34211ed2339fdcfb90bcabcaa68083cb010afda06c4dd19a574a92c3f9a934140ff3ab32f181ab136a0860e358bf7b625b404c15ae45fd3bc8575a257682b729231ce946f25920bbd9206d30282e13bd4e0f713826cea4129504a3fab49dfb759a2f876b2a1edf9e395a6f880f343b588e0d8b89ee7560f1655f54a57b69f0054da1e3a5803e5ff287ea9f112a5f9a37ed334c1831575cd7ec849de4eae5ea5d69a47a7f953f2a15de68c3777a98ec9da4582b2095476c905301f04c744b0aee3d9d15f6ebd6f968bbc23ed453f414ba35c5c10ed04560a679c47a1cd7745b7a3311720219b391f8b2586336b6fdddc36be96d17c7e47bf97d4f2ddc437578648a842266ca504fe9ca9705c610f61c4bf3fbf5cfc983c202a39694738c81b5d2a200bd3c0d035adb4a82383859c17bdb88db61e5c989cf6c79e172add2d9c1ac065acdac9852e9663be79573a834bb7aca1c41a5e99cf3e07ddbd4822b324dd1e6b5b6f9044ddb33516efb1fdc3ac27154bd150cf456d4200ce231ad33b4aac34be2cd7068f0e9aa8314ebfeb018e6bdfe40b52de64c211977cf52e70c7b89385b10696a5e50a888d9bf4d839db63de86d41a60106dd857445b0b2b5926c9977b533a0038c9a3532468b071d30a4a50f08f3141afaa71ff838bf7bebd46d9e37c09fceeefb70aad4ecf7d11404475cff2cb49614e2262b927a9fc366997187c73097aed140a20039a1c6fffd83378d1503e5ef7e694cb63c5bcb2d36163b677ec1434661c78ad4ba4e182370d8ab4bbdaa974abbafbc5c6cd68449029be415262a30f6c77e0986a227955a1bb748e1fa715fc0a21f2e5f25a7da5f5d9a465eef9bd8fe8545c688949d29968b12af0d5eecd4561336d5d8327df432f4c9105ec2750fe0169e9f7a3e286dd59a5cbf17061398087bb6562cb201dd3a6271774219dae787a78716f80a39e4ff7b152038c737dc589028f2733d9d7daa0211893bd807f4bcd02fe67bbecea548b1f9ddb5177530cd9e78fd8baa819b30728720a9e2a0ec9894595aa997e2d7c0a64b6ea57b6b0ca7f036484897698adcbbf9ee94c6a397343b441c3bf9fb4e073dff761f3c1f5bb84418bd42634b921374489e15bab219eccb5562b571fe8a9f712a3af5ad44825216b728215e7ec824faf524258ecf2c99647f31a51eb549baf00069a7711f8748bebbea02f3f15561ad812fad6c8ea3c69b025f0819ccbd907053b68252eb81a8c80907d92c3b219d231cc871bf6f9a10532691b122b4a62c8cb634ebd7ade6e5b9906e0be42fab1bb8641e6b1d60e13490deafcc6899a750d2972cf20c262c9d71348af765d61e771abd53021f8ceed55cde0425c4ac889d763ce40a90852d01a136f40678a100428c66a490f10a42a1368f62a80ebf6d89f08b7deea823561a7ee08a74215735cedd21c497009bd466f650ded11246b70e7a7237d6f21859a83b08c98071aabdf3a9aa88fdc47fcf6f44ee5def98ee42bf5418ed9d2eadd634e772656aee217a7673eec862b63d03614d87620d1e465fdc39325213523365318b8a9ac42fae78a054719820e808ce588960bc23a4caf152f4d50e44b1526e223fd7c89b53e4e9e3a6abcb2553a621f36042edb227445ea275de68862c46aa45b01f82fe97b6fdb8c860cb6b060894be53c32710238979b6c2f14618ec7d319343bf2dd57432f904fb28f61c8de524a1d337bd1f949f7ca989c9cab1eef3d3020c32b636a3c8df7d56869ba68f907533a040b1323ee686aaaf4b8daab49912ce679cbc14b9ebf9d00b77cd87b98fbb0d9195d884ae1656b0d40d5a9bceecf4649ff8c41c6e8fe0b92003be0feef6d529c82184885f26f36ffd775fa062f53d5de83279f861242ec54684c2d04e1b466a8e421c0d5dc5f220b1e29443ddb2e503a795cff97699230bd617c728c6f967907597c684cf6da5b6afda90c44043b1126146b31f6f46ee65ab82fac8f6cb4f2977928d3a99ee845b1de1a16879d5f838ba98643c30ef6959a799f3e75548d01eb4f1c491b3d161fdb922184c8a9d51536a4dc62b0188eb2747f2aeb2978033cca5a2c7479231c36958a1bb48f81f8decbadb10e94ac62cafc6524b7a1179043628ade3e8eb59f56c339b72734466862ed41e4ca551d9f23f0ebda6ab1ba5ddb39d075914ae513cdc673869d9bdd61d3c321c8d4e5acc8d717e370f7a18bdb24142a41e98b8e72d66f6041e4e950c088650cc27fd396f697fd6921850bab5a663ed4aea78b7debe1f40c4636b03a425c55b08b64d649384df42767994dfa229db548666e2302da79d8e0dfec9311091a2a93f28483f7d614f5138c855340fa2f5f0cf264c0db206428e89201976ccf036abed0d7b6c1454f849e65457a57d4735c01c95727280bb928bf9bd462aba7a5ba95fb5e4302c81c67f5152f04558e5eac416617af5f2ebd00c56375004f5b263946e4e2b2c7c257a1513d70eef1a12fe2f989d382da978927e2ed867b0cbceb445bbac8b9fe902bdccff06888be924e9f1fb2e702edb90c53054d683184d392172badcdd47975627f56d44f7bed277e073ff3c11ddd766173b38e8ee6dfbbfce8408dac261986483fd81baadef0a4fb8c7020e66d3b00a18bb644ccce9cd740df0995fa464a1aeb9871e4c2ceacea1c75b238d6453bb5468dcad124881c416c9d42892c57220d6c7a13c1dddc0163a69c43dc7876f22dd5eb6a0e93b5a715d9b387ab797602c874cc751697e24cd378e78c7fa5b315e3506dade2a221a8a70fedb80161c1ba59c91ba5312743f925affe36fd47541e5e331a10015a344066b57217735c0b1d4688762f72f3e2b442f3a0621a8d809a0d7435bb68c40e4e742dd9693c4ce1796f3103c62162db090da73a60a4d505d01d6cbefe53b9115dd4c8f27c826200919f2e8c7df176e134c09dec43a027f0f1b00bec9a0a63d174ccf22bb84e886e80a772c6986b30a576221d86c77e1b61c56f4982f6ff50f14752913c713a75030d5ff18d6520f6862b771011559be0df5918e15e1f0e809f2f7fae3d3e871e820d12cc2afdc173b063415596de2c15bbc9f87dcdbbf8aa2e9c89c9b35fc2af0e6d892b3f0def193e0f0e54ad622e36f762e3bc8013abc6d125a8282873f055efec63d778d5472f9d44465d58532724639b3431a9fb92c5384d145043f1ba803e2a335346a796559a2e70c6c1657c33382c816e7109310960b2b7acb1703ad04ec6ea92129b01e31ce2c2d02ea3c16474ed3398f09e9b830e82afc73d36bee8d8ceec8561d42e580ea0bb8109589331c22e4f9ff3f0f2f1c53c5afae4d12552eeb348525d2a0bf95473a4afecb58bd062050acf55b41ee73c62626779418f371af2f14c18725f870f8395f2b1ee583d63bd1ab2f7dace517a5abd8e3cbe236f5a55bb9837326e896ec7ae86ee31ffa5fcf96f8680b88ca7526b5f2996238b522e41113755e965d69ad297153ad34530eb0f0e15e183d9beb6154fee5d435c7481124d7c2e65d57a72bc411edb61493590a432f0a149facf4cdeb0e3a0e2807e477108ae456bd86ec69cf3b1931f6931736c001fbe543a4bfdb007244d6ddef33600a04de487a01355342a9f393016ede63117573ff43d228cc3f2af892f04831fcdb64e3d22c6df7d3331aefe3a7e130736010796632e629975562d987db59f4e09b6c5cf66e4d4a6082ffa5dfe5ea6edfc277e0ec5ee1947c9a07d1829016d4ad2360e967617faf0490a9dc81d169508385faf4a6c2c71e4e34b886e335158ce02eba62fe850af853bf8aad2dce613600a60a832429540fe3abada3e3cb96e26a36c351eebe8321e7589e6f0143fec189e8b932e5539561eed64d4877548493e4a019b7a017a60e92d266043f8243cce99f4ac9b3ce675aaf26a7f5c6380cc43a3715cee62bdaa328e3447c2ccf73b4840eed56a3d15060b4f66a61056ce779efd983f2cad6e795b0b04b5877ca3d6551abd21618f4e7138fe5d5312298606da49098f2d8624db66d2214a03b154671e53ff604ad0e7fe2c9183749fb9bbbc3e3a8948ae2cb9c891093c179215b0edcbd07827ce006f44865db4e16b97cead6cd88e39190fa80bfb0a9acf20da8e765a7d6b27ac31fa257ca01147d38706ee63f4bdc08378c53b11a06555e0016414861da2df9621da16ece036dc7bf72fd5c7a95dbdd33d3ceab3a2e9a68fca0d1c733173c2ea3dd2259480dc02277f4c5ade0aeaa3068edd49d9b3df16c2dfb3ac0758fcf9754953f4bba7bc631f66687e918a312cdf0ac6543d587859b05c087cc6b229f1157a0a0f1592b7ca6b4e1f267d5a7744bfd014b0d9a365a1795686b987ad1279c3066c248fabf962f9e3f124e8a296eb87360ac12d791c38b45c5f17aa0d39aad9275671b917b6c12c832f9cd8270145cb223eae9b2043179408ea2f293e59489ce878b679982e8a847108e6ee6b1e5caf6e13c579b0fdee128285b5df8430ce2e573135ceeeb924ff245dad4310cca94972117859ae4e0f82519a0d2564fb5324b2db5eb067cdfed296a0b31d3de371467af5801e1bdb93dada9d1dd1ee276b83c25684b3531f02d0903757efa93f09380137c36e9e1da41f3e1454923dba341032ffc22c253b4d4a143881aff3ff2be1c6f9d930b3528e3f057ac889f232646e744bc48ef732b7966aca2f2033e847ddfeac28849e79a8dfab3a38c408eda699f826329e3e77ed16c2a0c50489488d7b3d665652b50c3d5b1d20bfbddc4f32276dacb5b498f9789c3429a3ba1b6a280d96d188ffee5e798e24bf77dcc7fd6b82e12949fe02c6536d6380882cc17e85f50b61d4c17e4eb50628475d01ab8d7fecfee04cc3d6030f1898885ffee8145d5552329807f038bcd5548b7c004371167931713d0adc23edc83d0ed847afadaa80dd7a6c68ed7f601383836c839565b271b5bf7cded3fd472ba9880af56028417a2ccd528e4e2240dd5e0692d55ad1eb3a3326b3637fe5f12c252d78494ffe3eadd56d1162927a1c4fae28bf9f51d3954dbcdce5ba678fce866fdb4172e6af05a2ab5ffe67789ec282a3863d6093f5d284af2341a861a1a0282b051943afacf434764100e67d5439cdc96ea81d0082bed6cf3222fd0f182ca4c39bb249ef"}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002d80)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) sendmsg$AUDIT_DEL_RULE(r13, &(0x7f0000003280)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003240)={&(0x7f0000002e00)={0x424, 0x3f4, 0x10, 0xc, 0x25dfdbfd, {0x0, 0x0, 0x18, [0x9, 0x1, 0xaad, 0x4, 0x8000, 0x3, 0xe104, 0x7f07, 0x7fffffff, 0x6, 0x4, 0x2a19, 0x6, 0x81, 0x0, 0x9, 0x5, 0x2, 0x8, 0x8, 0x447, 0x8, 0x8000, 0x1, 0x4, 0xfffffcf9, 0x8, 0x3ff, 0xd096, 0x5, 0x4, 0x1, 0x5, 0x0, 0x9, 0x2, 0x87, 0xa0b, 0xf, 0x2, 0x5, 0x74, 0xf, 0x0, 0x5, 0x2, 0x1, 0x4f7852e6, 0x7, 0x2, 0x8, 0x0, 0x7, 0x80000001, 0x1d, 0x0, 0x4bb, 0xe000000, 0x6, 0x5, 0x5, 0xb28, 0x100, 0x6], [0x8, 0x2, 0xfffffffc, 0x3ff, 0x2, 0x80000001, 0x3, 0x1, 0x0, 0xfffffffd, 0x10001, 0x5, 0x1200000, 0x2, 0xc, 0x5, 0x23, 0xfffffff9, 0x200, 0x8000, 0x3, 0xcd, 0x45e, 0x53, 0x5, 0xffffff80, 0x6, 0x5, 0x7fff, 0x0, 0x0, 0x3, 0x4, 0xfffffa07, 0x6, 0x6, 0xfffffff7, 0x400, 0x9, 0x268e879, 0x4, 0x1, 0x8, 0x7, 0x40, 0x9ce9, 0xb1, 0xb1f8, 0x7, 0x3, 0x380000, 0x3ff, 0x9, 0x2, 0x2, 0x2, 0x7b4d, 0x9, 0x7, 0x8, 0xa, 0x4, 0x1b, 0x3], [0xd63, 0x4, 0xc4624160, 0x2, 0x8000, 0x100, 0x5, 0xdf, 0x0, 0x4, 0x6, 0x9, 0x100, 0x5e, 0x4, 0x1, 0x2, 0x7, 0xfffffffc, 0x1000, 0x1, 0x87a, 0x8, 0x2, 0x1, 0x1ff, 0x8f, 0x8, 0x90, 0x200, 0xf24a, 0xc4, 0x85, 0x1, 0x6, 0xfffffff6, 0x10, 0x7, 0x5, 0x10001, 0x1ff, 0x7, 0x0, 0x0, 0x6, 0x1, 0x21, 0x1, 0x101, 0x4, 0x8, 0xfffffffe, 0x9, 0x9, 0xde99, 0x0, 0x6, 0x1, 0x9, 0x8, 0xfffffff5, 0x0, 0x2, 0x9], [0x5, 0x5, 0x298, 0x9, 0xe, 0x95d, 0x3, 0x5, 0xa6, 0x4, 0x5, 0x6, 0x2, 0x7, 0xf, 0x7, 0x7f, 0x8, 0x7fff, 0x3, 0x7, 0xf7f, 0x0, 0x3, 0x9, 0xe, 0x7, 0x5, 0x7f, 0x3, 0xa, 0xfa, 0x0, 0x7, 0xffff, 0x3, 0x7, 0xd00, 0xfffffff9, 0x80000001, 0x3d, 0x8c, 0x10000, 0x100000, 0x7ff, 0x2, 0x3, 0x101, 0x8, 0xe84c, 0x800, 0xa3b, 0x0, 0xe5, 0x74, 0xbc, 0x1, 0x5, 0x3ff, 0x8, 0x5, 0x7, 0x1, 0x8], 0x1, ['\x00']}, ["", "", "", "", ""]}, 0x424}}, 0x2004c00c) sendmsg$sock(r13, &(0x7f0000003840)={&(0x7f00000032c0)=@hci={0x1f, 0x2, 0x2}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003340)="777e4e36985e9784532761442002266f916a3031016077e00cda8718eb99a626a67f9c3cb9e71303b2e804a5281a7c75ec13b702aa207e2203dc2828d054b45e51098f52f28cb2b17a4c9630a7f0a26c67c66dba5584a06adbefc74a91589cf3401bf7b9f6c7541642df372b9c9637c3142951af2bb58652227876a92a7997a8c2ef275ed1cece2065f5b27e77", 0x8d}, {&(0x7f0000003400)="047001a87c330791e036ab567ce32c1a34b9245b6be321152bd62c09c5bacfca9addfd006ea692619306e4150c799a95b9d42b6e11b042864154007a6c08ee8aadb78876d0f18cf63ca050a440d3568b79610f593cd424049ef240bf7a6b178190310fdd3705f7e922447583a15980af10a98c7dfb355c315dbd562199b7e452b958f533177c49b1e743ef7e44c374e9ba8973", 0x93}, {&(0x7f00000034c0)="9d6892fdb611ff66bbd26b1a8c58fa5533a5ab3fe90fd5a686c34b0c553b3b957040ca1f509c08e2855e588e4b2a069cb48d11e7881848faa6fb902be726dea123125ae48051011510c2e976cb52f3f1eb3d7ab983fbde440f4c42968abad5d5ee8c8cdd86f50b914589dab1b31f0e23cab372cc69232468c9b8ad88bb993c425c9d4ee41b80a52c3e1e9b02c61a630125", 0x91}, {&(0x7f0000003580)="cdfda6e1226cc4bc7f9a69de5f54dd565e744b8a7b327c5b7b3c3626fa2a", 0x1e}, {&(0x7f00000035c0)="52d8d5bd3fd2a970e4253bd9ef57fa89d2b35c589619c66833c2f7cb3d083f23616aa29e9deb15268cbac3ac18d5c0792733c3e96dfa43abc57018d9f5836a317e92c58df1fa5346a089a8f21bdf1076ca0d6d08958869d6e19a41990e4668bd222bd92f55c022bfafffbf2297230f57112b8473802cb18d2cec7006e17e405f34bc986ffddca6c5e4899d2107b5722ba81a6e6a3865c15ce887568130ede1fc6beba83bb74286b3853a06f49e257f5fab155abafc5ff99834da53f7f269b406574ac0ef96936a03a5acc1d4440008fc1013c7d5317e1a42101dddad388d152facd8421f7f3992", 0xe7}, {&(0x7f00000036c0)="b81767b6094a6a93dda53695156baa50ef3081cd540088ede2333e22a3b94d0b05475f1fcff25ed43a68c1afd451ec182ccdba25035106b6df778d4f3e21d317e30df6133548e81b3a6d387ae91595334c24401eb9d685a0ce58a24126b1bc76b29f1b4983e59d8780503ba983c91692159f2fbc30b4b69d64f881f698c312b5bf4538018627388e425bc087cf00f6b4f6a844db9993f96aac338429b92e886249a1639fd562f9eca0ea2956d1dadd60d24e084ba5f1706b8f5825c2d861ac7a25bf142da3f2fbd2a77ba7d1cedeaeda6eaca0dd0e8e34529c1d0509b435d4ca4a93", 0xe2}], 0x6}, 0x20040000) bind$bt_sco(r13, &(0x7f0000003880), 0x8) lstat(&(0x7f0000003900)='./file0\x00', &(0x7f0000003940)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000039c0)='./file0\x00', &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r13, &(0x7f00000038c0)='./file0\x00', r14, r15, 0x1000) r16 = fsmount(r13, 0x1, 0x7c) ioctl$TUNSETSTEERINGEBPF(r16, 0x800454e0, &(0x7f0000003a80)=r13) bind$phonet(r13, &(0x7f0000003ac0)={0x23, 0x8d, 0x9, 0x2}, 0x10) r17 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003b40), r16) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r13, &(0x7f0000003e00)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003c40)={0x158, r17, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x158}}, 0x4815) 11.729361482s ago: executing program 4 (id=705): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed', 0x14) 11.180027255s ago: executing program 48 (id=617): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0, 0x0, {0x1000000}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000440)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x4058534c, &(0x7f00000000c0)={0x80, 0x2, {0x0, 0x0, 0x4}}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket(0x1, 0x5, 0x0) close(r5) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)={0xe0002014}) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 10.811967923s ago: executing program 4 (id=707): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f00000006c0)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x4, 0x1, 0x1c, @private1, @mcast1, 0x700, 0x1, 0x7, 0x6e}}) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1c, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x67, '\x00', r2, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1c, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x67, '\x00', r2, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r5, @ANYRESHEX=r6], 0x15) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x68}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x34, r11, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}}, 0x18) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f00000007c0)={0x1c, r11, 0x100, 0x9, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000031}, 0x11) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e640000000034000280050001"], 0xc3}, 0x1, 0x100000000000000}, 0x0) socket(0x10, 0x3, 0x0) (async) r13 = socket(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f0000000000), 0x4000000000001f2, 0x0) 10.621847588s ago: executing program 4 (id=708): r0 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x5e26, 0x1880, 0x1}) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) (fail_nth: 1) close_range(r0, 0xffffffffffffffff, 0x0) 10.535587835s ago: executing program 4 (id=709): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r1, 0x0, 0x80000001}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x78, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 10.395668436s ago: executing program 4 (id=710): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f0000000740)=r4}, 0x22) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r6, &(0x7f00000001c0), 0x0}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0xac5}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000eb99710c0000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8001}, 0x4004) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000a05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2) 9.934668391s ago: executing program 4 (id=711): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 9.19782478s ago: executing program 49 (id=628): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000a00), &(0x7f0000000400)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300300004a00d7270a00805175f7ff0000040000", @ANYRES32=0x0, @ANYBLOB="7f00000014000100fe80000000000000000000000000000e"], 0x30}, 0x1, 0x0, 0x0, 0x20000014}, 0x40c0) setsockopt$inet6_int(r3, 0x29, 0x13, &(0x7f0000000080)=0x9, 0x4) memfd_create(0x0, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_setup(0x6, &(0x7f0000001000)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) io_getevents(r5, 0x2, 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000180)={r6, r7+10000000}) io_getevents(r5, 0x1, 0x0, &(0x7f0000000000), 0x0) 3.043745511s ago: executing program 3 (id=716): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed', 0x14) 2.16124291s ago: executing program 3 (id=720): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 2.123602623s ago: executing program 3 (id=721): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x50, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x13}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xba06}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xaced}]}}]}, 0x50}}, 0x4040840) recvmmsg(r0, &(0x7f000000af00)=[{{&(0x7f0000000340)=@caif, 0x80, &(0x7f0000001b00)=[{&(0x7f00000003c0)=""/93, 0x5d}, {&(0x7f0000000440)=""/168, 0xa8}, {&(0x7f0000000580)=""/242, 0xf2}, {&(0x7f0000000680)=""/228, 0xe4}, {&(0x7f0000000780)=""/252, 0xfc}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/191, 0xbf}, {&(0x7f0000001940)=""/195, 0xc3}, {&(0x7f0000001a40)=""/141, 0x8d}, {&(0x7f00000002c0)=""/42, 0x2a}], 0xa, &(0x7f0000000500)=""/53, 0x35}, 0x6}, {{&(0x7f0000001bc0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001c40)=""/230, 0xe6}], 0x1, &(0x7f0000001d80)=""/106, 0x6a}, 0x400}, {{&(0x7f0000001e00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000003480)=[{&(0x7f0000001e80)=""/53, 0x35}, {&(0x7f0000001ec0)=""/135, 0x87}, {&(0x7f0000001f80)=""/194, 0xc2}, {&(0x7f0000002080)=""/137, 0x89}, {&(0x7f0000002140)=""/110, 0x6e}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/46, 0x2e}, {&(0x7f0000003200)=""/247, 0xf7}, {&(0x7f0000003300)=""/178, 0xb2}, {&(0x7f00000033c0)=""/177, 0xb1}], 0xa, &(0x7f0000003540)=""/128, 0x80}}, {{&(0x7f00000035c0)=@un=@abs, 0x80, &(0x7f0000003900)=[{&(0x7f0000003640)=""/237, 0xed}, {&(0x7f0000003740)}, {&(0x7f0000003780)=""/33, 0x21}, {&(0x7f00000037c0)=""/252, 0xfc}, {&(0x7f00000038c0)=""/10, 0xa}], 0x5}, 0x2}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000003980)=""/173, 0xad}, {&(0x7f0000003a40)=""/131, 0x83}, {&(0x7f0000003b00)=""/200, 0xc8}, {&(0x7f0000003c00)=""/90, 0x5a}, {&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000004c80)=""/110, 0x6e}, {&(0x7f0000004d00)=""/166, 0xa6}, {&(0x7f0000004dc0)=""/178, 0xb2}], 0x8, &(0x7f0000004f00)=""/147, 0x93}, 0x8}, {{&(0x7f0000004fc0)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000007540)=[{&(0x7f0000005040)=""/4096, 0x1000}, {&(0x7f0000006040)=""/155, 0x9b}, {&(0x7f0000006100)=""/185, 0xb9}, {&(0x7f00000061c0)=""/193, 0xc1}, {&(0x7f00000062c0)=""/4096, 0x1000}, {&(0x7f00000072c0)=""/238, 0xee}, {&(0x7f00000073c0)=""/254, 0xfe}, {&(0x7f00000074c0)=""/101, 0x65}], 0x8, &(0x7f00000075c0)}, 0x5}, {{&(0x7f0000007600)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000009a00)=[{&(0x7f0000007680)=""/4096, 0x1000}, {&(0x7f0000008680)=""/4096, 0x1000}, {&(0x7f0000009680)=""/86, 0x56}, {&(0x7f0000009700)=""/252, 0xfc}, {&(0x7f0000009800)=""/12, 0xc}, {&(0x7f0000009840)=""/41, 0x29}, {&(0x7f0000009880)=""/93, 0x5d}, {&(0x7f0000009900)=""/241, 0xf1}], 0x8}, 0x1}, {{&(0x7f0000009a80)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f000000adc0)=[{&(0x7f0000009b00)=""/186, 0xba}, {&(0x7f0000009bc0)=""/254, 0xfe}, {&(0x7f0000009cc0)=""/4096, 0x1000}, {&(0x7f000000acc0)=""/106, 