last executing test programs: 5m1.330723767s ago: executing program 32 (id=738): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 4m4.172598341s ago: executing program 2 (id=1485): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000004000000000000000000000000000007000000000000000092bc9581336d4d221f4cb676"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000200)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = epoll_create(0x2) r3 = epoll_create1(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) personality(0x5000004) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0000000}) 4m4.172423971s ago: executing program 33 (id=1485): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000004000000000000000000000000000007000000000000000092bc9581336d4d221f4cb676"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000200)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = epoll_create(0x2) r3 = epoll_create1(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) personality(0x5000004) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0000000}) 43.885113219s ago: executing program 3 (id=3929): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001480)=@newqdisc={0x128, 0x24, 0x400, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0xffff}, {0xfff1, 0x982c039dc86a6355}, {0xfff2, 0x7}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @qdisc_kind_options=@q_cbq={{0x8}, {0xdc, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x401, 0x38, 0x8, 0x4}}, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x3, 0x2, 0xffff, 0x3}}, @TCA_CBS_PARMS={0x18, 0x1, {0xff, '\x00', 0x5, 0x2, 0x3, 0x2}}, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0xc, 0x2e, 0x2213, 0x93749ff}}, @TCA_CBS_PARMS={0x18, 0x1, {0xb, '\x00', 0xc8, 0x3, 0x80000003, 0x401}}, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x1, 0x78, 0x7, 0x3}}, @TCA_CBS_PARMS={0x18, 0x1, {0xb, '\x00', 0x11, 0x1, 0x6, 0x8}}, @TCA_CBS_PARMS={0x18, 0x1, {0x9, '\x00', 0x1ff, 0x5, 0x2, 0x80000000}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7f, '\x00', 0x1, 0x8, 0x10001, 0x6}}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x81}, 0x20040894) socket(0x10, 0x803, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c3000000b5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x18) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$eJzs3U1oM0UYwPEnaZImeXmbHERRkA6+CHpZ2uhZDNKCELC0jdgKwrbdaMialGyoRsS2J4+Kd0+Ch9KbBQ8F7VnoxZteRPDWi6BgBXVlv5LNV9PGpMH2/4OSycw8uzPZSXk27WYv3vj03UrJ0kp6Q6JJJRERkUuRrEQlEPEfo245IfLJd622A3n+wW8/PL22UUx6FWo5v/5CTik1N//Nex+m/G6ns3Kefevi19wv54+fP3nxz/o7ZUuVLVWtNZSutmo/NfQt01A7ZauiKbViGrplqHLVMupe+1f+dsza7m5T6dWdh+ndumFZSq82VcVoqkZNNepNpb+tl6tK0zT1MC0Ypni0uqrnRwzeHvNgMCH1el6fEZFUT0vxaCoDAgAAU9Wd/0edlH5Y/h/Syv83Za5QWFpVTud2/n/8zFnjwesnc37+f5rol/+/+KO3rY783zmdaOf/Ne/8oDQ8//9cbpD/92ZE98vI+X92AoPBaOYTPVWRjmdO/p/237+uwzePF9wC+T8AAAAAAAAAAAAAAAAAAAAAAP8Hl7adsW07EzwGP+1LCPznuJMGHf9ZEUk6R9/m+N9laxubknQv3HOOsfnxXnGv6D36Hc5ExBTjb7ubszaCK4+UIyvfmvt+/P5eccZtyZek7MTLomQk666nULxtL79aWFpUHj++dZlSOhyfk4w8Fo7/2l2dTnyuM97ff0KeexSK1yQj329LTUzZcSPb+/9oUalXXit0xafcfiLy860fFAAAAAAAxkxTLX3P3zVtULv3LSP5kvsxkSELkpG/+p/fL/Q9P49lnopNe/YAAAAAANwPVvODii5Ro+4WTLNfISUDm8ZQiHXUxEWkb+dEV038qi3PhGZ43fEkxLuDyX+d1xfBq3qTqOAfKZyBt5r8O6rIaOMJ5u/WRGLP/u43/XnTeUUOxF0AB+GmqFwjPNY9+HmnQvXt/Gjgdg79ibRqgo+NEgNeZ1np3U70ipUQ76mxI6MtgCc++/KP8b1BXjrxV8D7wzsfmoa9L9c5KF0FZxe9TfGJ/+IBAAAAcOvaSX9Q83K4OXwjkfDNcvjLPQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYzSRr/TrKgze++xtThUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYun8DAAD//7ct9c4=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101002, 0x2c) prctl$PR_SET_SECCOMP(0x4e, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) 43.021944517s ago: executing program 3 (id=3939): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) timerfd_create(0x0, 0x0) 42.978306518s ago: executing program 3 (id=3940): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x10, 0x0, "53bb"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={&(0x7f0000000080)="557e21a04edab3960c3801718edfbc3c28bd340a54dcc403f54d29e8c8f165e3dc64028f5c89cd703ee84dd99d9068b76517a8fe07001e5b2d7d58bca7b211e8feaa9c720963c6ffedf1469ca25fd1f5639b016ecda15ba84045eb95c792", &(0x7f0000000380)=""/175, &(0x7f0000000440)="01586e92a0faae70659abba8b04a912c538b0157d3b96f526ecffd469ac2d8a868fe055d10a271803f4703e9840ce42fc4ab54d32f1200ad2e7b03ff6689e2da5f9360c642dbcadede3a0f95dec6295d65dbc56de35bde89a6ae8d28f1cda248845c05f62ef895ac2536d0530d4e9f2d10844be4a432401f100b95a87cbd0c20a78938b8424fe3713fb0fef93fc883b18397e0d7c8b04acf978811602e8f043d7b5283a4c20613d4728b46e926a9bca9282b37", &(0x7f0000000100)="3f405fdee099d678f4839dba86cd473eb87c7a5e5567273be77f33cb11e0d0186e66a30462d674972d3704afa447bf846c21adb9493e3564d2b65efc74b395bf2e", 0x2, r1, 0x4}, 0x38) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) 42.850930064s ago: executing program 3 (id=3941): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 42.779607537s ago: executing program 3 (id=3942): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000040)="93d90400000304", 0x7}, {&(0x7f0000000140)="0151b1a5f10ecff5", 0x8}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000000280)={0xa, 0x4e23, 0x80004, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r4], 0x18}, 0x40c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010092e50000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r7, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r8, 0x0, 0x4804}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x7fff, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000001100"/20, @ANYRES16=r5, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x845) connect$can_bcm(r9, &(0x7f00000002c0), 0x10) sendmsg$can_bcm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0500000003"], 0x80}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r10}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 42.027633749s ago: executing program 3 (id=3954): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x87}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r3, 0x0, 0xfffffffff7fffffc}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x321, 0xffff, 0x4c, 0x101, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x1, 0x8}}}}}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r9, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd00011100"], 0xfdef) 37.953007937s ago: executing program 6 (id=4018): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x48) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000a, 0x80010, r0, 0x73b79000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="110000000400000002000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"/451], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{}, &(0x7f0000000b80), 0x0}, 0x20) syslog(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0x8, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 37.952365807s ago: executing program 6 (id=4019): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYRES16=r1], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$selinux_validatetrans(r0, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_h:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f0500000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = mq_open(&(0x7f00000003c0)='$@\x00', 0x40, 0x33, 0x0) fcntl$setlease(r9, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x00', 0x1, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000000)=0x1) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000fc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xcf, &(0x7f0000000500)=""/207, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) 37.001479308s ago: executing program 6 (id=4026): r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0xffffffffffffffff}, 0x0, 0x3, 0x0, 0x0, 0xfff, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='cpu==0||!') 36.937032942s ago: executing program 6 (id=4027): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffec, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) 36.884946923s ago: executing program 6 (id=4028): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000040)="93d90400000304", 0x7}, {&(0x7f0000000140)="0151b1a5f10ecff5", 0x8}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000280)={0xa, 0x4e23, 0x80004, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r2], 0x18}, 0x40c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010092e50000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r4, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r5, 0x0, 0x4804}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 36.305826279s ago: executing program 6 (id=4034): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003000600"], 0x69) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 34.164477352s ago: executing program 1 (id=4054): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001480)=@newqdisc={0x260, 0x24, 0x400, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0xffff}, {0xfff1, 0x982c039dc86a6355}, {0xfff2, 0x7}}, [@TCA_STAB={0x138, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x8d, 0xe, 0x5, 0x1, 0x17a0000, 0x5, 0xa}}, {0x18, 0x2, [0x7fff, 0xffff, 0x401, 0xfff, 0x6, 0x2, 0x5, 0x0, 0x0, 0x4]}}, {{0x1c, 0x1, {0x0, 0x6, 0x8, 0x9, 0x2, 0x0, 0x5, 0x8}}, {0x14, 0x2, [0x8, 0x82, 0x80, 0x2, 0x9, 0x6, 0x6, 0x6]}}, {{0x1c, 0x1, {0xb0, 0x72, 0xc679, 0x4, 0x2, 0x3, 0x7fffffff, 0x4}}, {0xc, 0x2, [0x2, 0x86d, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x6, 0xc, 0x5, 0x0, 0x2, 0x9, 0x7}}, {0x12, 0x2, [0x3, 0x8, 0x0, 0x2, 0x7430, 0x0, 0x1]}}, {{0x1c, 0x1, {0x5, 0xb0, 0x3, 0x800, 0x2, 0x401, 0x6e, 0x2}}, {0x8, 0x2, [0x800, 0xb]}}, {{0x1c, 0x1, {0x2, 0x1, 0x9a3b, 0x0, 0x2, 0x7, 0xc0f, 0x2}}, {0x8, 0x2, [0x1, 0x7]}}, {{0x1c, 0x1, {0x6, 0x9, 0x5, 0x4, 0x0, 0x6, 0x0, 0x7}}, {0x12, 0x2, [0x1, 0xfc01, 0x4, 0x101, 0x7fff, 0xffff, 0x9]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @qdisc_kind_options=@q_cbq={{0x8}, {0xdc, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x401, 0x38, 0x8, 0x4}}, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x3, 0x2, 0xffff, 0x3}}, @TCA_CBS_PARMS={0x18, 0x1, {0xff, '\x00', 0x5, 0x2, 0x3, 0x2}}, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0xc, 0x2e, 0x2213, 0x93749ff}}, @TCA_CBS_PARMS={0x18, 0x1, {0xb, '\x00', 0xc8, 0x3, 0x80000003, 0x401}}, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x1, 0x78, 0x7, 0x3}}, @TCA_CBS_PARMS={0x18, 0x1, {0xb, '\x00', 0x11, 0x1, 0x6, 0x8}}, @TCA_CBS_PARMS={0x18, 0x1, {0x9, '\x00', 0x1ff, 0x5, 0x2, 0x80000000}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7f, '\x00', 0x1, 0x8, 0x10001, 0x6}}]}}]}, 0x260}, 0x1, 0x0, 0x0, 0x81}, 0x20040894) socket(0x10, 0x803, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c3000000b5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x18) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101002, 0x2c) prctl$PR_SET_SECCOMP(0x4e, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) 33.335161018s ago: executing program 1 (id=4063): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x3, 0x309, 0x38, 0xfffffffc, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_clone(0x80012880, &(0x7f0000000240)="c8442e96d30685b8a326b5b522d7063bd95fbaf19d5b23696e2aa43c6b4cd7d151d1fb3b93e9eeb33447b7b6ba2d99a506040b7edfaf64725abb6566554a6cf6041ca38c7b50f8dd318683204230104754ec97a122014a99e625fefae3d4259d4032d255eecb3fd8a68f9d73f732b2a1074a588deaf5934fcc9114a5c6142be1f29c1b7644e7bd1391a4b8a6c4418d26e38e5e77989b20453efa3787f7d36b556a1b5e6d2ceeac77fbb777da3185c2f9dee1fa26dba5875d12eb7f028f2670001e1e15234928c452c060fa96c9716cfd2ef43eee4fff4a0099f5474f4fbf16a7911f3431d95bcd72fa734a5aa4903aa23241fa66ad3b", 0xf6, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000340)="fa8e9dc0eae48c821ee6bec918f29a917aaac1fb4a01b6a898575de8729dc475ff54bd267e786f900748f3bb5a487b7d3d133b57c09de1c810088db6b2d19fd968eae023a1f851e5d4fba4d5a73d6735c79af3c0f53ced45080f11b5f062cac9265e897b059d342db878d6ea7fd904632dea346e89e59cf14e8cb8064cc8189c271b4c06c97331cbe748423c4b05597c9414b141eba8d4886c5c047272171ea0179de975db6abce2ec429fb735081130dccb6a7dbb47a77bf1af9e09df50a5c5cc1aabd3a9da3bbd50194769465b8e78bbc7a51784d919f9ddcb2817337a5d64972439f7bcb5b047ea760d26b007438ddb31028e89") setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xb8, 0xb8, 0xb8, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x5, 0x0, {[{{@ip={@remote, @remote, 0xff, 0xff000000, 'geneve1\x00', 'pimreg1\x00', {}, {0xff}, 0x11, 0x0, 0x10}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private=0xa010101, @broadcast, 0xffffffff, 0xffffff00, 'veth1_macvtap\x00', 'rose0\x00', {}, {}, 0xa, 0x1}, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r4 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r4, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) flock(r6, 0x1) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x2, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r7, {0xc, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x40009) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "7750939af8543bbe741ddea0b3675c3a"}]}}]}, 0x48}}, 0x24040084) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002080)=@newtaction={0x898, 0x30, 0xfbed, 0x70bd29, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x10000, 0x0, 0x0, 0x400000, 0x0, 0xfffffffd, 0x6, 0x0, 0x0, 0x5, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x46fbd068, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x894e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xcd9, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x319e, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x2, 0x0, 0x2, 0x0, 0x400]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0xfffc, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) read$hidraw(0xffffffffffffffff, &(0x7f0000000240)=""/88, 0x58) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x198, 0x200, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x10, 'fsm\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @common=@frag={{0x30}, {[0x6, 0x3], 0x3, 0x2, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0xc0000000, 'pptp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00', [0xff, 0xffffff00, 0xff000000, 0xff], [0xff, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) fchownat(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, 0x400) 32.452149247s ago: executing program 1 (id=4066): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000008000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000980)='kfree_skb\x00', r4}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32=r2], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01030000000000001c0012000c000100626f6e64000000000c000200080001000535cb791cf3e5b70232d790d9c04fe43a7bccf8c1da7ccaeb2139e26949091daef3a65ea915fa328ea3e70c9110ba58f2187888ae4d7776b4df2cbc2dc561eaad02975097e535fbd5a237175c2182cb970e188b27e6d601948c2d7647f30ac62ae107bffbd46fb6a6fd4ee99f79ae08ccfaad4753ddce7c44aa8dcefdfec4028ee61b21deb786b416246d65017099d8"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', r9, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r11) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e643000"/94], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r13 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NFC_CMD_ENABLE_SE(r11, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r13, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42001}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 32.36708849s ago: executing program 1 (id=4067): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) timerfd_create(0x0, 0x0) 32.281400214s ago: executing program 1 (id=4069): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000040)="93d90400000304", 0x7}, {&(0x7f0000000140)="0151b1a5f10ecff5", 0x8}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000280)={0xa, 0x4e23, 0x80004, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r2], 0x18}, 0x40c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010092e50000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r4, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r5, 0x0, 0x4804}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 32.223195757s ago: executing program 1 (id=4071): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0xffffffffffffffff}, 0x0, 0x3, 0x0, 0x0, 0xfff, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xe8, 0x2daef}, 0x0, 0x10000, 0x0, 0x0, 0xd8b2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu==0||!') 