last executing test programs: 10.452458985s ago: executing program 1 (id=93): r0 = socket$nl_route(0x10, 0x3, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="1600000002"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, 0x0, &(0x7f0000000340)=r2}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r4}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000680)='virtio_transport_alloc_pkt\x00', r6}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) close(r3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000190a0102000000000000000002"], 0x20}}, 0x400c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000fbd4bf208a51540036f90d6c7f", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x22201, 0x0) inotify_add_watch(r8, 0x0, 0x80000000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x43415, &(0x7f00000002c0)={[], [{@fsmagic={'fsmagic', 0x3d, 0x66c}}, {@dont_measure}]}, 0x1, 0x5fd, &(0x7f0000000f80)="$eJzs3c1vFVUbAPBnpp+07/u2kDcqLqSJMZAoLS1giDER9oTgx85VpYUghRJao0USS4IbE+PGhYkrF+J/oSRuXbh14caVISHGdCGGyDVzO1Omt739vveW3t8vGXrOTO+cM6VPz7nnnjMTQNsayv5JIw5GxPUkYqB0rDPyg0OL37fQcevCwp+3LiRRqbz9RxK3Pknmy+dK8q/9+Yv/GYjk5zTiQMfKcmfmbl4Zn5qavJHnR2avXh+Zmbt59PLV8UuTlyavjb06durkiZOnRo9t6/rKRZ+98/6HA5+de/fbrx8lo9/9ei6J0/E4/4bsumpf27OtkrOf2VBUFj0s789+rqe2ee7d4q+B4vfkiaR2B7tWmv8+/i8ino2B6Cj9bw7Ep2+2tHJAQ1WSKNoooO0kW4r/3p2vCNBkRT8ge/9bbOv3GtIG90qAZnhwZnEAYDH2uyKiiP/OxbHB6I1sb99CsmycJ4mI7Y3MLcrK+OnHc3eyLeqMwwGNMX+7GOWubf+TamwORm8117eQLov/tLRl+9/aYvlDNXnxD80zfzsinsvb/+7YVPwPleL/vS2WL/4BAAAAAABg59w7ExGvrDb/L12a/9O9yvyf/og4vQPlr//5X3o/TyQ7UBxQ8uBMxOurzv9dmuM72JHn/ludD9CVXLw8NXksXzN4JLp6svxozXnLM4SPfn7gq3rll+f/ZVtWfjEXMD/T/c6ahbgT47Pj271uIOLB7Yjnq/N/D+V7ls//ydr/ZJX2P4vv6xss48BLd8/XO7Z+/AONUvkm4vCq7f+T7nay9v05Rqr9gZGiV7DSCx9/8X298sU/tE7W/vetHf89Sfl+PTObO393RByf66zUO77V/n938k5Hcf7MR+OzszdGI7qTsyv3j22uzrBXFfFQxEsW/0deXHv8b6n/X4rDfRExv8Eyn3nc/1u9Y9p/aJ0s/ifWbv8Hl7f/m0+M3R38oV755zfU/p+otulH8j3G/6Bs5f04NhqgLakuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADzl0oj4TyTp8FI6TYeHI/oj4v/Rl05Nz8y+fHH6g2sT2bHq8//T4km/A4v5pHj+/2ApP1aTPx4R+yPiy4591fzwhempiVZfPAAAAAAAAAAAAAAAAAAAAOwS/dU1/5We2vX/md87Wl07oOE686/iHdpP55ZfWenZ0YoATbf1+AeedhuP/66G1gNovvrx//BRpaqp1QGaSP8f2tcW49/HBbAHaP+hXW1wTK+30fUAWkH7DwAAAAAAe8r+Q/d+SSJi/rV91S3TnR8z2R/2trTVFQBaxhxeaF+d062uAdAq3uMDyVLq71UX+9ef/Z80pkIAAAAAAAAAAAAAwAqHD1r/D+1q7fX/5vbDXrbG+v/Vgt/tAmAPqf/oD20/7HXe4wPrtfbW/wMAAAAAAAAAAADALtB788r41NTkjZm5py/xxu6oxuYS8+O7oho7mnjcmDN3RcTuuMBmJ4pbcLSwGi3+uwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz5NwAA//+8yiY1") write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010004b040000000000005f007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010062726964676500001800028005002600020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 10.378896379s ago: executing program 1 (id=95): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d2403bf005a90f57f07703aeff0f64ebb", 0x14}], 0x1) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441505"], 0x30}, 0x0) (fail_nth: 5) 10.053151419s ago: executing program 1 (id=98): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000040), 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) 9.831576362s ago: executing program 1 (id=104): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001700)=@newqdisc={0x17c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x1e00, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_STAB={0x148, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd7, 0x5, 0xe7, 0x6, 0x0, 0x1000, 0x1f3c3d5a, 0x2}}, {0x8, 0x2, [0x262, 0x10]}}, {{0x1c, 0x1, {0x0, 0x3, 0x73bd, 0x2, 0x1, 0x3, 0xfffffffb, 0x1}}, {0x6, 0x2, [0x7]}}, {{0xfcfb, 0x1, {0x4, 0x96, 0xaf40, 0x4, 0x2, 0x76b, 0x7, 0x5}}, {0xe, 0x2, [0x0, 0xfffa, 0x0, 0x4, 0x7]}}, {{0x1c, 0x1, {0xfd, 0x5, 0x7, 0x2, 0x9dd0f1586c629942, 0x9, 0x1, 0x25}}, {0x6, 0x2, [0x8000]}}, {{0x1c, 0x1, {0xff, 0xe, 0x7, 0x4, 0x2, 0x3, 0x5, 0x8}}, {0x14, 0x2, [0x1, 0x9, 0x1, 0x0, 0x4, 0x2, 0x3, 0x5]}}, {{0x1c, 0x1, {0x3, 0x96, 0x8, 0x0, 0x0, 0x9, 0x80, 0x6}}, {0x10, 0x2, [0x8, 0x4, 0xffff, 0x8ce, 0x0, 0x55]}}, {{0x1c, 0x1, {0xfa, 0x7, 0x8, 0x0, 0x1, 0x4, 0x7, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x20, 0xc, 0x0, 0x4, 0x2, 0x3, 0x8, 0x5}}, {0xe, 0x2, [0x1000, 0xfff8, 0x2, 0x9, 0x9]}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40}, 0x20000810) 9.715729209s ago: executing program 1 (id=109): r0 = gettid() capget(&(0x7f00000000c0)={0x19980330, r0}, &(0x7f0000000100)={0x4, 0x8, 0x0, 0x28000000, 0x3, 0x3}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) io_cancel(0x0, 0x0, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x4) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) sendmmsg$inet6(r2, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="83"], 0x18) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300), 0x0, r4) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc1}, 0x0, 0x0, r4) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) 9.458981936s ago: executing program 1 (id=112): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@mcast1, @rand_addr=0x64010100, 0x7ff, 0x1a}}) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='oom_score_adj\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x740, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) socket$kcm(0x2, 0x200000000000001, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@mcast1, @rand_addr=0x64010100, 0x7ff, 0x1a}}) (async) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) (async) syz_open_procfs(0x0, &(0x7f0000000400)='oom_score_adj\x00') (async) preadv(r2, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x740, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) (async) 5.685652555s ago: executing program 4 (id=187): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)={0x1, 0x0, @c}, 0x29, r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4, 0x0, 0x178}, 0x18) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000340), 0x11000) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r9, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r10}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 4.93108495s ago: executing program 4 (id=207): bpf$MAP_CREATE(0x0, 0x0, 0x48) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0, 0x60}, {&(0x7f00000020c0), 0x500}], 0x5, 0x0, 0x4a}, 0x0) (async) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000080)=@generic={0x3, 0xddb, 0x5}) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000580)={0x7c, r4, 0xa29, 0x1, 0x0, {}, [@WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x2, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x80000001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x42}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r6}, 0x10) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r7}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x100, @local}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) (async) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) (async, rerun: 32) sendto$inet(r0, 0x0, 0x0, 0xc840, 0x0, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94) (async) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) (async) ptrace$getregs(0xc, r11, 0x25, &(0x7f00000000c0)=""/186) 4.870545664s ago: executing program 4 (id=211): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_default\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000c80), 0x10000005, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, 0x0, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) open(0x0, 0x8060, 0x0) chmod(0x0, 0x23f) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "9e188a80c32aa9b86ed6ce56992732d9f7fc6cda762c07530a038941764a92bb", "074336477e9205df5f47f7da965c25c746ba7f8ca07841d3da17308a6df3f54855ecedd6d8664fa125e3972a48e81039", "a562ff321beb3f036b9fd27aeff89c8e79a57a3873e0b4e6553e2c44", {"4cf02a016458a5f67aa497153eddc6a1", "9a3f9661ac468177dc130be49bdd8eb5"}}}}}}}, 0x0) 4.812674298s ago: executing program 4 (id=213): r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x8e8c, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 4.722974893s ago: executing program 4 (id=218): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0xdc}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x2}]}}}}}}, 0x46) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) sendmmsg$inet(r6, &(0x7f0000001c80)=[{{&(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)='+', 0x1}], 0x1}}], 0x1, 0x240080c4) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r7 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r7, 0x400, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000230000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='kmem_cache_free\x00'}, 0x18) 2.924610712s ago: executing program 2 (id=255): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x19f, &(0x7f0000000100), 0x80, 0x550, &(0x7f0000000700)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x178}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x8e8c, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 2.79986978s ago: executing program 2 (id=256): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="060800000487e559548cc05eb04ba70000000300000005000000000000ec", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff2, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r3}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) timerfd_settime(r5, 0x2, &(0x7f0000000040)={{0x77359400}}, 0x0) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1c64080f64f103ee1de769e5ebcd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c2342b9ac5a31eacf8a0050000006044eafd3d7935f90698aa2d9c57276322b82e8976f5a4d9801e298dd0202df8c4", 0x97}], 0x1, 0x0, 0x0, 0x400c000}, 0x4008001) close(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x800, 0x200000, 0x88, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r7, 0x0, 0x0, 0x20004ffd, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) recvmsg(r7, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) 2.055930955s ago: executing program 3 (id=267): r0 = socket(0x40000000015, 0x5, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x0, 0x7e, @loopback, 0x3}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x2, @broadcast}}]}, 0x50}}, 0x0) close_range(r1, r1, 0x0) write$nci(r1, 0x0, 0x4) syz_open_dev$usbfs(0x0, 0x800000001fe, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001a00), r3) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000084}, 0x48044) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0xcda, 0xf, 0x0, 0x2, 0x0}) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r4 = syz_io_uring_setup(0x3b67, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1362, &(0x7f0000000440)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, &(0x7f0000000040)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2000480, &(0x7f0000004080), 0x1, 0x762, &(0x7f0000001180)="$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") r7 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r7, 0x0, 0x0, 0x1001f0) fallocate(r7, 0x8, 0xfe, 0x10000) getsockname$packet(r0, &(0x7f0000000080), &(0x7f0000000140)=0x14) io_uring_enter(r4, 0xb14, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="180200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = io_uring_setup(0x6280, &(0x7f0000000080)={0x0, 0xfffffff, 0x1, 0x2, 0x401d2}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], &(0x7f0000000200), 0x1}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.871202326s ago: executing program 2 (id=268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = dup2(r3, r4) flistxattr(r5, &(0x7f0000000000)=""/41, 0x29) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x64000600) 1.80702109s ago: executing program 3 (id=269): unshare(0x22020600) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_mreqsrc(r6, 0x0, 0x27, 0x0, &(0x7f0000001780)) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000001940), 0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000001a00)={'ip_vti0\x00', {0x2, 0x4e24, @rand_addr=0x64010102}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r8, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r9, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) 1.023223908s ago: executing program 2 (id=276): bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x178}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x8e8c, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 959.031161ms ago: executing program 2 (id=279): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010004b040000000000005f007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010062726964676500001800028005002600020000000c002e"], 0x48}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, 0x4}) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x9) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b'], 0x48) socket$kcm(0x10, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79ab, 0x400, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x10, r1, 0x8000000) r9 = syz_io_uring_setup(0xe41, &(0x7f0000000140)={0x0, 0x2119, 0x1000}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x10, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xd, 0x1, {0x0, r12}}) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x23, 0x2004, @fd=r8, 0xbf, &(0x7f0000000780)=[{&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000300)=""/21, 0x15}, {&(0x7f0000000380)=""/92, 0x5c}, {&(0x7f0000000540)=""/206, 0xce}, {&(0x7f0000000640)=""/14, 0xe}, {&(0x7f0000000680)=""/152, 0x98}], 0x6, 0x0, 0x0, {0x0, r13}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 875.004067ms ago: executing program 3 (id=280): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00ff040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x5}, 0x18) syz_mount_image$tmpfs(0x0, &(0x7f00000040c0)='./file0\x00', 0x810000, 0x0, 0x6, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) chdir(&(0x7f0000001b80)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000000000000) r4 = accept4$unix(r3, 0x0, &(0x7f0000000100), 0x80800) accept$unix(r4, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r5}, 0x9) socket$inet_sctp(0x2, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x1100000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="6daa00000000000071101f00000000009500"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 870.810017ms ago: executing program 2 (id=281): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 855.522778ms ago: executing program 3 (id=282): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x10, 0x13290, 0x0, 0x3}, &(0x7f0000000440)=0x0, &(0x7f0000000ac0)=0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x5, 0x400000) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f00000002c0)={0x2, 0x100, 0x7, 0x0, 0x5, 0x4}) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)='./file0/../file0\x00'}) (async) io_uring_enter(r1, 0x1, 0x0, 0x1, 0x0, 0x1000000) 775.074513ms ago: executing program 3 (id=283): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090200e600000000000101000000050002000a00000014000700fb"], 0x38}}, 0x0) (async) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x44, r10, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x4000) 739.356255ms ago: executing program 3 (id=284): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@empty, @broadcast, 0x0}, &(0x7f00000001c0)=0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffee5) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x7, 0x9) write$P9_RWRITE(r7, &(0x7f0000000040)={0xb}, 0x11000) read(r6, &(0x7f0000032440)=""/102364, 0x18fdc) write$P9_RAUTH(r7, &(0x7f0000000a00)={0x14, 0x67, 0x2, {0x4}}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r8}, 0x10) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 693.696518ms ago: executing program 0 (id=285): bind$rds(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@func={0x5, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x0, 0x30, 0x5f, 0x61, 0x5f]}}, 0x0, 0x2c, 0x0, 0x1, 0x1000000, 0x0, @void, @value}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r2, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0) 634.375361ms ago: executing program 0 (id=286): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7a9, 0x9}, 0x100400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000780)={0x0, 0x9, @status={[0x1, 0x6, 0xffff, 0x5, 0x3, 0x800]}, [0x6, 0x9, 0x8, 0x6, 0x3, 0x1000, 0xa, 0xff, 0x749, 0x51c7, 0x353d, 0x5, 0x4, 0x2, 0x4, 0x7ff, 0x7, 0x2, 0x3, 0x4, 0x0, 0x1, 0xcb0, 0x4, 0x0, 0x6, 0x7, 0x1, 0xffffffff, 0x5, 0x10d, 0x93, 0x7ff, 0x7fffffff, 0x5, 0x0, 0x6, 0x1, 0x9fad, 0x8, 0x7, 0x4, 0x9, 0x0, 0x1, 0x4, 0x8, 0x8, 0x2, 0x8, 0x2, 0x0, 0x101, 0xfffffffffffffff5, 0x9d0, 0x9, 0x80000000, 0x2, 0x7eb7, 0x81, 0x9, 0x8, 0x4, 0x4]}) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x1, 0x2, 0x8, &(0x7f0000000140)={0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) socketpair(0x1e, 0x80005, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000001000010008", 0x4d}], 0x1) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001600)=""/18, 0x12}], 0x1, &(0x7f0000001880)}, 0x40) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0xed2, 0x2}, 0x100882, 0x7ff, 0x6, 0x0, 0x40b, 0x7, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f0000000180)) socket$kcm(0x10, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000fb000f0004000000000000000000f1ffffff01000000"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRESOCT=r5], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) pipe2$9p(0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r8, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) 378.617597ms ago: executing program 0 (id=287): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "647e1e9eba5dea58", "a50f56f8e5ffd53497aff26c8e8ff0fca24aa81e11555c6281f5b351e552e727", "18d9ca06", "d9160423c23d0de6"}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "647e1e9eba5dea58", "a50f56f8e5ffd53497aff26c8e8ff0fca24aa81e11555c6281f5b351e552e727", "18d9ca06", "d9160423c23d0de6"}, 0x38) (async) 267.961754ms ago: executing program 0 (id=288): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x19f, &(0x7f0000000100), 0x80, 0x550, &(0x7f0000000700)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x178}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 203.174207ms ago: executing program 4 (id=289): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c84d8c033aae421962ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6", 0x48}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x87, 0xe, 0x8, 0xb4, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000000c0), 0x3}, 0xd148, 0xa, 0xece, 0x7, 0x2, 0x4, 0x9, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x8, r5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x48800) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r6}, &(0x7f0000000a00), &(0x7f0000000a40)=r5}, 0x20) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 202.559848ms ago: executing program 0 (id=290): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='-'], 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = creat(&(0x7f0000000080)='./file1\x00', 0x0) io_setup(0x203, &(0x7f0000000200)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0xd, r6, 0x0, 0x47}]) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x8000, 0x7800, 0x1000, 0x7, {{0x24, 0x4, 0x2, 0x0, 0x90, 0x67, 0x0, 0x7, 0x29, 0x0, @local, @remote, {[@ssrr={0x89, 0x17, 0x25, [@rand_addr=0x64010101, @broadcast, @empty, @loopback, @broadcast]}, @generic={0x83, 0xf, "d03ed5aeebcaeb0dba2ebad5fd"}, @end, @rr={0x7, 0x1b, 0xcd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010101, @empty, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0xf5, 0x3, 0xb, [{@rand_addr=0x64010101, 0x6eb}, {@empty, 0x6}, {@multicast2, 0x2}]}, @lsrr={0x83, 0x1b, 0x8a, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @loopback, @private=0xa010102, @rand_addr=0x64010101, @loopback]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r6, r8, 0x25, 0xc, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)=[0x0, 0xb0a, 0xd, 0x30, 0x8, 0x9, 0x5, 0x7fffffffffffffff, 0x9], &(0x7f00000004c0)=[0x4, 0x3], 0x7, 0x9, 0x1, r3}}, 0x40) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=291): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x7, 0x8, 0x2, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1, 0x700, 0x1, 0x2}}) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x40001) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x22, 0x6, 0x0) (async) r4 = socket(0x22, 0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000240)=ANY=[@ANYBLOB="300092de72dc01d408000000abbdb3d68d1e0000", @ANYRES16=r6, @ANYBLOB="010000000000000000000c00000018000180140002006c6f000000000000000000000000000004000380"], 0x30}}, 0x4000) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000240)=ANY=[@ANYBLOB="300092de72dc01d408000000abbdb3d68d1e0000", @ANYRES16=r6, @ANYBLOB="010000000000000000000c00000018000180140002006c6f000000000000000000000000000004000380"], 0x30}}, 0x4000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="b77bb90e", @ANYRES16=r8, @ANYRES64=r3, @ANYRES32=r9, @ANYRES64=r4], 0x54}}, 0x10) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$SG_IO(r11, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$SG_IO(r11, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket(0x1000000000000010, 0x80802, 0x0) write(r12, &(0x7f0000000000)="240000005a0001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) kernel console output (not intermixed with test programs): [ 18.274853][ T29] audit: type=1400 audit(1740436513.262:79): avc: denied { rlimitinh } for pid=3176 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.277595][ T29] audit: type=1400 audit(1740436513.262:80): avc: denied { siginh } for pid=3176 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.139134][ T29] audit: type=1400 audit(1740436517.142:81): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.10.36' (ED25519) to the list of known hosts. [ 26.154970][ T29] audit: type=1400 audit(1740436521.152:82): avc: denied { mounton } for pid=3284 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.155949][ T3284] cgroup: Unknown subsys name 'net' [ 26.177690][ T29] audit: type=1400 audit(1740436521.152:83): avc: denied { mount } for pid=3284 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.205165][ T29] audit: type=1400 audit(1740436521.182:84): avc: denied { unmount } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.359369][ T3284] cgroup: Unknown subsys name 'cpuset' [ 26.365563][ T3284] cgroup: Unknown subsys name 'rlimit' [ 26.515810][ T29] audit: type=1400 audit(1740436521.512:85): avc: denied { setattr } for pid=3284 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.539153][ T29] audit: type=1400 audit(1740436521.512:86): avc: denied { create } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.559662][ T29] audit: type=1400 audit(1740436521.512:87): avc: denied { write } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.580050][ T29] audit: type=1400 audit(1740436521.512:88): avc: denied { read } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.586513][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.600317][ T29] audit: type=1400 audit(1740436521.522:89): avc: denied { mounton } for pid=3284 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.633784][ T29] audit: type=1400 audit(1740436521.522:90): avc: denied { mount } for pid=3284 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.657121][ T29] audit: type=1400 audit(1740436521.612:91): avc: denied { relabelto } for pid=3289 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.686170][ T3284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.871325][ T3296] chnl_net:caif_netlink_parms(): no params data found [ 27.881669][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 27.924945][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 27.953176][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 27.992361][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 28.041803][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.048961][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.056084][ T3296] bridge_slave_0: entered allmulticast mode [ 28.062665][ T3296] bridge_slave_0: entered promiscuous mode [ 28.079395][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.086471][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.093714][ T3297] bridge_slave_0: entered allmulticast mode [ 28.100177][ T3297] bridge_slave_0: entered promiscuous mode [ 28.113573][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.120737][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.127873][ T3296] bridge_slave_1: entered allmulticast mode [ 28.135302][ T3296] bridge_slave_1: entered promiscuous mode [ 28.150679][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.157737][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.164976][ T3297] bridge_slave_1: entered allmulticast mode [ 28.171422][ T3297] bridge_slave_1: entered promiscuous mode [ 28.192202][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.199484][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.206587][ T3298] bridge_slave_0: entered allmulticast mode [ 28.213024][ T3298] bridge_slave_0: entered promiscuous mode [ 28.225406][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.250974][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.260247][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.267512][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.275789][ T3298] bridge_slave_1: entered allmulticast mode [ 28.282339][ T3298] bridge_slave_1: entered promiscuous mode [ 28.294460][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.315972][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.334627][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.363081][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.376358][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.383427][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.391635][ T3303] bridge_slave_0: entered allmulticast mode [ 28.398036][ T3303] bridge_slave_0: entered promiscuous mode [ 28.404709][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.411797][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.420073][ T3303] bridge_slave_1: entered allmulticast mode [ 28.426362][ T3303] bridge_slave_1: entered promiscuous mode [ 28.432669][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.439749][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.447023][ T3301] bridge_slave_0: entered allmulticast mode [ 28.453440][ T3301] bridge_slave_0: entered promiscuous mode [ 28.465062][ T3297] team0: Port device team_slave_0 added [ 28.480134][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.487208][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.494453][ T3301] bridge_slave_1: entered allmulticast mode [ 28.500735][ T3301] bridge_slave_1: entered promiscuous mode [ 28.507455][ T3296] team0: Port device team_slave_0 added [ 28.514725][ T3297] team0: Port device team_slave_1 added [ 28.521216][ T3298] team0: Port device team_slave_0 added [ 28.540520][ T3296] team0: Port device team_slave_1 added [ 28.551724][ T3298] team0: Port device team_slave_1 added [ 28.562432][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.577351][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.592005][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.598978][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.624928][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.636554][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.651223][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.665758][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.672762][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.698763][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.716203][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.723165][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.749075][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.764967][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.771969][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.797894][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.809036][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.815999][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.841915][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.860583][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.867597][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.893565][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.916306][ T3303] team0: Port device team_slave_0 added [ 28.925669][ T3301] team0: Port device team_slave_0 added [ 28.933757][ T3301] team0: Port device team_slave_1 added [ 28.949793][ T3303] team0: Port device team_slave_1 added [ 28.971667][ T3297] hsr_slave_0: entered promiscuous mode [ 28.977725][ T3297] hsr_slave_1: entered promiscuous mode [ 29.006846][ T3296] hsr_slave_0: entered promiscuous mode [ 29.013060][ T3296] hsr_slave_1: entered promiscuous mode [ 29.019443][ T3296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.027008][ T3296] Cannot create hsr debugfs directory [ 29.037663][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.044697][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.070637][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.081817][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.088796][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.114710][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.127222][ T3298] hsr_slave_0: entered promiscuous mode [ 29.133327][ T3298] hsr_slave_1: entered promiscuous mode [ 29.139243][ T3298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.146794][ T3298] Cannot create hsr debugfs directory [ 29.157431][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.164428][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.190435][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.203570][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.210543][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.236513][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.296022][ T3301] hsr_slave_0: entered promiscuous mode [ 29.303395][ T3301] hsr_slave_1: entered promiscuous mode [ 29.309355][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.316896][ T3301] Cannot create hsr debugfs directory [ 29.350055][ T3303] hsr_slave_0: entered promiscuous mode [ 29.356041][ T3303] hsr_slave_1: entered promiscuous mode [ 29.361961][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.369611][ T3303] Cannot create hsr debugfs directory [ 29.510860][ T3297] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.530875][ T3297] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.544942][ T3297] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.559640][ T3298] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.568218][ T3297] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.577077][ T3298] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.586007][ T3298] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.600703][ T3298] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.621427][ T3296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.637492][ T3296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.655597][ T3296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.664083][ T3296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.684317][ T3301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.694105][ T3301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.702790][ T3301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.729320][ T3301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.763754][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.772196][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.785531][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.806012][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.818026][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.833954][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.841352][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.865537][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.876415][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.886990][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.894229][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.907453][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.920566][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.927722][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.938230][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.945420][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.963757][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.970826][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.990247][ T414] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.997298][ T414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.008257][ T414] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.015311][ T414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.025093][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.053376][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.078793][ T414] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.085884][ T414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.095020][ T414] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.102205][ T414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.121853][ T3296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.132280][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.160599][ T3298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.177880][ T3301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.188325][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.219283][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.269627][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.291769][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.307311][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.322100][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.332908][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.340065][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.365623][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.372795][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.417683][ T3297] veth0_vlan: entered promiscuous mode [ 30.438662][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.475179][ T3297] veth1_vlan: entered promiscuous mode [ 30.486510][ T3296] veth0_vlan: entered promiscuous mode [ 30.507684][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.529365][ T3297] veth0_macvtap: entered promiscuous mode [ 30.545739][ T3297] veth1_macvtap: entered promiscuous mode [ 30.561939][ T3296] veth1_vlan: entered promiscuous mode [ 30.576961][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.586259][ T3301] veth0_vlan: entered promiscuous mode [ 30.602179][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.612589][ T3301] veth1_vlan: entered promiscuous mode [ 30.625114][ T3296] veth0_macvtap: entered promiscuous mode [ 30.637059][ T3298] veth0_vlan: entered promiscuous mode [ 30.645033][ T3297] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.653852][ T3297] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.662705][ T3297] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.671514][ T3297] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.683128][ T3296] veth1_macvtap: entered promiscuous mode [ 30.701516][ T3303] veth0_vlan: entered promiscuous mode [ 30.723385][ T3298] veth1_vlan: entered promiscuous mode [ 30.732956][ T3303] veth1_vlan: entered promiscuous mode [ 30.746897][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.757444][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.770439][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.778672][ T3301] veth0_macvtap: entered promiscuous mode [ 30.779399][ T3297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.786261][ T3301] veth1_macvtap: entered promiscuous mode [ 30.813397][ T3298] veth0_macvtap: entered promiscuous mode [ 30.820244][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.830790][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.841751][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.853696][ T3303] veth0_macvtap: entered promiscuous mode [ 30.869447][ T3298] veth1_macvtap: entered promiscuous mode [ 30.882768][ T3303] veth1_macvtap: entered promiscuous mode [ 30.891708][ T3296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.900508][ T3296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.900642][ T3435] loop3: detected capacity change from 0 to 1024 [ 30.909399][ T3296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.921930][ T3435] ======================================================= [ 30.921930][ T3435] WARNING: The mand mount option has been deprecated and [ 30.921930][ T3435] and is ignored by this kernel. Remove the mand [ 30.921930][ T3435] option from the mount to silence this warning. [ 30.921930][ T3435] ======================================================= [ 30.924398][ T3296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.972304][ T3435] EXT4-fs: Ignoring removed nobh option [ 30.974384][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.977884][ T3435] EXT4-fs: Ignoring removed bh option [ 30.993804][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.003740][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.014206][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.024821][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.038919][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.049394][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.059242][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.069713][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.084594][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.092718][ T3435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.112959][ T3301] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.121814][ T3301] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.130600][ T3301] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.139411][ T3301] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.155044][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.162576][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 31.162594][ T29] audit: type=1400 audit(1740436526.152:126): avc: denied { create } for pid=3434 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.165551][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.171563][ T29] audit: type=1400 audit(1740436526.152:127): avc: denied { write } for pid=3434 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.171590][ T29] audit: type=1400 audit(1740436526.152:128): avc: denied { prog_run } for pid=3434 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.171610][ T29] audit: type=1400 audit(1740436526.152:129): avc: denied { open } for pid=3434 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.191945][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.201680][ T29] audit: type=1400 audit(1740436526.152:130): avc: denied { kernel } for pid=3434 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.211142][ T3439] SELinux: ebitmap: empty map [ 31.222004][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.242765][ T29] audit: type=1400 audit(1740436526.212:131): avc: denied { load_policy } for pid=3434 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 31.259421][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.259441][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.262720][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.280658][ T29] audit: type=1400 audit(1740436526.282:132): avc: denied { mounton } for pid=3434 comm="syz.3.4" path="/0/file1/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.290808][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.304641][ T3439] SELinux: failed to load policy [ 31.323281][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.323295][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.323338][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.323349][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.323364][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.323376][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.449853][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.461737][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.479077][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.489608][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.497760][ T29] audit: type=1400 audit(1740436526.492:133): avc: denied { map_create } for pid=3442 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.499510][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.499528][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.499538][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.499551][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.501036][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.530758][ T29] audit: type=1400 audit(1740436526.532:134): avc: denied { map_read map_write } for pid=3442 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.587271][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.597747][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.607609][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.618070][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.627978][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.638494][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.648359][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.658866][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.669233][ T29] audit: type=1400 audit(1740436526.602:135): avc: denied { read } for pid=3442 comm="syz.1.2" dev="nsfs" ino=4026532395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 31.673089][ T3448] loop1: detected capacity change from 0 to 128 [ 31.690898][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.719144][ T3298] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.727853][ T3298] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.736712][ T3298] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.745498][ T3298] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.754983][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.772032][ T3303] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.780822][ T3303] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.789811][ T3303] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.798592][ T3303] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.903689][ T3465] loop4: detected capacity change from 0 to 512 [ 31.945365][ T3465] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.969426][ T3480] netlink: 'syz.2.3': attribute type 2 has an invalid length. [ 31.978295][ T3479] loop0: detected capacity change from 0 to 1024 [ 31.987106][ T3465] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 32.021415][ T3479] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c018, mo2=0002] [ 32.038598][ T3479] System zones: 0-1, 3-12 [ 32.043181][ T3487] loop2: detected capacity change from 0 to 2048 [ 32.049813][ T3487] ext4: Unknown parameter 'noacl' [ 32.060523][ T3479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.072673][ T3487] loop2: detected capacity change from 0 to 2048 [ 32.090896][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.104585][ T3479] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 32.113016][ T3487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.183045][ T3494] loop4: detected capacity change from 0 to 512 [ 32.257229][ T3494] EXT4-fs (loop4): orphan cleanup on readonly fs [ 32.268501][ T3494] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 32.284777][ T3494] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 32.291908][ T3494] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.13: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 32.311470][ T3494] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.13: couldn't read orphan inode 13 (err -117) [ 32.329774][ T3494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.347003][ T3494] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 32.357583][ T3494] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 2 [ 32.574294][ T3498] netlink: 'syz.2.12': attribute type 1 has an invalid length. [ 32.958093][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.020484][ T3501] loop3: detected capacity change from 0 to 512 [ 33.039853][ T3499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 33.051363][ T3501] EXT4-fs (loop3): orphan cleanup on readonly fs [ 33.062981][ T3501] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 33.109154][ T3501] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 33.116047][ T3501] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.14: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 33.158288][ T3501] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.14: couldn't read orphan inode 13 (err -117) [ 33.174586][ T3501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.224745][ T3501] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 33.244908][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.245015][ T3501] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 2 [ 33.274097][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.312703][ T3506] pim6reg1: entered promiscuous mode [ 33.318071][ T3506] pim6reg1: entered allmulticast mode [ 33.365560][ T3511] loop2: detected capacity change from 0 to 2048 [ 33.411764][ T3515] netlink: 'syz.0.19': attribute type 13 has an invalid length. [ 33.422597][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.468655][ T3520] xt_CT: You must specify a L4 protocol and not use inversions on it [ 33.492723][ T3515] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.500026][ T3515] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.511049][ T3511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.545756][ T3485] syz.1.11 (3485) used greatest stack depth: 7944 bytes left [ 33.550656][ T3511] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.590683][ T3515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.601943][ T3515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.638268][ T3529] process 'syz.2.23' launched './file0' with NULL argv: empty string added [ 33.666677][ T3515] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.675936][ T3515] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.685356][ T3515] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.694413][ T3515] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.715376][ T3532] bridge0: port 3(hsr0) entered blocking state [ 33.721729][ T3532] bridge0: port 3(hsr0) entered disabled state [ 33.731699][ T3532] hsr0: entered allmulticast mode [ 33.736814][ T3532] hsr_slave_0: entered allmulticast mode [ 33.742523][ T3532] hsr_slave_1: entered allmulticast mode [ 33.749525][ T3532] hsr0: entered promiscuous mode [ 33.754897][ T3532] bridge0: port 3(hsr0) entered blocking state [ 33.761170][ T3532] bridge0: port 3(hsr0) entered forwarding state [ 33.771082][ T3532] veth0_vlan: entered allmulticast mode [ 33.856945][ T3536] loop0: detected capacity change from 0 to 512 [ 33.878240][ T3536] EXT4-fs (loop0): orphan cleanup on readonly fs [ 33.885138][ T3536] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 33.901334][ T3536] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 33.908096][ T3536] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #13: comm syz.0.26: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 33.927596][ T3536] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.26: couldn't read orphan inode 13 (err -117) [ 33.940878][ T3536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.957601][ T3536] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 33.967405][ T3536] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 2 [ 34.020817][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.387970][ T3546] loop3: detected capacity change from 0 to 512 [ 34.395890][ T3546] EXT4-fs (loop3): orphan cleanup on readonly fs [ 34.412999][ T3546] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 34.435685][ T3546] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 34.451438][ T3546] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.28: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 34.470316][ T3546] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.28: couldn't read orphan inode 13 (err -117) [ 34.490189][ T3546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.511901][ T3546] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 34.522805][ T3546] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 2 [ 34.590372][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.737017][ T3559] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 34.779372][ T3559] loop3: detected capacity change from 0 to 1024 [ 34.788412][ T3559] EXT4-fs: Ignoring removed bh option [ 34.828376][ T3559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.869175][ T3565] loop4: detected capacity change from 0 to 512 [ 34.870593][ T3559] EXT4-fs error (device loop3): ext4_xattr_inode_iget:440: comm syz.3.32: inode #13617: comm syz.3.32: iget: illegal inode # [ 34.893347][ T3559] EXT4-fs (loop3): Remounting filesystem read-only [ 34.900235][ T3565] EXT4-fs (loop4): orphan cleanup on readonly fs [ 34.907997][ T3565] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 34.909118][ T3559] EXT4-fs warning (device loop3): ext4_xattr_inode_inc_ref_all:1146: inode #18: comm syz.3.32: cleanup dec ref error -5 [ 34.931871][ T3565] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 34.957128][ T3559] EXT4-fs warning (device loop3): ext4_xattr_block_set:2198: inode #18: comm syz.3.32: dec ref error=-5 [ 35.008520][ T3565] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.33: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 35.074644][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.085098][ T3565] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.33: couldn't read orphan inode 13 (err -117) [ 35.108839][ T3565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.169572][ T3565] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 35.193254][ T3578] loop3: detected capacity change from 0 to 128 [ 35.198152][ T3578] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 35.198248][ T3578] EXT4-fs: failed to create workqueue [ 35.198257][ T3578] EXT4-fs (loop3): mount failed [ 35.215531][ T3565] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 2 [ 35.329409][ T3583] loop3: detected capacity change from 0 to 128 [ 35.361673][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.432641][ T3585] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.481288][ T3585] dvmrp0: entered allmulticast mode [ 35.500567][ T3585] pimreg: entered allmulticast mode [ 35.608371][ T3552] syz.1.30 (3552) used greatest stack depth: 7272 bytes left [ 35.817172][ T3601] netlink: 288 bytes leftover after parsing attributes in process `syz.4.45'. [ 36.192315][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 36.192387][ T29] audit: type=1326 audit(1740436787.196:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3612 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b654d169 code=0x7ffc0000 [ 36.221853][ T29] audit: type=1326 audit(1740436787.196:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3612 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b654d169 code=0x7ffc0000 [ 36.334488][ T3606] loop4: detected capacity change from 0 to 512 [ 36.473807][ T29] audit: type=1326 audit(1740436787.246:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3612 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fd1b654d169 code=0x7ffc0000 [ 36.497105][ T29] audit: type=1326 audit(1740436787.246:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3612 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b654d169 code=0x7ffc0000 [ 36.520640][ T29] audit: type=1326 audit(1740436787.246:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3612 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b654d169 code=0x7ffc0000 [ 36.543850][ T29] audit: type=1326 audit(1740436787.246:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3612 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fd1b654d169 code=0x7ffc0000 [ 36.566947][ T29] audit: type=1326 audit(1740436787.246:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3612 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b654d169 code=0x7ffc0000 [ 36.590174][ T29] audit: type=1326 audit(1740436787.246:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3612 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd1b654d169 code=0x7ffc0000 [ 36.613474][ T29] audit: type=1326 audit(1740436787.246:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3612 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b654d169 code=0x7ffc0000 [ 36.636604][ T29] audit: type=1326 audit(1740436787.246:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3612 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b654d169 code=0x7ffc0000 [ 36.739762][ T3606] EXT4-fs (loop4): too many log groups per flexible block group [ 36.747555][ T3606] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 36.773469][ T3606] EXT4-fs (loop4): mount failed [ 36.987791][ T3650] loop4: detected capacity change from 0 to 256 [ 37.007222][ T3654] FAULT_INJECTION: forcing a failure. [ 37.007222][ T3654] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 37.020414][ T3654] CPU: 0 UID: 0 PID: 3654 Comm: syz.0.59 Not tainted 6.14.0-rc4-syzkaller #0 [ 37.020465][ T3654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 37.020480][ T3654] Call Trace: [ 37.020486][ T3654] [ 37.020492][ T3654] dump_stack_lvl+0xf2/0x150 [ 37.020524][ T3654] dump_stack+0x15/0x1a [ 37.020652][ T3654] should_fail_ex+0x24a/0x260 [ 37.020688][ T3654] should_fail+0xb/0x10 [ 37.020717][ T3654] should_fail_usercopy+0x1a/0x20 [ 37.020762][ T3654] _copy_from_user+0x1c/0xa0 [ 37.020801][ T3654] move_addr_to_kernel+0x82/0x120 [ 37.020918][ T3654] copy_msghdr_from_user+0x271/0x2a0 [ 37.020959][ T3654] __sys_sendmsg+0x13e/0x230 [ 37.020996][ T3654] __x64_sys_sendmsg+0x46/0x50 [ 37.021021][ T3654] x64_sys_call+0x2734/0x2dc0 [ 37.021194][ T3654] do_syscall_64+0xc9/0x1c0 [ 37.021229][ T3654] ? clear_bhb_loop+0x55/0xb0 [ 37.021256][ T3654] ? clear_bhb_loop+0x55/0xb0 [ 37.021292][ T3654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.021328][ T3654] RIP: 0033:0x7fd1b654d169 [ 37.021348][ T3654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.021368][ T3654] RSP: 002b:00007fd1b4bb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.021390][ T3654] RAX: ffffffffffffffda RBX: 00007fd1b6765fa0 RCX: 00007fd1b654d169 [ 37.021422][ T3654] RDX: 0000000000000000 RSI: 0000400000007940 RDI: 0000000000000003 [ 37.021436][ T3654] RBP: 00007fd1b4bb1090 R08: 0000000000000000 R09: 0000000000000000 [ 37.021447][ T3654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.021458][ T3654] R13: 0000000000000000 R14: 00007fd1b6765fa0 R15: 00007fff7db88a88 [ 37.021503][ T3654] [ 37.027611][ T3650] FAT-fs (loop4): Directory bread(block 64) failed [ 37.207815][ T3650] FAT-fs (loop4): Directory bread(block 65) failed [ 37.214420][ T3650] FAT-fs (loop4): Directory bread(block 66) failed [ 37.221362][ T3650] FAT-fs (loop4): Directory bread(block 67) failed [ 37.227905][ T3650] FAT-fs (loop4): Directory bread(block 68) failed [ 37.234826][ T3650] FAT-fs (loop4): Directory bread(block 69) failed [ 37.254796][ T3650] FAT-fs (loop4): Directory bread(block 70) failed [ 37.261890][ T3650] FAT-fs (loop4): Directory bread(block 71) failed [ 37.268586][ T3650] FAT-fs (loop4): Directory bread(block 72) failed [ 37.275189][ T3650] FAT-fs (loop4): Directory bread(block 73) failed [ 37.421147][ T3659] 9pnet: Could not find request transport: f)%{Ys҅/dd [ 37.427551][ T3664] loop4: detected capacity change from 0 to 512 [ 37.460347][ T3664] EXT4-fs (loop4): orphan cleanup on readonly fs [ 37.477331][ T3664] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 37.586367][ T3664] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 37.606111][ T3664] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.63: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 37.630258][ T3664] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.63: couldn't read orphan inode 13 (err -117) [ 37.947122][ T3664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.016577][ T3684] loop3: detected capacity change from 0 to 512 [ 38.078530][ T3664] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 38.145864][ T3684] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.183198][ T3664] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 2 [ 38.207855][ T3694] FAULT_INJECTION: forcing a failure. [ 38.207855][ T3694] name failslab, interval 1, probability 0, space 0, times 1 [ 38.220590][ T3694] CPU: 1 UID: 0 PID: 3694 Comm: syz.0.71 Not tainted 6.14.0-rc4-syzkaller #0 [ 38.220617][ T3694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 38.220632][ T3694] Call Trace: [ 38.220640][ T3694] [ 38.220648][ T3694] dump_stack_lvl+0xf2/0x150 [ 38.220729][ T3694] dump_stack+0x15/0x1a [ 38.220750][ T3694] should_fail_ex+0x24a/0x260 [ 38.220788][ T3694] should_failslab+0x8f/0xb0 [ 38.220818][ T3694] __kmalloc_noprof+0xab/0x3f0 [ 38.220948][ T3694] ? sock_kmalloc+0x83/0xc0 [ 38.220978][ T3694] sock_kmalloc+0x83/0xc0 [ 38.221007][ T3694] ____sys_sendmsg+0x127/0x4b0 [ 38.221039][ T3694] __sys_sendmsg+0x19d/0x230 [ 38.221148][ T3694] __x64_sys_sendmsg+0x46/0x50 [ 38.221173][ T3694] x64_sys_call+0x2734/0x2dc0 [ 38.221197][ T3694] do_syscall_64+0xc9/0x1c0 [ 38.221241][ T3694] ? clear_bhb_loop+0x55/0xb0 [ 38.221273][ T3694] ? clear_bhb_loop+0x55/0xb0 [ 38.221372][ T3694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.221422][ T3694] RIP: 0033:0x7fd1b654d169 [ 38.221440][ T3694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.221461][ T3694] RSP: 002b:00007fd1b4bb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.221513][ T3694] RAX: ffffffffffffffda RBX: 00007fd1b6765fa0 RCX: 00007fd1b654d169 [ 38.221526][ T3694] RDX: 0000000000000000 RSI: 0000400000007940 RDI: 0000000000000003 [ 38.221539][ T3694] RBP: 00007fd1b4bb1090 R08: 0000000000000000 R09: 0000000000000000 [ 38.221552][ T3694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.221566][ T3694] R13: 0000000000000000 R14: 00007fd1b6765fa0 R15: 00007fff7db88a88 [ 38.221586][ T3694] [ 38.414749][ T3684] EXT4-fs (loop3): 1 orphan inode deleted [ 38.439663][ T122] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 38.458024][ T3699] netlink: 252 bytes leftover after parsing attributes in process `syz.0.72'. [ 38.481354][ T3684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.519005][ T3684] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.567165][ T3705] netlink: 128 bytes leftover after parsing attributes in process `syz.2.74'. [ 38.572817][ T3703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.73'. [ 38.572908][ T3703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.572939][ T3703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.573374][ T3703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.573403][ T3703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.586458][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.607421][ T3711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 38.674222][ T3713] netlink: 104 bytes leftover after parsing attributes in process `syz.1.73'. [ 38.684780][ T3715] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 38.691319][ T3715] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 38.698852][ T3715] vhci_hcd vhci_hcd.0: Device attached [ 38.711129][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.722141][ T3715] netlink: 'syz.2.77': attribute type 13 has an invalid length. [ 38.730736][ T3711] team0 (unregistering): Port device team_slave_0 removed [ 38.738628][ T3711] team0 (unregistering): Port device team_slave_1 removed [ 38.932695][ T3729] FAULT_INJECTION: forcing a failure. [ 38.932695][ T3729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.945891][ T3729] CPU: 1 UID: 0 PID: 3729 Comm: syz.4.82 Not tainted 6.14.0-rc4-syzkaller #0 [ 38.945915][ T3729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 38.945930][ T3729] Call Trace: [ 38.945936][ T3729] [ 38.945942][ T3729] dump_stack_lvl+0xf2/0x150 [ 38.945968][ T3729] dump_stack+0x15/0x1a [ 38.946025][ T3729] should_fail_ex+0x24a/0x260 [ 38.946061][ T3729] should_fail+0xb/0x10 [ 38.946090][ T3729] should_fail_usercopy+0x1a/0x20 [ 38.946184][ T3729] _copy_from_user+0x1c/0xa0 [ 38.946265][ T3729] ____sys_sendmsg+0x1c2/0x4b0 [ 38.946339][ T3729] __sys_sendmsg+0x19d/0x230 [ 38.946380][ T3729] __x64_sys_sendmsg+0x46/0x50 [ 38.946441][ T3729] x64_sys_call+0x2734/0x2dc0 [ 38.946465][ T3729] do_syscall_64+0xc9/0x1c0 [ 38.946495][ T3729] ? clear_bhb_loop+0x55/0xb0 [ 38.946596][ T3729] ? clear_bhb_loop+0x55/0xb0 [ 38.946622][ T3729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.946649][ T3729] RIP: 0033:0x7fc3f55cd169 [ 38.946748][ T3729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.946766][ T3729] RSP: 002b:00007fc3f3c31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.946783][ T3729] RAX: ffffffffffffffda RBX: 00007fc3f57e5fa0 RCX: 00007fc3f55cd169 [ 38.946795][ T3729] RDX: 0000000000000000 RSI: 0000400000007940 RDI: 0000000000000003 [ 38.946809][ T3729] RBP: 00007fc3f3c31090 R08: 0000000000000000 R09: 0000000000000000 [ 38.946820][ T3729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.946832][ T3729] R13: 0000000000000000 R14: 00007fc3f57e5fa0 R15: 00007ffdb5bcc818 [ 38.946853][ T3729] [ 39.117546][ T3372] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 39.136710][ T3715] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.144029][ T3715] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.207858][ T3715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.218246][ T3715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.263237][ T3715] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.272218][ T3715] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.281449][ T3715] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.290620][ T3715] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.304335][ T3749] usb usb1: usbfs: process 3749 (syz.3.84) did not claim interface 0 before use [ 39.319548][ T3544] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.326990][ T3544] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.334584][ T3544] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.343276][ T3544] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.350711][ T3544] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.358129][ T3544] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.365551][ T3544] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.373044][ T3544] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.380606][ T3544] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.388000][ T3544] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.395434][ T3544] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.400481][ T3754] mmap: syz.3.84 (3754) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.403042][ T3544] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.422256][ T3544] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.429689][ T3544] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.437174][ T3544] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.444631][ T3544] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.452076][ T3544] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.459474][ T3544] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.466896][ T3544] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.474305][ T3544] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.481886][ T3544] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.489330][ T3544] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.496766][ T3544] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.504180][ T3544] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.511663][ T3544] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.519300][ T3544] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.526718][ T3544] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.534129][ T3544] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.541536][ T3544] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.567751][ T3748] netlink: 252 bytes leftover after parsing attributes in process `syz.0.87'. [ 39.588283][ T3544] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 39.612009][ T3717] vhci_hcd: connection reset by peer [ 39.619221][ T122] vhci_hcd: stop threads [ 39.623562][ T122] vhci_hcd: release socket [ 39.628000][ T122] vhci_hcd: disconnect device [ 39.648738][ T3766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.93'. [ 39.678524][ T3768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.94'. [ 39.739248][ T3771] FAULT_INJECTION: forcing a failure. [ 39.739248][ T3771] name failslab, interval 1, probability 0, space 0, times 0 [ 39.751924][ T3771] CPU: 0 UID: 0 PID: 3771 Comm: syz.1.95 Not tainted 6.14.0-rc4-syzkaller #0 [ 39.751947][ T3771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 39.751988][ T3771] Call Trace: [ 39.751994][ T3771] [ 39.752000][ T3771] dump_stack_lvl+0xf2/0x150 [ 39.752094][ T3771] dump_stack+0x15/0x1a [ 39.752117][ T3771] should_fail_ex+0x24a/0x260 [ 39.752148][ T3771] should_failslab+0x8f/0xb0 [ 39.752175][ T3771] __kmalloc_noprof+0xab/0x3f0 [ 39.752194][ T3771] ? ip_options_get+0x53/0x380 [ 39.752258][ T3771] ip_options_get+0x53/0x380 [ 39.752287][ T3771] ? mod_objcg_state+0x2ea/0x4f0 [ 39.752361][ T3771] ip_cmsg_send+0x3f1/0x5d0 [ 39.752385][ T3771] udp_sendmsg+0x80b/0x1390 [ 39.752416][ T3771] ? inet_sk_get_local_port_range+0x80/0x100 [ 39.752451][ T3771] ? udp_lib_get_port+0xd16/0xdc0 [ 39.752503][ T3771] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 39.752540][ T3771] ? __rcu_read_unlock+0x4e/0x70 [ 39.752619][ T3771] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 39.752746][ T3771] ? __pfx_udp_sendmsg+0x10/0x10 [ 39.752781][ T3771] inet_sendmsg+0xaf/0xd0 [ 39.752885][ T3771] __sock_sendmsg+0x102/0x180 [ 39.752921][ T3771] ____sys_sendmsg+0x326/0x4b0 [ 39.753021][ T3771] __sys_sendmsg+0x19d/0x230 [ 39.753138][ T3771] __x64_sys_sendmsg+0x46/0x50 [ 39.753208][ T3771] x64_sys_call+0x2734/0x2dc0 [ 39.753233][ T3771] do_syscall_64+0xc9/0x1c0 [ 39.753267][ T3771] ? clear_bhb_loop+0x55/0xb0 [ 39.753337][ T3771] ? clear_bhb_loop+0x55/0xb0 [ 39.753367][ T3771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.753393][ T3771] RIP: 0033:0x7fbaa66ed169 [ 39.753408][ T3771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.753424][ T3771] RSP: 002b:00007fbaa4d57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 39.753488][ T3771] RAX: ffffffffffffffda RBX: 00007fbaa6905fa0 RCX: 00007fbaa66ed169 [ 39.753499][ T3771] RDX: 0000000000000000 RSI: 0000400000007940 RDI: 0000000000000003 [ 39.753512][ T3771] RBP: 00007fbaa4d57090 R08: 0000000000000000 R09: 0000000000000000 [ 39.753526][ T3771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.753539][ T3771] R13: 0000000000000000 R14: 00007fbaa6905fa0 R15: 00007ffdec04e978 [ 39.753562][ T3771] [ 40.108092][ T3789] Cannot find del_set index 0 as target [ 40.116862][ T3791] netlink: 36 bytes leftover after parsing attributes in process `syz.4.100'. [ 40.130037][ T3792] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.148510][ T3794] loop3: detected capacity change from 0 to 512 [ 40.173547][ T3794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.206339][ T3794] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.217303][ T3791] Zero length message leads to an empty skb [ 40.279162][ T3805] netlink: 252 bytes leftover after parsing attributes in process `syz.1.104'. [ 40.359331][ T3821] FAULT_INJECTION: forcing a failure. [ 40.359331][ T3821] name failslab, interval 1, probability 0, space 0, times 0 [ 40.372152][ T3821] CPU: 0 UID: 0 PID: 3821 Comm: syz.4.108 Not tainted 6.14.0-rc4-syzkaller #0 [ 40.372180][ T3821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 40.372195][ T3821] Call Trace: [ 40.372203][ T3821] [ 40.372211][ T3821] dump_stack_lvl+0xf2/0x150 [ 40.372244][ T3821] dump_stack+0x15/0x1a [ 40.372354][ T3821] should_fail_ex+0x24a/0x260 [ 40.372466][ T3821] should_failslab+0x8f/0xb0 [ 40.372516][ T3821] kmem_cache_alloc_noprof+0x52/0x320 [ 40.372592][ T3821] ? dst_alloc+0xc0/0x100 [ 40.372616][ T3821] dst_alloc+0xc0/0x100 [ 40.372635][ T3821] ? ip_vs_nq_schedule+0xb2/0x1b0 [ 40.372673][ T3821] ip_route_output_key_hash_rcu+0xb90/0x12e0 [ 40.372706][ T3821] ip_route_output_flow+0x76/0x120 [ 40.372823][ T3821] udp_sendmsg+0xeda/0x1390 [ 40.372865][ T3821] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 