0x6a}, {&(0x7f000000ad40)=""/112, 0x70}], 0x5, &(0x7f000000ae40)=""/150, 0x96}, 0x10001}], 0x8, 0x10000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) mount_setattr(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x70, 0x100000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB="0000efffffff0000004000"/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="00000000024000"/28], 0x50) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x258001, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0xffff, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) write$cgroup_int(0xffffffffffffffff, 0x0, 0x2) 1.311712347s ago: executing program 2 (id=725): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1e2557c2", @ANYRES16=r1, @ANYBLOB="01002bfd7000ffdbd725450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000023008e0002000000"], 0x79}, 0x1, 0x0, 0x0, 0x4c040}, 0xc800) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000001200ba000183352a55760000100000000c0022000700001d24009da8"], 0x20}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00'}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r5, 0x400, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, 0x0, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x23}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffffff81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0xc001) r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000007380), 0x0, 0x0) fremovexattr(r7, &(0x7f00000073c0)=@known='system.posix_acl_access\x00') fremovexattr(r5, &(0x7f0000000040)=@known='system.posix_acl_default\x00') eventfd2(0x0, 0x80001) 1.27205404s ago: executing program 2 (id=726): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0xa, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000026493cf60500110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00b3d83d5ef8f3556d00000007020000f8ffffffb703000008000000b70400000000000085000000160000009504b96d2a00500112c1f7a906eddd6432f43fe484024a5deb2026c0f2b8044e1d3fae2d5a76b20d97f017125e1b4655fa2141a3a4ab47437c9000496fc59d906c1c079d224a77c99e89f65cf147070000000000000066c104aa2ca300"/168], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000e7ef90030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x76}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000031115eceadd2625c4a5aad19fec752df21f50c96f335d19861a9c241f984f86eb35bc94cbb1d0827a3e1c3e2808a272566dbec416e80707f"], 0x50) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x1e4, 0x3180, 0x8000, 0x400251}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x33, 0x4000, @fd_index=0x1, 0x5, 0x0, 0x0, 0x2, 0x1, {0x2}}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1.238021823s ago: executing program 3 (id=727): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) 849.976333ms ago: executing program 2 (id=728): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 637.02813ms ago: executing program 2 (id=729): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYRES32=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) fchdir(r4) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) listen(r0, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f00000009c0)=0x10001, 0x4) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r8, 0x89e2, &(0x7f0000000000)) close(r7) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r10}}], 0x20, 0x2400e044}, 0x0) 213.490353ms ago: executing program 2 (id=730): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000040)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400dd7b01050102000000000000000001000080"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x961}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r4, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000030601020000ffffffff00000a00000105000180"], 0x1c}, 0x1, 0x200000000000000, 0x0, 0x4004810}, 0x840) 123.86752ms ago: executing program 3 (id=731): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000180)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000080000009500000000000e00"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r2, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) 97.691882ms ago: executing program 2 (id=732): r0 = syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x121d, &(0x7f0000004e00)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x84, r1, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xc, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRESHEX=r0, @ANYRES32=r1, @ANYRES32=r0], 0x0, 0x1000000, 0x0, 0x0, 0x41100, 0x77, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) openat$sysfs(0xffffffffffffff9c, 0x0, 0x8080, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 0s ago: executing program 3 (id=733): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xe9, 0x400) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x6d0100, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000032f03b9d29da8be2507b5d22c55bf086793ca03d855102", @ANYRES16=r3, @ANYBLOB="290b00000000000000002000000005000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x2404c044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7012fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a030200020000000000000200000009000200"], 0x80}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x6ad40, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000030c0)=0x0) perf_event_open(&(0x7f0000003040)={0x1, 0x80, 0x2, 0xed, 0x2, 0x5, 0x0, 0xe16, 0x40090, 0xc, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8}, 0x20, 0x8000000000000000, 0xfff, 0x5, 0x0, 0xad, 0xc468, 0x0, 0x0, 0x0, 0x2}, r7, 0x3, r1, 0xb) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000002bc0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002b80)={&(0x7f0000003100)=ANY=[@ANYBLOB="b0280000", @ANYRES16=r3, @ANYBLOB="000128bd7000fbdbdf250f00000008000300", @ANYRES32=r6, @ANYBLOB="0c009900040000005c0000000400e200080022015e02000008002600b4140000080022017a030000080022015201000022000f007508010006000700070065120802110000000802110000000802110000000000d7108000760600071000d86476060509250000000301578c10da0e65d9e1085d6d5b55151d0653817a26030c3f09cfcfec12e22a6e7bdcf6e85c2c255e12434bf5476e00d419a3fbcc1a9f0f861e1d5b451f03927c4cc1502c2f815f7fa13f617d1f6211a5be43b7b2d2f3f463a335884b18a150a13c212c518d55cc9d14fea0ba0dd90cc9864b6648e410c3b034480a9872bdcf7a869c9ce474e066914ca343f97059872d329fd02cbf8feeed03488e7b86895e048d2d0f663d4556601fca08987ff4b1e5ac2f68a8074ad0e28c6c94125bbb3ddf142eef66e0207e18a86d5a21165226757ba984c985ad41cfe5042afbf5342c599ae03df6aa133a351dcc9ca9e7485331727911358b8ddfd62327c437b7202088f98989f70dc883b6c5679278a2eff8f83e1ee1ee22f4ad8430c082001aaf5a03f063c12ade47c03a496a36e944d29fa232c27012838ddbc57843700341880524a149668901bedf10424bf6398b3c88ec4ef5a3c494b7f50e306f33f4ffc63b23082fbdef5ab47ea5c0b52c1331cd0bdac2b534ef16c8d10d43e4fd344ca49456d210f8bb77f58a3a8420712f30bfb4045622c13909cf9f3b8c86bd611b49da677bf48992d9b496437644a25ea524dcdb4f4aaa634c24049b896def622fd68c4aff0411254a25e4e57c4707230e6a0bbb4e0fc7807f134b5adccb22842ddb5d81922c597b0732601a91e0e1fcac78d28c4dd78d3d27b6484bfc106ff9cb71b6244972b823a8ece70afd9b1f5f6245d0af4bb4f8dac20d23130a8be2cb7d7dae584c7da9c1dc92ea2c3dbb32c61aacabf460ce743e87887d98dd9d817e278129d0910a215cedfd27d5b182894a89f5eab8efda940a7b71062040ce7c91c86d207c0291af432ce24683651825d5809af5f46b09f08d228f0954758fa13ff55c3c87b7b99e911b3b27e3508eda45a34c78aefacddc135b867ca957e0659033c23c00c5a74ef0bb684e407aee03dcc32dee98ab33a65c85cd183a78ff90bbfff6c518fc7b9b38b818c2189a2927fc3c3b9f1296654df6350dd6182e87e07ae1dde49157eaf33c60e5a498fd20c493deb40890206258180af51f63621f5b68850a7c60b95c3dca837e17671505a9efee7d566353b21bbf6d79ce747792ae7a1ba025e5de3a1ad8fb4026cb8165acf81da3f32902d1462e6e1e61d03167b727fa460546d59dc41f52c1bd9a65794669c67bb39c4aa33face9cdd44afd76b9416ba97de34279d2a1d3fe28cb88d2461f81c0655e9ae47fd238da677643e7194084da9ee6582c34cfd4e3ca53beab78e51195ff6e4a28cc221ff6019f26c0911bcea8701af86057ded13a97bef44e1af0cdbbae8bf6696be2a8b0777eafade202a3ff50f7c7682201110472d8efa512c1890bd187ce316bb200892506fc985e73a0d19272228f20c4ebbf475a389fb6103a95e13bb31924fc0bff20311fbb81dfdcb81c8484aaf531cda03896a8057e018c62e6ccaa64bf89ef8719a0d40567d8c57ac7556765d765e5515f4bbc7eb5bce4265b73f4a5bb9aeb469a0396a3eadad37b2485555b4c4d60ce38f3b01264639fccd3531d62dbebd69a0cbaabd57312da7d9ffc0e02c6e899d1d7d1e61cd51c873b59c9973a5394aff61233576a9dc39c2f19b2db44a55c642307a53175ae34ec30cefeb4cd6bbb57527ba8f03f29a0673b6591786b84b92046ccb221b00b1b11b86160f48d6ad250d75ad78d71e0e25eee38b11ca6ac98c5ee33dc97d583629d98f3bc01b7f645911a59e76891e4081ec59389416cc386ee276c7694d6dd01c0197f8d3fffa27b4b68689e3b9e30e9d37696a7e20209df65593f9b1f2298440dcb50c7b72b067bfee5dbb19538c17ef8517ae347469c78a2b2a0b4cafc01a314658c5ebbb55c0d72bb6a8dd29cf8979ac9b7b35de7e11b7f90df98235a36c88fdc0c45e8ad74564280329b120b7aea6e1c2d8daf5b2d5f69ed0222bf54c4618f31e1f3ae2ac2346167454e649497f0bdad203704b2134ed4d5c193980463bb6790591b832272137ac6f3380de99da87bf276a39c79edbd7d15ece12236a8f01c1ad7b034b8186d86f491c929dbf276c48e9ba3d9c72e3dd178a3e3aad39061a3c44cd2959b78e5732d6577c4b116083d3c7f4ce83586ca295b6d1793e176f59d1d34ddb10d8fe27defc6933726f2abaa313378ed96de73b6e3275ded558ffda582018d104ee5b28fddd8ef4902253b435dc21730da2c178071beca56a8fa4a8acad94814b2f99d02c8b89c4d2870a274a7d7afeddc7a48cdba16a22d89ad322d7c046acc81e4ec1ba0c1fe54a53a1380ab6191efddde42f77b17daa1910d064c54e8d8f26fe51ce7838dd728262d89db57874859868fa886c0b302cd1a517b16182115dcbf4cfe956fd8573683de37378c31ae76cf70d3e2b3b9a34b714c3d754e4593067864c35889cf97b69648836ebc16e6b2fba1b13e5ec677e5fef87ab11d5733de2d5bde33e3acfb4d47972d90bc7628163bf8dd087ad297ed72e502380c3b341954f0dd1da4045d56bd82de3003afad4836c7af2849a2e844424103640b92270558692e4b11bbb4cfcd37edecdd331e33bde7aaa1c2b970c4cc64c3d43719c4cf2620bd32d959265b3ab018101d531ab5d839e7c46f3f4c732a2931bbf43516af9058c5b0355951415d7380a9c324e76cd6604a465b3ce120ecea47ded07319bcf659dd27d22cad1362100558c6372f1e8fe887cf873857d429ca42ef68b542feb6930263f04e859fc5b1ec45cdcc7efdbddbcc8f7408fcb26d4b6d1443d1fe5ceb26b354154eccafc65bbb59a2dcf5ee33d7ceb05aac8eec7af7d8b44fb0c510752f021984ad2a0c7deeb527d2545be5f17c30b3f57745ffb103ffbde9d7fa4b894e72a3fbb3e0808a1b60f5aeb0d8ad06116ef309852794ffad9ef808b3e36561a34ea4b913cbc337b9069100af6cef34963ba7eff465885f2edab138b0c9baaca35ad8063a7e21dad5a2ff538302f955f149199ff0ec08d2304e3644fb052845bab6d68b02767366d6d462ee6d23ad8d030ea9d79346a6d05b1802ab5035355189f0271f4b85e346282ea4a1e8a4f3e90ed94fe69d82550dad9acf310f4ce2182cea508724858044cc3feac618a31e78fe60bc7a937b0f4cf8de684a389800e2aaf66d51735ca2ec80cb1975d5c1dc3b2d1d2e6bf0f05dbccda70f417acf65d350bf523d31d4b51904d32f3b98094ba01db6c3cc877a445ef805ce48e8311a32f011a08c4dadc8dde83a8bd3984ec9bb5c31255d9eff51cdc791af3b42b65012c969f8c2a13cbddd821c5a0fee66de0612e2ac6a31f9c9bbb16a23e9338e994a12ca1e53ea42ad208dbf972861c704b289acd5ab9d27f106dd0dae3a879c56ea330eee1efd47a98ab06151e5f1443beff4e300797347b9b46a3bdff516737b17bc4f1f648c6313debd47f636c984f31cfc2ab3e19010524809fd65be65b7cb14a640b2a80cf8bd0626bdb8234cc5251cfff1598fd497b0aa7587331fddc733763eaf9615cbd4d982cda1a28d31a46f612cf152a93294498c345e9b8d8e91b7351955f05a1803526ec2256e4771995e4d5b1f468b9505fe805cf33ce57e96c0dfa381a612522640f54a3ed29ac7e5eff5ff8086a889ff1b134bfc7d5cd1f43aef6eb04674294ec5ac8821348c3031e928e179c4a4518db6b4b5376b0ad5ffdb0e092b6759953d76b871d93d78451980157bc6bf9598eaf3b01f4aa96e22ad5053242da7898b1db10c67d3bc5e1235a368582618734592475728a96904c857a5df3d999d1344377e72bafc3b8f6105a81152633e14ca14c241b96f80a6ff83319677d530ed5fb1eb28ea0950e8c05f0cbc5dc0dfa29515cbee545c02b329740adfd3d67c5c0547fe877ed876a1428b543785e7872a5b72a5349bcf4df3c267f6f85154119d2f16da72bad9008331827bc50e683b8ddd6e11ff0892577e9454b28a37aba66a10154acbbf47ba54889c0ebe3f5ffb3a8e617238d4b3880b33c8c79aec6cd1fa052bec9cde6572531dae30670d9d1c3664870a93549762af5b960439e734b7f67906a7bb88e4730414219ff8c4cdf8eed4d99b6ebd3f2226aa5f4c71271b530c4361c8dceaaa1e41bdec68ad844a8a4688ddea799d170eff1463476cd150e8b9b0026fc97382b9586ba75eb8c1ea04ce0c0ef330dddee56e1dfa50badb71b72957773450005097e26d0436ba424c80ce1451b8c8369844d885164940cb4cdeddea3e9f7c4fa541f4f86464ffc2d350f0a3bffc68c25ecd8d14bea21086a44c138d6f50627b92061777b584f3220435a1ad825ee46f1f97653bfc972105c01048859b7437bdc0b6a343b970b17b913a7a02c0bfc053f366971bbc134c6ed675c70e67e440da7640b9b0a229f48c3f16048e4fb820fb7af201e4d4e349bdfdf73439b7f5cdb9c2dfd448b9e360592dbf4cfc788704aec4caf19ad400427a6be04a1414cfe6ad90dae90b99554bf1aec3dd0c5f7413d96806f036f7dcd75dcabfb3944e89739ad1a33e30fe8c28e696f53a4766b72501df8c8e5746b667e42943990b82c764091b572a889e10cb819b0650134a27549aa9bfba8fbe575be8ead50cecc65d209bf2f7570d287ea266e3c0236f3196c725b9aa0a4b9d44a1985fe794272232b764fded2f92bcd0f474c5b9162850b00ad2fc38059ba94bfbc853f2955398aa48edc00858c547b9f5e2e563a65d5189c893bf74df184e994388f8ed40c200483e99c994a92270f39834f500d139b39b7f0f27690220a69a7b499ddc451a69c172f9fbfe23835f9af1b1f98ad5a34bb6fe5f11407429fa431b0bff98d0624643464b6918528ea89340a275a56eac874ca39a359b0db1d33442b7c3a8c909f9fb52784bbb249e665fe9747901233b9fe1de0bfd80fed53538735c9d8c6f41ee213f0a74e3a0aff63f7a35dc171872a7f185a42b41018ad40f37e6d5a84ab1db2711feb9eb7ca6f86bdba572315ee9d73ffb37aaf20bba559450f34f9d7025dffb0a49de1115b2a955058b9c2df3a31a520f95496b0b29e277ac652cee108d5da0b15a6adea609d1648e48482106e60c61e0e132998d6e0e888441c0c24de4fdcdd96dd5b36c447c4d5b17d8e891ffbe690a9c6756a967c4807a3d80098d408a161712153ee1b8a599bd7f7f3f8ac7794d31929161391f1b819fb1c2421070178273be15b4842d99acbfac467a9a912207973ab101330ea1f50116183db3d590c72719daee4bafdbc8c081cdc73618c11af6cd6b4ca0f981af1ce76cae3bda306c9ba0ead2c9b8b89591a11bea88e7c8f3d003d4667d75af39b9e515272c2c418e9e167e154d9be01f00e5aab2b4aa25ef007a05a9217382d0c8a66526c6ac734adacddae9220a467d7be6e889e4d6dd04fce9d66d685b6811392fcf3539766b7f5b2bed74f4aa39aef9476c7c015bb4b13b5b1a246d64612c4c791e550dcc442cfdd3d889a7b6edb1ee6701e4327e7bc4f29217e0ff0a881ee6bbfe6d0fb33175cd078a96e96638b9f53ff69631ddf194e9134a1bd98a04a061117114932371c23bf29ae92681d81063841468a061fadf163333f5cdd2c6dd34b79a863d9bd960a060cf5b23a4023a29f716ea77677110d74e83dd0ff24a56115d5e13e2a0da3413f2cb8ed0009372601672425186912eccace15efbc4fcd3a09139ec4dce2b0f3e3a1c26f42608f0dc2f8a83d3b478e528d3b18bc620cf22d7c48e73bbaea578674c35294888d26b4542a88961658e5155d84dd9be5742bada187358cad3f81c0e71cd771c5f9be2471646e7a8e168f023866ceefec8b97194cff0b72edc83c637a70406aa7c3fe40c3f63a7c5e444fc4b3ea43e1179850ed1a42d92a85f8ea982e9f2112905410b177396c0ccdee41e212d0724ef54f1f125abee92e9aa3278fb9f8551a36e8b285835095d512447624d9d2fd301039f2b860321247c77aa00a42b027e8822ed8d6496b48b08d5099de9da5bed0cc6a55304aeef820205ede261668c0306d5c249f03b50010c637ba0fe03c2fd3ba1e88fa4030ed622ca37ef53b1f1e36492d22af200c6027f0084db030d40080211000001ffffffffffffffffffff07000008021100000006000000110000ffffffffffff700000001d0000ffffffffffff010001001d0040ffffffffffff770f0000ffffffffffff230040080211000001faffffff0802110000012a0040ffffffffffff07000000ffffffffffff3c00400802110000000500000008021100000109004008021100000004000000080211000001040000080211000000520000002c0000ffffffffffff04000000110040ffffffffffff090000000802110000011700400802110000000300000008021100000021008272020a00f8ffffff080211000000ff03000009000000040000000805ffffffffffff060000000108021100000005000000000802110000000600000004080211000001ff010000050802110000010100000000080211000000a9ced306040802110000000600000005ffffffffffffff7f00007206030303030303100104059a079205d9961481950b1fc11178597667b31245f4467539ce7ddb910f4719b547f002c10ae5245396417ce677867c8ece8b8bed92ca53737881e216105458e861bc5e48a7ac72fbaf81373a2b3b4d49ca74716a5fc0a02febf53e8d3e628effc36af0923a74a32cce9b9cb66904c3e9a6640aab3fbb1ba31206684d01b128cc0c2dcd6f24daa8e1f7c46a72aac52a05a149e1942626830a2306be04060401fc00010176060d973e00060037b8d0055532171a5a49a30e8b41ea4e078146665e58e8950c4cd919d83f01babe9034edb5b5ea193946988c05e19b15c23d8fbc88aaa013787ca1f836e8fad8066bd3e05f555b2dc124acb84723561c7d700bea0401030118e77c71da105b9c97503ea09a47572e55f59134d05866737f02255203419d817632d401e049d43805e8f61b507d6ea6f0fcbdd6aa1c7810a76cf8322368d12301199b47b8cb63114e380fb86a372b325e92c8880e600f8af93ee504059ce76ccb6c000020007f002d1a00031e6e23163300000000090007001700000006000000000004ab06910013efcad7b25760ca3fad9ecbea93b121be74652604d7f06829f28c37957524f2e71c40b99a09a6363281747aeb2eebaa6e5b2b98f644e703487e6279f7b43e1b02f4d6d18c8c7da914fb64f60a2c7c9d499f3620ed42d68b9c54916adfccf615a7cf2ad6014fee5f942e9551e59b2b7ac503a254ba5d587e389837f4f5227ecb486297af42631ae579143978257c9f4f7d301bc9be4a154bc8f0068e4c9c82da2cdca18af2fec1b37e4ded4dec883da9e5ec8b7971422eeaa84fe206eb2fb4133b3d544121304efe11a1a583e5c65458a469a2c701a446ed9c645930cf3a86ae45b0d725b8f35921ca7682fab789b7dfaa408a61ee63f7e7bdb3d1d06c0b0c874564ea32c5fc27c094b5b1dc0aaf9b2076f31577c90691ed38fa7eee9392835c3abd27731fa4a8aebd5c0aa792df19337d29078fc01c500cada845d2d3d3c3f7f7487403d7f7ffa6947d6c172ee2cd77619a81dbb327a240e7a4b7ce23a0b4263e5c18b3c2e578bf85745afd3ebf2b4b71d4914f82b99712b5b0ab055ccfce9d30f839e67c37ea4982827d0d05d18c26e1791e928e2ae08cbf8970d51076ba40eac587491eb3dc491b21567a0efb903fbf0e977c3f831514b7c0eb6fc41f5d3e8a2fc0c47e5a394a3a25bd88f6e8ed8bbd58b564e88e2881227973c83ad387272bc67a7ae19cecfeb8ff75a769dff3f0e571e236b8807c6881da007b399d04b3d9e93e29630a6fa9135a9a3e9bd8e23f3146cbffddb106601816e94f6456263753181a12dcbfde8ad4be048e6e9f8e529f394f98c21c6960a86eeb8de6cb2b6d4669ccf6ae356a7f4b0baa392b97caff2085ed99c2b6e867a9c5f61ff3a777e1672b72333313f2e1ed8570a261d5c1729ba4821c8bb24da1b112acef7362b11368b18e2b5928efca932a2b9633477a3df95c902f2b633a32c8e4fb74c144ec8e1bb74baa1f0bd3f58724807b018c1404df21e5758bf53f799ead8b35470511370fe9e498cc2ee3a9424c11d10af09923422c847b21d7d871e37119b2ab75b336ee5507f8c70373a2955cf19945da230557468f39c5f7e7b4eebf8ec243ebb91fcd87fbd5357a33fbb66f28ed047647ea9f6563af6b92f418f8f560866d50eb1d7c8588ec302cb01802be99ce16b9aecba0f6df1cb723ac7bef2defd4c9f54ed403775f088c1c3e34d62a69a3169daad5add0caba5aa51d28321ddb1645371f10630bb8b295e9777c1d5aa101cf8ec8edd47da33b39c4012bdc6b730335e532fb30c218a2c133610bfebbba3ece8c962e3d6f414e47a9359d73d9fdfe6af73f71856e6067272a09cfb034fb2a568fbc4d299c92fed1c14bba993ff2a41bb6b35361f7d5a85a04b4c5eef8abcaf57350820ca03967526440985aee526da1d98eca1b7b1300b20b205af3617f1f84379c94af0ce89622a88f322c0631010f001a0ecadf90adeda24103d645399dbdd42b782e64033b584a8eeabba1dfec0c61b5d1196029e10aa4dd2e3db67e576e5bdca97632ea707b59add3917686d4a29ee0d9911b71c1b8a321657a64d558b3bce63345e6ae17880984bf0ed7a6a2411b5083bfebfa2dc5ca4f3182cd5b76ef277750572f0b96649c4a8f9306aa0657f5c51c06ef8f80fa184ed5e9e1fae2a3c338d235805bdabf2b93097aea49a009f9fadc970966ef84b22981a81d12289534f660f77307221e0f92b394a654eed1cd7024799bd0c512c4a339400ae15379dd294ef8e314605ba8a666d79ae81e2ca687b8349acb9290422ed4c3858586b51b168727abab3e64ed3ee93feed5406470c5b74bfbb607a2f69d1656ad81338e2304fa30b0541ca32c1bdfb1627b81a2cf0b3a6213fdcf6a3bf4d137cc72eadda684f8fe9edc4bb9e215c0a0576929