30.912705753s ago: executing program 5 (id=4076): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffec, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) 30.901751594s ago: executing program 5 (id=4077): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 30.854579336s ago: executing program 5 (id=4078): msgget$private(0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x18) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) wait4(0x0, 0x0, 0x40000000, 0x0) 30.492549942s ago: executing program 5 (id=4080): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b00)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {}, {}, {0xe, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70400000800310000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001"], 0x64}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712b04000000000000000587", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000f80)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}}, 0x24}}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 30.327803079s ago: executing program 5 (id=4081): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000040)="93d90400000304", 0x7}, {&(0x7f0000000140)="0151b1a5f10ecff5", 0x8}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000280)={0xa, 0x4e23, 0x80004, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r2], 0x18}, 0x40c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010092e50000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r4, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 30.190424505s ago: executing program 5 (id=4082): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 26.845604311s ago: executing program 34 (id=3954): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x87}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r3, 0x0, 0xfffffffff7fffffc}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x321, 0xffff, 0x4c, 0x101, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x1, 0x8}}}}}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r9, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd00011100"], 0xfdef) 23.40583964s ago: executing program 0 (id=4107): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES16=r0], 0x118) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000896974c1a729b22d1f4e706ba3a95f75eb87b35ff90b0f97c7956425d62a94f49bfc1f7870df2e26b75eeb3a4667", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, r2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg1\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) 23.070565045s ago: executing program 0 (id=4108): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x10}}], 0x30, 0x8010}, 0x0) 23.000773098s ago: executing program 0 (id=4109): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0xffffffffffffffff}, 0x0, 0x3, 0x0, 0x0, 0xfff, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu==0||!') 23.000201178s ago: executing program 0 (id=4110): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) unshare(0x8000000) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=@base={0x10, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r2, 0x0, &(0x7f00000003c0)=""/69}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$eJzs3M9PE1sUwPHTn7QlUBYv7+W95IUb3ehmAtW10hhIjE0kSI0/EpMBptp0bEmnwdQY0ZVb4x/hgrBkR6L8A2zc6caNOzYmLmRhrOn8oKVMKYVKEb6fhMxhzj3tvZ2SnNt02Lrz+nEhZ2k5vSLBmJKAiMi2yIgExRNwj0E7jkqzF3Jx8NvH/2/dvXcjnclMzig1lZ69lFJKDY++e/Is7g5bH5DNkQdbX1NfNv/e/Hfr5+yjvKXyliqWKkpXc6XPFX3ONNRC3ipoSk2bhm4ZKl+0jLKTLzn5nFlaXKwqvbgwlFgsG5al9GJVFYyqqpRUpVxVoYd6vqg0TVNDCUEn2ZWZGT19yOL5Hk8Gv0m5nNZDIhLfk8mu9GVCAACgr1r7/6CoXvb/q+c2KoO314bd/n896tf/X/7kPNau/j8mIr79v/f8vv2/3l3/v7cjOluO1P/jZBiN7jkVaIT1ZDmtJ9y/X9vL+6tjdkD/DwAAAAAAAAAAAAAAAAAAAADAn2C7VkvWarWkd/R+6rmYiDT/3iIkIlePf8bopXbXf6Dz9ccp0LhxLzwsYr5ayi5lnaM7YENETDFkTJLyw34/uOqxd+eRqhuR9+ayW7+8lA3ZmXRO8nb9uCQj0lpfq01dz0yOK8fu+ogkmutTkpS//OtTvvVRuXC+qV6TpHyYl5KYsmDPo1H/fFypazczLfVxexwAAAAAAKeBpnb47t81rV3eqd/ZX7d+PhBq7K/HfPfnYfkv3N+1AwAAAABwVljVpwXdNI3yPkFcOo9xgsgBxrQG4W4GdxF4Kzxolfddhh5P42CB9+S7UjH3ZM9flkAXL0ubICiHqRqtr0YddRXex0btxsj0xPFfQTv4583b7717wCtrsQ4rPXwQ2v8NEHG//gUAAADgFGk0/d6Zif5OCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAM+g4/jtav9cIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnBS/AgAA//9p2gTn") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) fdatasync(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) 22.904270772s ago: executing program 0 (id=4111): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000040)="93d90400000304", 0x7}, {&(0x7f0000000140)="0151b1a5f10ecff5", 0x8}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000280)={0xa, 0x4e23, 0x80004, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r2], 0x18}, 0x40c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010092e50000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r4, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4804}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 22.853965505s ago: executing program 0 (id=4112): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffd}, 0x18) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x83f, 0xdf5, 0x0, 0x6, 0x15, 0x18, "43f71bca203841a1704d08678ac96ce616a3a94d5eab4defdbe40810d07bf636affae4f0a8453979a4ab9d65268d8559542f476a37b56655246af9a0d568a49e", "40ef5e0a04847b358434a14e810d5026a0da6a15ab4667b744557b7ed168269310eaa267482f0147674e93062cb167a58725f08c584c3794cd9c4a69a9acc2b4", "68025b5daa95e83b8e6030e865f20791fd682ba141798460e7700a83b0d5b659", [0x100000000, 0x38]}) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x21) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf0400000000000007010000f8ffffffb70200000800000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="070000000400000008000000d90000000000000023ce5603ec3fe42c238c2b1f9b256e7673e5c2651cc33f5dd59536ed6ea67b530c22bd25260322aae99328a122bcdb416c05611153862ce139c3d1bb64800b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f0000000980)=ANY=[@ANYBLOB="18e5a16f324eadf338ff07f37352c1eaf715ce72f4000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000078ab000085000000060000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB='\x00\x00']) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0) lseek(r6, 0xc6c3, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f00000003c0)={0x1}) r7 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000004c0)='./file1\x00', 0x3000046, &(0x7f0000000800)={[], [{@dont_hash}, {@euid_lt}, {@fsmagic={'fsmagic', 0x3d, 0x2}}]}, 0x1, 0x57b, &(0x7f0000000c00)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) readlinkat(r7, &(0x7f0000000400)='./file0\x00', &(0x7f0000000600)=""/175, 0xaf) bind$bt_hci(r8, &(0x7f0000000480)={0x1f, 0x0, 0x1}, 0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)={0x2c, r10, 0x1, 0x70bd2d, 0xfffffffa, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f0000000580)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000008c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYRES32=0x0, @ANYBLOB="0500030000000000cc1ee3a0dc2d23d0f9659de28167e770022883bac602856daa790065d6599d8d83b84814b541fda3c29d1d0d76ccbf78824ef6197c233280d3287698cff447514e97d63d010bb28d119e9c9632a76e2b09968b1b12fe8fa200000000004085f6d457ec7daa2e"], 0x38}, 0x1, 0x0, 0x0, 0x820}, 0x68000) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c006600", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf250f0000000500a30000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r11, 0x0, 0x1d6}, 0x18) write$cgroup_type(r8, &(0x7f0000000180), 0xfffffe51) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r12, 0x4b47, &(0x7f0000000000)={0x1, 0x7f, 0x9}) 21.259938204s ago: executing program 35 (id=4034): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003000600"], 0x69) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 16.806604268s ago: executing program 36 (id=4071): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0xffffffffffffffff}, 0x0, 0x3, 0x0, 0x0, 0xfff, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xe8, 0x2daef}, 0x0, 0x10000, 0x0, 0x0, 0xd8b2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu==0||!') 14.604180594s ago: executing program 37 (id=4082): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 11.738286618s ago: executing program 7 (id=4150): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0xffffffffffffffff}, 0x0, 0x3, 0x0, 0x0, 0xfff, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) 11.629319033s ago: executing program 7 (id=4151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@getchain={0x24, 0x66, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xffff, 0x3}, {0xfff1, 0x56e7de01af07971a}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) close(r3) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f00000003c0)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x6}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x64, 0x6000, 0x1, 0x6, 0x0, @broadcast, @loopback}, {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x7, 0x0, 0x2}}}}}}}, 0x3a) 10.731737102s ago: executing program 9 (id=4124): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410884, &(0x7f00000001c0)={[{@nouid32}, {@acl}]}, 0x1, 0x77c, &(0x7f0000001900)="$eJzs3ctrXFUYAPDvTpKmTWsTQdC6CggaKJ2YGlsFFxUXIlgo6Np2mExDzSRTMpPShIAWEVwoqLgQdNO1j7pz62Or/4ULsVRNixVBidzJ3HbaTNIknWSi8/vBTc65jznnm/s4Z+Ye7gTQtYbTP7mIQxHxfhIx2JifRERfPdUbcWJlvZtLi8V0SmJ5+ZXfkvo6N5YWi9G0TWp/I/NIRHz3dsTh3Opyq/MLU4VyuTTbyI/Wps+PVucXjpybLkyWJkszx8bGx48ef/r4sfbF+sePCweufvDiE1+e+Outh6+8930SJ+JAY1lzHO0yHMON96QvfQvv8EK7C+uwpNMVYEvSU7Nn5SyPQzEYPfUUAPB/9kZELAMAXSbR/gNAl8m+B7ixtFjMps5+I7Gzrj0fEXtX4s/ub64s6W3cs9tbvw86cCO5485IEhFDbSh/OCI+/fq1z9Mptuk+JEArb16KiDNDw6uv/8mqMQub9eQ6y/Y0/g/fNd/1D3bON2n/55lW/b/crf5PtOj/9Lc4d7finuf/vjYUso60//dc09i2m03xNwz1NHIP1Pt8fcnZc+VSem07GBEj0def5sfWKWPk+j/X756XvXq9//f3Sv/v9w9f/ywtP/3ftOYvvf13bjtRqBXuN+7MtUsRj/a2ij+5tf+TNfq/pzZYxkvPvvPJWsvS+NN4s2l1/NEYnbQ9li9HPN5y/98e0ZasOz5xtH44jGYHRQtf/fTxwFrlN/f/0yktP/sssBPS/T+wfvxDSfN4zermy/jh8uC3ay27d/ytj/89yav1dNaPuFio1WbHIvYkL6+ef/T2tlk+Wz+Nf+Sx1uf/esd/+pnwzAbj77366xfvHtxq/NsrjX9iU/t/84krN6d61ip/Y/t/vJ4aaczZyPVvoxW8n/cOAAAAAAAAAAAAAAAAAAAAAAAAADYqFxEHIsnlb6VzuXx+5Te8H4qBXLlSrR0+W5mbmYj6b2UPRV8ue9TlYNPzUMcaz8PP8kfvyj8VEQ9GxEf9+5LsOYoTHY4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADL71/j9/9TP/Z2uHQCwbfZ2ugIAwI7T/gNA99H+A0D30f4DQPfR/gNA99H+AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsM1OnTyZTst/Li0W0/zEhfm5qcqFIxOl6lR+eq6YL1Zmz+cnK5XJcilfrEzf6/XKlcr58ZiZuzhaK1Vro9X5hdPTlbmZ2ulz04XJ0ulS345EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACbU51fmCqUy6VZiS0klu9r82SXRNGGRE/jcNot9dnRRLI7qtHmRIcvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/Ef8GAAD//+GAI2c=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000006800010002000000b5b6c03900000000000000000c00020001000000040000000c512cadb2b88b3f55f7f4df6e9d8ecc9bc89a66ea6fb54381a567b52a0d43154b4a39ae3d171b9a1770e5f4c80531f11585aa6b8caf60784f7e3f34cf0bc136512aa93ab375a943291e3c8bb101490a98eac7124c07659ba15dae7db30d853c69dab4cff677f4daf3d373a2bf4607dc128cdb068ccb7e49af3578f3e8878ffad23a7b338b9bff1e39fdb60cf2356dbe66ca61bee015e4ac8168a92d2767e6d36b003c1e5e52b46444a9"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000440)={'syztnl0\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x3, 0x5e55b37311de6d89, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 9.817778963s ago: executing program 9 (id=4158): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000040)="93d90400000304", 0x7}, {&(0x7f0000000140)="0151b1a5f10ecff5", 0x8}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000280)={0xa, 0x4e23, 0x80004, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r2], 0x18}, 0x40c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010092e50000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r3, 0x0, 0x4804}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 9.702368717s ago: executing program 9 (id=4160): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x65}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010000000000000006400000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]}) syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1224, &(0x7f0000002480)="$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") r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x26642) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8=r4, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYRES64=r2, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f00000009c0)={[{@norecovery}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x400}}, {@resuid}, {@usrquota}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@delalloc}, {@nolazytime}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r5 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r5, 0x0, 0x0, 0x1001f0) copy_file_range(r5, 0x0, r5, &(0x7f00000000c0)=0xc615, 0x101, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000001a0095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x1a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000cc001000ffff27bd70fc28abc034a4801458230cc529b59ade51b9e40086dcf53506b592586ab4126acc09df12943ef82a0863644af9d40141efa20b68a9cb225c616a6c530384e017182d414433cd94db21fb281fd7c0905bbaedbc11f92c42b893ac797dd976e54bf0fe9b036299b804a9726ac6333bb7fbafcb4bad39a8b7dbea47e3e62278bcd7ea6b678acaad22067dc12efe3cf6ee5b608253ca0b", @ANYRES32=0x0, @ANYBLOB="150c0000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) r10 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000180)=ANY=[@ANYBLOB="2d6354756163630600000025745f636c7320"], 0x12) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r8, 0x4018f50b, &(0x7f00000001c0)={0x0, 0x2, 0xc}) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000b00)=""/4096) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) 9.693444568s ago: executing program 7 (id=4161): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 