last executing test programs: 2m46.050154397s ago: executing program 32 (id=2024): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 1m48.063745857s ago: executing program 33 (id=2922): creat(0x0, 0xecf86c37d53049cc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0xc, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c0408c0}, 0x2008c014) 1m45.957563076s ago: executing program 34 (id=2953): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x4b67, &(0x7f0000000180)) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x81, 0x1, 0xffffffffffffd0c8, 0x10000000}) 1m41.9255246s ago: executing program 35 (id=2989): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 1m39.455507898s ago: executing program 36 (id=3007): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000000), 0x302) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0xf8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000ce3f7b74da02a5b97e85ce16ebc77775d1fc339e4debae68587285f1c15123ff91c63060e996bd4b2b82b333a1bed8081f62f72288effbb897ec348eaf03024dea715cfba276db4daccd89388b3dd354e9edaa673bfa317129567d470c61d4e89c93acf7b969a12f7ca34bd6539fbc7db1eebeafedb5db39c2d1c4fc5f92c43a4c91eb9b0501a0e8e12f91529629ff1d2e335b90a9e10c768df46d", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) syz_read_part_table(0x5dc, &(0x7f0000000c00)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) listen(0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x14927e, 0xbb) fallocate(r3, 0x0, 0x0, 0x9) write$P9_RVERSION(r1, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0xfffffff9, 0x6, '9P2000'}, 0x13) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r6, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) accept4(r6, 0x0, 0x0, 0x400000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x18) 1m32.941158522s ago: executing program 37 (id=3032): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x88000, 0x100}, 0x18) recvfrom$inet_nvme(r6, &(0x7f0000000300)=""/88, 0x58, 0x40, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x4}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x700, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 1m25.86715715s ago: executing program 38 (id=3043): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {0x800, 0x0, 0x6}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) unshare(0x62040200) 1m20.64329919s ago: executing program 39 (id=3063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000740000000310800064000000000480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c000380180000800800034000000003"], 0xe4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_ts_info}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7ffff019) fallocate(r2, 0x0, 0x0, 0x1001f0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m6.195664621s ago: executing program 4 (id=3368): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) truncate(&(0x7f0000000040)='./file1\x00', 0x40006) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r1, 0x20, 0x2000, 0x8000) (fail_nth: 2) 1m5.882373416s ago: executing program 4 (id=3371): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000003e000701fcfffffffedbdf25017c0000060004"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000140)={@broadcast, @private}, &(0x7f0000000180)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x0, 0x40, 0x97, 0x1, {{0xf, 0x4, 0x1, 0x34, 0x3c, 0x68, 0x0, 0x7, 0x29, 0x0, @loopback, @empty, {[@timestamp={0x44, 0x8, 0x33, 0x0, 0x0, [0x8]}, @generic={0x94, 0xd, "566f0771947c51f0b7c9cb"}, @generic={0x7, 0x3, "9a"}, @end, @generic={0x94, 0x8, "9d4542384e4d"}, @noop, @noop, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x8000, 0x80, 0xfffffffd, 0x5, {{0x61, 0x4, 0x3, 0x6, 0x184, 0x64, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @dev={0xac, 0x14, 0x14, 0x1c}, {[@timestamp_prespec={0x44, 0x34, 0x7e, 0x3, 0x2, [{@multicast1, 0x4}, {@remote, 0x80}, {@rand_addr=0x64010102, 0xe5}, {@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@broadcast, 0xfffffff7}]}, @ra={0x94, 0x4}, @generic={0x86, 0x12, "8414be6c62d3b3ad669bec6bcd0a96c6"}, @cipso={0x86, 0x3f, 0x3, [{0x5, 0x4, "be43"}, {0x7, 0x5, "d4c001"}, {0x0, 0xf, "a65281e708c48a741755196874"}, {0x5, 0x11, "0420eed840487ea5fc11b20fe44aa1"}, {0x5, 0x9, "6232d7e6bfbaf4"}, {0x7, 0x7, "3b0c33977f"}]}, @timestamp_prespec={0x44, 0x44, 0x60, 0x3, 0x8, [{@local, 0x6}, {@broadcast, 0x584}, {@multicast2, 0x8}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x1}, {@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x6}, {@remote, 0x4}, {@private=0xa010100, 0x401}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x43, 0xffffffffffffffff, [{0x5, 0x8, "42f11180c6c5"}, {0x2, 0x3, 'm'}, {0x7, 0x11, "c8f9f68919ee871274b7ffb51e39eb"}, {0x1, 0x4, 's\a'}, {0x2, 0x10, "f510b77d0ec16809d0ca8e78da24"}, {0x2, 0x4, 'W_'}, {0x6, 0x3, '6'}, {0x6, 0x6, "e9576fb5"}]}, @timestamp={0x44, 0x24, 0x58, 0x0, 0x7, [0xfffffff9, 0x101, 0x5, 0xfffffffa, 0x9, 0x8, 0x1, 0xd422]}, @cipso={0x86, 0x24, 0x0, [{0x6, 0xb, "89c5562f85cb6c1707"}, {0x1, 0xa, "8135e87e4763b963"}, {0x1, 0x9, "9fa3b14b310da4"}]}, @timestamp_addr={0x44, 0x14, 0x2b, 0x1, 0x0, [{@multicast1, 0x1000000}, {@rand_addr=0x64010102, 0x3}]}]}}}}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r8, r5, 0x25, 0x2, @val=@tcx}, 0x1c) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 1m4.364627138s ago: executing program 8 (id=3399): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x880d146, 0x10000, 0x1, 0x37}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) io_uring_enter(r1, 0x3513, 0x7ec2, 0x20, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x8004, 0x0, 0x0) recvmsg(r4, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x2063) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0), 0x0, 0x1) r7 = syz_io_uring_setup(0x4e3, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x708, 0x41e3, 0x0, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) splice(r5, 0x0, r8, 0x0, 0x25a5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @dev}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x1c, {0x2, 0x0, @dev}}) futex(0x0, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0xfffffffc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000400)=ANY=[], 0xfe37, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r10, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/26, 0x1a}], 0x1, 0x4000ffe, 0xfffffffc) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xfffffffffffffff2, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x17, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) 1m3.414387444s ago: executing program 8 (id=3408): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000000), 0x302) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0xf8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000ce3f7b74da02a5b97e85ce16ebc77775d1fc339e4debae68587285f1c15123ff91c63060e996bd4b2b82b333a1bed8081f62f72288effbb897ec348eaf03024dea715cfba276db4daccd89388b3dd354e9edaa673bfa317129567d470c61d4e89c93acf7b969a12f7ca34bd6539fbc7db1eebeafedb5db39c2d1c4fc5f92c43a4c91eb9b0501a0e8e12f91529629ff1d2e335b90", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) syz_read_part_table(0x5dc, &(0x7f0000000c00)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) listen(0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x14927e, 0xbb) fallocate(r3, 0x0, 0x0, 0x9) write$P9_RVERSION(r1, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0xfffffff9, 0x6, '9P2000'}, 0x13) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r6, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) accept4(r6, 0x0, 0x0, 0x400000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x18) 1m2.464357871s ago: executing program 8 (id=3416): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 1m2.374453228s ago: executing program 8 (id=3417): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 1m2.35711903s ago: executing program 8 (id=3418): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x20000000000001fe, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0xffffdffffffffffe}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x44, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0081}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x70}}], 0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0xfffffffffffffd81, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 1m2.336767191s ago: executing program 8 (id=3419): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x880d146, 0x10000, 0x1, 0x37}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) io_uring_enter(r1, 0x3513, 0x7ec2, 0x20, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x8004, 0x0, 0x0) recvmsg(r4, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x2063) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0), 0x0, 0x1) r7 = syz_io_uring_setup(0x4e3, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x708, 0x41e3, 0x0, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) splice(r5, 0x0, r8, 0x0, 0x25a5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @dev}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x1c, {0x2, 0x0, @dev}}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0xfffffffc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000400)=ANY=[], 0xfe37, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r10, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/26, 0x1a}], 0x1, 0x4000ffe, 0xfffffffc) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xfffffffffffffff2, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x17, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) 1m1.11136231s ago: executing program 4 (id=3428): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 1m1.067335133s ago: executing program 4 (id=3429): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 1m1.066601443s ago: executing program 4 (id=3430): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x20000000000001fe, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0xffffdffffffffffe}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x44, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0081}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x70}}], 0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0xfffffffffffffd81, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 1m1.019254297s ago: executing program 4 (id=3431): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2000c16, &(0x7f00000001c0)={[{@data_writeback}, {@jqfmt_vfsold}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) truncate(&(0x7f0000000040)='./file1\x00', 0x40006) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r1, 0x20, 0x2000, 0x8000) 59.827960582s ago: executing program 2 (id=3435): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) tkill(r1, 0x1b) 58.955850503s ago: executing program 2 (id=3436): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200080, &(0x7f0000000040)={[{@quota}]}, 0xfa, 0x56c, &(0x7f0000000940)="$eJzs3c9rFFccAPDvbBKjxtYIIm0PJeChFuvGJP1hoQd7LK1UaO92SdYg2biS3YhJheqhXnopUiilQukf0HuP0n+gf4XQClIktIdepsw6azbJ7ibG1WzdzwdG35s3mzdvZr6P9/btsgEMrInsn0LEqxHxbRJxuKVsOPLCiUfHrT28PpttSaTpZ38lkeT7mscn+f9jeeaViPjt64iTha311lZWF0qVSnkpz0/WF69M1lZWT11aLM2X58uXp2dmzrwzM/3+e+9uffHo7tr65vl/fvj07kdnvjm+9v0v94/cTuJsHMrLWtvxFG60ZiZiIr8mI3F204FTPaisnyR7fQLsylAe5yOR9QGHYyiPeuDF91VEpMCASsQ/DKjmOKA5t+86D05fvFnegw8bE6DRre1PHr03Evsbc6ODa8mGmVF2JcZ7UH9Wx69/3rmdbdG79yEAtnXjZkScHh7e0P+9HC393+6d3sExm+vQ/8Hzczcb/7w12mb8V3g8/ok245+xNrG7G9vHf+F+D6rpKBv/fdB2/Pt40Wp8KM+91BjzjSQXL1XKWd+WdZMnYmQ0y3dbzzmzdi/tVNY6/su2rP7mWDA/j/vDm9a75kr10tO0udWDmxGvDbdr//r4N2lz/7PrcX6HdRwr33m9U9n27X+20p8j3mh7/9fnOkn39cnJxvMw2Xwqtvr71rHfO9W/1+3P7v/B7u0fT1rXa2tPXsdP+/8tdyqbSPJF0yd8/vclnzfS+/J910r1+tJUxL7kk637p9df28w3j8/af+J4+/jv9vwfiIgvdtj+W0dvdTy0H+7/3BPd/w6JNOlYdO/jL3/sVP/O+r+3G6kT+Z6d9H9dznRD4mmuHQAAAAAAAPSbQkQciqRQfJwuFIrFR5/vOBoHC5VqrX7yYnX58lw0vis7HiOF5kr3WMvnIabyz8M289Ob8jMRcSQivhs60MgXZ6uVub1uPAAAAAAAAAAAAAAAAAAAAPSJsQ7f/8/8MbTXZwc8c37yGwbXtvHfi196AvpSl/h/8X7xF9jA+B8Gl/iHwSX+YXCJfxhc4h8Gl/iHwSX+AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKfOnzuXbenaw+uzWX7u6sryQvXqqblybaG4uDxbnK0uXSnOV6vzlXJxthrj2/y9SrV6ZWo6lq9N1stJfbK2snphsbp8uX7h0mJpvnyhPPJ8mgUAAAAAAAAAAAAAAAAAAAD/K7WV1YVSpVJekpDYVWK4P06jN4k0TdM+OI1+SOx1zwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6/4LAAD//6lkOFk=") keyctl$setperm(0x5, 0x0, 0x800) keyctl$get_security(0x11, 0x0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000002c0)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x1}}, 0x10) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0xffffffc1}, 0x94) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x11c, 0x1}, 0x20) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x200000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4, 0x1, r2}, 0x10) 58.822291923s ago: executing program 2 (id=3437): openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) pwrite64(r1, &(0x7f0000000080)='3', 0x1, 0x180) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000580)=0xc) wait4(r7, &(0x7f00000005c0), 0x1, &(0x7f0000000600)) recvmsg$unix(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)=""/129, 0x81}], 0x1}, 0x100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) unshare(0x40000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}}, 0x20050800) 57.979495011s ago: executing program 2 (id=3440): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 57.854351341s ago: executing program 2 (id=3443): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x20000000000001fe, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0xffffdffffffffffe}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x44, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0081}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x70}}], 0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0xfffffffffffffd81, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 57.676107786s ago: executing program 2 (id=3444): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r1, r1, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ipvlan1\x00', @ifru_ivalue=0x2}) setfsuid(0xee00) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)) 55.767819719s ago: executing program 40 (id=3313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000740000000310800064000000000480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c000380180000800800034000000003"], 0xe4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_ts_info}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7ffff019) fallocate(r2, 0x0, 0x0, 0x1001f0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 54.496994501s ago: executing program 3 (id=3451): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000003e000701fcfffffffedbdf25017c0000060004"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000140)={@broadcast, @private}, &(0x7f0000000180)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x0, 0x40, 0x97, 0x1, {{0xf, 0x4, 0x1, 0x34, 0x3c, 0x68, 0x0, 0x7, 0x29, 0x0, @loopback, @empty, {[@timestamp={0x44, 0x8, 0x33, 0x0, 0x0, [0x8]}, @generic={0x94, 0xd, "566f0771947c51f0b7c9cb"}, @generic={0x7, 0x3, "9a"}, @end, @generic={0x94, 0x8, "9d4542384e4d"}, @noop, @noop, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x8000, 0x80, 0xfffffffd, 0x5, {{0x61, 0x4, 0x3, 0x6, 0x184, 0x64, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @dev={0xac, 0x14, 0x14, 0x1c}, {[@timestamp_prespec={0x44, 0x34, 0x7e, 0x3, 0x2, [{@multicast1, 0x4}, {@remote, 0x80}, {@rand_addr=0x64010102, 0xe5}, {@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@broadcast, 0xfffffff7}]}, @ra={0x94, 0x4}, @generic={0x86, 0x12, "8414be6c62d3b3ad669bec6bcd0a96c6"}, @cipso={0x86, 0x3f, 0x3, [{0x5, 0x4, "be43"}, {0x7, 0x5, "d4c001"}, {0x0, 0xf, "a65281e708c48a741755196874"}, {0x5, 0x11, "0420eed840487ea5fc11b20fe44aa1"}, {0x5, 0x9, "6232d7e6bfbaf4"}, {0x7, 0x7, "3b0c33977f"}]}, @timestamp_prespec={0x44, 0x44, 0x60, 0x3, 0x8, [{@local, 0x6}, {@broadcast, 0x584}, {@multicast2, 0x8}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x1}, {@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x6}, {@remote, 0x4}, {@private=0xa010100, 0x401}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x43, 0xffffffffffffffff, [{0x5, 0x8, "42f11180c6c5"}, {0x2, 0x3, 'm'}, {0x7, 0x11, "c8f9f68919ee871274b7ffb51e39eb"}, {0x1, 0x4, 's\a'}, {0x2, 0x10, "f510b77d0ec16809d0ca8e78da24"}, {0x2, 0x4, 'W_'}, {0x6, 0x3, '6'}, {0x6, 0x6, "e9576fb5"}]}, @timestamp={0x44, 0x24, 0x58, 0x0, 0x7, [0xfffffff9, 0x101, 0x5, 0xfffffffa, 0x9, 0x8, 0x1, 0xd422]}, @cipso={0x86, 0x24, 0x0, [{0x6, 0xb, "89c5562f85cb6c1707"}, {0x1, 0xa, "8135e87e4763b963"}, {0x1, 0x9, "9fa3b14b310da4"}]}, @timestamp_addr={0x44, 0x14, 0x2b, 0x1, 0x0, [{@multicast1, 0x1000000}, {@rand_addr=0x64010102, 0x3}]}]}}}}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r8, r5, 0x25, 0x2, @val=@tcx}, 0x1c) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 54.361611772s ago: executing program 3 (id=3452): openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) pwrite64(r1, &(0x7f0000000080)='3', 0x1, 0x180) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000580)=0xc) wait4(r7, &(0x7f00000005c0), 0x1, &(0x7f0000000600)) recvmsg$unix(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)=""/129, 0x81}], 0x1}, 0x100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) unshare(0x40000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}}, 0x20050800) 53.450937565s ago: executing program 3 (id=3453): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 53.370923762s ago: executing program 3 (id=3454): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 53.369715582s ago: executing program 3 (id=3455): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x20000000000001fe, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0xffffdffffffffffe}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x44, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0081}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x70}}], 0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0xfffffffffffffd81, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 53.345674484s ago: executing program 3 (id=3456): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000000), 0x302) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0xf8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000ce3f7b74da02a5b97e85ce16ebc77775d1fc339e4debae68587285f1c15123ff91c63060e996bd4b2b82b333a1bed8081f62f72288effbb897ec348eaf03024dea715cfba276db4daccd89388b3dd354e9edaa673bfa317129567d470c61d4e89c93acf7b969a12f7ca34bd6539fbc7db1eebeafedb5db39c2d1c4fc5f92c43a4c91eb9b0501a0e8e12f91529629ff1d2e335b90", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) syz_read_part_table(0x5dc, &(0x7f0000000c00)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) listen(0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x14927e, 0xbb) fallocate(r3, 0x0, 0x0, 0x9) write$P9_RVERSION(r1, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0xfffffff9, 0x6, '9P2000'}, 0x13) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r6, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) accept4(r6, 0x0, 0x0, 0x400000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x18) 