cc2291cafe7d2bb273eefc432f820fccafc6a33720215437b8a0581025092719446ddcb3ba40bbe391bb043a2f36c4aa198805f0e9229b65bfb9e24727e353c9c7da45f4d6df1b3bc215b44d4d2dd5c0bf05c16612e60b46a3a7933d03d8b5c3d7f1973b499488e7f6fd5f6934e38d603eb4cfa7ac62c4c195a1da5c9e83345860b5445a6baf269d0c958caf0e36a7237d99bb45a11dd60a8913ef7fa4b40e1639acd859111086d593bcb3a42292d9b6abc3d5c42875e9133cc5dfa1adc084ef7df48d9cf58712d2696ebcee1d3b182ccf21beee54def988c9eeb1375549519ce9417665f10558af2057f109d75c2c70f4f25117da9b7a5033aad44fbf893a13c36b719f73119e8e57da3d09211f76ed6069b640d6e6144e5a0321284961841eccc9d46d17b0cf41d9f9a42e565ea6e5ed6fe50a18be7c142e20a6bfdc0f23d10ccf5a1e511204a60a9ce81ffda53ac124a383bb26c14f969570e946c3d401785e9fde528183a7c4e9c50d0053012a003752f50040db86ce7b8f388f93a78f898be4d25c237fd7059c8977458b3956251fb5b83cff1943b6c135309dd122d8e9d9619e967e0eda6ceb460026c62d8e6b33e3b0a59f6dcd8f656dc5654787bec0e91924740006020202020202720603030303030337c704054045388a25a40c4c6c27f241379dcb79490665b458c6bdc9a4bf7a59177bab85b2a62d0b92627f97d54510ef2fdaf398037b95c37df8f760db5e2620023b8ceeb744f81978d5ca941242d0c3051d6bcd0206f8a9481e168e041fbd88205d897666cf07e3b56e82395173c38591b418c8d3a0b03e02d7ff74d6041c75d65c71e01ddddc3eccf4b6eda405859f57807f21b22f0c4f426d2c031fb208a0eea4724d8b79fc04daa9c8a841774079b616ecb217626ea372acc7a2030bcc7197804d4ccf9150fa0e76060e493c0006008c183b0c4dd677526ca1700c6bdf5b7d76261ced3fd3fa9bb96a00700791008ee4bd76e8205ef2b9713784e0b8112430fc1c1575e13515b7a5f62f6fc127677e54b935b50a761beec95ffeb0b2be42d43c051084e39966c1912473b168c662bc6ce8313b6a5bbbb597c6297fa9ed542f709af644694d9fcec6a6bafd794df26c7a136fefb04317945a0a712c91beafdfe4bc67899e9af10b5e73b492fcc7d6926eb19fd134b6d517ec2b8d2a9e7b3ee9658280f29dcb3c4879893468474e03d89be32d2a4c5005610586c4b8c5e380e22cc94fcec04f74455d01ced1d597eb4700cf0fe1f35f1bdbdfe1fcebe105179720d40557387ac0d40deb8f60e9c33cb0ea3a78ba17f332520709144d6b3d022747f561470e6a15dd1f373afa4b8e6027cbbb5a0d635f087fcf18f9c2ed41735902394185e6ca8ed4b593881a53e2fb1e7041559f9b85416123cce971a65ef2e191e4277ebc702a73b48728a3702c175950e78bc22a11a4f92410bc48f778b6929660817c5aba5f374a5a43217609c9b256919d32d15704e4c6e01f8fc80e5f343d3e188d5b7db68589335f02fe710764d78e05859f2c80412e4f5140e1f5c84e2336095cfe92745e3749b404916d82229fd304b944108fc1d92da2fd3be8ff42da73e2a10007b06ba3dbb8dc83b659573e9da96cac9c8d403a14ee72d65b3742c880f1c111ffaf5d490bda3d67a5c7155cecb180fdea8261c3b15ddcec63bf418a940320fb8e34ab081df6c664cdaca599f4bd04aa624c593db0314b161700f8a719072a9fb35a171f91fe05b5058a42c2d0f976bb8080544460c40f57ea8980d4f528ab00cab4619d0f998fc1f4356a34fe86a74e98699b8020668421e652344790bb865ee47b756b273c14a12c069a4f0c48a1da4c73d06fcf3bfc339a39c5ce6c077e68e60faadbf550e0b7308db4ed73f42304766b80e588e311c04046436ae812e81e06ee1165a101b90744b13537547173b8ba470c2561c85df2e59df3bc95186e07e3df5568932a1b4a2d557a564a6292e5189c0a7514084a9b32953d14a52748069da7ebb3eea6ea3aadeea6f368522578e7179b89d73579b8a58f2c97dcde4e4c3933fbebf719a52af03b5b24b8be507001ef3a31cdd6bbaae5afd86fe9c37d531ea8aa5a0b8107e3015f00c8b7fafb8aba8f39f81c7ddf0acc9dab16c82831f17c558d3fd3c0aed3949a74bb4db0409e321dbb6bb25d04cdc31c7c5f95459411647589d2ba1bb113820e1eefa19d1ee566644b8e65e92a55148509d391922f6b69212864f7e98fde2eb9a907240ca204aa483277c467f73faa111e9815f1b0932eea20070e2b543ed89a962bf5ab3dfac2ff122121eaf831bdd64895b8d0cc2e17f2926769823f67bb97f4855ac8eac60bc8a5368723f32aaa6192b96fd8be109b9e253e551606bba2976dcc192ac67587ded63b052f88df03fc11ddfdc451b8ed464ee43ddcc7e73ac72e009c96225fdbfa0c298ef5548d2a3315cf075abf58216c9316eaaa5972033ced7618556f1ae15fe2bf487e58631b432781b9790bfb3918d945d359e485d1e2fa98c749251c74de183f9dafad1193d52508bf6dacced3dd25d96178c2d17969b6711d99eff75ebdb239040631c9137ab637f7cc3dd23f7e84dd8c6a9f2fe05648d9cd074eb0ecbe65882807417967af8e9f30cf0c6db90be542105429eb7414461c1ebc4049fcca6a416e924d3b910ce127e67b092276386a3a5e358b2438582555de59ab18a1e86162a365b5daa08166618dd930d0d5b6a49b8768da23b75e4f05ad92dc347c1b84ae21e7d74702e60156df0149cc649844783dbe37cc913933664e717c0bfffa6bafad9bceac852e84c4180a9d063e31639f54aa4081e3a58960329a3fd8f42ce2a71e34458c084150939d615c0dc1cc13d06532b90652c2378fd3dff1f312d4a1b07b4c118a14fe7ad77616955f4f70ca105843da9d4ceffaddc710deadbe0d0ff3af1d23a78052d89f349bed0e9f0917beba0cea332814436d32f357f7617977a05a6c756ccd8c6d1002fff9cb057afe3949d7dbd513dc6bdb4f706e3f8a757797a01421ec08f174db61b3cea4be859c255c20a6cf49affc83c505616f86c1c6d023888ba0aa412cb7e80dc5143aca4c594b3243e4934a898a6d2fdeda19082d68027ea88435d6f764f75e250b1f9c2292da7625afe29812f7011dfb0bcc77ba656235f0f5a2d9ceeb371a9f94fe9261d532ec028a4379b4de8c02d0a9cfe367eac347d4eae3765ef838f0abda761a6ab7be25f0e823760e69be64d7e4ec97081800ed12bd02639f34542497df3960b9de8c42334c5242fe166d9975705a5c995805add104d062bf02378668001a5123f99d098f26e46ec9f1f5a4b5ce6d81c8603c136f05775095fce63dee900f3abf4afa3ff2474ec7243559281c6da91eb99ce8f7e86fab38e42a49fc3f411cb04ed91062e59b56be62927551aa2c6171bea02b8de9b94affe7f45002d7a1ee0a9f533ac3b86cf7f21bf9bf36beb1d3a05375608dacab9422eab959799d97e6fe4a3dbc2c6a1c997bf3162137a722d589dd912527b1b7bbc4bff8730a3f724436b1199bed5a294dc82fad45e233417c5ff4053be8c6a30ca9da41b7bdd3a55f737eee539e6a8c49327b0b8b142527f6fac88c9f956df2ce25cced6b07313c7c300f46d737baa3f635caeda5d13097d9a51067795bde040e0080a4040008021100000108021100000150505050505090000000c040001000000000000008000004000003010a05ed073860792f79ac15c112cd8d6d19e7a7f9381b65abfac0b02f85f864031ef9b802c32bd1d99d4c3c62bf87fffd3a2ac8b9270c5e96eb51de19720e0e5655c9efdc66a772ae3ab1cbf7fa66b74884fed47ac6330a07d5a2278e046a797f17bb0af76e0bc8b840387fcd5aee953448719697ecad8cdb816dfb23a0624097736ab11f44c3198da202c5454f8be01ccd0b6712fdb33796717bc72c5d7dc521010845652f293b7a43547be532332fb59319f1b4709609a8bf34d730122a0753fae24852d57797b4b7671ecbb90d769ec0cb2a369e0fa499521ca4b31c2566e3348e73b86a611f8e777dca591c4944df25030006112a01013c040000b4032d1a00401c0800000000000000080007000b00000000044b0000000271070001ff01020301dd6750315fd6f07a25ac7267e43c86e18e1d41b62b1b1ff1dc0e716d50ec9713e315f8fb5d9f637a45a613de0f086f48d03f24534dd41099deda6409c7fc66b2cf1eea708ad648a952f0548906bf0a920f708608d26b83d5f3505b0017d574019fc564cf7bee6570bfdd24c5910054c148b553249c1dc322d71e73a5ee5acc4d1e2c6c63a6dee2e843cd672c88d59edd7446b204b93d47ebb8e54cce82032011f64d84296a0ab30f17646edf6659027b582ddb589e689e8f09cd2f06be52b808e0bfef89ac52cf67679340800e90cd7dcd1ef1c8df8ceafaa46df7503de79be8fd8a5530a4b2617a1279567b353adc82e41c77c64b27ca72ab20a887797b677ddb5b7ec0aedd6ecfd86352110d613b3bf359edda5bf3a5c42e71dbab92aa475d7935f8750d871056e203e8d945a0bf9766f7803fc6bbdc197e8f2f4d33625de1271892249b7afaa86f70daf91aea65906537b633c56e73f25cce6bee33cd8ab5db84b89eb705a9e475f1cb450b0b478498a6ac0190ddebf38d176777eb76ff1c72ef552b39c097e99edb8c6970e670481116c20448cb775bdae5f237bd47d692100c20038126f7eda6acb04b79ec46b6fe4b8e02295b5d490796a4b5cc27bc5fb335467320bee245b060d38a5092746cdc0ac20fb65abbbe687989816b7d2307d1e9472ca98457eb821cfc20cc09aa92bf013e9d1e8bc148e260510d9414293254f1367c986b3e5194c4c651e17a57a3f60202a83064f556add9bbe3e0bf7dd44dec73d1e167e412a82da6baf1e8602a5e605af2e5d69e18f13167c53d6b58453e0f3d5b1c1195c49062241bd50c10abda959338e6548980ba49312e7f3b97f03b28ddd2e1dbd699544d7c510f40e0f6a3aa7ac57617356288df29210342e2380a2646368cf065fcfc6037b610ca4df1828834069dca5fe5048e5b885b56fa1f59bf15f49d557e1be57702a94450a9fe94e11454dd260ec31aae4f10ddbcc1a463bc4e5c3aa022db07ea65fd817be0fcd1f8694b3f3287340a2d20a87dfed713bbedaa5283c1e8463e1742e080c3d60b8b268f176169a4ba051f1c31c2562ebb290cf2ac36ef302848b95388ed42048af25ad40ba1386e5853167e59c13a472da355d20f98f736d7bc6a8961adde6f9d2d795dcb86d4dd391542a2ef73b65a0213bb6df84ff493266b44472187cf0c893608cdc7323d4c0add8c98b1688e6c89784c95b62cedd3cc569269bb2ef0de1683dd18104cb244e6f8c4ae8875d96bb1318a1b591b1d3bcd80e8b9000010000e80040001000400010004000100040005011c001b80040002000400020005000100250000000500010039000000"], 0x28b0}, 0x1, 0x0, 0x0, 0x4000090}, 0x800) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r10, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) close_range(r8, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usb_disconnect(r0) kernel console output (not intermixed with test programs): : detected capacity change from 0 to 512 [ 118.734132][ T6337] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 118.781688][ T6337] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.514: bg 0: block 255: padding at end of block bitmap is not set [ 118.869896][ T6337] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 118.879202][ T6347] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6347 comm=syz.2.517 [ 118.902087][ T6337] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.514: invalid indirect mapped block 1 (level 1) [ 118.916668][ T6347] loop2: detected capacity change from 0 to 1024 [ 118.921749][ T6337] EXT4-fs (loop1): 1 truncate cleaned up [ 118.939275][ T6337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.956481][ T2069] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.037259][ T6347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.077243][ T2069] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.159538][ T6131] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.175252][ T2069] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.186305][ T5531] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.257820][ T2069] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.447549][ T6405] loop1: detected capacity change from 0 to 2048 [ 119.517215][ T6405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.531256][ T2069] bridge_slave_1: left allmulticast mode [ 119.536981][ T2069] bridge_slave_1: left promiscuous mode [ 119.542692][ T2069] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.561416][ T2069] bridge_slave_0: left allmulticast mode [ 119.567159][ T2069] bridge_slave_0: left promiscuous mode [ 119.572898][ T2069] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.593191][ T6405] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.522: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 119.671803][ T6131] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.735966][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 119.735991][ T29] audit: type=1326 audit(1765620949.182:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.1.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911b96f749 code=0x7ffc0000 [ 119.775206][ T6420] loop1: detected capacity change from 0 to 512 [ 119.800559][ T2069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.820176][ T6424] netlink: 64 bytes leftover after parsing attributes in process `syz.1.525'. [ 119.829203][ T29] audit: type=1326 audit(1765620949.222:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.1.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f911b96f749 code=0x7ffc0000 [ 119.852653][ T29] audit: type=1326 audit(1765620949.222:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.1.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911b96f749 code=0x7ffc0000 [ 119.876195][ T29] audit: type=1326 audit(1765620949.222:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.1.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911b96f749 code=0x7ffc0000 [ 119.899650][ T29] audit: type=1326 audit(1765620949.222:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.1.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f911b96f749 code=0x7ffc0000 [ 119.923331][ T29] audit: type=1326 audit(1765620949.222:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.1.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f911b96f783 code=0x7ffc0000 [ 119.946608][ T29] audit: type=1326 audit(1765620949.222:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.1.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f911b96e1ff code=0x7ffc0000 [ 119.969755][ T29] audit: type=1326 audit(1765620949.222:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.1.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f911b96f7d7 code=0x7ffc0000 [ 119.972694][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.525'. [ 119.993113][ T29] audit: type=1326 audit(1765620949.222:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.1.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f911b96df90 code=0x7ffc0000 [ 120.025212][ T29] audit: type=1326 audit(1765620949.222:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.1.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f911b96f34b code=0x7ffc0000 [ 120.048960][ T2069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.060736][ T2069] bond0 (unregistering): Released all slaves [ 120.088931][ T6424] netlink: 'syz.1.525': attribute type 21 has an invalid length. [ 120.104340][ T6424] netlink: 132 bytes leftover after parsing attributes in process `syz.1.525'. [ 120.113410][ T6424] netlink: 20 bytes leftover after parsing attributes in process `syz.1.525'. [ 120.177079][ T6350] chnl_net:caif_netlink_parms(): no params data found [ 120.223771][ T2069] hsr_slave_0: left promiscuous mode [ 120.234503][ T2069] hsr_slave_1: left promiscuous mode [ 120.241831][ T2069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.249219][ T2069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.275309][ T2069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.282829][ T2069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.305101][ T2069] veth1_macvtap: left promiscuous mode [ 120.310686][ T2069] veth0_macvtap: left promiscuous mode [ 120.321579][ T2069] veth1_vlan: left promiscuous mode [ 120.331725][ T2069] veth0_vlan: left promiscuous mode [ 120.545629][ T2069] team0 (unregistering): Port device team_slave_1 removed [ 120.577197][ T2069] team0 (unregistering): Port device team_slave_0 removed [ 120.731654][ T6458] bridge0: port 3(syz_tun) entered blocking state [ 120.738257][ T6458] bridge0: port 3(syz_tun) entered disabled state [ 120.761662][ T6458] syz_tun: entered allmulticast mode [ 120.782937][ T6458] syz_tun: entered promiscuous mode [ 120.804972][ T6458] bridge0: port 3(syz_tun) entered blocking state [ 120.811480][ T6458] bridge0: port 3(syz_tun) entered forwarding state [ 120.866231][ T6458] loop1: detected capacity change from 0 to 512 [ 120.894631][ T6458] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 120.963107][ T6350] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.970310][ T6350] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.980801][ T6458] EXT4-fs error (device loop1): __ext4_iget:5426: inode #11: block 524312: comm syz.1.528: invalid block [ 120.987677][ T6350] bridge_slave_0: entered allmulticast mode [ 121.014378][ T6350] bridge_slave_0: entered promiscuous mode [ 121.027998][ T6350] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.035273][ T6350] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.045376][ T6458] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.528: couldn't read orphan inode 11 (err -117) [ 121.073317][ T6458] EXT4-fs (loop1): 1 truncate cleaned up [ 121.079325][ T6350] bridge_slave_1: entered allmulticast mode [ 121.087243][ T6350] bridge_slave_1: entered promiscuous mode [ 121.139158][ T6458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.184138][ T6350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.215161][ T6458] 9pnet_fd: p9_fd_create_unix (6458): problem connecting socket: ./file0: -111 [ 121.232539][ T6350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.299260][ T6350] team0: Port device team_slave_0 added [ 121.299614][ T6131] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.319816][ T6350] team0: Port device team_slave_1 added [ 121.412734][ T6350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.419698][ T6350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.445712][ T6350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.544378][ T6350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.551568][ T6350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.577501][ T6350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.743348][ T6350] hsr_slave_0: entered promiscuous mode [ 121.771761][ T6350] hsr_slave_1: entered promiscuous mode [ 121.777706][ T6350] debugfs: 'hsr0' already exists in 'hsr' [ 121.781622][ T6522] loop1: detected capacity change from 0 to 512 [ 121.783512][ T6350] Cannot create hsr debugfs directory [ 121.831839][ T6522] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 121.851909][ T6522] EXT4-fs (loop1): orphan cleanup on readonly fs [ 121.858564][ T6522] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 121.882414][ T6522] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 121.889694][ T6522] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.532: bg 0: block 40: padding at end of block bitmap is not set [ 121.922410][ T6522] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 121.931805][ T6522] EXT4-fs (loop1): 1 truncate cleaned up [ 121.971637][ T6522] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.012610][ T6522] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.322785][ T6350] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 122.353489][ T6350] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 122.392251][ T6350] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 122.413708][ T6350] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 122.523938][ T6350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.553692][ T6350] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.584852][ T935] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.591942][ T935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.606495][ T935] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.613676][ T935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.624174][ T6552] netlink: 'syz.1.534': attribute type 13 has an invalid length. [ 122.693029][ T6552] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 122.817570][ T6350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.122643][ T6350] veth0_vlan: entered promiscuous mode [ 123.151607][ T6350] veth1_vlan: entered promiscuous mode [ 123.196038][ T6350] veth0_macvtap: entered promiscuous mode [ 123.216907][ T6350] veth1_macvtap: entered promiscuous mode [ 123.240960][ T6350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.277057][ T6350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.310972][ T2069] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.365427][ T2069] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.387704][ T2069] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.396995][ T2069] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.443324][ T6601] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6601 comm=syz.1.537 [ 123.462985][ T6601] loop1: detected capacity change from 0 to 1024 [ 123.513923][ T6611] loop5: detected capacity change from 0 to 512 [ 123.514129][ T6601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.559267][ T6611] EXT4-fs (loop5): 1 truncate cleaned up [ 123.615714][ T6611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.678493][ T6131] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.747678][ T6350] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.778372][ T6625] loop1: detected capacity change from 0 to 2048 [ 123.842053][ T6625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.864243][ T6625] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.538: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 123.923668][ T6131] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.546083][ T6673] loop1: detected capacity change from 0 to 512 [ 124.579769][ T6673] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 124.611661][ T6673] EXT4-fs (loop1): orphan cleanup on readonly fs [ 124.622604][ T6673] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 124.699061][ T6673] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 124.752062][ T6673] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.542: bg 0: block 40: padding at end of block bitmap is not set [ 124.812081][ T6673] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 124.841738][ T6673] EXT4-fs (loop1): 1 truncate cleaned up [ 124.861601][ T6673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 124.906099][ T6673] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.001983][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 125.002002][ T29] audit: type=1326 audit(1765620954.432:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911b96f749 code=0x7ffc0000 [ 125.031411][ T29] audit: type=1326 audit(1765620954.442:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f911b96f749 code=0x7ffc0000 [ 125.054854][ T29] audit: type=1326 audit(1765620954.442:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911b96f749 code=0x7ffc0000 [ 125.078437][ T29] audit: type=1326 audit(1765620954.442:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f911b96f749 code=0x7ffc0000 [ 125.101838][ T29] audit: type=1326 audit(1765620954.442:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911b96f749 code=0x7ffc0000 [ 125.125419][ T29] audit: type=1326 audit(1765620954.442:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f911b96f749 code=0x7ffc0000 [ 125.148760][ T29] audit: type=1326 audit(1765620954.442:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911b96f749 code=0x7ffc0000 [ 125.172423][ T29] audit: type=1326 audit(1765620954.442:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f911b96f749 code=0x7ffc0000 [ 125.195855][ T29] audit: type=1326 audit(1765620954.442:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911b96f749 code=0x7ffc0000 [ 125.219293][ T29] audit: type=1326 audit(1765620954.442:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911b96f749 code=0x7ffc0000 [ 125.246361][ T6704] loop1: detected capacity change from 0 to 512 [ 125.281786][ T6704] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 125.323994][ T6704] EXT4-fs (loop1): orphan cleanup on readonly fs [ 125.341531][ T6704] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 125.442348][ T6704] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 125.461900][ T6704] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.543: bg 0: block 40: padding at end of block bitmap is not set [ 125.481824][ T6704] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 125.544521][ T6704] EXT4-fs (loop1): 1 truncate cleaned up [ 125.562107][ T6704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.615663][ T6704] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.705494][ T6722] loop1: detected capacity change from 0 to 512 [ 125.721851][ T6722] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.773409][ T6722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.794455][ T6722] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.956681][ T6131] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.024711][ T6733] netlink: 32 bytes leftover after parsing attributes in process `syz.1.545'. [ 126.062942][ T6733] netlink: 'syz.1.545': attribute type 13 has an invalid length. [ 126.107525][ T6733] gretap0: refused to change device tx_queue_len [ 126.114046][ T6733] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 126.335645][ T6748] syz_tun: refused to change device tx_queue_len [ 126.866066][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.944591][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.064403][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.163429][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.403060][ T12] bridge_slave_1: left allmulticast mode [ 127.408738][ T12] bridge_slave_1: left promiscuous mode [ 127.414513][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.502008][ T12] bridge_slave_0: left allmulticast mode [ 127.507681][ T12] bridge_slave_0: left promiscuous mode [ 127.513431][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.823709][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.871543][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.922504][ T12] bond0 (unregistering): Released all slaves [ 127.966869][ T6769] chnl_net:caif_netlink_parms(): no params data found [ 128.077746][ T12] hsr_slave_0: left promiscuous mode [ 128.123228][ T12] hsr_slave_1: left promiscuous mode [ 128.191088][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.198591][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.273264][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.280718][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.321672][ T12] veth1_macvtap: left promiscuous mode [ 128.327327][ T12] veth0_macvtap: left promiscuous mode [ 128.351609][ T12] veth1_vlan: left promiscuous mode [ 128.356913][ T12] veth0_vlan: left promiscuous mode [ 128.701982][ T12] team0 (unregistering): Port device team_slave_1 removed [ 128.751678][ T12] team0 (unregistering): Port device team_slave_0 removed [ 129.132226][ T6769] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.139449][ T6769] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.181572][ T6769] bridge_slave_0: entered allmulticast mode [ 129.188173][ T6769] bridge_slave_0: entered promiscuous mode [ 129.232522][ T6769] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.239783][ T6769] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.261573][ T6769] bridge_slave_1: entered allmulticast mode [ 129.274370][ T6769] bridge_slave_1: entered promiscuous mode [ 129.345934][ T6769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.375613][ T6769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.448718][ T6769] team0: Port device team_slave_0 added [ 129.473316][ T6769] team0: Port device team_slave_1 added [ 129.486904][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.574512][ T6769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.581545][ T6769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.607581][ T6769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.695542][ T6769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.702564][ T6769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.728546][ T6769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.793686][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.905368][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.964425][ T6769] hsr_slave_0: entered promiscuous mode [ 129.982383][ T6769] hsr_slave_1: entered promiscuous mode [ 129.992063][ T6769] debugfs: 'hsr0' already exists in 'hsr' [ 129.997818][ T6769] Cannot create hsr debugfs directory [ 130.034019][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.231526][ T6918] chnl_net:caif_netlink_parms(): no params data found [ 130.240428][ T12] bridge_slave_1: left allmulticast mode [ 130.246149][ T12] bridge_slave_1: left promiscuous mode [ 130.251868][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.272297][ T12] bridge_slave_0: left allmulticast mode [ 130.278167][ T12] bridge_slave_0: left promiscuous mode [ 130.283898][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.473271][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.493613][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.512619][ T12] bond0 (unregistering): Released all slaves [ 130.813340][ T12] hsr_slave_0: left promiscuous mode [ 130.819063][ T12] hsr_slave_1: left promiscuous mode [ 130.831822][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.839217][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.871929][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.879333][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.934554][ T12] veth1_macvtap: left promiscuous mode [ 130.940112][ T12] veth0_macvtap: left promiscuous mode [ 130.961647][ T12] veth1_vlan: left promiscuous mode [ 130.966919][ T12] veth0_vlan: left promiscuous mode [ 131.342314][ T12] team0 (unregistering): Port device team_slave_1 removed [ 131.372178][ T12] team0 (unregistering): Port device team_slave_0 removed [ 131.702893][ T6918] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.709999][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.732266][ T6918] bridge_slave_0: entered allmulticast mode [ 131.762091][ T6918] bridge_slave_0: entered promiscuous mode [ 131.771654][ T6918] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.778720][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.811586][ T6918] bridge_slave_1: entered allmulticast mode [ 131.817973][ T6918] bridge_slave_1: entered promiscuous mode [ 131.905712][ T6918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.922658][ T6918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.982972][ T6918] team0: Port device team_slave_0 added [ 131.989784][ T6918] team0: Port device team_slave_1 added [ 132.134560][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.141681][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.167615][ T6918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.222480][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.229510][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.256247][ T6918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.372645][ T6769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 132.389701][ T6769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 132.425849][ T6918] hsr_slave_0: entered promiscuous mode [ 132.452021][ T6918] hsr_slave_1: entered promiscuous mode [ 132.472022][ T6918] debugfs: 'hsr0' already exists in 'hsr' [ 132.477793][ T6918] Cannot create hsr debugfs directory [ 132.483391][ T6769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 132.514025][ T6769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 132.802535][ T6769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.876507][ T6769] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.913650][ T2252] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.920782][ T2252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.934977][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.942153][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.088031][ T6918] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 133.116315][ T6918] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 133.145789][ T6918] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 133.166791][ T6769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.181964][ T6918] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 133.337985][ T6918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.408300][ T6918] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.427080][ T4985] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.434256][ T4985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.472092][ T6769] veth0_vlan: entered promiscuous mode [ 133.502442][ T4081] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.509518][ T4081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.543256][ T6769] veth1_vlan: entered promiscuous mode [ 133.600691][ T6769] veth0_macvtap: entered promiscuous mode [ 133.631269][ T6769] veth1_macvtap: entered promiscuous mode [ 133.662825][ T6769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.713947][ T6769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.736009][ T6918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.779480][ T1740] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.822736][ T1740] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.881579][ T1740] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.890336][ T1740] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.079295][ T6918] veth0_vlan: entered promiscuous mode [ 134.097392][ T6918] veth1_vlan: entered promiscuous mode [ 134.142293][ T6918] veth0_macvtap: entered promiscuous mode [ 134.166816][ T6918] veth1_macvtap: entered promiscuous mode [ 134.206854][ T6918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.253553][ T6918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.281831][ T61] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.303643][ T61] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.329767][ T7144] netlink: 4 bytes leftover after parsing attributes in process `,&#^%'. [ 134.346568][ T61] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.374997][ T61] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.392285][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 134.392302][ T29] audit: type=1400 audit(1765620963.842:2001): avc: denied { remount } for pid=7143 comm="syz.0.556" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 134.481501][ T29] audit: type=1326 audit(1765620963.892:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.6.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 134.504859][ T29] audit: type=1326 audit(1765620963.892:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.6.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 134.528194][ T29] audit: type=1326 audit(1765620963.892:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.6.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 134.551531][ T29] audit: type=1326 audit(1765620963.892:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.6.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 134.575108][ T29] audit: type=1326 audit(1765620963.892:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.6.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 134.598477][ T29] audit: type=1326 audit(1765620963.892:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.6.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 134.621860][ T29] audit: type=1326 audit(1765620963.892:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.6.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 134.645311][ T29] audit: type=1326 audit(1765620963.892:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.6.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 134.668929][ T29] audit: type=1326 audit(1765620963.892:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.6.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 134.693994][ T7162] netlink: 188 bytes leftover after parsing attributes in process `syz.6.559'. [ 135.368741][ T7210] loop0: detected capacity change from 0 to 512 [ 135.397533][ T7210] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 135.453708][ T7210] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.560: invalid indirect mapped block 4294967295 (level 0) [ 135.526653][ T7210] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.560: invalid indirect mapped block 4294967295 (level 1) [ 135.568889][ T7210] EXT4-fs (loop0): 1 orphan inode deleted [ 135.574754][ T7210] EXT4-fs (loop0): 1 truncate cleaned up [ 135.641687][ T7210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.791916][ T6769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.713647][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.6.568'. [ 136.743204][ T7309] loop6: detected capacity change from 0 to 128 [ 136.770043][ T7309] FAT-fs (loop6): error, corrupted file size (i_pos 548, 512) [ 136.777748][ T7309] FAT-fs (loop6): Filesystem has been set read-only [ 136.807627][ T7309] FAT-fs (loop6): error, invalid FAT chain (i_pos 548, last_block 8) [ 136.841791][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.6.568'. [ 136.862191][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.6.568'. [ 136.871213][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.6.568'. [ 136.954261][ T7322] loop6: detected capacity change from 0 to 512 [ 136.982645][ T7322] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 136.995171][ T2252] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.018208][ T7322] EXT4-fs (loop6): orphan cleanup on readonly fs [ 137.025930][ T7322] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 137.052842][ T7322] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 137.062939][ T7322] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.570: bg 0: block 40: padding at end of block bitmap is not set [ 137.062953][ T2252] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.087544][ T7322] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 137.111616][ T7322] EXT4-fs (loop6): 1 truncate cleaned up [ 137.118429][ T7322] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.152073][ T7322] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.174199][ T2252] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.239133][ T2252] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.306606][ T7327] loop6: detected capacity change from 0 to 1764 [ 137.496350][ T7312] chnl_net:caif_netlink_parms(): no params data found [ 137.514176][ T2252] bridge_slave_1: left allmulticast mode [ 137.519855][ T2252] bridge_slave_1: left promiscuous mode [ 137.525560][ T2252] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.555561][ T2252] bridge_slave_0: left promiscuous mode [ 137.561231][ T2252] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.858720][ T2252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.889494][ T2252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.920355][ T2252] bond0 (unregistering): Released all slaves [ 137.982639][ T1038] syz1: Port: 1 Link DOWN [ 138.102828][ T7312] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.109933][ T7312] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.141758][ T7312] bridge_slave_0: entered allmulticast mode [ 138.148277][ T7312] bridge_slave_0: entered promiscuous mode [ 138.166308][ T7312] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.173499][ T7312] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.193279][ T7334] loop6: detected capacity change from 0 to 512 [ 138.195312][ T7312] bridge_slave_1: entered allmulticast mode [ 138.222171][ T7334] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 138.227014][ T7312] bridge_slave_1: entered promiscuous mode [ 138.236087][ T7334] EXT4-fs (loop6): orphan