9.628276s ago: executing program 7 (id=4163): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001480)=@newqdisc={0x27c, 0x24, 0x400, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0xffff}, {0xfff1, 0x982c039dc86a6355}, {0xfff2, 0x7}}, [@TCA_STAB={0x154, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x8d, 0xe, 0x5, 0x1, 0x17a0000, 0x5, 0xa}}, {0x18, 0x2, [0x7fff, 0xffff, 0x401, 0xfff, 0x6, 0x2, 0x5, 0x0, 0x0, 0x4]}}, {{0x1c, 0x1, {0x0, 0x6, 0x8, 0x9, 0x2, 0x0, 0x5, 0x8}}, {0x14, 0x2, [0x8, 0x82, 0x80, 0x2, 0x9, 0x6, 0x6, 0x6]}}, {{0x1c, 0x1, {0xb0, 0x72, 0xc679, 0x4, 0x2, 0x3, 0x7fffffff, 0x4}}, {0xc, 0x2, [0x2, 0x86d, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x6, 0xc, 0x5, 0x0, 0x2, 0x9, 0x7}}, {0x12, 0x2, [0x3, 0x8, 0x0, 0x2, 0x7430, 0x0, 0x1]}}, {{0x1c, 0x1, {0x5, 0xb0, 0x3, 0x800, 0x2, 0x401, 0x6e, 0x2}}, {0x8, 0x2, [0x800, 0xb]}}, {{0x1c, 0x1, {0x2, 0x1, 0x9a3b, 0x0, 0x2, 0x7, 0xc0f, 0x2}}, {0x8, 0x2, [0x1, 0x7]}}, {{0x1c, 0x1, {0x6, 0x9, 0x5, 0x4, 0x0, 0x6, 0x0, 0x6}}, {0x10, 0x2, [0xfc01, 0x4, 0x101, 0x7fff, 0xffff, 0x9]}}, {{0x1c, 0x1, {0x3, 0x9, 0x2, 0x11, 0x0, 0x4, 0xfb}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @qdisc_kind_options=@q_cbq={{0x8}, {0xdc, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x401, 0x38, 0x8, 0x4}}, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x3, 0x2, 0xffff, 0x3}}, @TCA_CBS_PARMS={0x18, 0x1, {0xff, '\x00', 0x5, 0x2, 0x3, 0x2}}, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0xc, 0x2e, 0x2213, 0x93749ff}}, @TCA_CBS_PARMS={0x18, 0x1, {0xb, '\x00', 0xc8, 0x3, 0x80000003, 0x401}}, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x1, 0x78, 0x7, 0x3}}, @TCA_CBS_PARMS={0x18, 0x1, {0xb, '\x00', 0x11, 0x1, 0x6, 0x8}}, @TCA_CBS_PARMS={0x18, 0x1, {0x9, '\x00', 0x1ff, 0x5, 0x2, 0x80000000}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7f, '\x00', 0x1, 0x8, 0x10001, 0x6}}]}}]}, 0x27c}, 0x1, 0x0, 0x0, 0x81}, 0x20040894) socket(0x10, 0x803, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c3000000b5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101002, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00'}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r3, &(0x7f0000000200)=ANY=[], 0xff2e) 8.388278934s ago: executing program 7 (id=4169): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000040)="93d90400000304", 0x7}, {&(0x7f0000000140)="0151b1a5f10ecff5", 0x8}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000280)={0xa, 0x4e23, 0x80004, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r2], 0x18}, 0x40c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010092e50000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r3, 0x0, 0x4804}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 8.332618907s ago: executing program 7 (id=4171): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) 7.946938524s ago: executing program 4 (id=4176): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, 0x0, 0x40) 7.864622417s ago: executing program 4 (id=4177): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpgrp(0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff07}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x12020, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x200000000004, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x400}, &(0x7f0000000000)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x3) writev(r5, &(0x7f0000000240)=[{0x0}, {&(0x7f00000001c0)='(', 0x1}], 0x2) io_uring_enter(r2, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r6, 0x40044591, 0x0) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x38, 0x2}, @cond=[{0x2, 0x5, 0x40, 0x9, 0x8001, 0xfc01}, {0x9, 0x6, 0x401, 0x3, 0x2000, 0x8}]}) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) 7.783393221s ago: executing program 38 (id=4112): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffd}, 0x18) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x83f, 0xdf5, 0x0, 0x6, 0x15, 0x18, "43f71bca203841a1704d08678ac96ce616a3a94d5eab4defdbe40810d07bf636affae4f0a8453979a4ab9d65268d8559542f476a37b56655246af9a0d568a49e", "40ef5e0a04847b358434a14e810d5026a0da6a15ab4667b744557b7ed168269310eaa267482f0147674e93062cb167a58725f08c584c3794cd9c4a69a9acc2b4", "68025b5daa95e83b8e6030e865f20791fd682ba141798460e7700a83b0d5b659", [0x100000000, 0x38]}) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x21) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf0400000000000007010000f8ffffffb70200000800000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="070000000400000008000000d90000000000000023ce5603ec3fe42c238c2b1f9b256e7673e5c2651cc33f5dd59536ed6ea67b530c22bd25260322aae99328a122bcdb416c05611153862ce139c3d1bb64800b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f0000000980)=ANY=[@ANYBLOB="18e5a16f324eadf338ff07f37352c1eaf715ce72f4000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000078ab000085000000060000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB='\x00\x00']) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0) lseek(r6, 0xc6c3, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f00000003c0)={0x1}) r7 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000004c0)='./file1\x00', 0x3000046, &(0x7f0000000800)={[], [{@dont_hash}, {@euid_lt}, {@fsmagic={'fsmagic', 0x3d, 0x2}}]}, 0x1, 0x57b, &(0x7f0000000c00)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) readlinkat(r7, &(0x7f0000000400)='./file0\x00', &(0x7f0000000600)=""/175, 0xaf) bind$bt_hci(r8, &(0x7f0000000480)={0x1f, 0x0, 0x1}, 0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)={0x2c, r10, 0x1, 0x70bd2d, 0xfffffffa, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f0000000580)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000008c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYRES32=0x0, @ANYBLOB="0500030000000000cc1ee3a0dc2d23d0f9659de28167e770022883bac602856daa790065d6599d8d83b84814b541fda3c29d1d0d76ccbf78824ef6197c233280d3287698cff447514e97d63d010bb28d119e9c9632a76e2b09968b1b12fe8fa200000000004085f6d457ec7daa2e"], 0x38}, 0x1, 0x0, 0x0, 0x820}, 0x68000) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c006600", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf250f0000000500a30000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r11, 0x0, 0x1d6}, 0x18) write$cgroup_type(r8, &(0x7f0000000180), 0xfffffe51) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r12, 0x4b47, &(0x7f0000000000)={0x1, 0x7f, 0x9}) 7.781077571s ago: executing program 4 (id=4179): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001480)=@newqdisc={0x27c, 0x24, 0x400, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0xffff}, {0xfff1, 0x982c039dc86a6355}, {0xfff2, 0x7}}, [@TCA_STAB={0x154, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x8d, 0xe, 0x5, 0x1, 0x17a0000, 0x5, 0xa}}, {0x18, 0x2, [0x7fff, 0xffff, 0x401, 0xfff, 0x6, 0x2, 0x5, 0x0, 0x0, 0x4]}}, {{0x1c, 0x1, {0x0, 0x6, 0x8, 0x9, 0x2, 0x0, 0x5, 0x8}}, {0x14, 0x2, [0x8, 0x82, 0x80, 0x2, 0x9, 0x6, 0x6, 0x6]}}, {{0x1c, 0x1, {0xb0, 0x72, 0xc679, 0x4, 0x2, 0x3, 0x7fffffff, 0x4}}, {0xc, 0x2, [0x2, 0x86d, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x6, 0xc, 0x5, 0x0, 0x2, 0x9, 0x7}}, {0x12, 0x2, [0x3, 0x8, 0x0, 0x2, 0x7430, 0x0, 0x1]}}, {{0x1c, 0x1, {0x5, 0xb0, 0x3, 0x800, 0x2, 0x401, 0x6e, 0x2}}, {0x8, 0x2, [0x800, 0xb]}}, {{0x1c, 0x1, {0x2, 0x1, 0x9a3b, 0x0, 0x2, 0x7, 0xc0f, 0x2}}, {0x8, 0x2, [0x1, 0x7]}}, {{0x1c, 0x1, {0x6, 0x9, 0x5, 0x4, 0x0, 0x6, 0x0, 0x6}}, {0x10, 0x2, [0xfc01, 0x4, 0x101, 0x7fff, 0xffff, 0x9]}}, {{0x1c, 0x1, {0x3, 0x9, 0x2, 0x11, 0x0, 0x4, 0xfb}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @qdisc_kind_options=@q_cbq={{0x8}, {0xdc, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x401, 0x38, 0x8, 0x4}}, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x3, 0x2, 0xffff, 0x3}}, @TCA_CBS_PARMS={0x18, 0x1, {0xff, '\x00', 0x5, 0x2, 0x3, 0x2}}, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0xc, 0x2e, 0x2213, 0x93749ff}}, @TCA_CBS_PARMS={0x18, 0x1, {0xb, '\x00', 0xc8, 0x3, 0x80000003, 0x401}}, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x1, 0x78, 0x7, 0x3}}, @TCA_CBS_PARMS={0x18, 0x1, {0xb, '\x00', 0x11, 0x1, 0x6, 0x8}}, @TCA_CBS_PARMS={0x18, 0x1, {0x9, '\x00', 0x1ff, 0x5, 0x2, 0x80000000}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7f, '\x00', 0x1, 0x8, 0x10001, 0x6}}]}}]}, 0x27c}, 0x1, 0x0, 0x0, 0x81}, 0x20040894) socket(0x10, 0x803, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c3000000b5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101002, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00'}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r3, &(0x7f0000000200)=ANY=[], 0xff2e) 6.89147507s ago: executing program 4 (id=4181): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42}, 0x58) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @private=0xa010101}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r4, 0x40083, 0x602a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xd}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x40, 0x90, 0x3, 0xb, {{0x27, 0x4, 0x2, 0x8, 0x9c, 0x68, 0x0, 0x7, 0x29, 0x0, @broadcast, @local, {[@timestamp_prespec={0x44, 0x4c, 0xd3, 0x3, 0x0, [{@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0xa}, 0xf603}, {@empty, 0x70192e7d}, {@multicast2, 0xffff}, {@loopback, 0x293}, {@empty, 0x5}, {@broadcast, 0x6}, {@multicast2, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @cipso={0x86, 0xe, 0x3, [{0x0, 0x8, "90a316ce9050"}]}, @generic={0x82, 0x2}, @rr={0x7, 0x2b, 0x46, [@loopback, @multicast2, @remote, @multicast1, @local, @multicast2, @private=0xa010101, @local, @empty, @local]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r1, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0xc4001) 6.699847288s ago: executing program 4 (id=4182): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000040)="93d90400000304", 0x7}, {&(0x7f0000000140)="0151b1a5f10ecff5", 0x8}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000280)={0xa, 0x4e23, 0x80004, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r1], 0x18}, 0x40c0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x4804}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 6.628737271s ago: executing program 4 (id=4184): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, 0x0, 0x0, 0x91, 0x20000000) 3.310986215s ago: executing program 2 (id=4178): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 3.241964789s ago: executing program 2 (id=4203): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='mm_page_free\x00', r1, 0x0, 0x1000000}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 3.165790822s ago: executing program 2 (id=4205): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4, @ANYBLOB="b081c5a0e88dd5d4e291c1e04661a27dac2a996efbe4e27fcc9068bc38c92f579cc6b697ebe5befdf948915da36e3d4f53e344958040d644bd2a342354d4e2866fac445bf21d7013"], 0x3c}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000400)={@multicast1, @dev, 0x0}, &(0x7f0000000480)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000002680)=ANY=[@ANYBLOB="18120000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="08000300010000001400020076657468315f746f5f62726964676500080003000400000054000180080003000100000008000300000000001400020076657468315f746f5f627269646765001400020076657468315f6d6163767461700000000800030001000000080003000000000008000100", @ANYRES32=r6, @ANYBLOB], 0x1218}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0xfffe, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x1}, 0x865) r7 = syz_io_uring_setup(0x56b1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000580)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r9, 0x0, 0x401}, 0x11) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000240), 0x4) r10 = socket(0x2a, 0x2, 0x0) accept$packet(r10, 0x0, &(0x7f0000000100)) r11 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r11}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r11}) 2.845856216s ago: executing program 2 (id=4212): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 2.825394917s ago: executing program 2 (id=4213): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000980)={0x70, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x0, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "178dd34da42d9f1fc984a9544cdaa82ac30e2131e77ed854"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x0, 0xe7, "dd0174abe7b98bfadf97e0e3c2e59dfd005d49613f297627"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5504069b3f3bbbf87c27af96b30caf9ea21bc9f65bff9858"}]]}, 0xffffffffffffffbc}, 0x1, 0x0, 0x0, 0x20000000}, 0x40048d0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'nicvf0\x00', 0x3420}) socket(0x10, 0x802, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r4}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000800), &(0x7f0000000840)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='kmem_cache_free\x00', r6, 0x0, 0x80000}, 0x18) msgsnd(0x0, 0x0, 0x7f, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newtaction={0x80, 0x30, 0x1, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0xffffffffffffffff}}, @TCA_CT_MARK={0x8, 0x10, 0x80000000}, @TCA_CT_LABELS={0x14, 0x7, "0118aae167fe4bb4d318e45cb16cfc7a"}, @TCA_CT_ACTION={0x6, 0x3, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r9 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x34, 0x0) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r10, 0xc0145401, &(0x7f0000000040)={0x1, 0x1, 0xab0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mq_getsetattr(r9, &(0x7f0000000240)={0x0, 0x80, 0x2, 0xfffe}, &(0x7f0000000280)) 352.530645ms ago: executing program 8 (id=4226): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001480)=@newqdisc={0x27c, 0x24, 0x400, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0xffff}, {0xfff1, 0x982c039dc86a6355}, {0xfff2, 0x7}}, [@TCA_STAB={0x154, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x8d, 0xe, 0x5, 0x1, 0x17a0000, 0x5, 0xa}}, {0x18, 0x2, [0x7fff, 0xffff, 0x401, 0xfff, 0x6, 0x2, 0x5, 0x0, 0x0, 0x4]}}, {{0x1c, 0x1, {0x0, 0x6, 0x8, 0x9, 0x2, 0x0, 0x5, 0x8}}, {0x14, 0x2, [0x8, 0x82, 0x80, 0x2, 0x9, 0x6, 0x6, 0x6]}}, {{0x1c, 0x1, {0xb0, 0x72, 0xc679, 0x4, 0x2, 0x3, 0x7fffffff, 0x4}}, {0xc, 0x2, [0x2, 0x86d, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x6, 0xc, 0x5, 0x0, 0x2, 0x9, 0x7}}, {0x12, 0x2, [0x3, 0x8, 0x0, 0x2, 0x7430, 0x0, 0x1]}}, {{0x1c, 0x1, {0x5, 0xb0, 0x3, 0x800, 0x2, 0x401, 0x6e, 0x2}}, {0x8, 0x2, [0x800, 0xb]}}, {{0x1c, 0x1, {0x2, 0x1, 0x9a3b, 0x0, 0x2, 0x7, 0xc0f, 0x2}}, {0x8, 0x2, [0x1, 0x7]}}, {{0x1c, 0x1, {0x6, 0x9, 0x5, 0x4, 0x0, 0x6, 0x0, 0x6}}, {0x10, 0x2, [0x1, 0xfc01, 0x4, 0x7fff, 0xffff, 0x9]}}, {{0x1c, 0x1, {0x3, 0x9, 0x2, 0x11, 0x0, 0x4, 0xfb}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @qdisc_kind_options=@q_cbq={{0x8}, {0xdc, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x401, 0x38, 0x8, 0x4}}, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x3, 0x2, 0xffff, 0x3}}, @TCA_CBS_PARMS={0x18, 0x1, {0xff, '\x00', 0x5, 0x2, 0x3, 0x2}}, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0xc, 0x2e, 0x2213, 0x93749ff}}, @TCA_CBS_PARMS={0x18, 0x1, {0xb, '\x00', 0xc8, 0x3, 0x80000003, 