51.215400625s ago: executing program 5 (id=3460): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x27, 0x0, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x96be) read$char_usb(r2, &(0x7f0000000200)=""/68, 0x44) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000840)=@l2tp6={0xa, 0x0, 0x2, @remote, 0x4, 0xfffffffd}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000280)="f4000900062b2c25fe80000000000000dc8b71d5decf66cc00"/40, 0x28}, {0x0}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) r5 = syz_clone(0x1000400, &(0x7f0000000600)="b3d9c3e48e6e0492c8a6a94b8281de9859cc18d41260ab502c9bd234bb6727416395690243a3cf3f73e81f28a02cec52c8f1959ee61c3f51aec41e6343b48b21a65a36d35ab31042a13e6ef62e62fb61f444e3610713cac1fc79e1b5c20d389457159ab9a8a5868e7a0c80e1f9831c6c4e55519def5bfe50a014196bdd5eebb10df4ef61231f357428098badf70f54690d1d00cd82071d44f5fa6755f683015fc4d8e1371990a094", 0xa8, &(0x7f0000000340), &(0x7f00000006c0), &(0x7f00000008c0)="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") timer_create(0x4, &(0x7f0000000740)={0x0, 0x30, 0x0, @tid=r5}, &(0x7f0000000780)) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x1d, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) close(r3) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 48.734819724s ago: executing program 5 (id=3461): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200080, &(0x7f0000000040)={[{@quota}]}, 0xfa, 0x56c, &(0x7f0000000940)="$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") keyctl$setperm(0x5, 0x0, 0x800) keyctl$get_security(0x11, 0x0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000002c0)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x1}}, 0x10) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0xffffffc1}, 0x94) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x11c, 0x1}, 0x20) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x200000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4, 0x1, r2}, 0x10) 48.378225433s ago: executing program 5 (id=3462): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000003e000701fcfffffffedbdf25017c0000060004"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000140)={@broadcast, @private}, &(0x7f0000000180)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x0, 0x40, 0x97, 0x1, {{0xf, 0x4, 0x1, 0x34, 0x3c, 0x68, 0x0, 0x7, 0x29, 0x0, @loopback, @empty, {[@timestamp={0x44, 0x8, 0x33, 0x0, 0x0, [0x8]}, @generic={0x94, 0xd, "566f0771947c51f0b7c9cb"}, @generic={0x7, 0x3, "9a"}, @end, @generic={0x94, 0x8, "9d4542384e4d"}, @noop, @noop, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x8000, 0x80, 0xfffffffd, 0x5, {{0x61, 0x4, 0x3, 0x6, 0x184, 0x64, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @dev={0xac, 0x14, 0x14, 0x1c}, {[@timestamp_prespec={0x44, 0x34, 0x7e, 0x3, 0x2, [{@multicast1, 0x4}, {@remote, 0x80}, {@rand_addr=0x64010102, 0xe5}, {@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@broadcast, 0xfffffff7}]}, @ra={0x94, 0x4}, @generic={0x86, 0x12, "8414be6c62d3b3ad669bec6bcd0a96c6"}, @cipso={0x86, 0x3f, 0x3, [{0x5, 0x4, "be43"}, {0x7, 0x5, "d4c001"}, {0x0, 0xf, "a65281e708c48a741755196874"}, {0x5, 0x11, "0420eed840487ea5fc11b20fe44aa1"}, {0x5, 0x9, "6232d7e6bfbaf4"}, {0x7, 0x7, "3b0c33977f"}]}, @timestamp_prespec={0x44, 0x44, 0x60, 0x3, 0x8, [{@local, 0x6}, {@broadcast, 0x584}, {@multicast2, 0x8}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x1}, {@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x6}, {@remote, 0x4}, {@private=0xa010100, 0x401}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x43, 0xffffffffffffffff, [{0x5, 0x8, "42f11180c6c5"}, {0x2, 0x3, 'm'}, {0x7, 0x11, "c8f9f68919ee871274b7ffb51e39eb"}, {0x1, 0x4, 's\a'}, {0x2, 0x10, "f510b77d0ec16809d0ca8e78da24"}, {0x2, 0x4, 'W_'}, {0x6, 0x3, '6'}, {0x6, 0x6, "e9576fb5"}]}, @timestamp={0x44, 0x24, 0x58, 0x0, 0x7, [0xfffffff9, 0x101, 0x5, 0xfffffffa, 0x9, 0x8, 0x1, 0xd422]}, @cipso={0x86, 0x24, 0x0, [{0x6, 0xb, "89c5562f85cb6c1707"}, {0x1, 0xa, "8135e87e4763b963"}, {0x1, 0x9, "9fa3b14b310da4"}]}, @timestamp_addr={0x44, 0x14, 0x2b, 0x1, 0x0, [{@multicast1, 0x1000000}, {@rand_addr=0x64010102, 0x3}]}]}}}}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r8, r5, 0x25, 0x2, @val=@tcx}, 0x1c) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 46.881146453s ago: executing program 41 (id=3419): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x880d146, 0x10000, 0x1, 0x37}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) io_uring_enter(r1, 0x3513, 0x7ec2, 0x20, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x8004, 0x0, 0x0) recvmsg(r4, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x2063) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0), 0x0, 0x1) r7 = syz_io_uring_setup(0x4e3, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x708, 0x41e3, 0x0, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) splice(r5, 0x0, r8, 0x0, 0x25a5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @dev}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x1c, {0x2, 0x0, @dev}}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0xfffffffc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000400)=ANY=[], 0xfe37, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r10, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/26, 0x1a}], 0x1, 0x4000ffe, 0xfffffffc) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xfffffffffffffff2, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x17, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) 45.846682606s ago: executing program 42 (id=3431): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2000c16, &(0x7f00000001c0)={[{@data_writeback}, {@jqfmt_vfsold}]}, 0xff, 0x240, &(0x7f00000002c0)="$eJzs3T1oO2UcB/DvXRL/tg1SdRHEFxARLZS6CS51UShIKSKCChURF6UVaotb6+TioLNKJ5ciblZH6VJcFMGpaoe6CFocLA46RJJrpbYRX1Jz4n0+cLm75J77Pcfd97kQOBKgsaaTzCdpJZlJ0klSnN/gzmqaPl3dnthfTnq9x34oBttV65WzdlNJtpI8kGSvLPJCO9nYferop4NH7nl9vXP3u7tPToz1IE8dHx0+evLO4msfLNy/8dkX3y0WmU/3d8d19Yoh77WL5KZ/o9h/RNGuuwf8FUuvvP9lP/c3J7lrkP9OylQn74216/Y6ue/tP2r75vef3zrOvgJXr9fr9O+BWz2gccok3RTlbJJquSxnZ6vv8F+1JssXV9dennl+dX3lubpHKuCqdJPDhz+69uHUhfx/26ryD/xPVT9KHT6+tPN1f+GkVXeHgLG4rZr17/8zz2zeG/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmH5pJ/aC75h+aSf2iu8/kHAJqld63uJ5CButQ9/gAAAAAAAAAAAAAAAAAAAJdtT+wvn03jqvnJW8nxQ0naw+q3Bv9HnFw/eJ38sehv9puiajaSp+8YcQcjeq/mp69v+Kbe+p/eXm/9zZVk69Ukc+325euvOL3+/rkb/+TzzrMjFvibigvrDz4x3voX/bJTb/2Fg+Tj/vgzN2z8KXPLYD58/On2z9+I9V/6ecQdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDa/BgAA//8YZW08") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) truncate(&(0x7f0000000040)='./file1\x00', 0x40006) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r1, 0x20, 0x2000, 0x8000) 44.785774951s ago: executing program 5 (id=3465): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 44.540847861s ago: executing program 5 (id=3466): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x20000000000001fe, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0xffffdffffffffffe}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x44, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0081}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x70}}], 0x1, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0xfffffffffffffd81, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 44.483856286s ago: executing program 5 (id=3467): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x20f}) 42.177880521s ago: executing program 43 (id=3444): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r1, r1, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ipvlan1\x00', @ifru_ivalue=0x2}) setfsuid(0xee00) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)) 38.268494985s ago: executing program 44 (id=3456): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000000), 0x302) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0xf8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000ce3f7b74da02a5b97e85ce16ebc77775d1fc339e4debae68587285f1c15123ff91c63060e996bd4b2b82b333a1bed8081f62f72288effbb897ec348eaf03024dea715cfba276db4daccd89388b3dd354e9edaa673bfa317129567d470c61d4e89c93acf7b969a12f7ca34bd6539fbc7db1eebeafedb5db39c2d1c4fc5f92c43a4c91eb9b0501a0e8e12f91529629ff1d2e335b90", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) syz_read_part_table(0x5dc, &(0x7f0000000c00)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) listen(0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x14927e, 0xbb) fallocate(r3, 0x0, 0x0, 0x9) write$P9_RVERSION(r1, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0xfffffff9, 0x6, '9P2000'}, 0x13) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r6, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) accept4(r6, 0x0, 0x0, 0x400000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x18) 29.233752721s ago: executing program 45 (id=3467): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x20f}) 4.027223566s ago: executing program 9 (id=3965): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$nfs4(&(0x7f0000000580)='\x00', &(0x7f0000000500)='.\x00', &(0x7f00000003c0), 0x0, 0x0) 4.026697767s ago: executing program 9 (id=3967): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000580), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettaction={0x14, 0x32, 0x101}, 0x14}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000140)=[{0x48, 0xfd, 0x2, 0x100}, {0x6, 0x6, 0xe, 0x3}]}, 0x10) socketpair(0x18, 0x3, 0x3, &(0x7f00000001c0)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 2.566272034s ago: executing program 1 (id=3980): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x880d146, 0x10000, 0x1, 0x37}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) io_uring_enter(r1, 0x3513, 0x7ec2, 0x20, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x8004, 0x0, 0x0) recvmsg(r4, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x2063) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0), 0x0, 0x1) r7 = syz_io_uring_setup(0x4e3, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x708, 0x41e3, 0x0, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) splice(r5, 0x0, r8, 0x0, 0x25a5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @dev}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x1c, {0x2, 0x0, @dev}}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0xfffffffc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000400)=ANY=[], 0xfe37, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r10, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/26, 0x1a}], 0x1, 0x4000ffe, 0xfffffffc) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xfffffffffffffff2, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x17, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) 2.532317616s ago: executing program 7 (id=3982): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$nfs4(&(0x7f0000000580)='\x00', &(0x7f0000000500)='.\x00', &(0x7f00000003c0), 0x0, 0x0) 2.515181508s ago: executing program 7 (id=3983): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYRES16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r0}, 0x18) prctl$PR_SET_NAME(0xf, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) io_submit(0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xfffffffffffffe39, 0x0, 0x0, 0x0, 0x9}, 0x94) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r4, 0x1) splice(r4, 0x0, r3, 0x0, 0x2, 0x0) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma,port=0']) 2.48738402s ago: executing program 1 (id=3984): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300a8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffff800, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.474199701s ago: executing program 1 (id=3985): timer_create(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r1}, 0x18) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.463016672s ago: executing program 1 (id=3986): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 2.452795703s ago: executing program 1 (id=3987): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x10, 0x0) 2.441519524s ago: executing program 1 (id=3988): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x27, 0x0, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x96be) read$char_usb(r2, &(0x7f0000000200)=""/68, 0x44) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000840)=@l2tp6={0xa, 0x0, 0x2, @remote, 0x4, 0xfffffffd}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000280)="f4000900062b2c25fe80000000000000dc8b71d5decf66cc00"/40, 0x28}, {0x0}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.645657108s ago: executing program 7 (id=4005): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000160a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 1.540580296s ago: executing program 7 (id=4006): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000540)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7}, 0x94) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) 1.058742555s ago: executing program 6 (id=4016): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x2000000, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x4, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x30, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x1, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x490}}, 0x0) 1.015891798s ago: executing program 6 (id=4019): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYRES64=r1], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x3}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4800) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r10, {0xe}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x40, 0x8000, 0xb9, 0x0, {{0x12, 0x4, 0x2, 0x2f, 0x48, 0x67, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x64010102, @multicast2, {[@lsrr={0x83, 0x13, 0xd2, [@broadcast, @local, @empty, @private=0xa010100]}, @timestamp_addr={0x44, 0x14, 0x6f, 0x1, 0x4, [{@rand_addr=0x64010102, 0x6}, {@multicast1, 0x4}]}, @timestamp={0x44, 0x4, 0xb6, 0x0, 0x3}, @ssrr={0x89, 0x3, 0x4c}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20041800}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x6f, 0xf, 0x8, @loopback, @mcast2, 0x40, 0x8000, 0xfffffff9, 0xfff}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000126bd7000ffdbdf250300000014000180080006000400000008000700", @ANYRES32=r11, @ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x40040}, 0x28004881) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000380)}, {&(0x7f0000000480)="a8a90d1bc4094f27e1711de6a70364e44753947cc348d2747aa816c1a960eb380b5349ffcd075335b2725b701d5f03da16e9cf7d56a11cf9771b9ab850d4440f89e7fc477b06d086dc05ee717680fcb28ce12213ba10b7075c087b237b2a48990cc9e537677d0b4a8af3af7cd75c78b67e48f2f2739eaf0422c7632f6847c1a4066c6234ef30b98484b2ab4730fda02844576fb246b5a5acdb858cab13f7cd7ec7917b99537f7b37356677f190911050257900c2bcfe8150e8bb6d2d7d5a40b24eda46442c8d23495c77052cac36adf2d39ecf862ae9d5546b46b7fff89ef505d2ff", 0xe2}, {&(0x7f0000000580)="c29d96efe4fd82632576f3a1691abbb4b6774c301fcc5fee84ea123ded062989552ac36aec84ada503cd89c7104864e8d55b4e883e774b5995b0cd7d8f35f83515cd3f28abf1d8f241a4329b8e705ab324a1940f9721cb2bc04f976273a3716510ce82015167114d1f60ff91953565348f02f603bf1476718ee33089243a203564c5b85477c70113d7359b678954cc83416ac58eeb25dcca03000000000000008b1ea6327954327b1deff28aee6f6f4ef8da7583aebc681e3e1e610acdf0fb3b81e65dd4", 0xc4}, {&(0x7f0000000040)="5d7abc3e5de56afce793dd6d3d68d7681576ea0d02df3a6746d92de527ab822054078924d0d19e5d12517367925bf92d6670099f8c6abd0d3c5cd96a999a1e18956f765779b41da78a26896f32ff66c3ebe49ca53f489ee35991b7f3039d796c", 0x60}], 0x4, 0x2, 0x1, 0x10) sendfile(r4, r4, 0x0, 0x24002de8) 964.168082ms ago: executing program 9 (id=4020): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x880d146, 0x10000, 0x1, 0x37}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) io_uring_enter(r1, 0x3513, 0x7ec2, 0x20, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x8004, &(0x7f0000000000)={0xa, 0x4e25, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1ff}, 0x1c) recvmsg(r4, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x2063) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0), 0x0, 0x1) r7 = syz_io_uring_setup(0x4e3, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x708, 0x41e3, 0x0, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) splice(r5, 0x0, r8, 0x0, 0x25a5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @dev}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x1c, {0x2, 0x0, @dev}}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0xfffffffc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000400)=ANY=[], 0xfe37, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r9, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/26, 0x1a}], 0x1, 0x4000ffe, 0xfffffffc) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xfffffffffffffff2, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x17, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) 836.888753ms ago: executing program 0 (id=4024): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 786.345317ms ago: executing program 0 (id=4025): set_mempolicy(0x1, &(0x7f0000000500)=0x105, 0x5609) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x2]}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7495, 0x0, 0x2, 0x1f7}, &(0x7f0000000380)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @local}}, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r8 = openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000340)={0x2040, 0x0, 0x28}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000169793f9540000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r9, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r8) sendmsg$NL80211_CMD_RELOAD_REGDB(r10, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r11, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0xcf, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000010) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010004b0429bd7000faffffff7a000000", @ANYRES32=0x0, @ANYBLOB="08b0010006820000400012800b0001006272696467650000300002800c002200000000040000000005002400010000000600080088a80000080005000100000005002b00050000000a000100aa"], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41) 730.858421ms ago: executing program 9 (id=4026): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000500000000000000000000aa00000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='fib6_table_lookup\x00', r0, 0x0, 0x8000000000000000}, 0x18) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x6, 0x6, 0x68, 0x2, 0x3, 0x1, 0x9, {0x0, @in6={{0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x4, 0x0, 0x7, 0xff, 0x1db1c5fa}}, &(0x7f0000000040)=0xb0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0xffff7ffffffffffd}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c000000100008002cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001880180001040000000006"], 0x3c}}, 0x80) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) close(0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r8 = eventfd2(0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, r8}]) shutdown(r6, 