cleanup on readonly fs [ 138.253580][ T2252] hsr_slave_0: left promiscuous mode [ 138.272206][ T7334] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 138.292185][ T2252] hsr_slave_1: left promiscuous mode [ 138.311520][ T2252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.318926][ T2252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.334038][ T7334] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 138.341197][ T7334] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.572: bg 0: block 40: padding at end of block bitmap is not set [ 138.361647][ T7334] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 138.370623][ T7334] EXT4-fs (loop6): 1 truncate cleaned up [ 138.370969][ T2252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.377363][ T7334] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 138.383689][ T2252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.431550][ T2252] veth1_macvtap: left promiscuous mode [ 138.437063][ T2252] veth0_macvtap: left promiscuous mode [ 138.451574][ T2252] veth1_vlan: left promiscuous mode [ 138.456798][ T2252] veth0_vlan: left promiscuous mode [ 138.462088][ T7334] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.795144][ T7344] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 138.862901][ T2252] team0 (unregistering): Port device team_slave_1 removed [ 138.907628][ T2252] team0 (unregistering): Port device team_slave_0 removed [ 138.939521][ T37] smc: removing ib device syz1 [ 139.170559][ T7343] netlink: 28 bytes leftover after parsing attributes in process `syz.6.575'. [ 139.179486][ T7343] netlink: 28 bytes leftover after parsing attributes in process `syz.6.575'. [ 139.208363][ T7312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.229614][ T7312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.284434][ T7312] team0: Port device team_slave_0 added [ 139.291321][ T7312] team0: Port device team_slave_1 added [ 139.374167][ T7312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.381235][ T7312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.407161][ T7312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.436869][ T7312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.443875][ T7312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.470323][ T7312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.632575][ T7312] hsr_slave_0: entered promiscuous mode [ 139.638604][ T7312] hsr_slave_1: entered promiscuous mode [ 139.692155][ T7312] debugfs: 'hsr0' already exists in 'hsr' [ 139.697912][ T7312] Cannot create hsr debugfs directory [ 139.899956][ T2252] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.981172][ T2252] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.077740][ T2252] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.164846][ T2252] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.207918][ T7372] chnl_net:caif_netlink_parms(): no params data found [ 140.312590][ T7312] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 140.343616][ T7312] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 140.391688][ T7312] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 140.413976][ T7312] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 140.463334][ T7372] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.470464][ T7372] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.501628][ T7372] bridge_slave_0: entered allmulticast mode [ 140.508242][ T7372] bridge_slave_0: entered promiscuous mode [ 140.518769][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 140.518780][ T29] audit: type=1326 audit(1765620969.962:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.6.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 140.555139][ T29] audit: type=1326 audit(1765620969.992:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.6.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 140.578659][ T29] audit: type=1326 audit(1765620969.992:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.6.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 140.601963][ T29] audit: type=1326 audit(1765620969.992:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.6.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 140.613901][ T7372] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.625285][ T29] audit: type=1326 audit(1765620969.992:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.6.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 140.632335][ T7372] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.662687][ T29] audit: type=1326 audit(1765620969.992:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.6.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 140.673584][ T7372] bridge_slave_1: entered allmulticast mode [ 140.686007][ T29] audit: type=1326 audit(1765620969.992:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.6.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 140.715201][ T29] audit: type=1326 audit(1765620969.992:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.6.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f928c70df90 code=0x7ffc0000 [ 140.738674][ T29] audit: type=1326 audit(1765620969.992:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.6.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 140.754514][ T7372] bridge_slave_1: entered promiscuous mode [ 140.762054][ T29] audit: type=1326 audit(1765620969.992:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.6.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 140.874576][ T2252] bridge_slave_1: left allmulticast mode [ 140.880251][ T2252] bridge_slave_1: left promiscuous mode [ 140.885993][ T2252] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.933130][ T2252] bridge_slave_0: left allmulticast mode [ 140.938846][ T2252] bridge_slave_0: left promiscuous mode [ 140.944593][ T2252] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.135089][ T2252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.153083][ T2252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.182694][ T2252] bond0 (unregistering): Released all slaves [ 141.232888][ T7372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.255744][ T2252] hsr_slave_0: left promiscuous mode [ 141.278374][ T2252] hsr_slave_1: left promiscuous mode [ 141.284114][ T2252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.291590][ T2252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.310966][ T2252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.318542][ T2252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.330264][ T2252] veth1_macvtap: left promiscuous mode [ 141.335990][ T2252] veth0_macvtap: left promiscuous mode [ 141.342008][ T2252] veth1_vlan: left promiscuous mode [ 141.347567][ T2252] veth0_vlan: left promiscuous mode [ 141.535762][ T2252] team0 (unregistering): Port device team_slave_1 removed [ 141.572883][ T2252] team0 (unregistering): Port device team_slave_0 removed [ 141.575290][ T7504] loop6: detected capacity change from 0 to 1024 [ 141.590688][ T7504] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.623376][ T7504] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.759755][ T7372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.849545][ T7312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.884893][ T7372] team0: Port device team_slave_0 added [ 141.907597][ T7312] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.936571][ T7372] team0: Port device team_slave_1 added [ 141.953275][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.960368][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.045819][ T7372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.052902][ T7372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.078991][ T7372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.122855][ T4985] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.129945][ T4985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.193141][ T7372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.200150][ T7372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.226186][ T7372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.334499][ T7504] syz.6.583 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 142.348599][ T7504] CPU: 0 UID: 0 PID: 7504 Comm: syz.6.583 Not tainted syzkaller #0 PREEMPT(voluntary) [ 142.348630][ T7504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.348643][ T7504] Call Trace: [ 142.348652][ T7504] [ 142.348658][ T7504] __dump_stack+0x1d/0x30 [ 142.348679][ T7504] dump_stack_lvl+0xe8/0x140 [ 142.348808][ T7504] dump_stack+0x15/0x1b [ 142.348834][ T7504] dump_header+0x81/0x240 [ 142.348858][ T7504] oom_kill_process+0x295/0x350 [ 142.348886][ T7504] out_of_memory+0x97b/0xb80 [ 142.348971][ T7504] try_charge_memcg+0x610/0xa10 [ 142.349097][ T7504] obj_cgroup_charge_pages+0xa6/0x150 [ 142.349173][ T7504] __memcg_kmem_charge_page+0x9f/0x170 [ 142.349211][ T7504] __alloc_frozen_pages_noprof+0x18f/0x360 [ 142.349251][ T7504] alloc_pages_mpol+0xb3/0x260 [ 142.349328][ T7504] ? alloc_pages_noprof+0xf4/0x130 [ 142.349360][ T7504] alloc_pages_noprof+0x90/0x130 [ 142.349388][ T7504] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 142.349491][ T7504] __kvmalloc_node_noprof+0x492/0x6b0 [ 142.349520][ T7504] ? ip_set_alloc+0x24/0x30 [ 142.349550][ T7504] ? ip_set_alloc+0x24/0x30 [ 142.349616][ T7504] ip_set_alloc+0x24/0x30 [ 142.349652][ T7504] hash_netiface_create+0x282/0x740 [ 142.349692][ T7504] ? __pfx_hash_netiface_create+0x10/0x10 [ 142.349782][ T7504] ip_set_create+0x3cc/0x970 [ 142.349885][ T7504] ? __nla_parse+0x40/0x60 [ 142.349944][ T7504] nfnetlink_rcv_msg+0x4c6/0x590 [ 142.350014][ T7504] netlink_rcv_skb+0x123/0x220 [ 142.350151][ T7504] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 142.350262][ T7504] nfnetlink_rcv+0x167/0x16c0 [ 142.350293][ T7504] ? kmem_cache_free+0xe3/0x3a0 [ 142.350325][ T7504] ? __kfree_skb+0x109/0x150 [ 142.350420][ T7504] ? nlmon_xmit+0x4f/0x60 [ 142.350448][ T7504] ? consume_skb+0x49/0x150 [ 142.350511][ T7504] ? nlmon_xmit+0x4f/0x60 [ 142.350533][ T7504] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 142.350566][ T7504] ? __dev_queue_xmit+0x138d/0x1ec0 [ 142.350614][ T7504] ? __dev_queue_xmit+0x148/0x1ec0 [ 142.350646][ T7504] ? ref_tracker_free+0x37d/0x3e0 [ 142.350720][ T7504] ? __netlink_deliver_tap+0x4dc/0x500 [ 142.350762][ T7504] netlink_unicast+0x5c0/0x690 [ 142.350860][ T7504] netlink_sendmsg+0x58b/0x6b0 [ 142.350953][ T7504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.350993][ T7504] __sock_sendmsg+0x145/0x180 [ 142.351015][ T7504] ____sys_sendmsg+0x31e/0x4a0 [ 142.351126][ T7504] ___sys_sendmsg+0x17b/0x1d0 [ 142.351195][ T7504] __x64_sys_sendmsg+0xd4/0x160 [ 142.351283][ T7504] x64_sys_call+0x17ba/0x3000 [ 142.351314][ T7504] do_syscall_64+0xd8/0x2a0 [ 142.351355][ T7504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.351377][ T7504] RIP: 0033:0x7f928c70f749 [ 142.351397][ T7504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.351414][ T7504] RSP: 002b:00007f928b177038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.351432][ T7504] RAX: ffffffffffffffda RBX: 00007f928c965fa0 RCX: 00007f928c70f749 [ 142.351449][ T7504] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 142.351464][ T7504] RBP: 00007f928c793f91 R08: 0000000000000000 R09: 0000000000000000 [ 142.351479][ T7504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.351492][ T7504] R13: 00007f928c966038 R14: 00007f928c965fa0 R15: 00007ffec723fa08 [ 142.351541][ T7504] [ 142.677510][ T7504] memory: usage 307200kB, limit 307200kB, failcnt 259 [ 142.684355][ T7504] memory+swap: usage 307896kB, limit 9007199254740988kB, failcnt 0 [ 142.692293][ T7504] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0 [ 142.699611][ T7504] Memory cgroup stats for /syz6: [ 142.717313][ T7312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.751895][ T7504] cache 28672 [ 142.755214][ T7504] rss 0 [ 142.758123][ T7504] shmem 0 [ 142.761074][ T7504] mapped_file 0 [ 142.764626][ T7504] dirty 0 [ 142.767570][ T7504] writeback 0 [ 142.770851][ T7504] workingset_refault_anon 25 [ 142.775471][ T7504] workingset_refault_file 0 [ 142.779982][ T7504] swap 712704 [ 142.783351][ T7504] swapcached 8192 [ 142.787013][ T7504] pgpgin 22748 [ 142.790437][ T7504] pgpgout 22737 [ 142.794003][ T7504] pgfault 31690 [ 142.797472][ T7504] pgmajfault 6 [ 142.800853][ T7504] inactive_anon 0 [ 142.804546][ T7504] active_anon 8192 [ 142.808304][ T7504] inactive_file 0 [ 142.812006][ T7504] active_file 36864 [ 142.815826][ T7504] unevictable 0 [ 142.819283][ T7504] hierarchical_memory_limit 314572800 [ 142.824758][ T7504] hierarchical_memsw_limit 9223372036854771712 [ 142.830911][ T7504] total_cache 28672 [ 142.834897][ T7504] total_rss 0 [ 142.838189][ T7504] total_shmem 0 [ 142.841724][ T7504] total_mapped_file 0 [ 142.845710][ T7504] total_dirty 0 [ 142.849175][ T7504] total_writeback 0 [ 142.853033][ T7504] total_workingset_refault_anon 25 [ 142.858216][ T7504] total_workingset_refault_file 0 [ 142.863363][ T7504] total_swap 712704 [ 142.867206][ T7504] total_swapcached 8192 [ 142.871383][ T7504] total_pgpgin 22748 [ 142.875396][ T7504] total_pgpgout 22737 [ 142.879414][ T7504] total_pgfault 31690 [ 142.883446][ T7504] total_pgmajfault 6 [ 142.887349][ T7504] total_inactive_anon 0 [ 142.891575][ T7504] total_active_anon 8192 [ 142.895855][ T7504] total_inactive_file 0 [ 142.900073][ T7504] total_active_file 36864 [ 142.904440][ T7504] total_unevictable 0 [ 142.908420][ T7504] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.583,pid=7503,uid=0 [ 142.923045][ T7504] Memory cgroup out of memory: Killed process 7503 (syz.6.583) total-vm:93968kB, anon-rss:1264kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 142.950921][ T7372] hsr_slave_0: entered promiscuous mode [ 142.962670][ T7372] hsr_slave_1: entered promiscuous mode [ 142.985750][ T7372] debugfs: 'hsr0' already exists in 'hsr' [ 142.991551][ T7372] Cannot create hsr debugfs directory [ 143.003088][ T6131] bridge0: port 3(syz_tun) entered disabled state [ 143.011262][ T6131] syz_tun (unregistering): left allmulticast mode [ 143.017864][ T6131] syz_tun (unregistering): left promiscuous mode [ 143.024243][ T6131] bridge0: port 3(syz_tun) entered disabled state [ 143.178902][ T4081] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.273590][ T7312] veth0_vlan: entered promiscuous mode [ 143.281734][ T4081] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.345890][ T6918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.358924][ T4081] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.393443][ T7312] veth1_vlan: entered promiscuous mode [ 143.418070][ T7575] loop6: detected capacity change from 0 to 1024 [ 143.421989][ T7533] chnl_net:caif_netlink_parms(): no params data found [ 143.449597][ T7575] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.458603][ T4081] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.493926][ T7575] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.550251][ T7312] veth0_macvtap: entered promiscuous mode [ 143.676014][ T7533] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.683378][ T7533] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.711142][ T7533] bridge_slave_0: entered allmulticast mode [ 143.721183][ T7533] bridge_slave_0: entered promiscuous mode [ 143.742160][ T7533] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.749391][ T7533] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.774521][ T7533] bridge_slave_1: entered allmulticast mode [ 143.842251][ T7533] bridge_slave_1: entered promiscuous mode [ 143.957730][ T7312] veth1_macvtap: entered promiscuous mode [ 144.009577][ T7533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.041375][ T7533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.104805][ T4081] bridge_slave_1: left allmulticast mode [ 144.110555][ T4081] bridge_slave_1: left promiscuous mode [ 144.116293][ T4081] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.137012][ T4081] bridge_slave_0: left allmulticast mode [ 144.142775][ T4081] bridge_slave_0: left promiscuous mode [ 144.148436][ T4081] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.153932][ T7574] syz.6.585 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 144.166358][ T7574] CPU: 0 UID: 0 PID: 7574 Comm: syz.6.585 Not tainted syzkaller #0 PREEMPT(voluntary) [ 144.166387][ T7574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 144.166403][ T7574] Call Trace: [ 144.166411][ T7574] [ 144.166420][ T7574] __dump_stack+0x1d/0x30 [ 144.166477][ T7574] dump_stack_lvl+0xe8/0x140 [ 144.166548][ T7574] dump_stack+0x15/0x1b [ 144.166592][ T7574] dump_header+0x81/0x240 [ 144.166690][ T7574] oom_kill_process+0x295/0x350 [ 144.166725][ T7574] out_of_memory+0x97b/0xb80 [ 144.166748][ T7574] try_charge_memcg+0x610/0xa10 [ 144.166814][ T7574] charge_memcg+0x51/0xc0 [ 144.166856][ T7574] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 144.166904][ T7574] __read_swap_cache_async+0x17b/0x2d0 [ 144.166951][ T7574] swap_cluster_readahead+0x262/0x3c0 [ 144.166996][ T7574] swapin_readahead+0xde/0x820 [ 144.167033][ T7574] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 144.167082][ T7574] ? lruvec_stat_mod_folio+0xd6/0x120 [ 144.167113][ T7574] ? __rcu_read_unlock+0x4f/0x70 [ 144.167185][ T7574] ? swap_cache_get_folio+0x277/0x280 [ 144.167225][ T7574] do_swap_page+0x2b4/0x21e0 [ 144.167274][ T7574] ? css_rstat_updated+0xb7/0x240 [ 144.167302][ T7574] ? __pfx_default_wake_function+0x10/0x10 [ 144.167395][ T7574] handle_mm_fault+0x9d8/0x2c60 [ 144.167443][ T7574] do_user_addr_fault+0x630/0x1080 [ 144.167486][ T7574] exc_page_fault+0x62/0xa0 [ 144.167588][ T7574] asm_exc_page_fault+0x26/0x30 [ 144.167613][ T7574] RIP: 0033:0x7f928c741fb3 [ 144.167633][ T7574] Code: 0d 09 00 48 8d 3d 36 0d 09 00 e8 e8 47 f6 ff 0f 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 144.167658][ T7574] RSP: 002b:00007ffec723fb28 EFLAGS: 00010293 [ 144.167678][ T7574] RAX: 00000000fffffffa RBX: 00007f928c965fa0 RCX: 0000000000000000 [ 144.167709][ T7574] RDX: 00007ffec723fb40 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.167734][ T7574] RBP: 00007f928c967da0 R08: 0000000002c86011 R09: 7fffffffffffffff [ 144.167746][ T7574] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000023355 [ 144.167769][ T7574] R13: 00007f928c966090 R14: ffffffffffffffff R15: 00007ffec723fc80 [ 144.167792][ T7574] [ 144.167800][ T7574] memory: usage 307200kB, limit 307200kB, failcnt 528 [ 144.387644][ T7574] memory+swap: usage 307900kB, limit 9007199254740988kB, failcnt 0 [ 144.395662][ T7574] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 144.402977][ T7574] Memory cgroup stats for /syz6: [ 144.403542][ T7574] cache 16384 [ 144.411971][ T7574] rss 0 [ 144.414809][ T7574] shmem 0 [ 144.417753][ T7574] mapped_file 0 [ 144.421314][ T7574] dirty 0 [ 144.424289][ T7574] writeback 0 [ 144.427577][ T7574] workingset_refault_anon 125 [ 144.432368][ T7574] workingset_refault_file 0 [ 144.436877][ T7574] swap 716800 [ 144.440170][ T7574] swapcached 4096 [ 144.443834][ T7574] pgpgin 23028 [ 144.447215][ T7574] pgpgout 23021 [ 144.450764][ T7574] pgfault 32024 [ 144.454274][ T7574] pgmajfault 61 [ 144.457737][ T7574] inactive_anon 0 [ 144.461413][ T7574] active_anon 4096 [ 144.465176][ T7574] inactive_file 0 [ 144.468843][ T7574] active_file 24576 [ 144.472664][ T7574] unevictable 0 [ 144.476123][ T7574] hierarchical_memory_limit 314572800 [ 144.481514][ T7574] hierarchical_memsw_limit 9223372036854771712 [ 144.487671][ T7574] total_cache 16384 [ 144.491517][ T7574] total_rss 0 [ 144.494840][ T7574] total_shmem 0 [ 144.498302][ T7574] total_mapped_file 0 [ 144.502384][ T7574] total_dirty 0 [ 144.505847][ T7574] total_writeback 0 [ 144.509679][ T7574] total_workingset_refault_anon 125 [ 144.514955][ T7574] total_workingset_refault_file 0 [ 144.519978][ T7574] total_swap 716800 [ 144.523898][ T7574] total_swapcached 4096 [ 144.528062][ T7574] total_pgpgin 23028 [ 144.531981][ T7574] total_pgpgout 23021 [ 144.536108][ T7574] total_pgfault 32024 [ 144.540097][ T7574] total_pgmajfault 61 [ 144.544157][ T7574] total_inactive_anon 0 [ 144.548315][ T7574] total_active_anon 4096 [ 144.552579][ T7574] total_inactive_file 0 [ 144.556791][ T7574] total_active_file 24576 [ 144.561119][ T7574] total_unevictable 0 [ 144.565124][ T7574] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.585,pid=7574,uid=0 [ 144.579737][ T7574] Memory cgroup out of memory: Killed process 7574 (syz.6.585) total-vm:96016kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 144.713851][ T4081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.731550][ T6918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.732019][ T4081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.773979][ T4081] bond0 (unregistering): Released all slaves [ 144.856579][ T4081] hsr_slave_0: left promiscuous mode [ 144.866877][ T4081] hsr_slave_1: left promiscuous mode [ 144.876584][ T4081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.884027][ T4081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.891903][ T7617] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7617 comm=syz.6.587 [ 144.912022][ T4081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.912644][ T7615] loop6: detected capacity change from 0 to 1024 [ 144.919405][ T4081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.951683][ T7615] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.967699][ T4081] veth1_macvtap: left promiscuous mode [ 144.976097][ T4081] veth0_macvtap: left promiscuous mode [ 144.981738][ T4081] veth1_vlan: left promiscuous mode [ 144.987023][ T4081] veth0_vlan: left promiscuous mode [ 145.114209][ T4081] team0 (unregistering): Port device team_slave_1 removed [ 145.136691][ T4081] team0 (unregistering): Port device team_slave_0 removed [ 145.142147][ T6918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.226304][ T7533] team0: Port device team_slave_0 added [ 145.238049][ T7642] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 145.247547][ T7642] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 145.264011][ T7372] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 145.273067][ T7372] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 145.297433][ T7533] team0: Port device team_slave_1 added [ 145.304671][ T7312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.323369][ T7372] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 145.341490][ T7652] loop6: detected capacity change from 0 to 512 [ 145.343718][ T7372] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 145.373043][ T7312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.392523][ T7652] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 145.400717][ T7652] EXT4-fs (loop6): orphan cleanup on readonly fs [ 145.408147][ T7652] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 145.423483][ T7652] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 145.431080][ T7652] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.589: bg 0: block 40: padding at end of block bitmap is not set [ 145.448331][ T7533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.448595][ T7652] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 145.455328][ T7533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.464659][ T7652] EXT4-fs (loop6): 1 truncate cleaned up [ 145.489960][ T7533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.527101][ T61] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.541609][ T7652] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 145.562439][ T7652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.577197][ T7533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.584232][ T7533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.610185][ T7533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.643189][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 145.643206][ T29] audit: type=1326 audit(1765620975.092:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.6.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 145.673168][ T61] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.702657][ T61] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.737116][ T61] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.749122][ T7533] hsr_slave_0: entered promiscuous mode [ 145.754774][ T29] audit: type=1326 audit(1765620975.132:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.6.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 145.778221][ T29] audit: type=1326 audit(1765620975.132:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.6.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 145.792054][ T7533] hsr_slave_1: entered promiscuous mode [ 145.801576][ T29] audit: type=1326 audit(1765620975.132:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.6.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 145.801650][ T29] audit: type=1326 audit(1765620975.142:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.6.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 145.810889][ T7674] loop6: detected capacity change from 0 to 2048 [ 145.830446][ T29] audit: type=1326 audit(1765620975.142:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.6.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 145.883427][ T29] audit: type=1326 audit(1765620975.142:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.6.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 145.906769][ T29] audit: type=1326 audit(1765620975.142:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.6.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 145.930100][ T29] audit: type=1326 audit(1765620975.142:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.6.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 145.953464][ T29] audit: type=1326 audit(1765620975.142:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.6.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 145.995061][ T7372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.007202][ T7674] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.054750][ T7372] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.100336][ T7683] loop9: detected capacity change from 0 to 512 [ 146.122991][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.130079][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.142099][ T7674] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.590: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 146.142880][ T7683] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 146.178016][ T7683] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.567: invalid indirect mapped block 4294967295 (level 0) [ 146.192948][ T7683] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.567: invalid indirect mapped block 4294967295 (level 1) [ 146.203783][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.213892][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.223492][ T7683] EXT4-fs (loop9): 1 orphan inode deleted [ 146.229246][ T7683] EXT4-fs (loop9): 1 truncate cleaned up [ 146.247454][ T7683] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.270332][ T6918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.280391][ T7372] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 146.290864][ T7372] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.385821][ T7683] netlink: 20 bytes leftover after parsing attributes in process `syz.9.567'. [ 146.413826][ T7683] loop4: detected capacity change from 0 to 7 [ 146.426520][ T7683] Buffer I/O error on dev loop4, logical block 0, async page read [ 146.449682][ T7372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.461626][ T7683] Buffer I/O error on dev loop4, logical block 0, async page read [ 146.469491][ T7683] loop4: unable to read partition table [ 146.501658][ T7683] loop_reread_partitions: partition scan of loop4 (úùƒåP=ý?ã}X‹ºÐ œëÜ%õ«) failed (rc=-5) [ 146.503501][ T4893] Buffer I/O error on dev loop4, logical block 0, async page read [ 146.539217][ T4893] Buffer I/O error on dev loop4, logical block 0, async page read [ 146.566885][ T4893] Buffer I/O error on dev loop4, logical block 0, async page read [ 146.599493][ T4893] Buffer I/O error on dev loop4, logical block 0, async page read [ 146.608464][ T7533] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 146.616606][ T7312] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.631687][ T4893] Buffer I/O error on dev loop4, logical block 0, async page read [ 146.639595][ T4893] Buffer I/O error on dev loop4, logical block 0, async page read [ 146.659763][ T7533] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 146.686507][ T7533] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 146.708899][ T4893] Buffer I/O error on dev loop4, logical block 0, async page read [ 146.729189][ T7533] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 146.739396][ T4893] Buffer I/O error on dev loop4, logical block 0, async page read [ 146.859730][ T7372] veth0_vlan: entered promiscuous mode [ 146.882075][ T7741] loop9: detected capacity change from 0 to 8192 [ 146.883299][ T7533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.914001][ T7533] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.932070][ T7741] loop9: p1 p2 < > p3 p4 < p5 > [ 146.937057][ T7741] loop9: partition table partially beyond EOD, truncated [ 146.944738][ T7372] veth1_vlan: entered promiscuous mode [ 146.956954][ T4985] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.958415][ T7741] loop9: p1 size 100663296 extends beyond EOD, [ 146.964036][ T4985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.977655][ T7741] truncated [ 146.984121][ T7741] loop9: p2 start 591104 is beyond EOD, truncated [ 146.990598][ T7741] loop9: p3 start 33572980 is beyond EOD, truncated [ 147.005086][ T4081] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.012190][ T4081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.034585][ T7741] loop9: p5 size 100663296 extends beyond EOD, truncated [ 147.075964][ T7372] veth0_macvtap: entered promiscuous mode [ 147.087076][ T7533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.145179][ T7372] veth1_macvtap: entered promiscuous mode [ 147.169338][ T7372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.194271][ T7372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.228778][ T7773] netlink: 204 bytes leftover after parsing attributes in process `syz.9.597'. [ 147.253101][ T7773] bond0: Error: Cannot enslave bond to itself. [ 147.271596][ T37] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.285866][ T37] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.309368][ T7533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.335299][ T37] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.413637][ T37] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.642165][ T7806] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 3, id = 0 [ 147.688164][ T7809] loop6: detected capacity change from 0 to 512 [ 147.714103][ T7809] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 147.725151][ T7533] veth0_vlan: entered promiscuous mode [ 147.734001][ T7533] veth1_vlan: entered promiscuous mode [ 147.739714][ T7809] EXT4-fs (loop6): orphan cleanup on readonly fs [ 147.758735][ T7533] veth0_macvtap: entered promiscuous mode [ 147.765443][ T7809] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 147.781055][ T7533] veth1_macvtap: entered promiscuous mode [ 147.794135][ T7533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.809347][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.8.604'. [ 147.818586][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.8.604'. [ 147.825087][ T7809] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 147.846118][ T7533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.857324][ T7809] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.603: bg 0: block 40: padding at end of block bitmap is not set [ 147.888618][ T4081] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.897490][ T7809] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 147.897817][ T7809] EXT4-fs (loop6): 1 truncate cleaned up [ 147.935110][ T4081] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.964561][ T4081] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.970258][ T7809] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.986177][ T4081] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.006997][ T7823] netlink: 'syz.8.606': attribute type 21 has an invalid length. [ 148.007338][ T7809] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.031066][ T7823] netlink: 132 bytes leftover after parsing attributes in process `syz.8.606'. [ 148.040065][ T7823] netlink: 20 bytes leftover after parsing attributes in process `syz.8.606'. [ 148.130787][ T7836] FAULT_INJECTION: forcing a failure. [ 148.130787][ T7836] name failslab, interval 1, probability 0, space 0, times 0 [ 148.143629][ T7836] CPU: 1 UID: 0 PID: 7836 Comm: syz.6.608 Not tainted syzkaller #0 PREEMPT(voluntary) [ 148.143659][ T7836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.143707][ T7836] Call Trace: [ 148.143712][ T7836] [ 148.143719][ T7836] __dump_stack+0x1d/0x30 [ 148.143746][ T7836] dump_stack_lvl+0xe8/0x140 [ 148.143832][ T7836] dump_stack+0x15/0x1b [ 148.143848][ T7836] should_fail_ex+0x265/0x280 [ 148.143872][ T7836] should_failslab+0x8c/0xb0 [ 148.143946][ T7836] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 148.143973][ T7836] ? dup_task_struct+0x5b/0x950 [ 148.143990][ T7836] dup_task_struct+0x5b/0x950 [ 148.144049][ T7836] ? copy_process+0x36c/0x1ef0 [ 148.144071][ T7836] copy_process+0x37d/0x1ef0 [ 148.144092][ T7836] ? kstrtouint+0x76/0xc0 [ 148.144188][ T7836] ? kstrtouint_from_user+0x9f/0xf0 [ 148.144213][ T7836] ? 0xffffffff81000000 [ 148.144227][ T7836] kernel_clone+0x16c/0x5c0 [ 148.144251][ T7836] ? vfs_write+0x7e8/0x960 [ 148.144314][ T7836] __x64_sys_clone+0xe6/0x120 [ 148.144336][ T7836] x64_sys_call+0x12d0/0x3000 [ 148.144406][ T7836] do_syscall_64+0xd8/0x2a0 [ 148.144434][ T7836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.144491][ T7836] RIP: 0033:0x7f928c70f749 [ 148.144526][ T7836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.144610][ T7836] RSP: 002b:00007f928b176fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 148.144628][ T7836] RAX: ffffffffffffffda RBX: 00007f928c965fa0 RCX: 00007f928c70f749 [ 148.144641][ T7836] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002000000 [ 148.144693][ T7836] RBP: 00007f928b177090 R08: 0000000000000000 R09: 0000000000000000 [ 148.144754][ T7836] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 148.144766][ T7836] R13: 00007f928c966038 R14: 00007f928c965fa0 R15: 00007ffec723fa08 [ 148.144784][ T7836] [ 148.404830][ T7838] netlink: 16 bytes leftover after parsing attributes in process `syz.8.609'. [ 148.420913][ T7838] ip6_vti0 speed is unknown, defaulting to 1000 [ 148.428079][ T7838] ip6_vti0 speed is unknown, defaulting to 1000 [ 148.435772][ T7838] ip6_vti0 speed is unknown, defaulting to 1000 [ 148.458427][ T7843] infiniband syz1: set active [ 148.463363][ T7843] infiniband syz1: added veth0_to_bond [ 148.515805][ T7843] RDS/IB: syz1: added [ 148.521374][ T7843] smc: adding ib device syz1 with port count 1 [ 148.527997][ T7843] smc: ib device syz1 port 1 has no pnetid [ 148.705706][ T7870] netlink: 'syz.7.616': attribute type 1 has an invalid length. [ 148.714625][ T7870] netlink: 28 bytes leftover after parsing attributes in process `syz.7.616'. [ 148.932679][ T7890] netlink: 'syz.7.618': attribute type 21 has an invalid length. [ 148.940553][ T7890] netlink: 132 bytes leftover after parsing attributes in process `syz.7.618'. [ 148.949618][ T7890] netlink: 20 bytes leftover after parsing attributes in process `syz.7.618'. [ 149.039646][ T7901] loop7: detected capacity change from 0 to 512 [ 149.068136][ T7901] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 149.083895][ T7901] EXT4-fs (loop7): orphan cleanup on readonly fs [ 149.101757][ T7901] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 149.117348][ T7901] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 149.129640][ T7901] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.619: bg 0: block 40: padding at end of block bitmap is not set [ 149.142432][ T7838] infiniband syz2: set active [ 149.148416][ T7838] infiniband syz2: added ip6_vti0 [ 149.155271][ T3500] ip6_vti0 speed is unknown, defaulting to 1000 [ 149.161890][ T7901] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 149.182186][ T7901] EXT4-fs (loop7): 1 truncate cleaned up [ 149.191751][ T7901] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.204647][ T7838] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 149.204874][ T7838] infiniband syz2: Couldn't open port 1 [ 149.252165][ T7901] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.284193][ T7838] RDS/IB: syz2: added [ 149.288230][ T7838] smc: adding ib device syz2 with port count 1 [ 149.306943][ T7838] smc: ib device syz2 port 1 has no pnetid [ 149.319380][ T5184] ip6_vti0 speed is unknown, defaulting to 1000 [ 149.331909][ T7838] ip6_vti0 speed is unknown, defaulting to 1000 [ 149.340970][ T7923] loop6: detected capacity change from 0 to 512 [ 149.367952][ T7923] EXT4-fs: Ignoring removed bh option [ 149.388693][ T7923] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 149.433233][ T7923] EXT4-fs (loop6): 1 truncate cleaned up [ 149.439248][ T7923] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.462611][ T7923] EXT4-fs warning (device loop6): verify_group_input:137: Cannot add at group 25 (only 1 groups) [ 149.483160][ T7923] futex_wake_op: syz.6.620 tries to shift op by -1; fix this program [ 149.493628][ T7838] ip6_vti0 speed is unknown, defaulting to 1000 [ 149.501775][ T7934] FAULT_INJECTION: forcing a failure. [ 149.501775][ T7934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.514938][ T7934] CPU: 1 UID: 0 PID: 7934 Comm: syz.7.621 Not tainted syzkaller #0 PREEMPT(voluntary) [ 149.514968][ T7934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.514983][ T7934] Call Trace: [ 149.514988][ T7934] [ 149.514995][ T7934] __dump_stack+0x1d/0x30 [ 149.515016][ T7934] dump_stack_lvl+0xe8/0x140 [ 149.515038][ T7934] dump_stack+0x15/0x1b [ 149.515218][ T7934] should_fail_ex+0x265/0x280 [ 149.515243][ T7934] should_fail+0xb/0x20 [ 149.515278][ T7934] should_fail_usercopy+0x1a/0x20 [ 149.515359][ T7934] _copy_from_user+0x1c/0xb0 [ 149.515388][ T7934] ___sys_sendmsg+0xc1/0x1d0 [ 149.515433][ T7934] __sys_sendmmsg+0x178/0x300 [ 149.515545][ T7934] __x64_sys_sendmmsg+0x57/0x70 [ 149.515576][ T7934] x64_sys_call+0x1e28/0x3000 [ 149.515600][ T7934] do_syscall_64+0xd8/0x2a0 [ 149.515690][ T7934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.515713][ T7934] RIP: 0033:0x7ff786b8f749 [ 149.515797][ T7934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.515816][ T7934] RSP: 002b:00007ff7855ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 149.515854][ T7934] RAX: ffffffffffffffda RBX: 00007ff786de6090 RCX: 00007ff786b8f749 [ 149.515916][ T7934] RDX: 0000000000000006 RSI: 0000200000000c40 RDI: 0000000000000003 [ 149.515929][ T7934] RBP: 00007ff7855ce090 R08: 0000000000000000 R09: 0000000000000000 [ 149.515942][ T7934] R10: 00000000200000d1 R11: 0000000000000246 R12: 0000000000000001 [ 149.515955][ T7934] R13: 00007ff786de6128 R14: 00007ff786de6090 R15: 00007ffc65b040c8 [ 149.515975][ T7934] [ 149.760125][ T7838] ip6_vti0 speed is unknown, defaulting to 1000 [ 149.863048][ T7838] ip6_vti0 speed is unknown, defaulting to 1000 [ 149.958959][ T7838] ip6_vti0 speed is unknown, defaulting to 1000 [ 150.129994][ T6918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.439897][ T7995] loop6: detected capacity change from 0 to 8192 [ 151.251532][ T8041] ip6_vti0 speed is unknown, defaulting to 1000 [ 151.288931][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 151.288948][ T29] audit: type=1326 audit(1765620980.732:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.6.