0x401}}, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x1, 0x78, 0x7, 0x3}}, @TCA_CBS_PARMS={0x18, 0x1, {0xb, '\x00', 0x11, 0x1, 0x6, 0x8}}, @TCA_CBS_PARMS={0x18, 0x1, {0x9, '\x00', 0x1ff, 0x5, 0x2, 0x80000000}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7f, '\x00', 0x1, 0x8, 0x10001, 0x6}}]}}]}, 0x27c}, 0x1, 0x0, 0x0, 0x81}, 0x20040894) socket(0x10, 0x803, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c3000000b5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x18) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101002, 0x2c) prctl$PR_SET_SECCOMP(0x4e, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) 305.365717ms ago: executing program 8 (id=4227): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 222.31233ms ago: executing program 8 (id=4228): removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 191.891712ms ago: executing program 8 (id=4229): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_type(r0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xe, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r4}, @call={0x85, 0x0, 0x0, 0x2b}, @printk={@x}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) write$cgroup_type(r1, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xffffffcf, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xe) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000040)={0x6, 0x0, 0x8, 0xfffff62a, 0x14, "127c3c273aaf1639f1f2a46c613859452ca5a3"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 16.642009ms ago: executing program 8 (id=4230): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x278}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 0s ago: executing program 8 (id=4231): socket(0x28, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000100002020702500000020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9998500000004000000951fa2500bcd579c5be7cb332f5e659694582f5428aa5f88402b3a0229be9e7251ada1957ce8b6183d38ae4622cccf83a2aabeaf91d6ba679d2a8cdfd7d9ceb2c47af6fadc6fec353ded622065333528351471c08d7b1a8cd87303eef4ab8b06aad7e0e945488dc26a04c427f5e5"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000540)='global_dirty_state\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000af8010000120a010200000000000000000200fffe0900020073797a310000000008000440000000000900010073797a30000000000800034000000008"], 0x220}, 0x1, 0x0, 0x0, 0x890}, 0x4040) r5 = socket$netlink(0x10, 0x3, 0xc) splice(r1, 0x0, r5, 0x0, 0x10d00, 0xf) r6 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000003c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r8, @ANYBLOB="0100252100000008000300", @ANYRES32=r3, @ANYBLOB="24002d8005000100"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sigaltstack(&(0x7f0000000000)={&(0x7f0000000400)=""/172, 0x80000000, 0xac}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r11 = syz_pidfd_open(r6, 0x0) setns(r11, 0x24020000) r12 = syz_clone(0x30288000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r12) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000680)={0x5, &(0x7f0000000640)=[{0x0, 0x81, 0x80, 0x8001}, {0xfff, 0x0, 0xbd, 0x1}, {0x5, 0x9, 0x8, 0xfd}, {0x7, 0x3, 0x7, 0x1}, {0xf53, 0x1, 0x7, 0x9}]}) wait4(r12, 0x0, 0x8, 0x0) kernel console output (not intermixed with test programs): 28][ T3449] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.145015][T14989] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3791'. [ 348.159070][ T3449] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.267941][ T3449] bridge_slave_1: left allmulticast mode [ 348.273734][ T3449] bridge_slave_1: left promiscuous mode [ 348.279444][ T3449] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.289439][ T3449] bridge_slave_0: left allmulticast mode [ 348.295157][ T3449] bridge_slave_0: left promiscuous mode [ 348.300982][ T3449] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.389287][T15004] 9pnet_fd: Insufficient options for proto=fd [ 348.419170][T15004] loop3: detected capacity change from 0 to 1024 [ 348.436280][T15004] ext4: Unknown parameter 'dont_hash' [ 348.451768][ T3449] batman_adv: batadv0: Interface deactivated: macvtap1 [ 348.459913][ T3449] batman_adv: batadv0: Interface deactivated: macvtap2 [ 348.466920][ T3449] batman_adv: batadv0: Interface deactivated: macvtap3 [ 348.473921][ T3449] batman_adv: batadv0: Interface deactivated: macvtap4 [ 348.481822][ T3449] batman_adv: batadv0: Interface deactivated: macvtap5 [ 348.488918][ T3449] batman_adv: batadv0: Interface deactivated: macvtap6 [ 348.495826][ T3449] batman_adv: batadv0: Interface deactivated: macvtap7 [ 348.503484][ T3449] batman_adv: batadv0: Interface deactivated: macvtap8 [ 348.510579][ T3449] batman_adv: batadv0: Interface deactivated: macvtap9 [ 348.518000][ T3449] batman_adv: batadv0: Interface deactivated: macvtap10 [ 348.525075][ T3449] batman_adv: batadv0: Interface deactivated: macvtap11 [ 348.532327][ T3449] batman_adv: batadv0: Interface deactivated: macvtap12 [ 348.539546][ T3449] bridge0 (unregistering): left allmulticast mode [ 348.558643][ T3449] batman_adv: batadv0: Removing interface: macvtap1 [ 348.567586][ T3449] batman_adv: batadv0: Removing interface: macvtap2 [ 348.576197][ T3449] batman_adv: batadv0: Removing interface: macvtap3 [ 348.585085][ T3449] batman_adv: batadv0: Removing interface: macvtap4 [ 348.594582][ T3449] batman_adv: batadv0: Removing interface: macvtap5 [ 348.603955][ T3449] batman_adv: batadv0: Removing interface: macvtap6 [ 348.613540][ T3449] batman_adv: batadv0: Removing interface: macvtap7 [ 348.623016][ T3449] batman_adv: batadv0: Removing interface: macvtap8 [ 348.631848][ T3449] batman_adv: batadv0: Removing interface: macvtap9 [ 348.640891][ T3449] batman_adv: batadv0: Removing interface: macvtap10 [ 348.649881][ T3449] batman_adv: batadv0: Removing interface: macvtap11 [ 348.659281][ T3449] batman_adv: batadv0: Removing interface: macvtap12 [ 348.912177][T15009] netlink: 'wg1': attribute type 6 has an invalid length. [ 349.087140][T15014] FAULT_INJECTION: forcing a failure. [ 349.087140][T15014] name failslab, interval 1, probability 0, space 0, times 0 [ 349.099908][T15014] CPU: 1 UID: 0 PID: 15014 Comm: syz.0.3800 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 349.100004][T15014] Tainted: [W]=WARN [ 349.100010][T15014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 349.100021][T15014] Call Trace: [ 349.100028][T15014] [ 349.100036][T15014] __dump_stack+0x1d/0x30 [ 349.100078][T15014] dump_stack_lvl+0xe8/0x140 [ 349.100096][T15014] dump_stack+0x15/0x1b [ 349.100130][T15014] should_fail_ex+0x265/0x280 [ 349.100226][T15014] should_failslab+0x8c/0xb0 [ 349.100252][T15014] __kmalloc_noprof+0xa5/0x570 [ 349.100385][T15014] ? fib_nl2rule+0x215/0xc50 [ 349.100408][T15014] fib_nl2rule+0x215/0xc50 [ 349.100430][T15014] fib_delrule+0x2ae/0x10b0 [ 349.100469][T15014] ? xas_load+0x413/0x430 [ 349.100513][T15014] ? __rcu_read_unlock+0x4f/0x70 [ 349.100537][T15014] ? xa_load+0xb1/0xe0 [ 349.100554][T15014] ? __rcu_read_unlock+0x4f/0x70 [ 349.100596][T15014] fib_nl_delrule+0x46/0x60 [ 349.100617][T15014] ? __pfx_fib_nl_delrule+0x10/0x10 [ 349.100639][T15014] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 349.100661][T15014] ? avc_has_perm_noaudit+0x1b1/0x200 [ 349.100785][T15014] netlink_rcv_skb+0x123/0x220 [ 349.100814][T15014] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 349.100842][T15014] rtnetlink_rcv+0x1c/0x30 [ 349.100926][T15014] netlink_unicast+0x5c0/0x690 [ 349.100957][T15014] netlink_sendmsg+0x58b/0x6b0 [ 349.101001][T15014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.101024][T15014] __sock_sendmsg+0x145/0x180 [ 349.101124][T15014] ____sys_sendmsg+0x31e/0x4e0 [ 349.101144][T15014] ___sys_sendmsg+0x17b/0x1d0 [ 349.101175][T15014] __x64_sys_sendmsg+0xd4/0x160 [ 349.101198][T15014] x64_sys_call+0x191e/0x3000 [ 349.101229][T15014] do_syscall_64+0xd2/0x200 [ 349.101247][T15014] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 349.101273][T15014] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 349.101343][T15014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.101362][T15014] RIP: 0033:0x7f9be4fbf749 [ 349.101376][T15014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.101414][T15014] RSP: 002b:00007f9be39fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.101432][T15014] RAX: ffffffffffffffda RBX: 00007f9be5216090 RCX: 00007f9be4fbf749 [ 349.101453][T15014] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 349.101465][T15014] RBP: 00007f9be39fe090 R08: 0000000000000000 R09: 0000000000000000 [ 349.101476][T15014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.101489][T15014] R13: 00007f9be5216128 R14: 00007f9be5216090 R15: 00007fff0dbb1288 [ 349.101514][T15014] [ 349.103449][ T3449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.376653][ T3449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.386786][ T3449] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 349.399565][ T3449] bond0 (unregistering): Released all slaves [ 349.417980][ T29] kauditd_printk_skb: 461 callbacks suppressed [ 349.417996][ T29] audit: type=1326 audit(1764011809.239:10842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15008 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9ce1f749 code=0x7ffc0000 [ 349.447266][ T29] audit: type=1326 audit(1764011809.239:10843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15008 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9ce1f749 code=0x7ffc0000 [ 349.495251][T15016] loop1: detected capacity change from 0 to 4096 [ 349.502603][ T3449] tipc: Left network mode [ 349.519884][T15016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.609310][ T3449] hsr_slave_0: left promiscuous mode [ 349.647446][ T3449] hsr_slave_1: left promiscuous mode [ 349.666974][ T3449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.674413][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.678694][T15038] loop6: detected capacity change from 0 to 256 [ 349.698013][ T3449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.705466][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.710523][T15038] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 349.753377][ T3449] veth1_macvtap: left promiscuous mode [ 349.765985][ T3449] veth0_macvtap: left promiscuous mode [ 349.781770][ T3449] veth1_vlan: left promiscuous mode [ 349.803079][ T3449] veth0_vlan: left promiscuous mode [ 349.839206][ T29] audit: type=1326 audit(1764011809.669:10844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15049 comm="syz.6.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9ce1f749 code=0x7ffc0000 [ 349.862983][ T29] audit: type=1326 audit(1764011809.669:10845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15049 comm="syz.6.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9ce1f749 code=0x7ffc0000 [ 349.886678][ T29] audit: type=1326 audit(1764011809.669:10846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15049 comm="syz.6.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e9ce1f749 code=0x7ffc0000 [ 349.910535][ T29] audit: type=1326 audit(1764011809.669:10847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15049 comm="syz.6.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9ce1f749 code=0x7ffc0000 [ 349.934333][ T29] audit: type=1326 audit(1764011809.669:10848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15049 comm="syz.6.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9ce1f749 code=0x7ffc0000 [ 349.959188][ T29] audit: type=1326 audit(1764011809.769:10849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15049 comm="syz.6.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e9ce1f749 code=0x7ffc0000 [ 349.982852][ T29] audit: type=1326 audit(1764011809.769:10850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15049 comm="syz.6.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9ce1f749 code=0x7ffc0000 [ 350.006535][ T29] audit: type=1326 audit(1764011809.769:10851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15049 comm="syz.6.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9ce1f749 code=0x7ffc0000 [ 350.062177][T15053] loop3: detected capacity change from 0 to 512 [ 350.108157][T15053] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3814: bg 0: block 248: padding at end of block bitmap is not set [ 350.122850][ T3449] team0 (unregistering): Port device team_slave_0 removed [ 350.159691][T15053] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.3814: Failed to acquire dquot type 1 [ 350.220613][T15053] EXT4-fs (loop3): 1 truncate cleaned up [ 350.268102][T15053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.307062][T15053] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.312110][T12754] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.334118][T12961] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.343592][ T52] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 1 [ 350.411139][T14890] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 350.423016][T14890] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 350.432946][T14890] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 350.450324][T14890] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 350.539678][T14890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.551387][T15092] __nla_validate_parse: 6 callbacks suppressed [ 350.551402][T15092] netlink: 444 bytes leftover after parsing attributes in process `syz.3.3826'. [ 350.573048][ T3449] IPVS: stop unused estimator thread 0... [ 350.592802][T14890] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.613911][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.621186][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.649779][T14890] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 350.660277][T14890] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 350.677463][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.684558][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.712926][T15099] netlink: 'syz.6.3829': attribute type 7 has an invalid length. [ 350.720775][T15099] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3829'. [ 350.790708][T14890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.848249][T15113] loop6: detected capacity change from 0 to 128 [ 350.919744][T15119] bio_check_eod: 27015 callbacks suppressed [ 350.919759][T15119] syz.6.3832: attempt to access beyond end of device [ 350.919759][T15119] loop6: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 350.939327][T15119] syz.6.3832: attempt to access beyond end of device [ 350.939327][T15119] loop6: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 350.953702][T15119] syz.6.3832: attempt to access beyond end of device [ 350.953702][T15119] loop6: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 350.967537][T15119] syz.6.3832: attempt to access beyond end of device [ 350.967537][T15119] loop6: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 350.985868][T15119] syz.6.3832: attempt to access beyond end of device [ 350.985868][T15119] loop6: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 350.999555][T15119] syz.6.3832: attempt to access beyond end of device [ 350.999555][T15119] loop6: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 