0x0) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) recvmmsg(r5, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4096}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000500)=""/227}, {&(0x7f0000000600)=""/1}]}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27}], 0x0, &(0x7f0000000780)=""/112}}], 0x40000000000024a, 0x40002002, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r9 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r9, &(0x7f00000000c0)=ANY=[], 0x20) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 722.553822ms ago: executing program 6 (id=4027): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={0x0}}, 0x0) 614.436101ms ago: executing program 6 (id=4028): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206010100000000000000000a00000005000400000000000900020073797a32000000001400078008001340ffffffff08000640000000000500050002000000050001000600000013000300686173683a6e65742c6966616365"], 0x60}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRES16=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800e50000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0xffffff77, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) chmod(&(0x7f0000000140)='./file0\x00', 0x102) 591.643642ms ago: executing program 7 (id=4029): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x40, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRESHEX=r0, @ANYBLOB=',wfdno?', @ANYRES64=r2]) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x7}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r6, 0x0, 0xff91, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r6, 0x1) splice(r6, 0x0, r5, 0x0, 0x2, 0x0) mq_notify(r5, &(0x7f0000000040)={0x0, 0x40, 0x2, @tid=0xffffffffffffffff}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lstat(&(0x7f0000000240)='./file0\x00', 0x0) 513.087819ms ago: executing program 6 (id=4030): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0xa0000001}) epoll_wait(r2, &(0x7f00000000c0)=[{}, {}], 0x2, 0x44000006) 405.623288ms ago: executing program 6 (id=4031): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000580), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettaction={0x14, 0x32, 0x101}, 0x14}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) socket$nl_route(0x10, 0x3, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000140)=[{0x48, 0xfd, 0x2, 0x100}, {0x6, 0x6, 0xe, 0x3}]}, 0x10) socketpair(0x18, 0x3, 0x3, &(0x7f00000001c0)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 348.695162ms ago: executing program 0 (id=4032): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 340.963843ms ago: executing program 7 (id=4033): openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) pwrite64(r1, &(0x7f0000000080)='3', 0x1, 0x180) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000580)=0xc) wait4(r7, &(0x7f00000005c0), 0x1, &(0x7f0000000600)) recvmsg$unix(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)=""/129, 0x81}], 0x1}, 0x100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) unshare(0x40000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x20050800) 335.424003ms ago: executing program 0 (id=4034): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xfffc}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="070000000400627b068ebb0a0e8b0000000802808c0000d98e1f0000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32=r0], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80), 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)=@mpls_delroute={0x1c, 0x19, 0x1, 0x70bd29, 0x25dfdbfb, {0x1c, 0x0, 0x20, 0x7, 0xfc, 0x2, 0x64, 0x3, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000090}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) r2 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x5a, 0x4, 0x0, 0x0, 0x0, 0x8000000000, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x10000000, 0x101, 0x7, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000380)='cpu~=0||!') openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) r3 = creat(0x0, 0xecf86c37d53049cc) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)=',&)(\x00') ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) write$binfmt_elf32(r3, &(0x7f0000000a00)=ANY=[], 0x58) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) execve(0x0, 0x0, 0x0) 209.464253ms ago: executing program 9 (id=4035): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206010100000000000000000a00000005000400000000000900020073797a32000000001400078008001340ffffffff08000640000000000500050002000000050001000600000013000300686173683a6e65742c6966616365"], 0x60}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRES16=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800e50000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) getpriority(0x2, 0x0) 209.265953ms ago: executing program 0 (id=4036): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 209.032433ms ago: executing program 0 (id=4037): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x880d146, 0x10000, 0x1, 0x37}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) io_uring_enter(r1, 0x3513, 0x7ec2, 0x20, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x8004, &(0x7f0000000000)={0xa, 0x4e25, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1ff}, 0x1c) recvmsg(r4, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x2063) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0), 0x0, 0x1) r7 = syz_io_uring_setup(0x4e3, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x708, 0x41e3, 0x0, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) splice(r5, 0x0, r8, 0x0, 0x25a5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @dev}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x1c, {0x2, 0x0, @dev}}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0xfffffffc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000400)=ANY=[], 0xfe37, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r9, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/26, 0x1a}], 0x1, 0x4000ffe, 0xfffffffc) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xfffffffffffffff2, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x17, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) 0s ago: executing program 9 (id=4038): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYRES64=r1], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x3}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4800) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r10, {0xe}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x40, 0x8000, 0xb9, 0x0, {{0x12, 0x4, 0x2, 0x2f, 0x48, 0x67, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x64010102, @multicast2, {[@lsrr={0x83, 0x13, 0xd2, [@broadcast, @local, @empty, @private=0xa010100]}, @timestamp_addr={0x44, 0x14, 0x6f, 0x1, 0x4, [{@rand_addr=0x64010102, 0x6}, {@multicast1, 0x4}]}, @timestamp={0x44, 0x4, 0xb6, 0x0, 0x3}, @ssrr={0x89, 0x3, 0x4c}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20041800}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x6f, 0xf, 0x8, @loopback, @mcast2, 0x40, 0x8000, 0xfffffff9, 0xfff}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000126bd7000ffdbdf250300000014000180080006000400000008000700", @ANYRES32=r11, @ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x40040}, 0x28004881) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000380)}, {&(0x7f0000000480)="a8a90d1bc4094f27e1711de6a70364e44753947cc348d2747aa816c1a960eb380b5349ffcd075335b2725b701d5f03da16e9cf7d56a11cf9771b9ab850d4440f89e7fc477b06d086dc05ee717680fcb28ce12213ba10b7075c087b237b2a48990cc9e537677d0b4a8af3af7cd75c78b67e48f2f2739eaf0422c7632f6847c1a4066c6234ef30b98484b2ab4730fda02844576fb246b5a5acdb858cab13f7cd7ec7917b99537f7b37356677f190911050257900c2bcfe8150e8bb6d2d7d5a40b24eda46442c8d23495c77052cac36adf2d39ecf862ae9d5546b46b7fff89ef505d2ff", 0xe2}, {&(0x7f0000000580)="c29d96efe4fd82632576f3a1691abbb4b6774c301fcc5fee84ea123ded062989552ac36aec84ada503cd89c7104864e8d55b4e883e774b5995b0cd7d8f35f83515cd3f28abf1d8f241a4329b8e705ab324a1940f9721cb2bc04f976273a3716510ce82015167114d1f60ff91953565348f02f603bf1476718ee33089243a203564c5b85477c70113d7359b678954cc83416ac58eeb25dcca03000000000000008b1ea6327954327b1deff28aee6f6f4ef8da7583aebc681e3e1e610acdf0fb3b81e65dd4", 0xc4}, {&(0x7f0000000040)="5d7abc3e5de56afce793dd6d3d68d7681576ea0d02df3a6746d92de527ab822054078924d0d19e5d12517367925bf92d6670099f8c6abd0d3c5cd96a999a1e18956f765779b41da78a26896f32ff66c3ebe49ca53f489ee35991b7f3039d796c", 0x60}], 0x4, 0x2, 0x1, 0x10) sendfile(r4, r4, 0x0, 0x24002de8) kernel console output (not intermixed with test programs): 9978][ T41] bridge_slave_0: left promiscuous mode [ 240.095723][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.214919][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.242904][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.261169][ T41] bond0 (unregistering): Released all slaves [ 240.282030][ T41] bond1 (unregistering): Released all slaves [ 240.312438][T13680] chnl_net:caif_netlink_parms(): no params data found [ 240.387645][ T41] hsr_slave_0: left promiscuous mode [ 240.394538][ T41] hsr_slave_1: left promiscuous mode [ 240.412817][ T41] veth1_macvtap: left promiscuous mode [ 240.421554][ T41] veth0_macvtap: left promiscuous mode [ 240.438549][ T41] veth1_vlan: left promiscuous mode [ 240.456216][ T41] veth0_vlan: left promiscuous mode [ 240.608880][ T41] team0 (unregistering): Port device team_slave_1 removed [ 240.628250][ T41] team0 (unregistering): Port device team_slave_0 removed [ 240.689560][T13680] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.696603][T13680] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.729736][T13680] bridge_slave_0: entered allmulticast mode [ 240.736244][T13680] bridge_slave_0: entered promiscuous mode [ 240.750383][T13680] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.757510][T13680] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.778841][T13680] bridge_slave_1: entered allmulticast mode [ 240.795450][T13680] bridge_slave_1: entered promiscuous mode [ 240.827264][T13680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.880732][T13680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.889863][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.898098][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.918331][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.945093][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.954324][T13680] team0: Port device team_slave_0 added [ 240.973852][T13680] team0: Port device team_slave_1 added [ 240.982045][T13695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3451'. [ 241.041911][T13680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.048886][T13680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.074833][T13680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.088549][T13680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.095537][T13680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.121481][T13680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.176933][T13680] hsr_slave_0: entered promiscuous mode [ 241.190074][T13680] hsr_slave_1: entered promiscuous mode [ 241.209774][T13680] debugfs: 'hsr0' already exists in 'hsr' [ 241.215487][T13680] Cannot create hsr debugfs directory [ 241.374259][T13704] lo speed is unknown, defaulting to 1000 [ 241.791787][T13680] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 241.818506][T13680] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 241.840616][T13680] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 241.860784][T13680] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 241.965932][T13680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.027760][T13680] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.050421][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.057460][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.077631][T13680] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 242.088032][T13680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.130848][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.137996][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.240639][T13680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.422336][T13680] veth0_vlan: entered promiscuous mode [ 242.459716][T13680] veth1_vlan: entered promiscuous mode [ 242.511428][T13680] veth0_macvtap: entered promiscuous mode [ 242.534966][T13680] veth1_macvtap: entered promiscuous mode [ 242.563137][T13680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.590037][T13680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.620669][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.638848][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.647539][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.708863][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.840733][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3450'. [ 242.849729][T13739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3450'. [ 243.081250][T13741] random: crng reseeded on system resumption [ 243.161452][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 243.161466][ T29] audit: type=1400 audit(1756164761.187:10342): avc: denied { lock } for pid=13742 comm="syz.5.3458" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=46495 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 243.361629][ T29] audit: type=1326 audit(1756164761.387:10343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13744 comm="syz.5.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe52f8cebe9 code=0x50000 [ 243.385068][ T29] audit: type=1326 audit(1756164761.387:10344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13744 comm="syz.5.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe52f8cebe9 code=0x50000 [ 243.408442][ T29] audit: type=1326 audit(1756164761.387:10345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13744 comm="syz.5.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe52f8cebe9 code=0x50000 [ 243.431729][ T29] audit: type=1326 audit(1756164761.387:10346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13744 comm="syz.5.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe52f8cebe9 code=0x50000 [ 243.455072][ T29] audit: type=1326 audit(1756164761.387:10347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13744 comm="syz.5.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe52f8cebe9 code=0x50000 [ 243.478406][ T29] audit: type=1326 audit(1756164761.387:10348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13744 comm="syz.5.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe52f8cebe9 code=0x50000 [ 243.501821][ T29] audit: type=1326 audit(1756164761.387:10349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13744 comm="syz.5.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe52f8cebe9 code=0x50000 [ 243.525315][ T29] audit: type=1326 audit(1756164761.387:10350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13744 comm="syz.5.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe52f8cebe9 code=0x50000 [ 243.548643][ T29] audit: type=1326 audit(1756164761.387:10351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13744 comm="syz.5.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe52f8cebe9 code=0x50000 [ 244.240746][T13749] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.222479][T13749] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.401589][T13749] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.461414][T13749] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.544840][ T41] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.571809][ T51] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.611684][ T41] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.658845][ T41] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.716629][T13752] loop5: detected capacity change from 0 to 1024 [ 246.803998][T13752] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.981625][T13680] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.068461][T13757] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3462'. [ 248.561337][ T41] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.620156][ T41] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.680172][ T41] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.737567][T13759] lo speed is unknown, defaulting to 1000 [ 248.749490][ T41] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.888905][ T41] bridge_slave_1: left allmulticast mode [ 248.894572][ T41] bridge_slave_1: left promiscuous mode [ 248.900373][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.939529][ T41] bridge_slave_0: left allmulticast mode [ 248.945290][ T41] bridge_slave_0: left promiscuous mode [ 248.950929][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.111394][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.130505][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.150732][ T41] bond0 (unregistering): Released all slaves [ 249.171889][T13759] chnl_net:caif_netlink_parms(): no params data found [ 249.222832][ T41] hsr_slave_0: left promiscuous mode [ 249.239526][ T41] hsr_slave_1: left promiscuous mode [ 249.245022][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.252585][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.289294][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.296669][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.336636][ T41] veth1_macvtap: left promiscuous mode [ 249.354298][ T41] veth0_macvtap: left promiscuous mode [ 249.379783][ T41] veth1_vlan: left promiscuous mode [ 249.395135][ T41] veth0_vlan: left promiscuous mode [ 249.640649][T13759] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.647767][T13759] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.668884][T13759] bridge_slave_0: entered allmulticast mode [ 249.675361][T13759] bridge_slave_0: entered promiscuous mode [ 249.681997][T13759] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.689115][T13759] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.697153][T13759] bridge_slave_1: entered allmulticast mode [ 249.703800][T13759] bridge_slave_1: entered promiscuous mode [ 249.722578][T13759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.743088][T13759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.783675][T13759] team0: Port device team_slave_0 added [ 249.793711][T13759] team0: Port device team_slave_1 added [ 249.829581][T13759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.836572][T13759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.862466][T13759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.921170][T13759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.928180][T13759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.954123][T13759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.971021][T13774] lo speed is unknown, defaulting to 1000 [ 249.992377][T13759] hsr_slave_0: entered promiscuous mode [ 249.998337][T13759] hsr_slave_1: entered promiscuous mode [ 250.018959][T13759] debugfs: 'hsr0' already exists in 'hsr' [ 250.024670][T13759] Cannot create hsr debugfs directory [ 250.045599][ T41] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.091132][ T41] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.155286][ T41] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.230253][ T41] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.261509][T13774] chnl_net:caif_netlink_parms(): no params data found [ 250.350066][T13774] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.357131][T13774] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.369923][T13774] bridge_slave_0: entered allmulticast mode [ 250.376413][T13774] bridge_slave_0: entered promiscuous mode [ 250.385557][T13774] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.392664][T13774] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.400945][T13774] bridge_slave_1: entered allmulticast mode [ 250.407405][T13774] bridge_slave_1: entered promiscuous mode [ 250.418858][ T41] bridge_slave_1: left allmulticast mode [ 250.424488][ T41] bridge_slave_1: left promiscuous mode [ 250.430251][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.449593][ T41] bridge_slave_0: left allmulticast mode [ 250.455226][ T41] bridge_slave_0: left promiscuous mode [ 250.460833][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.591205][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.609985][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.621533][ T41] bond0 (unregistering): Released all slaves [ 250.631160][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 250.631171][ T29] audit: type=1326 audit(1756164768.657:10415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13789 comm="syz.5.