40.372887][ T3821] ? __rcu_read_unlock+0x4e/0x70 [ 40.372915][ T3821] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 40.373009][ T3821] ? __pfx_udp_sendmsg+0x10/0x10 [ 40.373044][ T3821] inet_sendmsg+0xaf/0xd0 [ 40.373136][ T3821] __sock_sendmsg+0x102/0x180 [ 40.373174][ T3821] ____sys_sendmsg+0x326/0x4b0 [ 40.373207][ T3821] __sys_sendmsg+0x19d/0x230 [ 40.373249][ T3821] __x64_sys_sendmsg+0x46/0x50 [ 40.373319][ T3821] x64_sys_call+0x2734/0x2dc0 [ 40.373351][ T3821] do_syscall_64+0xc9/0x1c0 [ 40.373513][ T3821] ? clear_bhb_loop+0x55/0xb0 [ 40.373617][ T3821] ? clear_bhb_loop+0x55/0xb0 [ 40.373644][ T3821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.373677][ T3821] RIP: 0033:0x7fc3f55cd169 [ 40.373695][ T3821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.373742][ T3821] RSP: 002b:00007fc3f3c31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.373764][ T3821] RAX: ffffffffffffffda RBX: 00007fc3f57e5fa0 RCX: 00007fc3f55cd169 [ 40.373778][ T3821] RDX: 0000000000000000 RSI: 0000400000007940 RDI: 0000000000000003 [ 40.373792][ T3821] RBP: 00007fc3f3c31090 R08: 0000000000000000 R09: 0000000000000000 [ 40.373806][ T3821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.373820][ T3821] R13: 0000000000000000 R14: 00007fc3f57e5fa0 R15: 00007ffdb5bcc818 [ 40.373841][ T3821] [ 40.602955][ T3823] netlink: 'syz.2.110': attribute type 10 has an invalid length. [ 40.610887][ T3827] capability: warning: `syz.1.109' uses 32-bit capabilities (legacy support in use) [ 40.633626][ T3823] hsr_slave_0: left promiscuous mode [ 40.639998][ T3823] hsr_slave_1: left promiscuous mode [ 40.648494][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.692024][ T3838] loop3: detected capacity change from 0 to 512 [ 40.711593][ T3842] Cannot find add_set index 0 as target [ 40.739631][ T3838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.758717][ C0] hrtimer: interrupt took 27511 ns [ 40.803224][ T3838] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.951166][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.342585][ T3868] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 41.390849][ T29] kauditd_printk_skb: 487 callbacks suppressed [ 41.390867][ T29] audit: type=1326 audit(1740436792.396:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3869 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b654d169 code=0x7ffc0000 [ 41.451155][ T29] audit: type=1326 audit(1740436792.396:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3869 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b654d169 code=0x7ffc0000 [ 41.474844][ T29] audit: type=1326 audit(1740436792.426:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3869 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd1b654d169 code=0x7ffc0000 [ 41.498981][ T29] audit: type=1326 audit(1740436792.426:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3869 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd1b654d1a3 code=0x7ffc0000 [ 41.524553][ T29] audit: type=1326 audit(1740436792.426:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3869 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd1b654bc1f code=0x7ffc0000 [ 41.547766][ T29] audit: type=1326 audit(1740436792.426:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3869 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd1b654d1f7 code=0x7ffc0000 [ 41.571203][ T29] audit: type=1326 audit(1740436792.426:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3869 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd1b654bad0 code=0x7ffc0000 [ 41.594489][ T29] audit: type=1326 audit(1740436792.426:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3869 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd1b654bdca code=0x7ffc0000 [ 41.617601][ T29] audit: type=1326 audit(1740436792.436:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3869 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b654d169 code=0x7ffc0000 [ 41.640927][ T29] audit: type=1326 audit(1740436792.436:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3869 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b654d169 code=0x7ffc0000 [ 41.828289][ T3878] x_tables: duplicate underflow at hook 2 [ 42.211386][ T3896] 9pnet_fd: Insufficient options for proto=fd [ 42.261286][ T3898] loop4: detected capacity change from 0 to 512 [ 42.281779][ T3898] EXT4-fs (loop4): orphan cleanup on readonly fs [ 42.291694][ T3898] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 42.315651][ T3898] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 42.324534][ T3898] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.133: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 42.353446][ T3898] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.133: couldn't read orphan inode 13 (err -117) [ 42.370871][ T3898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.387512][ T3898] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 42.397864][ T3898] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 2 [ 42.436433][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.462384][ T3906] netlink: 'syz.4.135': attribute type 4 has an invalid length. [ 42.482206][ T3906] netlink: 'syz.4.135': attribute type 4 has an invalid length. [ 42.535811][ T3906] netlink: 'syz.4.135': attribute type 4 has an invalid length. [ 42.597234][ T3919] capability: warning: `syz.2.140' uses deprecated v2 capabilities in a way that may be insecure [ 42.612003][ T3920] team0 (unregistering): Port device team_slave_0 removed [ 42.621964][ T3920] team0 (unregistering): Port device team_slave_1 removed [ 42.693281][ T3923] loop4: detected capacity change from 0 to 512 [ 42.703483][ T3923] EXT4-fs (loop4): orphan cleanup on readonly fs [ 42.711185][ T3923] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 42.726292][ T3923] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 42.739557][ T3923] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.142: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 42.761070][ T3923] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.142: couldn't read orphan inode 13 (err -117) [ 42.773612][ T3923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.797397][ T3923] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 42.812945][ T3923] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 2 [ 42.843087][ T3930] loop2: detected capacity change from 0 to 512 [ 42.862094][ T3930] EXT4-fs (loop2): orphan cleanup on readonly fs [ 42.878625][ T3930] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 42.880834][ T3938] program syz.0.148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.903407][ T3930] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 42.911828][ T3930] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.145: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 42.941832][ T3930] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.145: couldn't read orphan inode 13 (err -117) [ 42.949098][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.973507][ T3930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.004937][ T3942] veth0_vlan: entered allmulticast mode [ 43.013441][ T3930] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 43.025519][ T3930] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 2 [ 43.083397][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.141871][ T3964] pim6reg: entered allmulticast mode [ 43.211150][ T3969] -: renamed from bridge_slave_0 [ 43.221094][ T3969] vlan2: entered allmulticast mode [ 43.437023][ T4001] loop4: detected capacity change from 0 to 256 [ 43.448100][ T4001] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.471094][ T4001] syz.4.168 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 43.500213][ T4004] netlink: 'syz.4.169': attribute type 28 has an invalid length. [ 43.508098][ T4004] netlink: 'syz.4.169': attribute type 3 has an invalid length. [ 43.515930][ T4004] __nla_validate_parse: 7 callbacks suppressed [ 43.515944][ T4004] netlink: 132 bytes leftover after parsing attributes in process `syz.4.169'. [ 43.534174][ T4006] loop3: detected capacity change from 0 to 256 [ 43.534954][ T4004] xt_hashlimit: max too large, truncated to 1048576 [ 43.556298][ T4006] FAT-fs (loop3): Directory bread(block 64) failed [ 43.564861][ T4006] FAT-fs (loop3): Directory bread(block 65) failed [ 43.572819][ T4006] FAT-fs (loop3): Directory bread(block 66) failed [ 43.580150][ T4006] FAT-fs (loop3): Directory bread(block 67) failed [ 43.586817][ T4006] FAT-fs (loop3): Directory bread(block 68) failed [ 43.593429][ T4006] FAT-fs (loop3): Directory bread(block 69) failed [ 43.601051][ T4006] FAT-fs (loop3): Directory bread(block 70) failed [ 43.607582][ T4006] FAT-fs (loop3): Directory bread(block 71) failed [ 43.614242][ T4006] FAT-fs (loop3): Directory bread(block 72) failed [ 43.621668][ T4006] FAT-fs (loop3): Directory bread(block 73) failed [ 43.636506][ T4006] syz.3.170: attempt to access beyond end of device [ 43.636506][ T4006] loop3: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 43.651592][ T4006] syz.3.170: attempt to access beyond end of device [ 43.651592][ T4006] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 43.714408][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.721913][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.729546][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.738278][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.745792][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.753226][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.760656][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.768190][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.775668][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.783127][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.790683][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.798119][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.805555][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.812979][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.822758][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.830208][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.830483][ T4012] loop4: detected capacity change from 0 to 764 [ 43.837625][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.844102][ T4012] iso9660: Unknown parameter '' [ 43.851215][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.851238][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.871475][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.879215][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.886935][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.894360][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.901778][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.909199][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.916580][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.923997][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.931421][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.938882][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.947573][ T3373] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 44.019343][ T4026] netlink: 'syz.3.177': attribute type 21 has an invalid length. [ 44.027144][ T4026] netlink: 'syz.3.177': attribute type 20 has an invalid length. [ 44.034920][ T4026] IPv6: NLM_F_CREATE should be specified when creating new route [ 44.188760][ T3372] usb 5-1: enqueue for inactive port 0 [ 44.194303][ T3372] usb 5-1: enqueue