351.013564][T15119] syz.6.3832: attempt to access beyond end of device [ 351.013564][T15119] loop6: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 351.032884][T15119] syz.6.3832: attempt to access beyond end of device [ 351.032884][T15119] loop6: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 351.047611][T14890] veth0_vlan: entered promiscuous mode [ 351.055664][T14890] veth1_vlan: entered promiscuous mode [ 351.064914][T15119] syz.6.3832: attempt to access beyond end of device [ 351.064914][T15119] loop6: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 351.082619][T15119] syz.6.3832: attempt to access beyond end of device [ 351.082619][T15119] loop6: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 351.097403][T14890] veth0_macvtap: entered promiscuous mode [ 351.104902][T14890] veth1_macvtap: entered promiscuous mode [ 351.117716][T14890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.157339][T14890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.178859][ T52] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.198408][ T52] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.208282][T15125] loop3: detected capacity change from 0 to 512 [ 351.239085][ T52] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.265811][T15125] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.3833: ea_inode file size=0 entry size=6 [ 351.270034][ T52] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.321440][T15125] EXT4-fs (loop3): 1 orphan inode deleted [ 351.360444][T15125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.398691][T15143] FAULT_INJECTION: forcing a failure. [ 351.398691][T15143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.411815][T15143] CPU: 1 UID: 0 PID: 15143 Comm: syz.6.3840 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 351.411855][T15143] Tainted: [W]=WARN [ 351.411864][T15143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 351.411879][T15143] Call Trace: [ 351.411885][T15143] [ 351.411901][T15143] __dump_stack+0x1d/0x30 [ 351.411924][T15143] dump_stack_lvl+0xe8/0x140 [ 351.411949][T15143] dump_stack+0x15/0x1b [ 351.411993][T15143] should_fail_ex+0x265/0x280 [ 351.412036][T15143] should_fail+0xb/0x20 [ 351.412074][T15143] should_fail_usercopy+0x1a/0x20 [ 351.412164][T15143] _copy_from_user+0x1c/0xb0 [ 351.412189][T15143] ___sys_sendmsg+0xc1/0x1d0 [ 351.412249][T15143] __x64_sys_sendmsg+0xd4/0x160 [ 351.412275][T15143] x64_sys_call+0x191e/0x3000 [ 351.412298][T15143] do_syscall_64+0xd2/0x200 [ 351.412383][T15143] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 351.412463][T15143] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 351.412543][T15143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.412568][T15143] RIP: 0033:0x7f5e9ce1f749 [ 351.412588][T15143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.412606][T15143] RSP: 002b:00007f5e9b887038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.412627][T15143] RAX: ffffffffffffffda RBX: 00007f5e9d075fa0 RCX: 00007f5e9ce1f749 [ 351.412666][T15143] RDX: 000000002404c140 RSI: 00002000000000c0 RDI: 0000000000000003 [ 351.412678][T15143] RBP: 00007f5e9b887090 R08: 0000000000000000 R09: 0000000000000000 [ 351.412693][T15143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.412709][T15143] R13: 00007f5e9d076038 R14: 00007f5e9d075fa0 R15: 00007ffe23477328 [ 351.412734][T15143] [ 351.611060][T12961] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.627588][T15141] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3839'. [ 351.746525][T15149] netlink: 444 bytes leftover after parsing attributes in process `syz.6.3843'. [ 351.806100][T15157] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3845'. [ 351.817184][T15158] loop3: detected capacity change from 0 to 512 [ 352.136959][T15160] netlink: 444 bytes leftover after parsing attributes in process `syz.1.3846'. [ 352.884946][T15191] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 352.901760][T15190] FAULT_INJECTION: forcing a failure. [ 352.901760][T15190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.914972][T15190] CPU: 1 UID: 0 PID: 15190 Comm: syz.5.3859 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 352.915047][T15190] Tainted: [W]=WARN [ 352.915056][T15190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 352.915078][T15190] Call Trace: [ 352.915087][T15190] [ 352.915098][T15190] __dump_stack+0x1d/0x30 [ 352.915127][T15190] dump_stack_lvl+0xe8/0x140 [ 352.915153][T15190] dump_stack+0x15/0x1b [ 352.915266][T15190] should_fail_ex+0x265/0x280 [ 352.915313][T15190] should_fail+0xb/0x20 [ 352.915389][T15190] should_fail_usercopy+0x1a/0x20 [ 352.915417][T15190] _copy_from_user+0x1c/0xb0 [ 352.915446][T15190] ethtool_get_stats+0x105/0x2b0 [ 352.915474][T15190] dev_ethtool+0x909/0x1670 [ 352.915499][T15190] ? full_name_hash+0x92/0xe0 [ 352.915566][T15190] dev_ioctl+0x2e0/0x960 [ 352.915647][T15190] sock_do_ioctl+0x197/0x220 [ 352.915681][T15190] sock_ioctl+0x41b/0x610 [ 352.915711][T15190] ? __pfx_sock_ioctl+0x10/0x10 [ 352.915734][T15190] __se_sys_ioctl+0xce/0x140 [ 352.915776][T15190] __x64_sys_ioctl+0x43/0x50 [ 352.915805][T15190] x64_sys_call+0x1816/0x3000 [ 352.915915][T15190] do_syscall_64+0xd2/0x200 [ 352.915947][T15190] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 352.915997][T15190] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 352.916044][T15190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.916112][T15190] RIP: 0033:0x7f2d7e83f749 [ 352.916159][T15190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.916183][T15190] RSP: 002b:00007f2d7d2a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.916207][T15190] RAX: ffffffffffffffda RBX: 00007f2d7ea95fa0 RCX: 00007f2d7e83f749 [ 352.916222][T15190] RDX: 0000200000000000 RSI: 0000000000008946 RDI: 0000000000000006 [ 352.916237][T15190] RBP: 00007f2d7d2a7090 R08: 0000000000000000 R09: 0000000000000000 [ 352.916252][T15190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.916292][T15190] R13: 00007f2d7ea96038 R14: 00007f2d7ea95fa0 R15: 00007ffc896ae208 [ 352.916312][T15190] [ 353.390890][T15204] netlink: 'wg1': attribute type 6 has an invalid length. [ 353.521700][T15212] FAULT_INJECTION: forcing a failure. [ 353.521700][T15212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.534851][T15212] CPU: 1 UID: 0 PID: 15212 Comm: syz.5.3868 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 353.534923][T15212] Tainted: [W]=WARN [ 353.534932][T15212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 353.534946][T15212] Call Trace: [ 353.534953][T15212] [ 353.534962][T15212] __dump_stack+0x1d/0x30 [ 353.534985][T15212] dump_stack_lvl+0xe8/0x140 [ 353.535006][T15212] dump_stack+0x15/0x1b [ 353.535041][T15212] should_fail_ex+0x265/0x280 [ 353.535229][T15212] should_fail+0xb/0x20 [ 353.535248][T15212] should_fail_usercopy+0x1a/0x20 [ 353.535269][T15212] _copy_from_user+0x1c/0xb0 [ 353.535346][T15212] ___sys_sendmsg+0xc1/0x1d0 [ 353.535384][T15212] __x64_sys_sendmsg+0xd4/0x160 [ 353.535419][T15212] x64_sys_call+0x191e/0x3000 [ 353.535448][T15212] do_syscall_64+0xd2/0x200 [ 353.535475][T15212] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 353.535553][T15212] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 353.535589][T15212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.535613][T15212] RIP: 0033:0x7f2d7e83f749 [ 353.535628][T15212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.535687][T15212] RSP: 002b:00007f2d7d2a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.535711][T15212] RAX: ffffffffffffffda RBX: 00007f2d7ea95fa0 RCX: 00007f2d7e83f749 [ 353.535727][T15212] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000004 [ 353.535751][T15212] RBP: 00007f2d7d2a7090 R08: 0000000000000000 R09: 0000000000000000 [ 353.535763][T15212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.535775][T15212] R13: 00007f2d7ea96038 R14: 00007f2d7ea95fa0 R15: 00007ffc896ae208 [ 353.535794][T15212] [ 353.738456][T15214] loop3: detected capacity change from 0 to 128 [ 353.768959][T15214] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 353.776960][T15214] FAT-fs (loop3): Filesystem has been set read-only [ 353.789082][T15214] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 353.797168][T15214] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 353.817940][T15218] loop5: detected capacity change from 0 to 128 [ 353.829119][T15218] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 353.837172][T15218] FAT-fs (loop5): Filesystem has been set read-only [ 353.843919][T15218] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 353.851821][T15218] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 354.140988][T15236] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3878'. [ 354.321248][T15242] loop6: detected capacity change from 0 to 512 [ 354.505539][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 354.505555][ T29] audit: type=1326 audit(1764011814.329:10989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15249 comm="syz.1.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb245f749 code=0x7ffc0000 [ 354.535607][ T29] audit: type=1326 audit(1764011814.329:10990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15249 comm="syz.1.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb245f749 code=0x7ffc0000 [ 354.597244][ T29] audit: type=1326 audit(1764011814.389:10991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15249 comm="syz.1.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7facb245f749 code=0x7ffc0000 [ 354.620935][ T29] audit: type=1326 audit(1764011814.389:10992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15249 comm="syz.1.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb245f749 code=0x7ffc0000 [ 354.644789][ T29] audit: type=1326 audit(1764011814.389:10993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15249 comm="syz.1.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb245f749 code=0x7ffc0000 [ 354.684097][T15253] program syz.1.3885 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 354.695771][ T29] audit: type=1326 audit(1764011814.519:10994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15256 comm="syz.0.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be4fbf749 code=0x7ffc0000 [ 354.719458][ T29] audit: type=1326 audit(1764011814.519:10995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15256 comm="syz.0.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be4fbf749 code=0x7ffc0000 [ 354.744795][ T29] audit: type=1326 audit(1764011814.569:10996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15256 comm="syz.0.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9be4fbf749 code=0x7ffc0000 [ 354.768488][ T29] audit: type=1326 audit(1764011814.569:10997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15256 comm="syz.0.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be4fbf749 code=0x7ffc0000 [ 354.792260][ T29] audit: type=1326 audit(1764011814.569:10998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15256 comm="syz.0.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be4fbf749 code=0x7ffc0000 [ 354.825578][T15259] loop5: detected capacity change from 0 to 512 [ 354.835963][T15262] FAULT_INJECTION: forcing a failure. [ 354.835963][T15262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.849306][T15262] CPU: 0 UID: 0 PID: 15262 Comm: syz.0.3889 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 354.849393][T15262] Tainted: [W]=WARN [ 354.849402][T15262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 354.849462][T15262] Call Trace: [ 354.849469][T15262] [ 354.849477][T15262] __dump_stack+0x1d/0x30 [ 354.849505][T15262] dump_stack_lvl+0xe8/0x140 [ 354.849531][T15262] dump_stack+0x15/0x1b [ 354.849561][T15262] should_fail_ex+0x265/0x280 [ 354.849682][T15262] should_fail+0xb/0x20 [ 354.849703][T15262] should_fail_usercopy+0x1a/0x20 [ 354.849730][T15262] _copy_from_iter+0xd2/0xe80 [ 354.849759][T15262] ? __build_skb_around+0x1ab/0x200 [ 354.849872][T15262] ? __alloc_skb+0x223/0x320 [ 354.849914][T15262] netlink_sendmsg+0x471/0x6b0 [ 354.849944][T15262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.850023][T15262] __sock_sendmsg+0x145/0x180 [ 354.850055][T15262] ____sys_sendmsg+0x31e/0x4e0 [ 354.850150][T15262] ___sys_sendmsg+0x17b/0x1d0 [ 354.850192][T15262] __x64_sys_sendmsg+0xd4/0x160 [ 354.850239][T15262] x64_sys_call+0x191e/0x3000 [ 354.850267][T15262] do_syscall_64+0xd2/0x200 [ 354.850292][T15262] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 354.850327][T15262] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 354.850400][T15262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.850428][T15262] RIP: 0033:0x7f9be4fbf749 [ 354.850461][T15262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.850483][T15262] RSP: 002b:00007f9be3a1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.850503][T15262] RAX: ffffffffffffffda RBX: 00007f9be5215fa0 RCX: 00007f9be4fbf749 [ 354.850519][T15262] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000006 [ 354.850596][T15262] RBP: 00007f9be3a1f090 R08: 0000000000000000 R09: 0000000000000000 [ 354.850612][T15262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.850628][T15262] R13: 00007f9be5216038 R14: 00007f9be5215fa0 R15: 00007fff0dbb1288 [ 354.850653][T15262] [ 355.069156][T15268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3891'. [ 355.078651][T15259] EXT4-fs warning (device loop5): ext4_xattr_inode_get:546: inode #11: comm syz.5.3888: ea_inode file size=0 entry size=6 [ 355.093744][T15259] EXT4-fs (loop5): 1 orphan inode deleted [ 355.121342][T15259] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.160800][T15273] loop1: detected capacity change from 0 to 4096 [ 355.174259][T14890] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.186319][T15280] program syz.3.3897 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 355.208893][T15273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.222527][T15280] FAULT_INJECTION: forcing a failure. [ 355.222527][T15280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.235700][T15280] CPU: 0 UID: 0 PID: 15280 Comm: syz.3.3897 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 355.235746][T15280] Tainted: [W]=WARN [ 355.235755][T15280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 355.235772][T15280] Call Trace: [ 355.235782][T15280] [ 355.235792][T15280] __dump_stack+0x1d/0x30 [ 355.235821][T15280] dump_stack_lvl+0xe8/0x140 [ 355.235849][T15280] dump_stack+0x15/0x1b [ 355.235869][T15280] should_fail_ex+0x265/0x280 [ 355.235928][T15280] should_fail+0xb/0x20 [ 355.235949][T15280] should_fail_usercopy+0x1a/0x20 [ 355.236043][T15280] _copy_to_user+0x20/0xa0 [ 355.236109][T15280] simple_read_from_buffer+0xb5/0x130 [ 355.236186][T15280] proc_fail_nth_read+0x10e/0x150 [ 355.236252][T15280] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 355.236283][T15280] vfs_read+0x1a8/0x770 [ 355.236315][T15280] ? __rcu_read_unlock+0x4f/0x70 [ 355.236347][T15280] ? __fget_files+0x184/0x1c0 [ 355.236484][T15280] ksys_read+0xda/0x1a0 [ 355.236521][T15280] __x64_sys_read+0x40/0x50 [ 355.236553][T15280] x64_sys_call+0x27c0/0x3000 [ 