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe52f8cebe9 code=0x7ffc0000 [ 250.676612][T13774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.686986][ T29] audit: type=1326 audit(1756164768.657:10416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13789 comm="syz.5.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe52f8cebe9 code=0x7ffc0000 [ 250.710541][ T29] audit: type=1326 audit(1756164768.687:10417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13789 comm="syz.5.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe52f8cebe9 code=0x7ffc0000 [ 250.734174][ T29] audit: type=1326 audit(1756164768.687:10418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13789 comm="syz.5.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe52f8cebe9 code=0x7ffc0000 [ 250.757754][ T29] audit: type=1326 audit(1756164768.687:10419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13789 comm="syz.5.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe52f8cebe9 code=0x7ffc0000 [ 250.781337][ T29] audit: type=1326 audit(1756164768.697:10420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13789 comm="syz.5.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe52f8cebe9 code=0x7ffc0000 [ 250.804919][ T29] audit: type=1326 audit(1756164768.697:10421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13789 comm="syz.5.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe52f8cebe9 code=0x7ffc0000 [ 250.828454][ T29] audit: type=1326 audit(1756164768.697:10422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13789 comm="syz.5.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe52f8cebe9 code=0x7ffc0000 [ 250.852086][ T29] audit: type=1326 audit(1756164768.697:10423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13789 comm="syz.5.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe52f8cebe9 code=0x7ffc0000 [ 250.875679][ T29] audit: type=1326 audit(1756164768.697:10424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13789 comm="syz.5.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe52f8cebe9 code=0x7ffc0000 [ 250.923141][T13774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.951321][ T41] hsr_slave_0: left promiscuous mode [ 250.957053][ T41] hsr_slave_1: left promiscuous mode [ 250.969059][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.976463][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.999358][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.006801][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.032714][ T41] veth1_macvtap: left promiscuous mode [ 251.038228][ T41] veth0_macvtap: left promiscuous mode [ 251.058787][ T41] veth1_vlan: left promiscuous mode [ 251.064037][ T41] veth0_vlan: left promiscuous mode [ 251.192985][ T41] team0 (unregistering): Port device team_slave_1 removed [ 251.211681][ T41] team0 (unregistering): Port device team_slave_0 removed [ 251.307205][T13759] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 251.342004][T13774] team0: Port device team_slave_0 added [ 251.347807][T13759] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 251.362141][T13774] team0: Port device team_slave_1 added [ 251.389487][T13759] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 251.400702][T13774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.407662][T13774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.433629][T13774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.489425][T13759] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 251.519214][T13774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.526147][T13774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.552068][T13774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.611618][T13759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.631416][T13759] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.651232][T13774] hsr_slave_0: entered promiscuous mode [ 251.657261][T13774] hsr_slave_1: entered promiscuous mode [ 251.669006][T13774] debugfs: 'hsr0' already exists in 'hsr' [ 251.674736][T13774] Cannot create hsr debugfs directory [ 251.694364][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.701463][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.720273][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.727321][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.891764][T13759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.994218][T13759] veth0_vlan: entered promiscuous mode [ 252.041266][T13759] veth1_vlan: entered promiscuous mode [ 252.048078][T13774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 252.071692][T13774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 252.095809][T13759] veth0_macvtap: entered promiscuous mode [ 252.110724][T13774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 252.129748][T13774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 252.159365][T13759] veth1_macvtap: entered promiscuous mode [ 252.202628][T13759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.233866][T13759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.265226][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.277183][T13774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.309055][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.317753][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.353475][T13774] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.385169][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.395902][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.403004][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.426626][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.433858][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.528964][T13774] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 252.539346][T13774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.735388][T13825] lo speed is unknown, defaulting to 1000 [ 252.871497][T13774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.025775][T13774] veth0_vlan: entered promiscuous mode [ 253.041848][T13774] veth1_vlan: entered promiscuous mode [ 253.070365][T13774] veth0_macvtap: entered promiscuous mode [ 253.087520][T13774] veth1_macvtap: entered promiscuous mode [ 253.111530][T13774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.133112][T13774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.154138][ T178] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.167306][ T178] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.196671][ T562] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.219180][ T562] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.272022][T13837] random: crng reseeded on system resumption [ 253.327865][T13841] netlink: 'syz.0.3470': attribute type 21 has an invalid length. [ 253.348967][T13841] netlink: 'syz.0.3470': attribute type 1 has an invalid length. [ 253.356698][T13841] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3470'. [ 253.403748][T13847] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3470'. [ 253.478352][T13838] lo speed is unknown, defaulting to 1000 [ 253.488700][ T178] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.551880][ T178] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.670479][T13838] chnl_net:caif_netlink_parms(): no params data found [ 253.707928][ T178] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.815156][ T178] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.840215][T13838] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.847320][T13838] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.882336][T13838] bridge_slave_0: entered allmulticast mode [ 253.890853][T13838] bridge_slave_0: entered promiscuous mode [ 253.922820][T13862] pim6reg: entered allmulticast mode [ 253.939957][T13838] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.947075][T13838] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.970960][T13838] bridge_slave_1: entered allmulticast mode [ 253.989084][T13838] bridge_slave_1: entered promiscuous mode [ 254.019308][T13867] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.057830][T13838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.084373][T13838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.094000][T13870] lo speed is unknown, defaulting to 1000 [ 254.134795][ T178] bridge_slave_1: left allmulticast mode [ 254.140488][ T178] bridge_slave_1: left promiscuous mode [ 254.146175][ T178] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.172881][ T178] bridge_slave_0: left allmulticast mode [ 254.178582][ T178] bridge_slave_0: left promiscuous mode [ 254.184217][ T178] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.322610][ T178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.343405][ T178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.361593][ T178] bond0 (unregistering): Released all slaves [ 254.381371][T13838] team0: Port device team_slave_0 added [ 254.422007][T13838] team0: Port device team_slave_1 added [ 254.458130][T13838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.465098][T13838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.491109][T13838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.549854][T13838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.556786][T13838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.582726][T13838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.640722][ T178] hsr_slave_0: left promiscuous mode [ 254.646609][ T178] hsr_slave_1: left promiscuous mode [ 254.653298][ T178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.660690][ T178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.671268][ T178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.678650][ T178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.696288][ T178] veth1_macvtap: left promiscuous mode [ 254.701826][ T178] veth0_macvtap: left promiscuous mode [ 254.707500][ T178] veth1_vlan: left promiscuous mode [ 254.714070][ T178] veth0_vlan: left promiscuous mode [ 254.829748][ T178] team0 (unregistering): Port device team_slave_1 removed [ 254.850256][ T178] team0 (unregistering): Port device team_slave_0 removed [ 254.921978][T13873] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.965267][T13838] hsr_slave_0: entered promiscuous mode [ 254.979173][T13838] hsr_slave_1: entered promiscuous mode [ 255.301482][T13867] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.386894][T13838] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 255.406107][T13838] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 255.425133][T13838] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 255.441643][T13838] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 255.554423][T13838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.573795][T13838] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.591085][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.598182][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.622278][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.629347][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.665166][T13838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 255.675552][T13838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.789969][T13838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.861515][T13873] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.912304][T13873] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.982817][T13838] veth0_vlan: entered promiscuous mode [ 256.000645][T13838] veth1_vlan: entered promiscuous mode [ 256.024616][T13838] veth0_macvtap: entered promiscuous mode [ 256.042462][T13873] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.070587][T13838] veth1_macvtap: entered promiscuous mode [ 256.088903][T13838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.107511][T13838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.128181][ T562] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.164376][ T562] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.179038][ T562] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.197858][ T562] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.223642][ T562] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.238769][ T562] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.257100][ T562] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.276268][ T562] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.442819][T13867] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.504827][T13909] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3468'. [ 256.513782][T13909] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3468'. [ 256.549348][T13910] lo speed is unknown, defaulting to 1000 [ 256.840587][T13913] random: crng reseeded on system resumption [ 256.951433][T13867] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.995560][T13917] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3483'. [ 257.018046][ T51] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.033743][ T51] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.074028][ T51] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.094389][ T51] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.150039][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 257.150050][ T29] audit: type=1326 audit(1756164775.167:10443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.0.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 257.179747][ T29] audit: type=1326 audit(1756164775.167:10444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.0.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 257.203354][ T29] audit: type=1326 audit(1756164775.167:10445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.0.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 257.226909][ T29] audit: type=1326 audit(1756164775.167:10446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.0.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 257.250532][ T29] audit: type=1326 audit(1756164775.167:10447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.0.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 257.274167][ T29] audit: type=1326 audit(1756164775.167:10448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.0.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 257.297818][ T29] audit: type=1326 audit(1756164775.167:10449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.0.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 257.321472][ T29] audit: type=1326 audit(1756164775.167:10450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.0.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 257.345045][ T29] audit: type=1326 audit(1756164775.167:10451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.0.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 257.368640][ T29] audit: type=1326 audit(1756164775.167:10452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.0.