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 151.318645][ T29] audit: type=1326 audit(1765620980.732:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.6.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 151.342093][ T29] audit: type=1326 audit(1765620980.732:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.6.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 151.365442][ T29] audit: type=1326 audit(1765620980.732:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.6.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 151.389029][ T29] audit: type=1326 audit(1765620980.732:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.6.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 151.412447][ T29] audit: type=1326 audit(1765620980.732:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.6.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 151.937322][ T8095] loop6: detected capacity change from 0 to 2048 [ 151.956443][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.984084][ T4893] Alternate GPT is invalid, using primary GPT. [ 151.990382][ T4893] loop6: p1 p2 p3 [ 151.994153][ T4893] loop6: partition table partially beyond EOD, truncated [ 152.026241][ T8095] Alternate GPT is invalid, using primary GPT. [ 152.032657][ T8095] loop6: p1 p2 p3 [ 152.036445][ T8095] loop6: partition table partially beyond EOD, truncated [ 152.065043][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.095763][ T3005] Alternate GPT is invalid, using primary GPT. [ 152.102074][ T3005] loop6: p1 p2 p3 [ 152.105855][ T3005] loop6: partition table partially beyond EOD, truncated [ 152.136465][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.220195][ T4892] udevd[4892]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 152.230491][ T4889] udevd[4889]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 152.241383][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.241859][ T4893] udevd[4893]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 152.304442][ T4892] udevd[4892]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 152.317890][ T4893] udevd[4893]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 152.333277][ T4889] udevd[4889]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 152.382298][ T8122] ip6gretap0: entered promiscuous mode [ 152.445919][ T8097] ip6_vti0 speed is unknown, defaulting to 1000 [ 152.461771][ T31] bridge_slave_1: left allmulticast mode [ 152.467444][ T31] bridge_slave_1: left promiscuous mode [ 152.473156][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.537941][ T31] bridge_slave_0: left allmulticast mode [ 152.543666][ T31] bridge_slave_0: left promiscuous mode [ 152.549306][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.557486][ T8130] netlink: 'syz.6.637': attribute type 21 has an invalid length. [ 152.736933][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.753099][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.766061][ T31] bond0 (unregistering): Released all slaves [ 152.784915][ T8130] __nla_validate_parse: 1 callbacks suppressed [ 152.784941][ T8130] netlink: 132 bytes leftover after parsing attributes in process `syz.6.637'. [ 152.800107][ T8130] netlink: 20 bytes leftover after parsing attributes in process `syz.6.637'. [ 152.810546][ T8132] netlink: 28 bytes leftover after parsing attributes in process `syz.8.635'. [ 152.819852][ T8132] netlink: 28 bytes leftover after parsing attributes in process `syz.8.635'. [ 152.871487][ T29] audit: type=1326 audit(1765620982.312:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8137 comm="syz.6.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 152.894882][ T29] audit: type=1326 audit(1765620982.312:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8137 comm="syz.6.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 152.918320][ T29] audit: type=1326 audit(1765620982.312:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8137 comm="syz.6.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 152.941734][ T29] audit: type=1326 audit(1765620982.312:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8137 comm="syz.6.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 152.985283][ T8140] loop8: detected capacity change from 0 to 512 [ 153.022330][ T8140] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 153.030382][ T8140] EXT4-fs (loop8): orphan cleanup on readonly fs [ 153.061722][ T8140] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 153.106220][ T8140] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 153.114002][ T8140] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.639: bg 0: block 40: padding at end of block bitmap is not set [ 153.129750][ T8140] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 153.143161][ T8140] EXT4-fs (loop8): 1 truncate cleaned up [ 153.176005][ T8140] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 153.203014][ T8140] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.243521][ T31] hsr_slave_0: left promiscuous mode [ 153.267875][ T31] hsr_slave_1: left promiscuous mode [ 153.277819][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.285311][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.307109][ T8163] loop6: detected capacity change from 0 to 512 [ 153.313963][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.321377][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.347644][ T31] veth1_macvtap: left promiscuous mode [ 153.350767][ T8163] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 153.353268][ T31] veth0_macvtap: left promiscuous mode [ 153.381848][ T31] veth1_vlan: left promiscuous mode [ 153.392986][ T8163] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 153.411085][ T31] veth0_vlan: left promiscuous mode [ 153.421669][ T8163] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 153.494424][ T8163] EXT4-fs (loop6): 1 truncate cleaned up [ 153.522393][ T8163] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.623082][ T6918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.717838][ T8171] tls_set_device_offload: netdev not found [ 153.765799][ T31] team0 (unregistering): Port device team_slave_1 removed [ 153.781656][ T31] team0 (unregistering): Port device team_slave_0 removed [ 153.892126][ T8176] loop6: detected capacity change from 0 to 1024 [ 153.894026][ T8097] chnl_net:caif_netlink_parms(): no params data found [ 153.914948][ T8176] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 153.961573][ T8176] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.017180][ T6918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 154.076375][ T8097] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.083520][ T8097] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.104410][ T8097] bridge_slave_0: entered allmulticast mode [ 154.116444][ T8097] bridge_slave_0: entered promiscuous mode [ 154.131381][ T8097] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.138656][ T8097] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.145901][ T8097] bridge_slave_1: entered allmulticast mode [ 154.152469][ T8097] bridge_slave_1: entered promiscuous mode [ 154.219839][ T8097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.251554][ T8097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.302883][ T8097] team0: Port device team_slave_0 added [ 154.340560][ T8097] team0: Port device team_slave_1 added [ 154.418772][ T8097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.425779][ T8097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.451859][ T8097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.518511][ T8225] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 154.526818][ T8225] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 154.533583][ T8097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.542426][ T8097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.568396][ T8097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.664685][ T8097] hsr_slave_0: entered promiscuous mode [ 154.670814][ T8097] hsr_slave_1: entered promiscuous mode [ 154.707279][ T8097] debugfs: 'hsr0' already exists in 'hsr' [ 154.713073][ T8097] Cannot create hsr debugfs directory [ 155.289121][ T8097] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 155.308861][ T8097] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 155.331819][ T8097] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 155.358413][ T8097] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 155.446268][ T8097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.477306][ T8097] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.494977][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.502073][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.552662][ T935] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.559772][ T935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.599396][ T8097] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 155.609764][ T8097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.687906][ T8289] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8289 comm=syz.8.658 [ 155.772750][ T8284] ip6_vti0 speed is unknown, defaulting to 1000 [ 155.801145][ T8097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.822362][ T8286] loop8: detected capacity change from 0 to 1024 [ 155.852651][ T8286] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.973574][ T7372] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.070764][ T8315] loop8: detected capacity change from 0 to 2048 [ 156.136951][ T8315] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.179513][ T8315] EXT4-fs error (device loop8): ext4_find_extent:939: inode #2: comm syz.8.659: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 156.235417][ T7372] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.261117][ T8097] veth0_vlan: entered promiscuous mode [ 156.278470][ T8097] veth1_vlan: entered promiscuous mode [ 156.305285][ T8097] veth0_macvtap: entered promiscuous mode [ 156.347896][ T8097] veth1_macvtap: entered promiscuous mode [ 156.408211][ T8097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.436861][ T8097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.459746][ T5775] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.487049][ T5775] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.511665][ T5775] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.539499][ T5775] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.849851][ T8377] futex_wake_op: syz.6.663 tries to shift op by -65; fix this program [ 156.875893][ T8377] netlink: 12 bytes leftover after parsing attributes in process `syz.6.663'. [ 156.910882][ T8377] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.658934][ T8453] IPv6: NLM_F_CREATE should be specified when creating new route [ 157.684134][ T8453] netlink: 'syz.8.666': attribute type 25 has an invalid length. [ 157.988858][ T8463] FAULT_INJECTION: forcing a failure. [ 157.988858][ T8463] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 158.002225][ T8463] CPU: 0 UID: 0 PID: 8463 Comm: syz.8.668 Not tainted syzkaller #0 PREEMPT(voluntary) [ 158.002253][ T8463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 158.002268][ T8463] Call Trace: [ 158.002274][ T8463] [ 158.002283][ T8463] __dump_stack+0x1d/0x30 [ 158.002329][ T8463] dump_stack_lvl+0xe8/0x140 [ 158.002412][ T8463] dump_stack+0x15/0x1b [ 158.002514][ T8463] should_fail_ex+0x265/0x280 [ 158.002585][ T8463] should_fail_alloc_page+0xf2/0x100 [ 158.002612][ T8463] __alloc_frozen_pages_noprof+0x109/0x360 [ 158.002644][ T8463] alloc_pages_mpol+0xb3/0x260 [ 158.002675][ T8463] vma_alloc_folio_noprof+0x1aa/0x300 [ 158.002755][ T8463] handle_mm_fault+0xef5/0x2c60 [ 158.002793][ T8463] do_user_addr_fault+0x3fe/0x1080 [ 158.002846][ T8463] ? __rcu_read_unlock+0x4f/0x70 [ 158.002881][ T8463] exc_page_fault+0x62/0xa0 [ 158.002916][ T8463] asm_exc_page_fault+0x26/0x30 [ 158.002937][ T8463] RIP: 0010:__put_user_4+0xd/0x20 [ 158.003032][ T8463] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 87 a1 01 00 90 90 90 90 90 90 90 90 90 90 [ 158.003055][ T8463] RSP: 0018:ffffc9000286fe68 EFLAGS: 00050206 [ 158.003138][ T8463] RAX: 0000000000000005 RBX: 0000000000000000 RCX: 00002000000029c0 [ 158.003150][ T8463] RDX: ffff88811b50e300 RSI: 0000000000000006 RDI: 0000000000000000 [ 158.003162][ T8463] RBP: 0000000000000005 R08: 0001ffff868480f7 R09: 0000000000000000 [ 158.003217][ T8463] R10: 0001888104b0fc60 R11: 0001888104b0fc67 R12: 00002000000029c0 [ 158.003233][ T8463] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 158.003257][ T8463] __sys_socketpair+0xa6/0x430 [ 158.003334][ T8463] ? ksys_write+0x192/0x1a0 [ 158.003355][ T8463] __x64_sys_socketpair+0x52/0x60 [ 158.003405][ T8463] x64_sys_call+0x2df3/0x3000 [ 158.003458][ T8463] do_syscall_64+0xd8/0x2a0 [ 158.003498][ T8463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.003525][ T8463] RIP: 0033:0x7f4d1eb7f749 [ 158.003542][ T8463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.003566][ T8463] RSP: 002b:00007f4d1d5e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 158.003602][ T8463] RAX: ffffffffffffffda RBX: 00007f4d1edd5fa0 RCX: 00007f4d1eb7f749 [ 158.003614][ T8463] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 158.003624][ T8463] RBP: 00007f4d1d5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 158.003639][ T8463] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000001 [ 158.003654][ T8463] R13: 00007f4d1edd6038 R14: 00007f4d1edd5fa0 R15: 00007ffc22bd5d68 [ 158.003676][ T8463] [ 158.004682][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 158.004694][ T29] audit: type=1326 audit(1765620987.452:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.6.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 158.283123][ T8466] netlink: 'syz.4.670': attribute type 21 has an invalid length. [ 158.335807][ T8466] netlink: 132 bytes leftover after parsing attributes in process `syz.4.670'. [ 158.344904][ T8466] netlink: 20 bytes leftover after parsing attributes in process `syz.4.670'. [ 158.345125][ T29] audit: type=1326 audit(1765620987.532:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.6.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 158.377140][ T29] audit: type=1326 audit(1765620987.532:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.6.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 158.400480][ T29] audit: type=1326 audit(1765620987.532:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.6.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 158.423856][ T29] audit: type=1326 audit(1765620987.532:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.6.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 158.447181][ T29] audit: type=1326 audit(1765620987.532:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.6.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 158.470513][ T29] audit: type=1326 audit(1765620987.532:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.6.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 158.494370][ T29] audit: type=1326 audit(1765620987.532:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.6.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 158.517866][ T29] audit: type=1326 audit(1765620987.532:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.6.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 158.541227][ T29] audit: type=1326 audit(1765620987.532:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.6.