355.236583][T15280] do_syscall_64+0xd2/0x200 [ 355.236633][T15280] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 355.236667][T15280] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 355.236739][T15280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.236768][T15280] RIP: 0033:0x7f232103e15c [ 355.236787][T15280] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 355.236808][T15280] RSP: 002b:00007f231fa9f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 355.236828][T15280] RAX: ffffffffffffffda RBX: 00007f2321295fa0 RCX: 00007f232103e15c [ 355.236841][T15280] RDX: 000000000000000f RSI: 00007f231fa9f0a0 RDI: 0000000000000004 [ 355.236857][T15280] RBP: 00007f231fa9f090 R08: 0000000000000000 R09: 0000000000000000 [ 355.236873][T15280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.236889][T15280] R13: 00007f2321296038 R14: 00007f2321295fa0 R15: 00007fffd90278b8 [ 355.236975][T15280] [ 355.486087][T15289] 9pnet_fd: Insufficient options for proto=fd [ 355.506996][T15289] loop3: detected capacity change from 0 to 1024 [ 355.517095][T15289] ext4: Unknown parameter 'dont_hash' [ 355.592234][T15298] loop5: detected capacity change from 0 to 512 [ 355.667003][T15306] FAULT_INJECTION: forcing a failure. [ 355.667003][T15306] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 355.680488][T15306] CPU: 0 UID: 0 PID: 15306 Comm: syz.0.3907 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 355.680522][T15306] Tainted: [W]=WARN [ 355.680529][T15306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 355.680541][T15306] Call Trace: [ 355.680547][T15306] [ 355.680555][T15306] __dump_stack+0x1d/0x30 [ 355.680616][T15306] dump_stack_lvl+0xe8/0x140 [ 355.680650][T15306] dump_stack+0x15/0x1b [ 355.680673][T15306] should_fail_ex+0x265/0x280 [ 355.680709][T15306] should_fail_alloc_page+0xf2/0x100 [ 355.680810][T15306] __alloc_frozen_pages_noprof+0xff/0x360 [ 355.680857][T15306] alloc_pages_mpol+0xb3/0x260 [ 355.680918][T15306] alloc_pages_noprof+0x90/0x130 [ 355.680940][T15306] alloc_skb_with_frags+0x193/0x470 [ 355.680981][T15306] sock_alloc_send_pskb+0x430/0x4e0 [ 355.681014][T15306] ? mntput+0x4b/0x80 [ 355.681040][T15306] tun_get_user+0x9b4/0x26e0 [ 355.681164][T15306] ? ref_tracker_alloc+0x1f2/0x2f0 [ 355.681208][T15306] ? selinux_file_permission+0x1e4/0x320 [ 355.681240][T15306] tun_chr_write_iter+0x15e/0x210 [ 355.681298][T15306] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 355.681337][T15306] vfs_write+0x52a/0x960 [ 355.681368][T15306] ksys_write+0xda/0x1a0 [ 355.681403][T15306] __x64_sys_write+0x40/0x50 [ 355.681497][T15306] x64_sys_call+0x2802/0x3000 [ 355.681523][T15306] do_syscall_64+0xd2/0x200 [ 355.681544][T15306] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 355.681582][T15306] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 355.681657][T15306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.681682][T15306] RIP: 0033:0x7f9be4fbf749 [ 355.681702][T15306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.681733][T15306] RSP: 002b:00007f9be3a1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 355.681836][T15306] RAX: ffffffffffffffda RBX: 00007f9be5215fa0 RCX: 00007f9be4fbf749 [ 355.681854][T15306] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 355.681867][T15306] RBP: 00007f9be3a1f090 R08: 0000000000000000 R09: 0000000000000000 [ 355.681896][T15306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.681909][T15306] R13: 00007f9be5216038 R14: 00007f9be5215fa0 R15: 00007fff0dbb1288 [ 355.681933][T15306] [ 355.916296][T15307] loop3: detected capacity change from 0 to 512 [ 355.965066][T15309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.973121][T15309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.030185][T15309] batman_adv: batadv0: Removing interface: macvtap1 [ 356.042444][T15309] batman_adv: batadv0: Removing interface: macvtap2 [ 356.049885][T15311] loop6: detected capacity change from 0 to 2048 [ 356.057937][T15309] batman_adv: batadv0: Removing interface: macvtap3 [ 356.065151][T15309] batman_adv: batadv0: Removing interface: macvtap4 [ 356.072480][T15309] batman_adv: batadv0: Removing interface: macvtap5 [ 356.078537][T12754] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.081080][T15311] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.089156][T15309] batman_adv: batadv0: Removing interface: macvtap6 [ 356.203268][T15323] 9pnet_fd: Insufficient options for proto=fd [ 356.216990][T15323] loop1: detected capacity change from 0 to 1024 [ 356.223529][T15323] ext4: Unknown parameter 'dont_hash' [ 356.281817][T15331] FAULT_INJECTION: forcing a failure. [ 356.281817][T15331] name failslab, interval 1, probability 0, space 0, times 0 [ 356.294534][T15331] CPU: 1 UID: 0 PID: 15331 Comm: syz.1.3916 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 356.294604][T15331] Tainted: [W]=WARN [ 356.294616][T15331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 356.294631][T15331] Call Trace: [ 356.294639][T15331] [ 356.294650][T15331] __dump_stack+0x1d/0x30 [ 356.294677][T15331] dump_stack_lvl+0xe8/0x140 [ 356.294699][T15331] dump_stack+0x15/0x1b [ 356.294797][T15331] should_fail_ex+0x265/0x280 [ 356.294837][T15331] should_failslab+0x8c/0xb0 [ 356.294875][T15331] kmem_cache_alloc_noprof+0x50/0x480 [ 356.294911][T15331] ? skb_clone+0x151/0x1f0 [ 356.294935][T15331] skb_clone+0x151/0x1f0 [ 356.294996][T15331] __netlink_deliver_tap+0x2c9/0x500 [ 356.295079][T15331] netlink_unicast+0x66b/0x690 [ 356.295117][T15331] netlink_sendmsg+0x58b/0x6b0 [ 356.295180][T15331] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.295205][T15331] __sock_sendmsg+0x145/0x180 [ 356.295285][T15331] ____sys_sendmsg+0x31e/0x4e0 [ 356.295306][T15331] ___sys_sendmsg+0x17b/0x1d0 [ 356.295340][T15331] __x64_sys_sendmsg+0xd4/0x160 [ 356.295367][T15331] x64_sys_call+0x191e/0x3000 [ 356.295454][T15331] do_syscall_64+0xd2/0x200 [ 356.295480][T15331] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 356.295589][T15331] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 356.295637][T15331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.295781][T15331] RIP: 0033:0x7facb245f749 [ 356.295821][T15331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.295845][T15331] RSP: 002b:00007facb0ebf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.295868][T15331] RAX: ffffffffffffffda RBX: 00007facb26b5fa0 RCX: 00007facb245f749 [ 356.295881][T15331] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000006 [ 356.295897][T15331] RBP: 00007facb0ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 356.295912][T15331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.295939][T15331] R13: 00007facb26b6038 R14: 00007facb26b5fa0 R15: 00007ffe456a8868 [ 356.295962][T15331] [ 356.836602][T15340] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3920'. [ 356.931139][ T8095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.946216][T15349] loop3: detected capacity change from 0 to 128 [ 356.964098][T15349] bio_check_eod: 23433 callbacks suppressed [ 356.964116][T15349] syz.3.3927: attempt to access beyond end of device [ 356.964116][T15349] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 356.969986][T15355] netlink: 444 bytes leftover after parsing attributes in process `syz.6.3926'. [ 356.983954][T15349] syz.3.3927: attempt to access beyond end of device [ 356.983954][T15349] loop3: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 357.006349][T15349] buffer_io_error: 74246 callbacks suppressed [ 357.006368][T15349] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 357.024149][T15349] syz.3.3927: attempt to access beyond end of device [ 357.024149][T15349] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 357.033592][T15354] netlink: 'wg1': attribute type 6 has an invalid length. [ 357.037681][T15349] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 357.055895][T15348] syz.3.3927: attempt to access beyond end of device [ 357.055895][T15348] loop3: rw=524288, sector=154, nr_sectors = 8 limit=128 [ 357.069738][T15348] syz.3.3927: attempt to access beyond end of device [ 357.069738][T15348] loop3: rw=0, sector=154, nr_sectors = 8 limit=128 [ 357.083425][T15348] syz.3.3927: attempt to access beyond end of device [ 357.083425][T15348] loop3: rw=0, sector=154, nr_sectors = 8 limit=128 [ 357.096843][T15348] syz.3.3927: attempt to access beyond end of device [ 357.096843][T15348] loop3: rw=0, sector=154, nr_sectors = 8 limit=128 [ 357.110269][T15348] syz.3.3927: attempt to access beyond end of device [ 357.110269][T15348] loop3: rw=0, sector=154, nr_sectors = 8 limit=128 [ 357.123655][T15348] syz.3.3927: attempt to access beyond end of device [ 357.123655][T15348] loop3: rw=0, sector=154, nr_sectors = 8 limit=128 [ 357.137108][T15348] syz.3.3927: attempt to access beyond end of device [ 357.137108][T15348] loop3: rw=0, sector=154, nr_sectors = 8 limit=128 [ 357.227626][T15362] loop5: detected capacity change from 0 to 512 [ 357.293918][T15364] loop3: detected capacity change from 0 to 128 [ 357.302506][T15364] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 357.310382][T15364] FAT-fs (loop3): Filesystem has been set read-only [ 357.317365][T15364] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 357.325221][T15364] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 357.354322][T15365] Buffer I/O error on dev loop3, logical block 2065, async page read [ 357.362545][T15365] Buffer I/O error on dev loop3, logical block 2066, async page read [ 357.370732][T15365] Buffer I/O error on dev loop3, logical block 2067, async page read [ 357.378911][T15365] Buffer I/O error on dev loop3, logical block 2068, async page read [ 357.387082][T15365] Buffer I/O error on dev loop3, logical block 2069, async page read [ 357.395249][T15365] Buffer I/O error on dev loop3, logical block 2070, async page read [ 357.403429][T15365] Buffer I/O error on dev loop3, logical block 2071, async page read [ 357.411544][T15365] Buffer I/O error on dev loop3, logical block 2072, async page read [ 357.877804][T15376] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3933'. [ 358.076214][T15382] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 358.087987][T15382] IPVS: set_ctl: invalid protocol: 103 172.30.1.6:20001 [ 358.101319][T15384] loop1: detected capacity change from 0 to 2048 [ 358.127946][T15384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.162383][T15388] loop5: detected capacity change from 0 to 4096 [ 358.214391][T15388] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.468254][T15412] 9pnet_fd: Insufficient options for proto=fd [ 358.746104][T15414] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 358.890151][T15419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3947'. [ 358.908490][T15420] loop6: detected capacity change from 0 to 512 [ 358.979549][T12754] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.043084][T14890] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.090520][T15433] loop6: detected capacity change from 0 to 128 [ 359.127220][T15427] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 359.135113][T15427] FAT-fs (loop6): Filesystem has been set read-only [ 359.166141][T15427] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 359.174048][T15427] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 359.283581][T15447] loop1: detected capacity change from 0 to 2048 [ 359.310422][T15447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.334999][T15453] loop5: detected capacity change from 0 to 128 [ 359.449190][T15453] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 359.457155][T15453] FAT-fs (loop5): Filesystem has been set read-only [ 359.474323][T15453] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 359.482660][T15453] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 359.958719][T15458] loop6: detected capacity change from 0 to 512 [ 360.045537][T15464] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3963'. [ 360.069205][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 360.069228][ T29] audit: type=1326 audit(1764011819.899:11242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15465 comm="syz.6.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9ce1f749 code=0x7ffc0000 [ 360.166968][ T29] audit: type=1326 audit(1764011819.989:11243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15465 comm="syz.6.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f5e9ce1f749 code=0x7ffc0000 [ 360.190670][ T29] audit: type=1326 audit(1764011819.989:11244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15465 comm="syz.6.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9ce1f749 code=0x7ffc0000 [ 360.214292][ T29] audit: type=1326 audit(1764011819.989:11245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15465 comm="syz.6.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9ce1f749 code=0x7ffc0000 [ 360.247089][T12754] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.304574][ T29] audit: type=1326 audit(1764011820.129:11246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15475 comm="syz.1.3966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb245f749 code=0x7ffc0000 [ 360.328355][ T29] audit: type=1326 audit(1764011820.129:11247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15475 comm="syz.1.3966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb245f749 code=0x7ffc0000 [ 360.351984][ T29] audit: type=1326 audit(1764011820.129:11248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15475 comm="syz.1.3966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7facb245f749 code=0x7ffc0000 [ 360.376110][ T29] audit: type=1326 audit(1764011820.129:11249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15475 comm="syz.1.3966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb245f749 code=0x7ffc0000 [ 360.399749][ T29] audit: type=1326 audit(1764011820.129:11250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15475 comm="syz.1.3966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb245f749 code=0x7ffc0000 [ 360.449539][T15471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3968'. [ 360.483440][ T29] audit: type=1326 audit(1764011820.129:11251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15476 comm="syz.6.