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 257.520703][T13923] lo speed is unknown, defaulting to 1000 [ 257.597412][ T178] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.688794][ T178] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.737224][T13923] chnl_net:caif_netlink_parms(): no params data found [ 257.781138][ T178] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.993696][T13923] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.000826][T13923] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.009679][T13923] bridge_slave_0: entered allmulticast mode [ 258.016469][T13923] bridge_slave_0: entered promiscuous mode [ 258.025273][T13923] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.032392][T13923] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.040181][T13923] bridge_slave_1: entered allmulticast mode [ 258.046593][T13923] bridge_slave_1: entered promiscuous mode [ 258.075882][ T178] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.103754][T13923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.120139][T13923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.215142][T13950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3492'. [ 258.224113][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3492'. [ 258.243707][T13923] team0: Port device team_slave_0 added [ 258.251705][T13923] team0: Port device team_slave_1 added [ 258.280583][T13960] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3495'. [ 258.291430][T13923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.298377][T13923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.324389][T13923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.380354][T13923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.387310][T13923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.413332][T13923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.464172][ T178] bridge_slave_1: left allmulticast mode [ 258.469886][ T178] bridge_slave_1: left promiscuous mode [ 258.475525][ T178] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.491394][ T178] bridge_slave_0: left allmulticast mode [ 258.497095][ T178] bridge_slave_0: left promiscuous mode [ 258.502959][ T178] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.221593][ T178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.232067][ T178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.242609][ T178] bond0 (unregistering): Released all slaves [ 259.252744][T13923] hsr_slave_0: entered promiscuous mode [ 259.259595][T13923] hsr_slave_1: entered promiscuous mode [ 259.265437][T13923] debugfs: 'hsr0' already exists in 'hsr' [ 259.271176][T13923] Cannot create hsr debugfs directory [ 259.285363][T13976] lo speed is unknown, defaulting to 1000 [ 259.377735][T13979] FAULT_INJECTION: forcing a failure. [ 259.377735][T13979] name failslab, interval 1, probability 0, space 0, times 0 [ 259.390412][T13979] CPU: 0 UID: 0 PID: 13979 Comm: syz.1.3501 Not tainted syzkaller #0 PREEMPT(voluntary) [ 259.390437][T13979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 259.390471][T13979] Call Trace: [ 259.390477][T13979] [ 259.390549][T13979] __dump_stack+0x1d/0x30 [ 259.390567][T13979] dump_stack_lvl+0xe8/0x140 [ 259.390581][T13979] dump_stack+0x15/0x1b [ 259.390594][T13979] should_fail_ex+0x265/0x280 [ 259.390642][T13979] should_failslab+0x8c/0xb0 [ 259.390661][T13979] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 259.390710][T13979] ? sidtab_sid2str_get+0xa0/0x130 [ 259.390727][T13979] kmemdup_noprof+0x2b/0x70 [ 259.390797][T13979] sidtab_sid2str_get+0xa0/0x130 [ 259.390813][T13979] security_sid_to_context_core+0x1eb/0x2e0 [ 259.390830][T13979] security_sid_to_context+0x27/0x40 [ 259.390845][T13979] selinux_lsmprop_to_secctx+0x67/0xf0 [ 259.390862][T13979] security_lsmprop_to_secctx+0x43/0x80 [ 259.390888][T13979] audit_log_task_context+0x77/0x190 [ 259.390912][T13979] audit_log_task+0xf4/0x250 [ 259.390969][T13979] audit_seccomp+0x61/0x100 [ 259.391005][T13979] ? __seccomp_filter+0x68c/0x10d0 [ 259.391020][T13979] __seccomp_filter+0x69d/0x10d0 [ 259.391039][T13979] ? fdget+0x105/0x110 [ 259.391076][T13979] __secure_computing+0x82/0x150 [ 259.391092][T13979] syscall_trace_enter+0xcf/0x1e0 [ 259.391140][T13979] do_syscall_64+0xac/0x200 [ 259.391172][T13979] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 259.391190][T13979] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 259.391208][T13979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.391283][T13979] RIP: 0033:0x7f0b84e2d5fc [ 259.391295][T13979] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 259.391308][T13979] RSP: 002b:00007f0b8388f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 259.391324][T13979] RAX: ffffffffffffffda RBX: 00007f0b85055fa0 RCX: 00007f0b84e2d5fc [ 259.391334][T13979] RDX: 000000000000000f RSI: 00007f0b8388f0a0 RDI: 0000000000000006 [ 259.391344][T13979] RBP: 00007f0b8388f090 R08: 0000000000000000 R09: 0000000000000000 [ 259.391353][T13979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.391371][T13979] R13: 00007f0b85056038 R14: 00007f0b85055fa0 R15: 00007fff912c5b08 [ 259.391385][T13979] [ 259.626872][ T178] tipc: Left network mode [ 259.666503][ T178] hsr_slave_0: left promiscuous mode [ 259.675600][ T178] hsr_slave_1: left promiscuous mode [ 259.681221][ T178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.688597][ T178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.706235][ T178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.713631][ T178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.727380][T13993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3506'. [ 259.736355][T13993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3506'. [ 259.745570][ T178] veth1_macvtap: left promiscuous mode [ 259.751248][ T178] veth0_macvtap: left promiscuous mode [ 259.756773][ T178] veth1_vlan: left promiscuous mode [ 259.762110][ T178] veth0_vlan: left promiscuous mode [ 259.864012][ T178] team0 (unregistering): Port device team_slave_1 removed [ 259.874748][ T178] team0 (unregistering): Port device team_slave_0 removed [ 259.934930][T14002] tc_dump_action: action bad kind [ 260.584571][T13923] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 260.595388][T13923] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 260.614719][T13923] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 260.625209][T13923] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 260.674156][T13923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.687576][T13923] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.697034][ T562] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.704168][ T562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.716177][ T562] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.723410][ T562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.740080][T13923] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 260.750438][T13923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 260.831448][T13923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.057461][T14045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3516'. [ 261.066378][T14045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3516'. [ 261.153232][T14053] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.220201][T14053] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.266368][T13923] veth0_vlan: entered promiscuous mode [ 261.279955][T13923] veth1_vlan: entered promiscuous mode [ 261.298650][T14053] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.326455][T13923] veth0_macvtap: entered promiscuous mode [ 261.346495][T14053] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.359395][T13923] veth1_macvtap: entered promiscuous mode [ 261.379922][T13923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.400248][T13923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.424567][ T562] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.436689][ T562] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.458887][ T562] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.478008][ T562] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.532510][T14059] loop7: detected capacity change from 0 to 16384 [ 261.703219][T14063] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.761697][T14063] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.842014][T14063] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.872091][T14068] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.886516][T14063] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.915894][ T41] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.926903][T14068] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.926957][T14069] loop9: detected capacity change from 0 to 512 [ 261.952434][ T41] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.965979][ T41] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.993119][ T41] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.018917][ T41] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.042427][T14068] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.065515][ T41] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.076040][ T41] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.084428][ T41] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.101407][T14068] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.143460][T14079] loop7: detected capacity change from 0 to 128 [ 262.150737][T14079] EXT4-fs: Ignoring removed nobh option [ 262.157708][T14079] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 262.170662][T14079] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.182255][T14079] FAULT_INJECTION: forcing a failure. [ 262.182255][T14079] name failslab, interval 1, probability 0, space 0, times 0 [ 262.194951][T14079] CPU: 0 UID: 0 PID: 14079 Comm: syz.7.3525 Not tainted syzkaller #0 PREEMPT(voluntary) [ 262.195045][T14079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 262.195055][T14079] Call Trace: [ 262.195060][T14079] [ 262.195127][T14079] __dump_stack+0x1d/0x30 [ 262.195149][T14079] dump_stack_lvl+0xe8/0x140 [ 262.195167][T14079] dump_stack+0x15/0x1b [ 262.195184][T14079] should_fail_ex+0x265/0x280 [ 262.195239][T14079] should_failslab+0x8c/0xb0 [ 262.195335][T14079] __kmalloc_noprof+0xa5/0x3e0 [ 262.195357][T14079] ? ext4_find_extent+0x16b/0x7a0 [ 262.195375][T14079] ? _raw_write_unlock+0xd/0x30 [ 262.195473][T14079] ext4_find_extent+0x16b/0x7a0 [ 262.195497][T14079] ext4_insert_range+0x31f/0x650 [ 262.195518][T14079] ext4_fallocate+0x2bc/0x2f0 [ 262.195537][T14079] vfs_fallocate+0x3b6/0x400 [ 262.195627][T14079] __x64_sys_fallocate+0x7a/0xd0 [ 262.195653][T14079] x64_sys_call+0x2514/0x2ff0 [ 262.195745][T14079] do_syscall_64+0xd2/0x200 [ 262.195770][T14079] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 262.195801][T14079] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 262.195825][T14079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.195894][T14079] RIP: 0033:0x7f77cccaebe9 [ 262.195909][T14079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.195927][T14079] RSP: 002b:00007f77cb70f038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 262.195964][T14079] RAX: ffffffffffffffda RBX: 00007f77cced5fa0 RCX: 00007f77cccaebe9 [ 262.195975][T14079] RDX: 0000000000002000 RSI: 0000000000000020 RDI: 0000000000000005 [ 262.195986][T14079] RBP: 00007f77cb70f090 R08: 0000000000000000 R09: 0000000000000000 [ 262.195999][T14079] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 262.196013][T14079] R13: 00007f77cced6038 R14: 00007f77cced5fa0 R15: 00007ffe66a7a518 [ 262.196032][T14079] [ 262.401677][T13838] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 262.527463][T14085] loop7: detected capacity change from 0 to 1024 [ 262.540332][T14085] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.933311][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 262.933376][ T29] audit: type=1400 audit(1756164780.957:10749): avc: denied { accept } for pid=14091 comm="syz.0.3528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 262.977604][ T29] audit: type=1326 audit(1756164780.997:10750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14093 comm="syz.1.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84e2ebe9 code=0x7ffc0000 [ 263.001190][ T29] audit: type=1326 audit(1756164780.997:10751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14093 comm="syz.1.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84e2ebe9 code=0x7ffc0000 [ 263.025584][ T29] audit: type=1326 audit(1756164781.057:10752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14093 comm="syz.1.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f0b84e2ebe9 code=0x7ffc0000 [ 263.049232][ T29] audit: type=1326 audit(1756164781.057:10753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14093 comm="syz.1.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84e2ebe9 code=0x7ffc0000 [ 263.072858][ T29] audit: type=1326 audit(1756164781.057:10754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14093 comm="syz.1.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0b84e2ebe9 code=0x7ffc0000 [ 263.096361][ T29] audit: type=1326 audit(1756164781.057:10755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14093 comm="syz.1.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84e2ebe9 code=0x7ffc0000 [ 263.113017][T14096] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3528'. [ 263.119914][ T29] audit: type=1326 audit(1756164781.057:10756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14093 comm="syz.1.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0b84e2ebe9 code=0x7ffc0000 [ 263.156196][T14092] pim6reg1: entered promiscuous mode [ 263.161530][T14092] pim6reg1: entered allmulticast mode [ 263.177862][ T29] audit: type=1326 audit(1756164781.127:10757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14093 comm="syz.1.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84e2ebe9 code=0x7ffc0000 [ 263.201430][ T29] audit: type=1326 audit(1756164781.127:10758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14093 comm="syz.1.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84e2ebe9 code=0x7ffc0000 [ 263.264353][T13838] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.317277][T14102] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3532'. [ 263.429879][T14114] usb usb8: usbfs: process 14114 (syz.1.3536) did not claim interface 0 before use [ 263.434888][T14116] loop7: detected capacity change from 0 to 512 [ 263.519266][T14125] loop7: detected capacity change from 0 to 512 [ 263.526327][T14125] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 263.537584][T14125] netlink: 180 bytes leftover after parsing attributes in process `syz.7.3539'. [ 263.547351][T14125] netlink: 180 bytes leftover after parsing attributes in process `syz.7.3539'. [ 263.642784][T14122] usb usb8: usbfs: process 14122 (syz.7.3539) did not claim interface 0 before use [ 264.674645][T14143] loop7: detected capacity change from 0 to 1024 [ 264.832709][T14143] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.003043][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3545'. [ 265.096591][ T178] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.108896][ T178] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.126309][ T178] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.139678][ T178] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.182062][T14158] loop9: detected capacity change from 0 to 512 [ 265.190783][T14158] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 265.199833][T14158] EXT4-fs (loop9): orphan cleanup on readonly fs [ 265.206696][T14158] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.3547: Failed to acquire dquot type 1 [ 265.218441][T14158] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3547: bg 0: block 40: padding at end of block bitmap is not set [ 265.233825][T14158] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 265.244729][T14158] EXT4-fs (loop9): 1 truncate cleaned up [ 265.251752][T14158] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 265.298385][T13923] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.315520][T14164] netlink: 204 bytes leftover after parsing attributes in process `syz.9.3549'. [ 265.329376][T14164] netlink: 'syz.9.3549': attribute type 29 has an invalid length. [ 265.338456][T14164] netlink: 'syz.9.3549': attribute type 29 has an invalid length. [ 265.349530][T14164] netlink: 500 bytes leftover after parsing attributes in process `syz.9.3549'. [ 265.408053][T14168] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.424733][T13838] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.461239][T14172] loop9: detected capacity change from 0 to 512 [ 265.480072][T14168] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.490988][T14171] loop7: detected capacity change from 0 to 1024 [ 265.540092][T14171] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.590273][T14168] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.630980][T13838] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.650433][T14168] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.172079][ T562] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.174831][T14183] hub 9-0:1.0: USB hub found [ 266.186560][T14183] hub 9-0:1.0: 8 ports detected [ 266.250302][ T562] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.260831][T14198] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3558'. [ 266.320159][ T562] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.334460][T14184] chnl_net:caif_netlink_parms(): no params data found [ 266.366305][ T562] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.382730][T14184] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.389857][T14184] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.396954][T14184] bridge_slave_0: entered allmulticast mode [ 266.403392][T14184] bridge_slave_0: entered promiscuous mode [ 266.410021][T14184] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.417148][T14184] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.424795][T14184] bridge_slave_1: entered allmulticast mode [ 266.431096][T14184] bridge_slave_1: entered promiscuous mode [ 266.458879][ T562] bridge_slave_1: left allmulticast mode [ 266.464514][ T562] bridge_slave_1: left promiscuous mode [ 266.470333][ T562] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.478160][ T562] bridge_slave_0: left allmulticast mode [ 266.483849][ T562] bridge_slave_0: left promiscuous mode [ 266.489469][ T562] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.525750][T14206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3559'. [ 266.611625][ T562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.640731][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3561'. [ 266.649734][T14213] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3561'. [ 266.696417][ T562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.716372][ T562] bond0 (unregistering): Released all slaves [ 266.735727][T14184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.776264][T14184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.816313][T14184] team0: Port device team_slave_0 added [ 266.831925][ T562] hsr_slave_0: left promiscuous mode [ 266.843019][ T562] hsr_slave_1: left promiscuous mode [ 266.855396][ T562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.863108][ T562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.874446][ T562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.881852][ T562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.908975][ T562] veth1_macvtap: left promiscuous mode [ 266.914453][ T562] veth0_macvtap: left promiscuous mode [ 266.921471][ T562] veth1_vlan: left promiscuous mode [ 266.927364][ T562] veth0_vlan: left promiscuous mode [ 267.012805][ T562] team0 (unregistering): Port device team_slave_1 removed [ 267.026569][ T562] team0 (unregistering): Port device team_slave_0 removed [ 267.067771][T14223] FAULT_INJECTION: forcing a failure. [ 267.067771][T14223] name failslab, interval 1, probability 0, space 0, times 0 [ 267.080507][T14223] CPU: 0 UID: 0 PID: 14223 Comm: syz.7.3565 Not tainted syzkaller #0 PREEMPT(voluntary) [ 267.080598][T14223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 267.080609][T14223] Call Trace: [ 267.080614][T14223] [ 267.080621][T14223] __dump_stack+0x1d/0x30 [ 267.080711][T14223] dump_stack_lvl+0xe8/0x140 [ 267.080731][T14223] dump_stack+0x15/0x1b [ 267.080747][T14223] should_fail_ex+0x265/0x280 [ 267.080769][T14223] should_failslab+0x8c/0xb0 [ 267.080793][T14223] kmem_cache_alloc_node_noprof+0x57/0x320 [ 267.080827][T14223] ? __alloc_skb+0x101/0x320 [ 267.080877][T14223] __alloc_skb+0x101/0x320 [ 267.080896][T14223] pfkey_sendmsg+0xd7/0x900 [ 267.081038][T14223] ? avc_has_perm+0xf7/0x180 [ 267.081064][T14223] ? selinux_socket_sendmsg+0x175/0x1b0 [ 267.081095][T14223] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 267.081119][T14223] __sock_sendmsg+0x145/0x180 [ 267.081195][T14223] ____sys_sendmsg+0x31e/0x4e0 [ 267.081226][T14223] ___sys_sendmsg+0x17b/0x1d0 [ 267.081251][T14223] __x64_sys_sendmsg+0xd4/0x160 [ 267.081272][T14223] x64_sys_call+0x191e/0x2ff0 [ 267.081332][T14223] do_syscall_64+0xd2/0x200 [ 267.081357][T14223] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 267.081377][T14223] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 267.081437][T14223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.081459][T14223] RIP: 0033:0x7f77cccaebe9 [ 267.081472][T14223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.081487][T14223] RSP: 002b:00007f77cb70f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.081507][T14223] RAX: ffffffffffffffda RBX: 00007f77cced5fa0 RCX: 00007f77cccaebe9 [ 267.081520][T14223] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 267.081606][T14223] RBP: 00007f77cb70f090 R08: 0000000000000000 R09: 0000000000000000 [ 