for inactive port 0 [ 44.225239][ T4041] loop3: detected capacity change from 0 to 512 [ 44.241916][ T4041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.271245][ T3372] vhci_hcd: vhci_device speed not set [ 44.280945][ T4046] loop2: detected capacity change from 0 to 512 [ 44.294313][ T4046] EXT4-fs (loop2): orphan cleanup on readonly fs [ 44.300178][ T4041] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.313902][ T4046] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 44.383060][ T4046] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 44.406902][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.428858][ T4046] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.183: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 44.454290][ T4046] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.183: couldn't read orphan inode 13 (err -117) [ 44.472551][ T4063] netlink: 1072 bytes leftover after parsing attributes in process `syz.0.189'. [ 44.484375][ T4046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.502090][ T4064] loop3: detected capacity change from 0 to 1024 [ 44.512269][ T4046] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 44.525435][ T4064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.541867][ T4046] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 2 [ 44.555589][ T4060] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.582008][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.634768][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.664519][ T4060] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.711986][ T4060] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.781821][ T4085] netlink: 132 bytes leftover after parsing attributes in process `syz.3.195'. [ 44.865647][ T4097] netlink: 'syz.3.199': attribute type 5 has an invalid length. [ 44.873593][ T4096] netlink: 'syz.3.199': attribute type 5 has an invalid length. [ 44.887789][ T4096] loop3: detected capacity change from 0 to 512 [ 44.903191][ T4060] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.914628][ T4096] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #3: comm syz.3.199: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 44.938171][ T4096] EXT4-fs error (device loop3): ext4_quota_enable:7104: comm syz.3.199: Bad quota inode: 3, type: 0 [ 44.949307][ T4096] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 44.964446][ T4096] EXT4-fs (loop3): mount failed [ 45.000291][ T4109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.204'. [ 45.015722][ T4109] bridge0: port 3(batadv1) entered blocking state [ 45.022250][ T4109] bridge0: port 3(batadv1) entered disabled state [ 45.029346][ T4109] batadv1: entered allmulticast mode [ 45.035091][ T4109] batadv1: entered promiscuous mode [ 45.051117][ T4060] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.062674][ T4060] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.074325][ T4060] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.085730][ T4060] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.146896][ T4124] netlink: 68 bytes leftover after parsing attributes in process `syz.4.207'. [ 45.166885][ T4124] netlink: 68 bytes leftover after parsing attributes in process `syz.4.207'. [ 45.185729][ T4128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.210'. [ 45.206248][ T4129] vhci_hcd: invalid port number 0 [ 45.252967][ T4136] netlink: 252 bytes leftover after parsing attributes in process `syz.0.208'. [ 45.352627][ T4150] loop2: detected capacity change from 0 to 512 [ 45.378125][ T4152] syz.4.218 uses obsolete (PF_INET,SOCK_PACKET) [ 45.402305][ T4150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.426209][ T4150] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.480841][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.518773][ T1328] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 45.528009][ T1328] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 45.741555][ T4185] netlink: 252 bytes leftover after parsing attributes in process `syz.0.230'. [ 45.774708][ T4187] netlink: 252 bytes leftover after parsing attributes in process `syz.2.231'. [ 45.843040][ T4198] Process accounting resumed [ 45.877582][ T4205] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.965183][ T4205] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.022055][ T4205] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.082044][ T4205] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.105062][ T3544] kernel write not supported for file /140/attr/exec (pid: 3544 comm: kworker/1:5) [ 46.132844][ T4238] loop2: detected capacity change from 0 to 512 [ 46.140635][ T4238] EXT4-fs: Ignoring removed bh option [ 46.153940][ T4205] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.157720][ T4238] EXT4-fs error (device loop2): ext4_quota_enable:7101: comm syz.2.246: inode #33554432: comm syz.2.246: iget: illegal inode # [ 46.166116][ T4205] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.177358][ T4238] EXT4-fs (loop2): Remounting filesystem read-only [ 46.187622][ T4205] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.190157][ T4238] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=33554432). Please run e2fsck to fix. [ 46.191862][ T4238] EXT4-fs (loop2): mount failed [ 46.203437][ T4205] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.227278][ T4242] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 46.272892][ T4246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4246 comm=syz.2.247 [ 46.274681][ T4247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.294137][ T4247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.484900][ T29] kauditd_printk_skb: 485 callbacks suppressed [ 46.484918][ T29] audit: type=1326 audit(1740436797.486:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f1edd169 code=0x7ffc0000 [ 46.516116][ T29] audit: type=1326 audit(1740436797.486:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f1edd169 code=0x7ffc0000 [ 46.539496][ T29] audit: type=1326 audit(1740436797.486:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31f1edd169 code=0x7ffc0000 [ 46.562897][ T29] audit: type=1326 audit(1740436797.486:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f1edd169 code=0x7ffc0000 [ 46.586309][ T29] audit: type=1326 audit(1740436797.486:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31f1edd169 code=0x7ffc0000 [ 46.609702][ T29] audit: type=1326 audit(1740436797.486:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f1edd169 code=0x7ffc0000 [ 46.633171][ T29] audit: type=1326 audit(1740436797.486:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31f1edd169 code=0x7ffc0000 [ 46.656561][ T29] audit: type=1326 audit(1740436797.486:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f1edd169 code=0x7ffc0000 [ 46.679911][ T29] audit: type=1326 audit(1740436797.486:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31f1edd169 code=0x7ffc0000 [ 46.703284][ T29] audit: type=1326 audit(1740436797.486:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f1edd169 code=0x7ffc0000 [ 46.737196][ T4254] loop3: detected capacity change from 0 to 8192 [ 46.756095][ T4254] loop3: detected capacity change from 0 to 256 [ 46.763980][ T4254] /dev/loop3: Can't open blockdev [ 46.785466][ T4256] bond1: entered promiscuous mode [ 46.790605][ T4256] bond1: entered allmulticast mode [ 46.796045][ T4256] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.955201][ T4263] random: crng reseeded on system resumption [ 47.130924][ T4279] loop2: detected capacity change from 0 to 512 [ 47.142978][ T4279] EXT4-fs (loop2): orphan cleanup on readonly fs [ 47.150118][ T4279] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 47.166438][ T4279] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 47.173504][ T4279] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.255: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 47.210030][ T4279] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.255: couldn't read orphan inode 13 (err -117) [ 47.222436][ T4279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.236812][ T4279] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 47.247527][ T4279] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 2 [ 47.279944][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.808812][ T24] IPVS: starting estimator thread 0... [ 47.842970][ T4317] loop3: detected capacity change from 0 to 512 [ 47.864480][ T4317] EXT4-fs (loop3): orphan cleanup on readonly fs [ 47.872885][ T4317] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 47.888092][ T4317] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 47.896796][ T4317] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.266: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 47.914659][ T4314] IPVS: using max 2400 ests per chain, 120000 per kthread [ 47.923742][ T4317] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.266: couldn't read orphan inode 13 (err -117) [ 47.939988][ T4317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.957783][ T4317] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 47.972621][ T4317] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 2 [ 48.033930][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.113424][ T4320] loop3: detected capacity change from 0 to 2048 [ 48.132744][ T4320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.283159][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.996572][ T4350] bridge0: entered allmulticast mode [ 50.112612][ T4405] ================================================================== [ 50.120739][ T4405] BUG: KCSAN: data-race in d_alloc_parallel / d_set_d_op [ 50.127774][ T4405] [ 50.130104][ T4405] read-write to 0xffff888106543180 of 4 bytes by task 4406 on cpu 1: [ 50.138183][ T4405] d_set_d_op+0xfb/0x1f0 [ 50.142478][ T4405] proc_pident_instantiate+0x164/0x180 [ 50.147935][ T4405] proc_pident_lookup+0x11d/0x190 [ 50.152959][ T4405] proc_tgid_base_lookup+0x2b/0x40 [ 50.158084][ T4405] __lookup_slow+0x18a/0x250 [ 50.162684][ T4405] lookup_slow+0x3c/0x60 [ 50.166918][ T4405] link_path_walk+0x668/0x830 [ 50.171609][ T4405] path_openat+0x1af/0x1fc0 [ 50.176121][ T4405] do_filp_open+0x107/0x230 [ 50.180622][ T4405] do_sys_openat2+0xab/0x120 [ 50.185210][ T4405] __x64_sys_openat+0xf3/0x120 [ 50.189975][ T4405] x64_sys_call+0x2b30/0x2dc0 [ 50.194666][ T4405] do_syscall_64+0xc9/0x1c0 [ 50.199176][ T4405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.205081][ T4405] [ 50.207416][ T4405] read to 0xffff888106543180 of 4 bytes by task 4405 on cpu 0: [ 50.214956][ T4405] d_alloc_parallel+0x5dc/0xc80 [ 50.219827][ T4405] __lookup_slow+0x8d/0x250 [ 50.224334][ T4405] lookup_slow+0x3c/0x60 [ 50.228581][ T4405] link_path_walk+0x668/0x830 [ 50.233275][ T4405] path_openat+0x1af/0x1fc0 [ 50.237774][ T4405] do_filp_open+0x107/0x230 [ 50.242281][ T4405] do_sys_openat2+0xab/0x120 [ 50.246862][ T4405] __x64_sys_openat+0xf3/0x120 [ 50.251621][ T4405] x64_sys_call+0x2b30/0x2dc0 [ 50.256314][ T4405] do_syscall_64+0xc9/0x1c0 [ 50.260824][ T4405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.266720][ T4405] [ 50.269038][ T4405] value changed: 0x10000000 -> 0x1000000c [ 50.274751][ T4405] [ 50.277083][ T4405] Reported by Kernel Concurrency Sanitizer on: [ 50.283223][ T4405] CPU: 0 UID: 0 PID: 4405 Comm: syz.0.291 Not tainted 6.14.0-rc4-syzkaller #0 [ 50.292064][ T4405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 50.302127][ T4405] ==================================================================