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9ce1f749 code=0x7ffc0000 [ 360.544034][T15487] loop5: detected capacity change from 0 to 512 [ 360.571205][T15491] loop6: detected capacity change from 0 to 128 [ 360.574140][T15497] netlink: 444 bytes leftover after parsing attributes in process `syz.0.3977'. [ 360.589678][T15495] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3976'. [ 360.605103][T15491] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 360.613124][T15491] FAT-fs (loop6): Filesystem has been set read-only [ 360.640624][T15491] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 360.648602][T15491] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 360.691703][T15503] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 360.746495][T15507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3981'. [ 360.768178][T15508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=15508 comm=syz.5.3980 [ 360.797834][T15508] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3980'. [ 361.015452][T15515] loop1: detected capacity change from 0 to 4096 [ 361.034041][T15515] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.485443][T15531] loop6: detected capacity change from 0 to 256 [ 361.655581][T12754] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.698258][T15546] netlink: 'wg1': attribute type 6 has an invalid length. [ 361.723576][T15550] FAULT_INJECTION: forcing a failure. [ 361.723576][T15550] name failslab, interval 1, probability 0, space 0, times 0 [ 361.736382][T15550] CPU: 1 UID: 0 PID: 15550 Comm: syz.1.3995 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 361.736429][T15550] Tainted: [W]=WARN [ 361.736439][T15550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 361.736455][T15550] Call Trace: [ 361.736464][T15550] [ 361.736493][T15550] __dump_stack+0x1d/0x30 [ 361.736524][T15550] dump_stack_lvl+0xe8/0x140 [ 361.736545][T15550] dump_stack+0x15/0x1b [ 361.736562][T15550] should_fail_ex+0x265/0x280 [ 361.736637][T15550] should_failslab+0x8c/0xb0 [ 361.736677][T15550] kmem_cache_alloc_noprof+0x50/0x480 [ 361.736709][T15550] ? getname_kernel+0x3c/0x1f0 [ 361.736745][T15550] getname_kernel+0x3c/0x1f0 [ 361.736815][T15550] kern_path+0x23/0x130 [ 361.736840][T15550] lookup_bdev+0x66/0x150 [ 361.736871][T15550] __se_sys_quotactl+0x1b7/0x670 [ 361.736909][T15550] __x64_sys_quotactl+0x55/0x70 [ 361.736938][T15550] x64_sys_call+0x15d6/0x3000 [ 361.737040][T15550] do_syscall_64+0xd2/0x200 [ 361.737078][T15550] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 361.737116][T15550] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 361.737154][T15550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.737183][T15550] RIP: 0033:0x7facb245f749 [ 361.737204][T15550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.737228][T15550] RSP: 002b:00007facb0ebf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 361.737270][T15550] RAX: ffffffffffffffda RBX: 00007facb26b5fa0 RCX: 00007facb245f749 [ 361.737282][T15550] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: ffffffff80000200 [ 361.737295][T15550] RBP: 00007facb0ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 361.737307][T15550] R10: 0000200000001ac0 R11: 0000000000000246 R12: 0000000000000002 [ 361.737319][T15550] R13: 00007facb26b6038 R14: 00007facb26b5fa0 R15: 00007ffe456a8868 [ 361.737416][T15550] [ 362.047767][T15552] __nla_validate_parse: 3 callbacks suppressed [ 362.047831][T15552] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3998'. [ 362.263211][T15572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4005'. [ 362.386836][T15577] loop6: detected capacity change from 0 to 4096 [ 362.424817][T15577] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.627026][T15587] netlink: 'wg1': attribute type 6 has an invalid length. [ 362.747532][T15559] loop5: detected capacity change from 0 to 512 [ 362.768761][T15594] loop1: detected capacity change from 0 to 512 [ 362.779428][T15559] EXT4-fs (loop5): orphan cleanup on readonly fs [ 362.792453][T15594] EXT4-fs warning (device loop1): ext4_xattr_inode_get:546: inode #11: comm syz.1.4012: ea_inode file size=0 entry size=6 [ 362.815522][T15559] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.4002: error while reading EA inode 32 err=-116 [ 362.832317][T15594] EXT4-fs (loop1): 1 orphan inode deleted [ 362.846014][T15559] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 362.859514][T15594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.876486][T15559] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.4002: error while reading EA inode 32 err=-116 [ 362.906789][T12754] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.926461][T15559] EXT4-fs (loop5): 1 orphan inode deleted [ 362.932751][T15559] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 362.945530][T15559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.013879][ T8095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.035562][T15630] netlink: 444 bytes leftover after parsing attributes in process `syz.5.4017'. [ 363.092132][T15634] loop1: detected capacity change from 0 to 512 [ 363.221691][T15638] macvtap5: entered allmulticast mode [ 363.288360][T15639] hub 1-0:1.0: USB hub found [ 363.294100][T15639] hub 1-0:1.0: 8 ports detected [ 363.413471][T15643] netlink: 'wg1': attribute type 6 has an invalid length. [ 363.518054][T15649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4023'. [ 363.925151][T15654] loop1: detected capacity change from 0 to 4096 [ 363.942030][T15654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.476575][T15668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4030'. [ 364.616720][T12754] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.826858][T15675] netlink: 'wg1': attribute type 6 has an invalid length. [ 365.053573][T15681] loop5: detected capacity change from 0 to 512 [ 365.203360][T15685] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 365.210430][T15683] macvtap7: entered allmulticast mode [ 365.217169][T15683] bridge0: entered allmulticast mode [ 365.264646][T15687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4038'. [ 365.308755][T15689] hub 1-0:1.0: USB hub found [ 365.325171][T15689] hub 1-0:1.0: 8 ports detected [ 365.341271][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 365.341289][ T29] audit: type=1326 audit(1764011825.169:11596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15682 comm="syz.0.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be4fbf749 code=0x7ffc0000 [ 365.403861][ T29] audit: type=1326 audit(1764011825.169:11597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15682 comm="syz.0.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9be4fbf749 code=0x7ffc0000 [ 365.427831][ T29] audit: type=1326 audit(1764011825.169:11598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15682 comm="syz.0.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be4fbf749 code=0x7ffc0000 [ 365.451442][ T29] audit: type=1326 audit(1764011825.169:11599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15682 comm="syz.0.4036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be4fbf749 code=0x7ffc0000 [ 365.486798][T15693] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4039'. [ 365.819911][T15697] 9pnet_fd: Insufficient options for proto=fd [ 365.850295][T15697] loop5: detected capacity change from 0 to 1024 [ 365.864016][T15697] ext4: Unknown parameter 'dont_hash' [ 365.904546][T15699] bridge0: entered promiscuous mode [ 365.910168][T15699] macvtap1: entered allmulticast mode [ 365.915583][T15699] bridge0: entered allmulticast mode [ 365.999632][T15700] hub 1-0:1.0: USB hub found [ 366.009835][T15700] hub 1-0:1.0: 8 ports detected [ 366.037673][ T29] audit: type=1326 audit(1764011825.869:11600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15698 comm="syz.5.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7e83f749 code=0x7ffc0000 [ 366.061332][ T29] audit: type=1326 audit(1764011825.869:11601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15698 comm="syz.5.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7e83f749 code=0x7ffc0000 [ 366.127308][ T29] audit: type=1326 audit(1764011825.909:11602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15698 comm="syz.5.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d7e83f749 code=0x7ffc0000 [ 366.151072][ T29] audit: type=1326 audit(1764011825.909:11603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15698 comm="syz.5.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7e83f749 code=0x7ffc0000 [ 366.174774][ T29] audit: type=1326 audit(1764011825.909:11604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15698 comm="syz.5.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7e83f749 code=0x7ffc0000 [ 366.282195][T15706] netlink: 'wg1': attribute type 6 has an invalid length. [ 366.318897][ T29] audit: type=1326 audit(1764011826.109:11605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15705 comm="syz.1.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb245f749 code=0x7ffc0000 [ 366.835846][T15723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4050'. [ 366.884125][T15725] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 366.908075][T15727] 9pnet_fd: Insufficient options for proto=fd [ 366.927746][T15727] loop1: detected capacity change from 0 to 1024 [ 366.935161][T15727] ext4: Unknown parameter 'dont_hash' [ 366.947416][T15729] loop5: detected capacity change from 0 to 128 [ 366.972764][T15731] loop1: detected capacity change from 0 to 128 [ 366.981663][T15731] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 366.989658][T15731] FAT-fs (loop1): Filesystem has been set read-only [ 366.997771][T15731] bio_check_eod: 98263 callbacks suppressed [ 366.997789][T15731] syz.1.4054: attempt to access beyond end of device [ 366.997789][T15731] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 367.018110][T15731] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 367.026218][T15731] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 367.034774][T15731] syz.1.4054: attempt to access beyond end of device [ 367.034774][T15731] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 367.048563][T15731] syz.1.4054: attempt to access beyond end of device [ 367.048563][T15731] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 367.062197][T15731] syz.1.4054: attempt to access beyond end of device [ 367.062197][T15731] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 367.076109][T15732] syz.1.4054: attempt to access beyond end of device [ 367.076109][T15732] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 367.089398][T15732] buffer_io_error: 79448 callbacks suppressed [ 367.089418][T15732] Buffer I/O error on dev loop1, logical block 2065, async page read [ 367.116725][T15729] syz.5.4053: attempt to access beyond end of device [ 367.116725][T15729] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 367.146465][T15729] syz.5.4053: attempt to access beyond end of device [ 367.146465][T15729] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 367.161085][T15732] syz.1.4054: attempt to access beyond end of device [ 367.161085][T15732] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 367.174427][T15732] Buffer I/O error on dev loop1, logical block 2066, async page read [ 367.182993][T15729] syz.5.4053: attempt to access beyond end of device [ 367.182993][T15729] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 367.183045][T15729] syz.5.4053: attempt to access beyond end of device [ 367.183045][T15729] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 367.186071][T15737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4055'. [ 367.186338][T15732] Buffer I/O error on dev loop1, logical block 2067, async page read [ 367.196438][T15732] Buffer I/O error on dev loop1, logical block 2068, async page read [ 367.278650][T15732] Buffer I/O error on dev loop1, logical block 2069, async page read [ 367.306491][T15732] Buffer I/O error on dev loop1, logical block 2070, async page read [ 367.314647][T15732] Buffer I/O error on dev loop1, logical block 2071, async page read [ 367.324567][T15732] Buffer I/O error on dev loop1, logical block 2072, async page read [ 367.332740][T15732] Buffer I/O error on dev loop1, logical block 2065, async page read [ 367.340951][T15732] Buffer I/O error on dev loop1, logical block 2066, async page read [ 367.355743][T15741] netlink: 'wg1': attribute type 6 has an invalid length. [ 367.683232][T15751] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4061'. [ 367.692379][T15751] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4061'. [ 367.843064][T15755] loop1: detected capacity change from 0 to 512 [ 367.858197][T15755] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 367.867062][T15755] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 367.897898][T15755] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.4063: Allocating blocks 41-42 which overlap fs metadata [ 367.926713][T15755] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.4063: Allocating blocks 41-42 which overlap fs metadata [ 367.954975][T15755] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.4063: Failed to acquire dquot type 1 [ 367.976684][T15755] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 368.006709][T15755] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.4063: corrupted inode contents [ 368.022745][T15755] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #12: comm syz.1.4063: mark_inode_dirty error [ 368.046724][T15755] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.4063: corrupted inode contents [ 368.086847][T15755] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.4063: mark_inode_dirty error [ 368.098391][T15755] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.4063: corrupted inode contents [ 368.119635][T15755] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 368.129912][T15755] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.4063: corrupted inode contents [ 368.142150][T15755] EXT4-fs error (device loop1): ext4_truncate:4637: inode #12: comm syz.1.4063: mark_inode_dirty error [ 368.153498][T15755] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 368.168274][T15755] EXT4-fs (loop1): 1 truncate cleaned up [ 368.174510][T15755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.217720][T15755] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.442259][T15766] loop5: detected capacity change from 0 to 512 [ 368.632575][T15755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4063'. [ 368.688249][T15768] netlink: 'syz.1.4066': attribute type 1 has an invalid length. [ 368.749672][T15768] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4066'. [ 369.227028][T15780] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4072'. [ 369.236514][T15780] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4072'. [ 369.321506][T15782] loop5: detected capacity change from 0 to 128 [ 369.357650][T15782] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 369.365630][T15782] FAT-fs (loop5): Filesystem has been set read-only [ 369.406683][T15782] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 369.414615][T15782] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 370.498172][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 370.498190][ T29] audit: type=1326 audit(1764011830.329:11844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15793 comm="syz.5.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7e83f749 code=0x7ffc0000 [ 370.651117][T15801] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4080'. [ 371.290109][ T29] audit: type=1326 audit(1764011831.119:11845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15806 comm="syz.0.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be4fbf749 code=0x7ffc0000 [ 371.313877][ T29] audit: type=1326 audit(1764011831.119:11846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15806 comm="syz.0.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be4fbf749 code=0x7ffc0000 [ 371.366592][ T29] audit: type=1326 audit(1764011831.179:11847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15806 comm="syz.0.