267.081617][T14223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.081628][T14223] R13: 00007f77cced6038 R14: 00007f77cced5fa0 R15: 00007ffe66a7a518 [ 267.081644][T14223] [ 267.089218][T14184] team0: Port device team_slave_1 added [ 267.129213][T14224] loop7: detected capacity change from 0 to 16384 [ 267.212558][T14218] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 27 prio class 2 [ 267.318822][ T41] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 267.326387][ T41] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 267.338840][ T3411] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 267.363125][T14232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3568'. [ 267.373927][T14184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.380968][T14184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.406897][T14184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.427917][T14184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.434960][T14184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.460879][T14184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.508854][ T3411] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 267.510558][T14184] hsr_slave_0: entered promiscuous mode [ 267.528638][T14184] hsr_slave_1: entered promiscuous mode [ 267.536875][T14184] debugfs: 'hsr0' already exists in 'hsr' [ 267.542654][T14184] Cannot create hsr debugfs directory [ 267.652476][T14245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3572'. [ 267.661440][T14245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3572'. [ 267.865238][T14184] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 267.875163][T14184] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 267.883865][T14184] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 267.890936][ T1036] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 267.901524][T14184] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 267.937991][T14184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.950714][T14184] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.959645][ T3434] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.966689][ T3434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.977538][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.984609][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.048044][T14184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.157224][T14184] veth0_vlan: entered promiscuous mode [ 268.165231][T14184] veth1_vlan: entered promiscuous mode [ 268.182151][T14184] veth0_macvtap: entered promiscuous mode [ 268.189745][T14184] veth1_macvtap: entered promiscuous mode [ 268.202285][T14184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.214401][T14184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.225677][ T178] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.234814][ T178] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.249370][ T178] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.263766][ T3434] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.372648][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 268.372660][ T29] audit: type=1401 audit(1756164786.397:11006): op=setxattr invalid_context="" [ 268.636265][T14296] tipc: Started in network mode [ 268.641189][T14296] tipc: Node identity ac14140f, cluster identity 4711 [ 268.710331][T14296] tipc: Enabled bearer , priority 10 [ 268.790806][T14305] loop7: detected capacity change from 0 to 16384 [ 269.105342][ T178] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.181812][ T178] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.225082][ T178] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.241514][ T178] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.335294][ T29] audit: type=1400 audit(1756164787.357:11007): avc: denied { accept } for pid=14325 comm="syz.9.3588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 269.361479][ T29] audit: type=1400 audit(1756164787.387:11008): avc: denied { read } for pid=14325 comm="syz.9.3588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 269.556190][T14333] tc_dump_action: action bad kind [ 269.695785][T14342] tap0: tun_chr_ioctl cmd 1074025677 [ 269.701348][T14342] tap0: linktype set to 1 [ 269.706582][ T29] audit: type=1400 audit(1756164787.727:11009): avc: denied { create } for pid=14341 comm="syz.1.3593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 269.748928][T14342] SELinux: failed to load policy [ 269.807653][T14347] loop7: detected capacity change from 0 to 16384 [ 269.838934][ T1036] tipc: Node number set to 2886997007 [ 270.537404][T14362] __nla_validate_parse: 7 callbacks suppressed [ 270.537475][T14362] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3598'. [ 270.552548][T14362] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3598'. [ 270.587669][ T29] audit: type=1326 audit(1756164788.607:11010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14364 comm="syz.7.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cccaebe9 code=0x7ffc0000 [ 270.611413][ T29] audit: type=1326 audit(1756164788.607:11011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14364 comm="syz.7.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cccaebe9 code=0x7ffc0000 [ 270.635029][ T29] audit: type=1326 audit(1756164788.607:11012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14364 comm="syz.7.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77cccaebe9 code=0x7ffc0000 [ 270.658690][ T29] audit: type=1326 audit(1756164788.607:11013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14364 comm="syz.7.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cccaebe9 code=0x7ffc0000 [ 270.682490][ T29] audit: type=1326 audit(1756164788.607:11014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14364 comm="syz.7.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f77cccaebe9 code=0x7ffc0000 [ 270.706209][ T29] audit: type=1326 audit(1756164788.607:11015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14364 comm="syz.7.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cccaebe9 code=0x7ffc0000 [ 270.887684][T14370] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.938720][T14371] FAULT_INJECTION: forcing a failure. [ 270.938720][T14371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.951978][T14371] CPU: 0 UID: 0 PID: 14371 Comm: syz.1.3601 Not tainted syzkaller #0 PREEMPT(voluntary) [ 270.952005][T14371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 270.952015][T14371] Call Trace: [ 270.952022][T14371] [ 270.952028][T14371] __dump_stack+0x1d/0x30 [ 270.952048][T14371] dump_stack_lvl+0xe8/0x140 [ 270.952083][T14371] dump_stack+0x15/0x1b [ 270.952100][T14371] should_fail_ex+0x265/0x280 [ 270.952121][T14371] should_fail+0xb/0x20 [ 270.952143][T14371] should_fail_usercopy+0x1a/0x20 [ 270.952173][T14371] _copy_from_iter+0xd2/0xe80 [ 270.952236][T14371] ? __build_skb_around+0x1a0/0x200 [ 270.952263][T14371] ? __alloc_skb+0x223/0x320 [ 270.952279][T14371] netlink_sendmsg+0x471/0x6b0 [ 270.952303][T14371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.952373][T14371] __sock_sendmsg+0x145/0x180 [ 270.952407][T14371] ____sys_sendmsg+0x31e/0x4e0 [ 270.952432][T14371] ___sys_sendmsg+0x17b/0x1d0 [ 270.952466][T14371] __x64_sys_sendmsg+0xd4/0x160 [ 270.952488][T14371] x64_sys_call+0x191e/0x2ff0 [ 270.952525][T14371] do_syscall_64+0xd2/0x200 [ 270.952550][T14371] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 270.952647][T14371] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 270.952715][T14371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.952737][T14371] RIP: 0033:0x7f0b84e2ebe9 [ 270.952751][T14371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.952808][T14371] RSP: 002b:00007f0b8386e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.952828][T14371] RAX: ffffffffffffffda RBX: 00007f0b85056090 RCX: 00007f0b84e2ebe9 [ 270.952842][T14371] RDX: 0000000024040840 RSI: 00002000000001c0 RDI: 0000000000000003 [ 270.952854][T14371] RBP: 00007f0b8386e090 R08: 0000000000000000 R09: 0000000000000000 [ 270.952864][T14371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.952875][T14371] R13: 00007f0b85056128 R14: 00007f0b85056090 R15: 00007fff912c5b08 [ 270.952946][T14371] [ 270.955077][T14370] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.126520][T14376] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3602'. [ 271.241045][T14370] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.310256][T14370] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.364399][ T178] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.375146][ T178] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.386375][ T178] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.397322][ T178] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.418101][T14392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3606'. [ 271.458483][T14396] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.510011][T14396] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.560411][T14396] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.648826][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 271.649620][T14396] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.684807][T14403] usb usb5: usbfs: process 14403 (syz.9.3610) did not claim interface 0 before use [ 272.148652][T14412] FAULT_INJECTION: forcing a failure. [ 272.148652][T14412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.161762][T14412] CPU: 0 UID: 0 PID: 14412 Comm: syz.7.3613 Not tainted syzkaller #0 PREEMPT(voluntary) [ 272.161785][T14412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 272.161809][T14412] Call Trace: [ 272.161815][T14412] [ 272.161821][T14412] __dump_stack+0x1d/0x30 [ 272.161839][T14412] dump_stack_lvl+0xe8/0x140 [ 272.161908][T14412] dump_stack+0x15/0x1b [ 272.161925][T14412] should_fail_ex+0x265/0x280 [ 272.161946][T14412] should_fail+0xb/0x20 [ 272.161964][T14412] should_fail_usercopy+0x1a/0x20 [ 272.162037][T14412] _copy_from_iter+0xd2/0xe80 [ 272.162061][T14412] ? __build_skb_around+0x1a0/0x200 [ 272.162093][T14412] ? __alloc_skb+0x223/0x320 [ 272.162113][T14412] netlink_sendmsg+0x471/0x6b0 [ 272.162180][T14412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.162244][T14412] __sock_sendmsg+0x145/0x180 [ 272.162271][T14412] ____sys_sendmsg+0x31e/0x4e0 [ 272.162296][T14412] ___sys_sendmsg+0x17b/0x1d0 [ 272.162330][T14412] __x64_sys_sendmsg+0xd4/0x160 [ 272.162399][T14412] x64_sys_call+0x191e/0x2ff0 [ 272.162416][T14412] do_syscall_64+0xd2/0x200 [ 272.162437][T14412] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 272.162461][T14412] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 272.162507][T14412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.162528][T14412] RIP: 0033:0x7f77cccaebe9 [ 272.162543][T14412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.162560][T14412] RSP: 002b:00007f77cb70f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.162655][T14412] RAX: ffffffffffffffda RBX: 00007f77cced5fa0 RCX: 00007f77cccaebe9 [ 272.162669][T14412] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 272.162682][T14412] RBP: 00007f77cb70f090 R08: 0000000000000000 R09: 0000000000000000 [ 272.162782][T14412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.162792][T14412] R13: 00007f77cced6038 R14: 00007f77cced5fa0 R15: 00007ffe66a7a518 [ 272.162807][T14412] [ 272.406638][T14418] FAULT_INJECTION: forcing a failure. [ 272.406638][T14418] name failslab, interval 1, probability 0, space 0, times 0 [ 272.419357][T14418] CPU: 0 UID: 0 PID: 14418 Comm: syz.6.3616 Not tainted syzkaller #0 PREEMPT(voluntary) [ 272.419389][T14418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 272.419486][T14418] Call Trace: [ 272.419492][T14418] [ 272.419499][T14418] __dump_stack+0x1d/0x30 [ 272.419520][T14418] dump_stack_lvl+0xe8/0x140 [ 272.419538][T14418] dump_stack+0x15/0x1b [ 272.419571][T14418] should_fail_ex+0x265/0x280 [ 272.419592][T14418] should_failslab+0x8c/0xb0 [ 272.419616][T14418] kmem_cache_alloc_node_noprof+0x57/0x320 [ 272.419706][T14418] ? __alloc_skb+0x101/0x320 [ 272.419725][T14418] __alloc_skb+0x101/0x320 [ 272.419742][T14418] ? audit_log_start+0x365/0x6c0 [ 272.419772][T14418] audit_log_start+0x380/0x6c0 [ 272.419820][T14418] audit_seccomp+0x48/0x100 [ 272.419839][T14418] ? __seccomp_filter+0x68c/0x10d0 [ 272.419857][T14418] __seccomp_filter+0x69d/0x10d0 [ 272.419878][T14418] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 272.419970][T14418] ? vfs_write+0x7e8/0x960 [ 272.419988][T14418] ? __rcu_read_unlock+0x4f/0x70 [ 272.420030][T14418] ? __fget_files+0x184/0x1c0 [ 272.420053][T14418] __secure_computing+0x82/0x150 [ 272.420069][T14418] syscall_trace_enter+0xcf/0x1e0 [ 272.420088][T14418] do_syscall_64+0xac/0x200 [ 272.420183][T14418] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 272.420202][T14418] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 272.420222][T14418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.420294][T14418] RIP: 0033:0x7f33b85debe9 [ 272.420309][T14418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.420326][T14418] RSP: 002b:00007f33b7047038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 [ 272.420345][T14418] RAX: ffffffffffffffda RBX: 00007f33b8805fa0 RCX: 00007f33b85debe9 [ 272.420358][T14418] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 272.420385][T14418] RBP: 00007f33b7047090 R08: 0000000000000000 R09: 0000000000000000 [ 272.420444][T14418] R10: 0000000044000006 R11: 0000000000000246 R12: 0000000000000001 [ 272.420457][T14418] R13: 00007f33b8806038 R14: 00007f33b8805fa0 R15: 00007fff33b4dc78 [ 272.420555][T14418] [ 272.793734][T14434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3620'. [ 272.802646][T14434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3620'. [ 272.924057][T14439] loop7: detected capacity change from 0 to 16384 [ 272.936089][T14444] IPVS: stopping master sync thread 14445 ... [ 272.942508][T14445] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 273.107148][T14451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3624'. [ 273.116061][T14451] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3624'. [ 273.338947][T14462] loop9: detected capacity change from 0 to 1024 [ 273.383358][T14462] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.422594][T13923] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.552880][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 273.552894][ T29] audit: type=1400 audit(1756164791.577:11091): avc: denied { nlmsg_write } for pid=14472 comm="syz.7.3630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 273.657336][ T29] audit: type=1400 audit(1756164791.617:11092): avc: denied { execmod } for pid=14472 comm="syz.7.3630" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=52576 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 273.809519][T14481] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3632'. [ 273.818434][T14481] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3632'. [ 273.952307][T14487] FAULT_INJECTION: forcing a failure. [ 273.952307][T14487] name failslab, interval 1, probability 0, space 0, times 0 [ 273.965137][T14487] CPU: 0 UID: 0 PID: 14487 Comm: syz.0.3635 Not tainted syzkaller #0 PREEMPT(voluntary) [ 273.965204][T14487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 273.965216][T14487] Call Trace: [ 273.965222][T14487] [ 273.965229][T14487] __dump_stack+0x1d/0x30 [ 273.965249][T14487] dump_stack_lvl+0xe8/0x140 [ 273.965331][T14487] dump_stack+0x15/0x1b [ 273.965347][T14487] should_fail_ex+0x265/0x280 [ 273.965367][T14487] should_failslab+0x8c/0xb0 [ 273.965391][T14487] kmem_cache_alloc_node_noprof+0x57/0x320 [ 273.965498][T14487] ? __alloc_skb+0x101/0x320 [ 273.965517][T14487] __alloc_skb+0x101/0x320 [ 273.965535][T14487] netlink_alloc_large_skb+0xba/0xf0 [ 273.965566][T14487] netlink_sendmsg+0x3cf/0x6b0 [ 273.965654][T14487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.965676][T14487] __sock_sendmsg+0x145/0x180 [ 273.965740][T14487] ____sys_sendmsg+0x31e/0x4e0 [ 273.965764][T14487] ___sys_sendmsg+0x17b/0x1d0 [ 273.965796][T14487] __x64_sys_sendmsg+0xd4/0x160 [ 273.965833][T14487] x64_sys_call+0x191e/0x2ff0 [ 273.965854][T14487] do_syscall_64+0xd2/0x200 [ 273.965879][T14487] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 273.965953][T14487] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 273.965977][T14487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.965997][T14487] RIP: 0033:0x7fdb7648ebe9 [ 273.966012][T14487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.966029][T14487] RSP: 002b:00007fdb74eef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.966048][T14487] RAX: ffffffffffffffda RBX: 00007fdb766b5fa0 RCX: 00007fdb7648ebe9 [ 273.966198][T14487] RDX: 0000000000004084 RSI: 00002000000000c0 RDI: 0000000000000003 [ 273.966263][T14487] RBP: 00007fdb74eef090 R08: 0000000000000000 R09: 0000000000000000 [ 273.966287][T14487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.966299][T14487] R13: 00007fdb766b6038 R14: 00007fdb766b5fa0 R15: 00007fff2ad86c88 [ 273.966317][T14487] [ 274.337248][T14511] FAULT_INJECTION: forcing a failure. [ 274.337248][T14511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.350515][T14511] CPU: 0 UID: 0 PID: 14511 Comm: syz.6.3642 Not tainted syzkaller #0 PREEMPT(voluntary) [ 274.350541][T14511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 274.350571][T14511] Call Trace: [ 274.350577][T14511] [ 274.350585][T14511] __dump_stack+0x1d/0x30 [ 274.350605][T14511] dump_stack_lvl+0xe8/0x140 [ 274.350623][T14511] dump_stack+0x15/0x1b [ 274.350640][T14511] should_fail_ex+0x265/0x280 [ 274.350659][T14511] should_fail+0xb/0x20 [ 274.350700][T14511] should_fail_usercopy+0x1a/0x20 [ 274.350721][T14511] _copy_from_user+0x1c/0xb0 [ 274.350747][T14511] ucma_resolve_addr+0x52/0x2d0 [ 274.350779][T14511] ucma_write+0x1b3/0x250 [ 274.350876][T14511] ? __pfx_ucma_write+0x10/0x10 [ 274.350905][T14511] vfs_write+0x269/0x960 [ 274.350926][T14511] ? __rcu_read_unlock+0x4f/0x70 [ 274.350947][T14511] ? __fget_files+0x184/0x1c0 [ 274.350971][T14511] ksys_write+0xda/0x1a0 [ 274.351066][T14511] __x64_sys_write+0x40/0x50 [ 274.351134][T14511] x64_sys_call+0x27fe/0x2ff0 [ 274.351154][T14511] do_syscall_64+0xd2/0x200 [ 274.351179][T14511] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 274.351201][T14511] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 274.351230][T14511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.351326][T14511] RIP: 0033:0x7f33b85debe9 [ 274.351341][T14511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.351359][T14511] RSP: 002b:00007f33b7047038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 274.351379][T14511] RAX: ffffffffffffffda RBX: 00007f33b8805fa0 RCX: 00007f33b85debe9 [ 274.351392][T14511] RDX: 0000000000000118 RSI: 00002000000005c0 RDI: 0000000000000003 [ 274.351405][T14511] RBP: 00007f33b7047090 R08: 0000000000000000 R09: 0000000000000000 [ 274.351417][T14511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.351430][T14511] R13: 00007f33b8806038 R14: 00007f33b8805fa0 R15: 00007fff33b4dc78 [ 274.351447][T14511] [ 274.356260][T14515] loop9: detected capacity change from 0 to 512 [ 274.406495][ T29] audit: type=1326 audit(1756164792.427:11093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14519 comm="syz.0.