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928c70f749 code=0x7ffc0000 [ 158.795621][ T9] ip6_vti0 speed is unknown, defaulting to 1000 [ 158.808370][ T8485] loop8: detected capacity change from 0 to 512 [ 158.817348][ T8485] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 158.923677][ T8485] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 158.938955][ T8485] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.677: bg 0: block 248: padding at end of block bitmap is not set [ 158.959363][ T8485] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.677: Failed to acquire dquot type 1 [ 158.973491][ T8485] EXT4-fs (loop8): 1 truncate cleaned up [ 158.980154][ T8485] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 159.044230][ T8485] netlink: 96 bytes leftover after parsing attributes in process `syz.8.677'. [ 159.464125][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.6.680'. [ 159.780161][ T7372] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 159.902981][ T8494] loop6: detected capacity change from 0 to 512 [ 159.947577][ T8494] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.984867][ T8494] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.680: iget: bad extended attribute block 262144 [ 160.042686][ T8494] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.680: couldn't read orphan inode 15 (err -117) [ 160.082213][ T36] ip6_vti0 speed is unknown, defaulting to 1000 [ 160.088510][ T36] syz2: Port: 1 Link DOWN [ 160.102090][ T8494] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.124537][ T3494] ip6_vti0 speed is unknown, defaulting to 1000 [ 160.132386][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.8.682'. [ 160.173647][ T8502] syz2: rxe_newlink: already configured on ip6_vti0 [ 160.262643][ T6918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.379718][ T8505] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 160.661191][ T8515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.687'. [ 160.670864][ T8515] netlink: 'syz.4.687': attribute type 1 has an invalid length. [ 160.684695][ T8515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.687'. [ 162.563735][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.703'. [ 162.718595][ T8550] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.725812][ T8550] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.764803][ T8550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.774817][ T8550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.860211][ T8446] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.916762][ T8446] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.921736][ T8553] loop4: detected capacity change from 0 to 1024 [ 162.925776][ T8446] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.942518][ T8446] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.972253][ T8553] EXT4-fs: Ignoring removed orlov option [ 163.061757][ T8553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.132331][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 163.132347][ T29] audit: type=1400 audit(1765620992.582:2944): avc: denied { create } for pid=8552 comm="syz.4.704" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 163.211772][ T8097] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.926483][ T8428] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.007674][ T8428] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.058267][ T8428] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.113956][ T8428] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.172745][ T8563] ip6_vti0 speed is unknown, defaulting to 1000 [ 164.186429][ T8573] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 164.231593][ T8428] bridge_slave_1: left allmulticast mode [ 164.237260][ T8428] bridge_slave_1: left promiscuous mode [ 164.239519][ T8578] FAULT_INJECTION: forcing a failure. [ 164.239519][ T8578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.242973][ T8428] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.256097][ T8578] CPU: 1 UID: 0 PID: 8578 Comm: syz.4.708 Not tainted syzkaller #0 PREEMPT(voluntary) [ 164.256130][ T8578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 164.256146][ T8578] Call Trace: [ 164.256154][ T8578] [ 164.256163][ T8578] __dump_stack+0x1d/0x30 [ 164.256244][ T8578] dump_stack_lvl+0xe8/0x140 [ 164.256273][ T8578] dump_stack+0x15/0x1b [ 164.256297][ T8578] should_fail_ex+0x265/0x280 [ 164.256360][ T8578] should_fail+0xb/0x20 [ 164.256384][ T8578] should_fail_usercopy+0x1a/0x20 [ 164.256414][ T8578] _copy_from_user+0x1c/0xb0 [ 164.256449][ T8578] ___sys_sendmsg+0xc1/0x1d0 [ 164.256547][ T8578] __x64_sys_sendmsg+0xd4/0x160 [ 164.256610][ T8578] x64_sys_call+0x17ba/0x3000 [ 164.256644][ T8578] do_syscall_64+0xd8/0x2a0 [ 164.256746][ T8578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.256775][ T8578] RIP: 0033:0x7f487f0af749 [ 164.256795][ T8578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.256820][ T8578] RSP: 002b:00007f487db0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.256859][ T8578] RAX: ffffffffffffffda RBX: 00007f487f305fa0 RCX: 00007f487f0af749 [ 164.256876][ T8578] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000004 [ 164.256894][ T8578] RBP: 00007f487db0f090 R08: 0000000000000000 R09: 0000000000000000 [ 164.256910][ T8578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.256927][ T8578] R13: 00007f487f306038 R14: 00007f487f305fa0 R15: 00007ffeab9951d8 [ 164.256952][ T8578] [ 164.492350][ T8428] bridge_slave_0: left allmulticast mode [ 164.498034][ T8428] bridge_slave_0: left promiscuous mode [ 164.503825][ T8428] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.768949][ T8428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.779079][ T8428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.795054][ T8428] bond0 (unregistering): Released all slaves [ 165.082610][ T8428] hsr_slave_0: left promiscuous mode [ 165.091711][ T8428] hsr_slave_1: left promiscuous mode [ 165.097290][ T8428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.104728][ T8428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.172102][ T8428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.179546][ T8428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.234605][ T8428] veth1_macvtap: left promiscuous mode [ 165.240113][ T8428] veth0_macvtap: left promiscuous mode [ 165.271596][ T8428] veth1_vlan: left promiscuous mode [ 165.276923][ T8428] veth0_vlan: left promiscuous mode [ 165.758993][ T8428] team0 (unregistering): Port device team_slave_1 removed [ 165.794163][ T8428] team0 (unregistering): Port device team_slave_0 removed [ 166.191972][ T8563] chnl_net:caif_netlink_parms(): no params data found [ 166.405683][ T8563] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.412891][ T8563] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.420015][ T8563] bridge_slave_0: entered allmulticast mode [ 166.426720][ T8563] bridge_slave_0: entered promiscuous mode [ 166.433744][ T8563] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.440808][ T8563] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.448136][ T8563] bridge_slave_1: entered allmulticast mode [ 166.454896][ T8563] bridge_slave_1: entered promiscuous mode [ 166.492193][ T8563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.514158][ T8563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.537821][ T8589] ip6_vti0 speed is unknown, defaulting to 1000 [ 166.578183][ T8563] team0: Port device team_slave_0 added [ 166.593003][ T8563] team0: Port device team_slave_1 added [ 166.643991][ T8428] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.672238][ T8563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.679193][ T8563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.705486][ T8563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.717481][ T8563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.724479][ T8563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.750413][ T8563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.793701][ T8428] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.897920][ T8563] hsr_slave_0: entered promiscuous mode [ 166.911967][ T8563] hsr_slave_1: entered promiscuous mode [ 166.931819][ T8563] debugfs: 'hsr0' already exists in 'hsr' [ 166.937571][ T8563] Cannot create hsr debugfs directory [ 166.953823][ T8428] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.085960][ T8428] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.298218][ T8589] chnl_net:caif_netlink_parms(): no params data found [ 167.544703][ T8428] bridge_slave_1: left allmulticast mode [ 167.550431][ T8428] bridge_slave_1: left promiscuous mode [ 167.556241][ T8428] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.621654][ T8428] bridge_slave_0: left allmulticast mode [ 167.627492][ T8428] bridge_slave_0: left promiscuous mode [ 167.633227][ T8428] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.983804][ T8428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.012028][ T8428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.031843][ T8428] bond0 (unregistering): Released all slaves [ 168.152335][ T8589] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.159576][ T8589] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.166950][ T8589] bridge_slave_0: entered allmulticast mode [ 168.174805][ T8589] bridge_slave_0: entered promiscuous mode [ 168.181711][ T8589] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.188795][ T8589] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.196275][ T8589] bridge_slave_1: entered allmulticast mode [ 168.212488][ T8589] bridge_slave_1: entered promiscuous mode [ 168.302197][ T8589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.322345][ T8589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.342463][ T8428] hsr_slave_0: left promiscuous mode [ 168.348180][ T8428] hsr_slave_1: left promiscuous mode [ 168.353963][ T8428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.361347][ T8428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.401712][ T8428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.409110][ T8428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.420218][ T8428] veth1_macvtap: left promiscuous mode [ 168.425764][ T8428] veth0_macvtap: left promiscuous mode [ 168.431284][ T8428] veth1_vlan: left promiscuous mode [ 168.436995][ T8428] veth0_vlan: left promiscuous mode [ 168.782314][ T8428] team0 (unregistering): Port device team_slave_1 removed [ 168.793327][ T8428] team0 (unregistering): Port device team_slave_0 removed [ 169.103330][ T8589] team0: Port device team_slave_0 added [ 169.132086][ T8589] team0: Port device team_slave_1 added [ 169.225137][ T8589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.232184][ T8589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.258179][ T8589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.314695][ T8589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.321739][ T8589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.347745][ T8589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.458355][ T8589] hsr_slave_0: entered promiscuous mode [ 169.464991][ T8589] hsr_slave_1: entered promiscuous mode [ 169.481780][ T8563] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 169.514086][ T8563] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 169.541777][ T8563] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 169.581920][ T8563] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 169.781006][ T8563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.842785][ T8563] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.876093][ T8436] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.883252][ T8436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.908749][ T8436] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.915900][ T8436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.978058][ T8563] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.074656][ T8589] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 170.101622][ T8589] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 170.124545][ T8589] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 170.144145][ T8589] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 170.193471][ T8563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.273714][ T8589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.286567][ T8589] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.310910][ T8436] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.318073][ T8436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.347463][ T8563] veth0_vlan: entered promiscuous mode [ 170.368052][ T8459] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.375134][ T8459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.393566][ T8563] veth1_vlan: entered promiscuous mode [ 170.438553][ T8563] veth0_macvtap: entered promiscuous mode [ 170.460253][ T8563] veth1_macvtap: entered promiscuous mode [ 170.496903][ T8563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.514077][ T8589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.534210][ T8563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.564704][ T8459] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.613195][ T8459] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.646014][ T8589] veth0_vlan: entered promiscuous mode [ 170.681722][ T8459] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.690572][ T8459] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.701719][ T8589] veth1_vlan: entered promiscuous mode [ 170.718054][ T8644] loop3: detected capacity change from 0 to 512 [ 170.734262][ T8589] veth0_macvtap: entered promiscuous mode [ 170.756047][ T8589] veth1_macvtap: entered promiscuous mode [ 170.772198][ T8644] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.713: inode has both inline data and extents flags [ 170.791775][ T8644] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.713: couldn't read orphan inode 15 (err -117) [ 170.797855][ T8589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.834096][ T8644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.836081][ T8589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.894808][ T8408] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.912173][ T8408] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.925462][ T3491] IPVS: starting estimator thread 0... [ 170.942403][ T8408] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.969449][ T8408] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.011695][ T8648] IPVS: using max 2400 ests per chain, 120000 per kthread [ 171.029195][ T29] audit: type=1326 audit(1765621000.472:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8650 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7bf7f749 code=0x7ffc0000 [ 171.052643][ T29] audit: type=1326 audit(1765621000.472:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8650 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a7bf7f749 code=0x7ffc0000 [ 171.075970][ T29] audit: type=1326 audit(1765621000.472:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8650 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7bf7f749 code=0x7ffc0000 [ 171.099390][ T29] audit: type=1326 audit(1765621000.472:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8650 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7bf7f749 code=0x7ffc0000 [ 171.123180][ T29] audit: type=1326 audit(1765621000.472:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8650 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a7bf7f749 code=0x7ffc0000 [ 171.146742][ T29] audit: type=1326 audit(1765621000.472:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8650 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7bf7f749 code=0x7ffc0000 [ 171.170167][ T29] audit: type=1326 audit(1765621000.472:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8650 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a7bf7f749 code=0x7ffc0000 [ 171.193478][ T29] audit: type=1326 audit(1765621000.472:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8650 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7bf7f749 code=0x7ffc0000 [ 171.216860][ T29] audit: type=1326 audit(1765621000.472:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8650 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a7bf7f749 code=0x7ffc0000 [ 171.240145][ T29] audit: type=1326 audit(1765621000.472:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8650 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7bf7f749 code=0x7ffc0000 [ 171.308772][ T8653] loop2: detected capacity change from 0 to 1024 [ 171.328096][ T8653] EXT4-fs: Ignoring removed nomblk_io_submit option [ 171.366695][ T8653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.601107][ T8563] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.767645][ T8658] netlink: 20 bytes leftover after parsing attributes in process `syz.3.715'. [ 172.262490][ T8589] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.684052][ T8688] loop3: detected capacity change from 0 to 1024 [ 173.708713][ T8688] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.767438][ T8688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.782461][ T8563] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.900669][ T8704] loop2: detected capacity change from 0 to 8192 [ 175.012643][ T8704] ================================================================== [ 175.020765][ T8704] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 175.027898][ T8704] [ 175.030236][ T8704] write to 0xffff8881180917a8 of 2 bytes by task 8709 on cpu 0: [ 175.037873][ T8704] fat16_ent_put+0x28/0x60 [ 175.042311][ T8704] fat_alloc_clusters+0x4d1/0xa80 [ 175.047354][ T8704] fat_get_block+0x258/0x5e0 [ 175.051967][ T8704] __block_write_begin_int+0x400/0xf90 [ 175.057460][ T8704] cont_write_begin+0x5ff/0x970 [ 175.062325][ T8704] fat_write_begin+0x4f/0xe0 [ 175.066937][ T8704] generic_perform_write+0x184/0x490 [ 175.072251][ T8704] __generic_file_write_iter+0x9e/0x120 [ 175.077821][ T8704] generic_file_write_iter+0x8d/0x2f0 [ 175.083241][ T8704] vfs_write+0x52a/0x960 [ 175.087506][ T8704] __x64_sys_pwrite64+0xfd/0x150 [ 175.092486][ T8704] x64_sys_call+0x9f7/0x3000 [ 175.097118][ T8704] do_syscall_64+0xd8/0x2a0 [ 175.101662][ T8704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.107567][ T8704] [ 175.109895][ T8704] read to 0xffff888118091600 of 512 bytes by task 8704 on cpu 1: [ 175.117629][ T8704] fat_mirror_bhs+0x1df/0x320 [ 175.122331][ T8704] fat_alloc_clusters+0x98b/0xa80 [ 175.127370][ T8704] fat_get_block+0x258/0x5e0 [ 175.131980][ T8704] __block_write_begin_int+0x400/0xf90 [ 175.137509][ T8704] cont_write_begin+0x5ff/0x970 [ 175.142403][ T8704] fat_write_begin+0x4f/0xe0 [ 175.147031][ T8704] cont_write_begin+0x1b0/0x970 [ 175.151913][ T8704] fat_write_begin+0x4f/0xe0 [ 175.156538][ T8704] generic_cont_expand_simple+0xb0/0x150 [ 175.162214][ T8704] fat_cont_expand+0x3e/0x170 [ 175.166923][ T8704] fat_fallocate+0x177/0x1c0 [ 175.171539][ T8704] vfs_fallocate+0x3b6/0x400 [ 175.176150][ T8704] __x64_sys_fallocate+0x7a/0xd0 [ 175.181093][ T8704] x64_sys_call+0x1cd4/0x3000 [ 175.185790][ T8704] do_syscall_64+0xd8/0x2a0 [ 175.190316][ T8704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.196212][ T8704] [ 175.198561][ T8704] Reported by Kernel Concurrency Sanitizer on: [ 175.204725][ T8704] CPU: 1 UID: 0 PID: 8704 Comm: syz.2.732 Not tainted syzkaller #0 PREEMPT(voluntary) [ 175.214461][ T8704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.224526][ T8704] ==================================================================