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 274.451687][T14515] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.451741][T14515] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 274.606727][ T29] audit: type=1326 audit(1756164792.437:11094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14519 comm="syz.0.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 274.630352][ T29] audit: type=1326 audit(1756164792.437:11095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14519 comm="syz.0.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 274.654510][ T29] audit: type=1326 audit(1756164792.437:11096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14519 comm="syz.0.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 274.678191][ T29] audit: type=1326 audit(1756164792.437:11097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14519 comm="syz.0.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 274.701764][ T29] audit: type=1326 audit(1756164792.437:11098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14519 comm="syz.0.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 274.725442][ T29] audit: type=1326 audit(1756164792.437:11099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14519 comm="syz.0.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 274.748957][ T29] audit: type=1326 audit(1756164792.437:11100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14519 comm="syz.0.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 274.774273][T13923] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.787036][T14527] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.830483][T14527] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.890663][T14527] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.982252][T14527] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.067848][ T562] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.079129][ T562] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.089980][ T562] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.101277][ T178] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.245990][T14565] FAULT_INJECTION: forcing a failure. [ 275.245990][T14565] name failslab, interval 1, probability 0, space 0, times 0 [ 275.258706][T14565] CPU: 1 UID: 0 PID: 14565 Comm: syz.0.3661 Not tainted syzkaller #0 PREEMPT(voluntary) [ 275.258737][T14565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 275.258748][T14565] Call Trace: [ 275.258754][T14565] [ 275.258761][T14565] __dump_stack+0x1d/0x30 [ 275.258803][T14565] dump_stack_lvl+0xe8/0x140 [ 275.258821][T14565] dump_stack+0x15/0x1b [ 275.258873][T14565] should_fail_ex+0x265/0x280 [ 275.258909][T14565] should_failslab+0x8c/0xb0 [ 275.259011][T14565] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 275.259040][T14565] ? sidtab_sid2str_get+0xa0/0x130 [ 275.259076][T14565] kmemdup_noprof+0x2b/0x70 [ 275.259142][T14565] sidtab_sid2str_get+0xa0/0x130 [ 275.259159][T14565] security_sid_to_context_core+0x1eb/0x2e0 [ 275.259177][T14565] security_sid_to_context+0x27/0x40 [ 275.259221][T14565] selinux_lsmprop_to_secctx+0x67/0xf0 [ 275.259242][T14565] security_lsmprop_to_secctx+0x43/0x80 [ 275.259266][T14565] audit_log_task_context+0x77/0x190 [ 275.259336][T14565] audit_log_task+0xf4/0x250 [ 275.259364][T14565] audit_seccomp+0x61/0x100 [ 275.259385][T14565] ? __seccomp_filter+0x68c/0x10d0 [ 275.259473][T14565] __seccomp_filter+0x69d/0x10d0 [ 275.259490][T14565] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 275.259512][T14565] ? vfs_write+0x7e8/0x960 [ 275.259532][T14565] ? __rcu_read_unlock+0x4f/0x70 [ 275.259554][T14565] ? __fget_files+0x184/0x1c0 [ 275.259578][T14565] __secure_computing+0x82/0x150 [ 275.259679][T14565] syscall_trace_enter+0xcf/0x1e0 [ 275.259777][T14565] do_syscall_64+0xac/0x200 [ 275.259799][T14565] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 275.259848][T14565] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 275.259873][T14565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.259919][T14565] RIP: 0033:0x7fdb7648ebe9 [ 275.259931][T14565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.259987][T14565] RSP: 002b:00007fdb74eef038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 275.260007][T14565] RAX: ffffffffffffffda RBX: 00007fdb766b5fa0 RCX: 00007fdb7648ebe9 [ 275.260020][T14565] RDX: 0000200000000140 RSI: 0000000000000007 RDI: 0000200000000000 [ 275.260033][T14565] RBP: 00007fdb74eef090 R08: 0000000000000000 R09: 0000000000000000 [ 275.260046][T14565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.260060][T14565] R13: 00007fdb766b6038 R14: 00007fdb766b5fa0 R15: 00007fff2ad86c88 [ 275.260075][T14565] [ 275.513255][T14568] loop7: detected capacity change from 0 to 1024 [ 275.530700][T14568] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.596061][T14574] __nla_validate_parse: 9 callbacks suppressed [ 275.596075][T14574] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3664'. [ 275.689208][T14602] pimreg: entered allmulticast mode [ 275.697532][T14602] pimreg: left allmulticast mode [ 276.016198][T13838] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.041701][T14611] FAULT_INJECTION: forcing a failure. [ 276.041701][T14611] name failslab, interval 1, probability 0, space 0, times 0 [ 276.054458][T14611] CPU: 1 UID: 0 PID: 14611 Comm: syz.6.3679 Not tainted syzkaller #0 PREEMPT(voluntary) [ 276.054481][T14611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 276.054491][T14611] Call Trace: [ 276.054551][T14611] [ 276.054558][T14611] __dump_stack+0x1d/0x30 [ 276.054576][T14611] dump_stack_lvl+0xe8/0x140 [ 276.054593][T14611] dump_stack+0x15/0x1b [ 276.054611][T14611] should_fail_ex+0x265/0x280 [ 276.054632][T14611] should_failslab+0x8c/0xb0 [ 276.054656][T14611] kmem_cache_alloc_node_noprof+0x57/0x320 [ 276.054755][T14611] ? __alloc_skb+0x101/0x320 [ 276.054770][T14611] __alloc_skb+0x101/0x320 [ 276.054788][T14611] xfrm_send_acquire+0xb3/0x840 [ 276.054808][T14611] km_query+0x5d/0xc0 [ 276.054825][T14611] xfrm_state_find+0x24c7/0x2fa0 [ 276.054978][T14611] ? __find_rr_leaf+0x32e/0x470 [ 276.055008][T14611] xfrm_resolve_and_create_bundle+0x575/0x1f30 [ 276.055103][T14611] ? __rcu_read_unlock+0x34/0x70 [ 276.055128][T14611] ? xfrm_expand_policies+0x24a/0x2b0 [ 276.055154][T14611] xfrm_lookup_with_ifid+0x1da/0x1360 [ 276.055249][T14611] xfrm_lookup_route+0x3a/0x110 [ 276.055283][T14611] ip6_dst_lookup_flow+0x97/0xc0 [ 276.055305][T14611] ip6_datagram_dst_update+0x332/0x510 [ 276.055381][T14611] __ip6_datagram_connect+0x70a/0x7e0 [ 276.055404][T14611] ? _raw_spin_unlock_bh+0x36/0x40 [ 276.055422][T14611] ip6_datagram_connect_v6_only+0x52/0x80 [ 276.055451][T14611] inet_dgram_connect+0x125/0x1c0 [ 276.055469][T14611] ? __pfx_inet_dgram_connect+0x10/0x10 [ 276.055487][T14611] __sys_connect+0x1ef/0x2b0 [ 276.055594][T14611] __x64_sys_connect+0x3f/0x50 [ 276.055613][T14611] x64_sys_call+0x2c08/0x2ff0 [ 276.055634][T14611] do_syscall_64+0xd2/0x200 [ 276.055659][T14611] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 276.055682][T14611] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 276.055770][T14611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.055798][T14611] RIP: 0033:0x7f33b85debe9 [ 276.055812][T14611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.055829][T14611] RSP: 002b:00007f33b7047038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 276.055846][T14611] RAX: ffffffffffffffda RBX: 00007f33b8805fa0 RCX: 00007f33b85debe9 [ 276.055870][T14611] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000004 [ 276.055882][T14611] RBP: 00007f33b7047090 R08: 0000000000000000 R09: 0000000000000000 [ 276.055892][T14611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.055903][T14611] R13: 00007f33b8806038 R14: 00007f33b8805fa0 R15: 00007fff33b4dc78 [ 276.055920][T14611] [ 276.356023][T14615] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3680'. [ 276.540315][T14646] loop6: detected capacity change from 0 to 1024 [ 276.551043][T14646] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.943197][T14666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3695'. [ 276.976762][T14672] FAULT_INJECTION: forcing a failure. [ 276.976762][T14672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.989893][T14672] CPU: 0 UID: 0 PID: 14672 Comm: syz.0.3697 Not tainted syzkaller #0 PREEMPT(voluntary) [ 276.989921][T14672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 276.989928][T14672] Call Trace: [ 276.989932][T14672] [ 276.989937][T14672] __dump_stack+0x1d/0x30 [ 276.989985][T14672] dump_stack_lvl+0xe8/0x140 [ 276.989995][T14672] dump_stack+0x15/0x1b [ 276.990004][T14672] should_fail_ex+0x265/0x280 [ 276.990016][T14672] should_fail+0xb/0x20 [ 276.990050][T14672] should_fail_usercopy+0x1a/0x20 [ 276.990062][T14672] _copy_from_iter+0xd2/0xe80 [ 276.990141][T14672] ? __build_skb_around+0x1a0/0x200 [ 276.990181][T14672] ? __alloc_skb+0x223/0x320 [ 276.990266][T14672] netlink_sendmsg+0x471/0x6b0 [ 276.990280][T14672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.990292][T14672] __sock_sendmsg+0x145/0x180 [ 276.990307][T14672] ____sys_sendmsg+0x31e/0x4e0 [ 276.990369][T14672] ___sys_sendmsg+0x17b/0x1d0 [ 276.990488][T14672] __x64_sys_sendmsg+0xd4/0x160 [ 276.990553][T14672] x64_sys_call+0x191e/0x2ff0 [ 276.990565][T14672] do_syscall_64+0xd2/0x200 [ 276.990668][T14672] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 276.990680][T14672] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 276.990776][T14672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.990821][T14672] RIP: 0033:0x7fdb7648ebe9 [ 276.990830][T14672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.990840][T14672] RSP: 002b:00007fdb74eef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.990851][T14672] RAX: ffffffffffffffda RBX: 00007fdb766b5fa0 RCX: 00007fdb7648ebe9 [ 276.990858][T14672] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 276.990865][T14672] RBP: 00007fdb74eef090 R08: 0000000000000000 R09: 0000000000000000 [ 276.990872][T14672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.990878][T14672] R13: 00007fdb766b6038 R14: 00007fdb766b5fa0 R15: 00007fff2ad86c88 [ 276.990957][T14672] [ 277.213063][T14676] tc_dump_action: action bad kind [ 277.244254][ T3434] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.255706][ T3434] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.267011][ T3434] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.297979][T14682] loop7: detected capacity change from 0 to 16384 [ 277.321379][ T3434] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.356163][T14184] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.428359][T14685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3703'. [ 277.437280][T14685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3703'. [ 277.485802][T14698] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3707'. [ 277.503866][T14702] loop6: detected capacity change from 0 to 764 [ 278.449413][T14744] loop6: detected capacity change from 0 to 1024 [ 278.456260][T14744] EXT4-fs: Ignoring removed orlov option [ 278.466646][T14744] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 278.480576][T14744] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.516766][T14184] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.537291][T14760] FAULT_INJECTION: forcing a failure. [ 278.537291][T14760] name failslab, interval 1, probability 0, space 0, times 0 [ 278.550060][T14760] CPU: 1 UID: 0 PID: 14760 Comm: syz.9.3727 Not tainted syzkaller #0 PREEMPT(voluntary) [ 278.550151][T14760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 278.550161][T14760] Call Trace: [ 278.550167][T14760] [ 278.550173][T14760] __dump_stack+0x1d/0x30 [ 278.550193][T14760] dump_stack_lvl+0xe8/0x140 [ 278.550210][T14760] dump_stack+0x15/0x1b [ 278.550276][T14760] should_fail_ex+0x265/0x280 [ 278.550294][T14760] should_failslab+0x8c/0xb0 [ 278.550315][T14760] kmem_cache_alloc_node_noprof+0x57/0x320 [ 278.550412][T14760] ? __alloc_skb+0x101/0x320 [ 278.550428][T14760] __alloc_skb+0x101/0x320 [ 278.550444][T14760] netlink_alloc_large_skb+0xba/0xf0 [ 278.550471][T14760] netlink_sendmsg+0x3cf/0x6b0 [ 278.550522][T14760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.550541][T14760] __sock_sendmsg+0x145/0x180 [ 278.550563][T14760] ____sys_sendmsg+0x31e/0x4e0 [ 278.550591][T14760] ___sys_sendmsg+0x17b/0x1d0 [ 278.550693][T14760] __x64_sys_sendmsg+0xd4/0x160 [ 278.550713][T14760] x64_sys_call+0x191e/0x2ff0 [ 278.550730][T14760] do_syscall_64+0xd2/0x200 [ 278.550752][T14760] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 278.550796][T14760] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 278.550816][T14760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.550834][T14760] RIP: 0033:0x7f5ab85eebe9 [ 278.550846][T14760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.550861][T14760] RSP: 002b:00007f5ab704f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.550883][T14760] RAX: ffffffffffffffda RBX: 00007f5ab8815fa0 RCX: 00007f5ab85eebe9 [ 278.550894][T14760] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 278.550904][T14760] RBP: 00007f5ab704f090 R08: 0000000000000000 R09: 0000000000000000 [ 278.550915][T14760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.550925][T14760] R13: 00007f5ab8816038 R14: 00007f5ab8815fa0 R15: 00007ffdc2026018 [ 278.550940][T14760] [ 278.785885][ T29] kauditd_printk_skb: 352 callbacks suppressed [ 278.785899][ T29] audit: type=1326 audit(1756164796.797:11452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14761 comm="syz.1.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84e2ebe9 code=0x50000 [ 278.815385][ T29] audit: type=1326 audit(1756164796.797:11453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14761 comm="syz.1.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84e2ebe9 code=0x50000 [ 278.838714][ T29] audit: type=1326 audit(1756164796.797:11454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14761 comm="syz.1.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f0b84e2ebe9 code=0x50000 [ 278.862041][ T29] audit: type=1326 audit(1756164796.797:11455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14761 comm="syz.1.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b84e614a5 code=0x50000 [ 278.885373][ T29] audit: type=1326 audit(1756164796.797:11456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14761 comm="syz.1.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f0b84e2ebe9 code=0x50000 [ 279.061086][T14773] netlink: 'syz.9.3732': attribute type 3 has an invalid length. [ 279.071218][T14773] loop9: detected capacity change from 0 to 512 [ 279.079344][T14773] EXT4-fs error (device loop9): ext4_xattr_inode_iget:442: comm syz.9.3732: error while reading EA inode 32 err=-116 [ 279.092977][T14773] EXT4-fs (loop9): Remounting filesystem read-only [ 279.099514][T14773] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 279.111087][T14773] EXT4-fs (loop9): 1 orphan inode deleted [ 279.117185][T14773] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.130602][T14773] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.143551][T14773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14773 comm=syz.9.3732 [ 279.236868][ T29] audit: type=1326 audit(1756164797.257:11457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14775 comm="syz.0.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 279.260576][ T29] audit: type=1326 audit(1756164797.257:11458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14775 comm="syz.0.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 279.284737][ T29] audit: type=1326 audit(1756164797.307:11459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14775 comm="syz.0.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 279.308383][ T29] audit: type=1326 audit(1756164797.307:11460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14775 comm="syz.0.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 279.331919][ T29] audit: type=1326 audit(1756164797.307:11461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14775 comm="syz.0.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 279.503431][T14788] loop6: detected capacity change from 0 to 1024 [ 279.560333][T14788] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.793525][T14807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3745'. [ 279.802518][T14807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3745'. [ 279.889820][T14813] Falling back ldisc for ttyS3. [ 279.906832][T14813] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14813 comm=syz.1.3746 [ 280.087452][T14184] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.139082][T14834] loop6: detected capacity change from 0 to 512 [ 280.164457][T14834] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.243313][T14834] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.299310][T14834] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.342718][T14845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3757'. [ 280.351634][T14845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3757'. [ 280.598810][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 280.651994][T14868] loop7: detected capacity change from 0 to 1024 [ 280.669009][T14868] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 280.727792][T14878] tc_dump_action: action bad kind [ 280.765144][T14883] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.821289][T14883] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.875280][T14896] random: crng reseeded on system resumption [ 280.950721][T14883] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.970436][T14907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3776'. [ 280.979333][T14907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3776'. [ 281.040766][T14883] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.109409][ T562] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.130278][ T562] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.140091][T14920] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.165066][ T178] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.173376][ T178] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.187565][T14920] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.210471][T14926] loop7: detected capacity change from 0 to 16384 [ 281.251146][T14920] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.340447][T14920] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.384795][T14934] tipc: Started in network mode [ 281.389731][T14934] tipc: Node identity 000000002d0000000000000000000001, cluster identity 4711 [ 281.398585][T14934] tipc: Enabling of bearer rejected, failed to enable media [ 281.411966][ T1831] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.423352][ T1831] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.436288][ T1831] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.449807][ T1831] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.451461][T14936] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3788'. [ 281.556294][T14944] random: crng reseeded on system resumption [ 281.633779][T14943] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3791'. [ 281.642681][T14943] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3791'. [ 281.688249][T14958] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.740400][T14958] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.751239][T14968] tipc: Started in network mode [ 281.756114][T14968] tipc: Node identity 000000002d0000000000000000000001, cluster identity 4711 [ 281.759105][T14969] loop7: detected capacity change from 0 to 1024 [ 281.765017][T14968] tipc: Enabling of bearer rejected, failed to enable media [ 281.791084][T14969] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.830311][T14958] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.844434][T13838] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.900385][T14958] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.950291][T14995] random: crng reseeded on system resumption [ 281.975305][T14996] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3807'. [ 281.984241][T14996] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3807'. [ 281.995622][T14999] loop7: detected capacity change from 0 to 1024 [ 282.005450][ T1831] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.019889][ T1831] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.029248][ T1831] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.037486][ T1831] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.058396][T14999] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.072340][T15001] tipc: Started in network mode [ 282.077268][T15001] tipc: Node identity 000000002d0000000000000000000001, cluster identity 4711 [ 282.086270][T15001] tipc: Enabling of bearer rejected, failed to enable media [ 282.105960][T15011] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.180219][T15011] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.270338][T15011] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.421782][T15011] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.731598][T13838] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.763078][T15037] random: crng reseeded on system resumption [ 282.831933][T15031] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3822'. [ 282.840870][T15031] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3822'. [ 282.914997][T15050] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.042712][T15050] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.284832][T15050] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.382624][T15050] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.463932][ T3434] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.475293][ T12] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.486336][ T12] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.489031][T15065] loop9: detected capacity change from 0 to 1024 [ 283.502741][ T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.512604][T15065] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.550373][T15069] loop7: detected capacity change from 0 to 16384 [ 283.827545][ T29] kauditd_printk_skb: 766 callbacks suppressed [ 283.827563][ T29] audit: type=1326 audit(1756164801.847:12228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15089 comm="syz.7.3845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cccaebe9 code=0x7ffc0000 [ 283.867604][ T29] audit: type=1326 audit(1756164801.847:12229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15089 comm="syz.7.3845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77cccaebe9 code=0x7ffc0000 [ 283.891819][ T29] audit: type=1326 audit(1756164801.847:12230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15089 comm="syz.7.3845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cccaebe9 code=0x7ffc0000 [ 283.915433][ T29] audit: type=1326 audit(1756164801.847:12231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15089 comm="syz.7.3845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f77cccaebe9 code=0x7ffc0000 [ 283.939066][ T29] audit: type=1326 audit(1756164801.847:12232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15089 comm="syz.7.3845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cccaebe9 code=0x7ffc0000 [ 283.962758][ T29] audit: type=1326 audit(1756164801.857:12233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15089 comm="syz.7.3845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cccaebe9 code=0x7ffc0000 [ 284.116285][T15103] loop7: detected capacity change from 0 to 1024 [ 284.140580][T15103] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.170061][T15107] loop6: detected capacity change from 0 to 1024 [ 284.180105][T15107] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.209711][T13923] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.278977][T15115] tc_dump_action: action bad kind [ 284.650545][ T29] audit: type=1326 audit(1756164802.677:12234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15119 comm="syz.0.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 284.674162][ T29] audit: type=1326 audit(1756164802.677:12235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15119 comm="syz.0.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 284.697983][ T29] audit: type=1326 audit(1756164802.677:12236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15119 comm="syz.0.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 284.721596][ T29] audit: type=1326 audit(1756164802.677:12237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15119 comm="syz.0.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 284.850390][T13838] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.904935][T14184] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.931310][T15139] loop7: detected capacity change from 0 to 1024 [ 284.953276][T15139] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.997447][T13838] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.051908][T15148] loop6: detected capacity change from 0 to 1024 [ 285.070202][T15148] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.699798][T15166] Set syz1 is full, maxelem 65536 reached [ 285.784241][T14184] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.817911][T15173] loop7: detected capacity change from 0 to 16384 [ 286.303482][T15196] loop7: detected capacity change from 0 to 512 [ 286.316824][T15184] __nla_validate_parse: 6 callbacks suppressed [ 286.316837][T15184] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3875'. [ 286.331896][T15184] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3875'. [ 286.356668][T15196] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.370564][T15196] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.383023][T15196] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3879'. [ 286.414754][T15204] random: crng reseeded on system resumption [ 286.782830][T15196] Set syz1 is full, maxelem 65536 reached [ 286.822589][T13838] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.859190][T15220] nfs4: Bad value for 'source' [ 286.965912][T15224] netlink: 'syz.7.3889': attribute type 4 has an invalid length. [ 287.008103][ T1831] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.026392][ T1831] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.044667][ T1831] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.054540][ T1831] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.157639][T15236] random: crng reseeded on system resumption [ 287.299088][T15250] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.360323][T15250] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.464782][T15250] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.520497][T15250] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.106713][T15276] nfs4: Bad value for 'source' [ 288.128445][T15280] tc_dump_action: action bad kind [ 288.430191][T15302] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 288.447972][T15303] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3918'. [ 288.456923][T15303] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3918'. [ 288.927786][T15324] loop7: detected capacity change from 0 to 16384 [ 289.281418][T15330] nfs4: Bad value for 'source' [ 289.560835][T15345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3932'. [ 289.569794][T15345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3932'. [ 289.613632][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 289.613648][ T29] audit: type=1326 audit(1756164807.637:12333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15349 comm="syz.0.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 289.644946][ T29] audit: type=1326 audit(1756164807.637:12334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15349 comm="syz.0.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 289.668632][ T29] audit: type=1326 audit(1756164807.647:12335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15349 comm="syz.0.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 289.692174][ T29] audit: type=1326 audit(1756164807.647:12336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15349 comm="syz.0.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 289.715812][ T29] audit: type=1326 audit(1756164807.647:12337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15349 comm="syz.0.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 289.856722][T15361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3938'. [ 289.865684][T15361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3938'. [ 289.876101][T15360] random: crng reseeded on system resumption [ 289.930928][ T29] audit: type=1326 audit(1756164807.957:12338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15364 comm="syz.0.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 289.954667][ T29] audit: type=1326 audit(1756164807.957:12339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15364 comm="syz.0.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 289.978293][ T29] audit: type=1326 audit(1756164807.957:12340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15364 comm="syz.0.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 290.001861][ T29] audit: type=1326 audit(1756164807.957:12341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15364 comm="syz.0.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 290.025466][ T29] audit: type=1326 audit(1756164807.957:12342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15364 comm="syz.0.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdb7648ebe9 code=0x7ffc0000 [ 290.090314][T15374] tc_dump_action: action bad kind [ 290.152410][T15377] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3945'. [ 290.226374][T15386] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.260084][T15386] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.330272][T15386] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.379807][T15386] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.470834][ T3434] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.489173][ T3434] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.500853][ T3434] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.509251][ T3434] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.760017][T15403] random: crng reseeded on system resumption [ 291.235354][T15416] loop7: detected capacity change from 0 to 1024 [ 291.251659][T15416] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.349963][T13838] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.358317][T15433] nfs4: Bad value for 'source' [ 291.379637][T15438] tc_dump_action: action bad kind [ 292.308065][T15450] __nla_validate_parse: 5 callbacks suppressed [ 292.308078][T15450] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3971'. [ 292.323173][T15450] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3971'. [ 292.439223][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.450274][ T562] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.460743][ T562] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.470738][ T562] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.542095][T15468] loop7: detected capacity change from 0 to 1024 [ 292.563933][T15468] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.682043][T15474] nfs4: Bad value for 'source' [ 292.723642][T15477] random: crng reseeded on system resumption [ 292.845685][T13838] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.873939][T15483] nfs4: Bad value for 'source' [ 292.966398][T15498] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.010286][T15498] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.070220][T15498] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.110055][T15498] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.153919][T15502] loop7: detected capacity change from 0 to 16384 [ 293.248655][T15504] random: crng reseeded on system resumption [ 293.406849][T15511] loop6: detected capacity change from 0 to 1024 [ 293.420778][T15511] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.455339][T14184] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.574123][T15533] random: crng reseeded on system resumption [ 293.584778][T15534] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3999'. [ 293.593812][T15534] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3999'. [ 293.964313][T15547] loop6: detected capacity change from 0 to 1024 [ 293.989287][T15547] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.093622][T14184] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.209646][T15562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4009'. [ 294.218506][T15562] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4009'. [ 294.265356][T15569] random: crng reseeded on system resumption [ 294.412673][T15582] nfs4: Bad value for 'source' [ 294.417561][T15583] loop7: detected capacity change from 0 to 16384 [ 294.499973][T15592] loop9: detected capacity change from 0 to 1024 [ 294.534499][T15592] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.683189][T13923] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.721357][T15606] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4026'. [ 294.761205][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 294.761216][ T29] audit: type=1326 audit(1756164812.787:12433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15607 comm="syz.6.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b85debe9 code=0x7ffc0000 [ 294.790850][ T29] audit: type=1326 audit(1756164812.787:12434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15607 comm="syz.6.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b85debe9 code=0x7ffc0000 [ 294.815773][ T29] audit: type=1326 audit(1756164812.837:12435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15607 comm="syz.6.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33b85debe9 code=0x7ffc0000 [ 294.839443][ T29] audit: type=1326 audit(1756164812.837:12436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15607 comm="syz.6.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b85debe9 code=0x7ffc0000 [ 294.862997][ T29] audit: type=1326 audit(1756164812.837:12437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15607 comm="syz.6.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b85debe9 code=0x7ffc0000 [ 294.887965][ T29] audit: type=1326 audit(1756164812.867:12438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15607 comm="syz.6.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33b85debe9 code=0x7ffc0000 [ 294.911691][ T29] audit: type=1326 audit(1756164812.867:12439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15607 comm="syz.6.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b85debe9 code=0x7ffc0000 [ 294.935352][ T29] audit: type=1326 audit(1756164812.867:12440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15607 comm="syz.6.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b85debe9 code=0x7ffc0000 [ 294.958987][ T29] audit: type=1326 audit(1756164812.867:12441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15607 comm="syz.6.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f33b85debe9 code=0x7ffc0000 [ 294.982548][ T29] audit: type=1326 audit(1756164812.867:12442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15607 comm="syz.6.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b85debe9 code=0x7ffc0000 [ 295.008665][T15618] tc_dump_action: action bad kind [ 295.421052][T15639] loop7: detected capacity change from 0 to 16384 [ 295.573086][T15636] ================================================================== [ 295.581186][T15636] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 295.588475][T15636] [ 295.590781][T15636] read-write to 0xffff8881338b26c8 of 8 bytes by task 15638 on cpu 0: [ 295.598922][T15636] xas_clear_mark+0x91/0x180 [ 295.603516][T15636] __folio_start_writeback+0x2e7/0x440 [ 295.608966][T15636] __block_write_full_folio+0x53a/0x8f0 [ 295.614490][T15636] block_write_full_folio+0x2c2/0x2e0 [ 295.619839][T15636] blkdev_writepages+0x88/0x100 [ 295.624670][T15636] do_writepages+0x1c3/0x310 [ 295.629239][T15636] filemap_write_and_wait_range+0x144/0x340 [ 295.635114][T15636] bdev_release+0xeb/0x3d0 [ 295.639509][T15636] blkdev_release+0x15/0x20 [ 295.643990][T15636] __fput+0x298/0x650 [ 295.647952][T15636] ____fput+0x1c/0x30 [ 295.651913][T15636] task_work_run+0x131/0x1a0 [ 295.656479][T15636] exit_to_user_mode_loop+0xe4/0x100 [ 295.661741][T15636] do_syscall_64+0x1d6/0x200 [ 295.666311][T15636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.672182][T15636] [ 295.674485][T15636] read to 0xffff8881338b26c8 of 8 bytes by task 15636 on cpu 1: [ 295.682087][T15636] xas_find_marked+0x218/0x620 [ 295.686833][T15636] find_get_entry+0x5d/0x380 [ 295.691443][T15636] filemap_get_folios_tag+0x13b/0x210 [ 295.696945][T15636] writeback_iter+0x4bb/0x820 [ 295.701608][T15636] blkdev_writepages+0xa7/0x100 [ 295.706451][T15636] do_writepages+0x1c3/0x310 [ 295.711019][T15636] filemap_fdatawrite+0xec/0x120 [ 295.715935][T15636] sync_bdevs+0x1a2/0x260 [ 295.720245][T15636] ksys_sync+0x81/0xe0 [ 295.724291][T15636] __ia32_sys_sync+0xe/0x20 [ 295.728773][T15636] x64_sys_call+0x2d10/0x2ff0 [ 295.733430][T15636] do_syscall_64+0xd2/0x200 [ 295.737909][T15636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.743774][T15636] [ 295.746072][T15636] value changed: 0xfffff80000000000 -> 0xffffc00000000000 [ 295.753148][T15636] [ 295.755447][T15636] Reported by Kernel Concurrency Sanitizer on: [ 295.761592][T15636] CPU: 1 UID: 0 PID: 15636 Comm: syz.0.4037 Not tainted syzkaller #0 PREEMPT(voluntary) [ 295.771369][T15636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 295.781401][T15636] ================================================================== [ 297.293457][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.304622][ T562] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.315695][ T562] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.325507][ T562] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.518890][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!