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f9be4fbf749 code=0x7ffc0000 [ 371.390282][ T29] audit: type=1326 audit(1764011831.179:11848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15806 comm="syz.0.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be4fbf749 code=0x7ffc0000 [ 371.414225][ T29] audit: type=1326 audit(1764011831.179:11849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15806 comm="syz.0.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be4fbf749 code=0x7ffc0000 [ 371.437851][ T29] audit: type=1326 audit(1764011831.179:11850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15806 comm="syz.0.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9be4fbf749 code=0x7ffc0000 [ 371.461913][ T29] audit: type=1326 audit(1764011831.179:11851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15806 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be4fbf749 code=0x7ffc0000 [ 371.484948][ T29] audit: type=1326 audit(1764011831.179:11852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15806 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be4fbf749 code=0x7ffc0000 [ 371.508159][ T29] audit: type=1326 audit(1764011831.179:11853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15806 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9be4fbf749 code=0x7ffc0000 [ 371.625220][T15810] Cannot find add_set index 0 as target [ 372.977257][T15827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4091'. [ 373.008332][T15827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4091'. [ 373.061023][T15827] FAULT_INJECTION: forcing a failure. [ 373.061023][T15827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.074727][T15827] CPU: 0 UID: 0 PID: 15827 Comm: syz.0.4091 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 373.074769][T15827] Tainted: [W]=WARN [ 373.074778][T15827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 373.074795][T15827] Call Trace: [ 373.074802][T15827] [ 373.074811][T15827] __dump_stack+0x1d/0x30 [ 373.074841][T15827] dump_stack_lvl+0xe8/0x140 [ 373.074919][T15827] dump_stack+0x15/0x1b [ 373.074943][T15827] should_fail_ex+0x265/0x280 [ 373.075076][T15827] should_fail+0xb/0x20 [ 373.075150][T15827] should_fail_usercopy+0x1a/0x20 [ 373.075178][T15827] strncpy_from_user+0x25/0x230 [ 373.075206][T15827] ? kmem_cache_alloc_noprof+0x242/0x480 [ 373.075337][T15827] ? getname_flags+0x80/0x3b0 [ 373.075377][T15827] getname_flags+0xae/0x3b0 [ 373.075435][T15827] __x64_sys_mkdir+0x33/0x50 [ 373.075466][T15827] x64_sys_call+0x2db9/0x3000 [ 373.075496][T15827] do_syscall_64+0xd2/0x200 [ 373.075525][T15827] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 373.075560][T15827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.075624][T15827] RIP: 0033:0x7f9be4fbf749 [ 373.075650][T15827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.075675][T15827] RSP: 002b:00007f9be3a1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 373.075757][T15827] RAX: ffffffffffffffda RBX: 00007f9be5215fa0 RCX: 00007f9be4fbf749 [ 373.075769][T15827] RDX: 0000000000000000 RSI: 0000000000000092 RDI: 0000200000000580 [ 373.075782][T15827] RBP: 00007f9be3a1f090 R08: 0000000000000000 R09: 0000000000000000 [ 373.075794][T15827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.075806][T15827] R13: 00007f9be5216038 R14: 00007f9be5215fa0 R15: 00007fff0dbb1288 [ 373.075832][T15827] [ 374.521487][T15621] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.639487][T15621] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.799739][T15621] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.881048][T15621] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.999388][T15621] bridge_slave_1: left allmulticast mode [ 375.005119][T15621] bridge_slave_1: left promiscuous mode [ 375.010826][T15621] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.038409][T15621] bridge_slave_0: left allmulticast mode [ 375.044142][T15621] bridge_slave_0: left promiscuous mode [ 375.049936][T15621] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.070925][T15851] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 375.405318][T15621] batman_adv: batadv0: Interface deactivated: macvtap1 [ 375.412367][T15621] batman_adv: batadv0: Interface deactivated: macvtap2 [ 375.419948][T15621] batman_adv: batadv0: Interface deactivated: macvtap3 [ 375.427110][T15621] batman_adv: batadv0: Interface deactivated: macvtap4 [ 375.434103][T15621] bridge0 (unregistering): left allmulticast mode [ 375.447092][T15621] batman_adv: batadv0: Removing interface: macvtap1 [ 375.460860][T15621] batman_adv: batadv0: Removing interface: macvtap2 [ 375.480479][T15621] batman_adv: batadv0: Removing interface: macvtap3 [ 375.490296][T15621] batman_adv: batadv0: Removing interface: macvtap4 [ 375.749145][T15621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.769361][T15621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.788457][T15621] bond0 (unregistering): Released all slaves [ 376.005721][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 376.005736][ T29] audit: type=1326 audit(1764011835.829:11976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.0.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be4fbf749 code=0x7ffc0000 [ 376.056692][ T29] audit: type=1326 audit(1764011835.849:11977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.0.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9be4fbf749 code=0x7ffc0000 [ 376.080391][ T29] audit: type=1326 audit(1764011835.849:11978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.0.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be4fbf749 code=0x7ffc0000 [ 376.104378][ T29] audit: type=1326 audit(1764011835.849:11979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.0.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be4fbf749 code=0x7ffc0000 [ 376.116480][T15861] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4102'. [ 376.128447][ T29] audit: type=1326 audit(1764011835.849:11980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.0.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9be4fbf749 code=0x7ffc0000 [ 376.160982][ T29] audit: type=1326 audit(1764011835.849:11981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.0.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be4fbf749 code=0x7ffc0000 [ 376.184841][ T29] audit: type=1326 audit(1764011835.849:11982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.0.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be4fbf749 code=0x7ffc0000 [ 376.208450][ T29] audit: type=1326 audit(1764011835.849:11983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.0.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f9be4fbf749 code=0x7ffc0000 [ 376.232174][ T29] audit: type=1326 audit(1764011835.849:11984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.0.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be4fbf749 code=0x7ffc0000 [ 376.256131][ T29] audit: type=1326 audit(1764011835.849:11985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.0.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9be4fbf749 code=0x7ffc0000 [ 376.299993][T15621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.307626][T15621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.316931][T15621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.324598][T15621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.379706][T15621] veth1_macvtap: left promiscuous mode [ 376.385233][T15621] veth0_macvtap: left promiscuous mode [ 376.436473][T15621] veth1_vlan: left promiscuous mode [ 376.461666][T15621] veth0_vlan: left promiscuous mode [ 376.806445][T15621] team0 (unregistering): Port device team_slave_1 removed [ 376.828471][T15621] team0 (unregistering): Port device team_slave_0 removed [ 377.019390][T15836] chnl_net:caif_netlink_parms(): no params data found [ 377.261211][T15836] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.268346][T15836] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.316095][T15836] bridge_slave_0: entered allmulticast mode [ 377.336890][T15836] bridge_slave_0: entered promiscuous mode [ 377.357315][T15836] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.364440][T15836] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.399735][T15836] bridge_slave_1: entered allmulticast mode [ 377.415015][T15836] bridge_slave_1: entered promiscuous mode [ 377.488343][T15836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.517788][T15836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.618591][T15836] team0: Port device team_slave_0 added [ 377.625654][T15836] team0: Port device team_slave_1 added [ 377.737207][T15836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.744212][T15836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.770270][T15836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.787269][T15836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.794248][T15836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.820291][T15836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.994364][T15836] hsr_slave_0: entered promiscuous mode [ 378.016982][T15836] hsr_slave_1: entered promiscuous mode [ 378.043142][T15836] debugfs: 'hsr0' already exists in 'hsr' [ 378.049121][T15836] Cannot create hsr debugfs directory [ 378.339638][T15836] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 378.378762][T15836] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 378.407195][T15836] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 378.438729][T15836] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 378.543668][T15836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.555177][T15836] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.569689][T15618] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.576922][T15618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.618300][T15618] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.625413][T15618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.798404][T15836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.034779][T15836] veth0_vlan: entered promiscuous mode [ 379.043027][T15836] veth1_vlan: entered promiscuous mode [ 379.065214][T15836] veth0_macvtap: entered promiscuous mode [ 379.080719][T15836] veth1_macvtap: entered promiscuous mode [ 379.119784][T15836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.158822][T15836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.179248][T15621] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.189609][T15621] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.213143][T15621] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.247099][T15621] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.316076][T15914] loop7: detected capacity change from 0 to 2048 [ 379.387903][T15914] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.177551][T15836] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.279231][T15933] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4115'. [ 380.421256][T15938] loop7: detected capacity change from 0 to 128 [ 380.487480][T15921] chnl_net:caif_netlink_parms(): no params data found [ 380.542132][T15938] bio_check_eod: 43073 callbacks suppressed [ 380.542148][T15938] syz.7.4117: attempt to access beyond end of device [ 380.542148][T15938] loop7: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 380.567263][T15938] syz.7.4117: attempt to access beyond end of device [ 380.567263][T15938] loop7: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 380.580775][T15938] syz.7.4117: attempt to access beyond end of device [ 380.580775][T15938] loop7: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 380.594459][T15938] syz.7.4117: attempt to access beyond end of device [ 380.594459][T15938] loop7: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 380.609028][T15938] syz.7.4117: attempt to access beyond end of device [ 380.609028][T15938] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 380.622927][T15938] syz.7.4117: attempt to access beyond end of device [ 380.622927][T15938] loop7: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 380.637294][T15938] syz.7.4117: attempt to access beyond end of device [ 380.637294][T15938] loop7: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 380.651785][T15938] syz.7.4117: attempt to access beyond end of device [ 380.651785][T15938] loop7: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 380.665964][T15938] syz.7.4117: attempt to access beyond end of device [ 380.665964][T15938] loop7: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 380.686611][T15938] syz.7.4117: attempt to access beyond end of device [ 380.686611][T15938] loop7: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 380.788279][T15921] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.795481][T15921] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.856675][T15921] bridge_slave_0: entered allmulticast mode [ 380.876546][T15921] bridge_slave_0: entered promiscuous mode [ 380.919285][T15623] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.957608][T15921] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.964888][T15921] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.997210][T15921] bridge_slave_1: entered allmulticast mode [ 381.006990][T15921] bridge_slave_1: entered promiscuous mode [ 381.020385][T15623] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.109230][T15921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.120698][T15623] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.157900][T15921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.277892][T15623] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.319398][T15921] team0: Port device team_slave_0 added [ 381.326235][T15921] team0: Port device team_slave_1 added [ 381.387575][T15921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.394602][T15921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.420699][T15921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.502789][T15921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.509815][T15921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.535806][T15921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.635449][T15951] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4120'. [ 381.690536][T15952] FAULT_INJECTION: forcing a failure. [ 381.690536][T15952] name failslab, interval 1, probability 0, space 0, times 0 [ 381.703320][T15952] CPU: 0 UID: 0 PID: 15952 Comm: syz.7.4120 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 381.703364][T15952] Tainted: [W]=WARN [ 381.703373][T15952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 381.703411][T15952] Call Trace: [ 381.703418][T15952] [ 381.703426][T15952] __dump_stack+0x1d/0x30 [ 381.703462][T15952] dump_stack_lvl+0xe8/0x140 [ 381.703483][T15952] dump_stack+0x15/0x1b [ 381.703508][T15952] should_fail_ex+0x265/0x280 [ 381.703585][T15952] should_failslab+0x8c/0xb0 [ 381.703681][T15952] __kmalloc_noprof+0xa5/0x570 [ 381.703731][T15952] ? memcg_list_lru_alloc+0x195/0x490 [ 381.703756][T15952] memcg_list_lru_alloc+0x195/0x490 [ 381.703858][T15952] __memcg_slab_post_alloc_hook+0x1a7/0x580 [ 381.703893][T15952] kmem_cache_alloc_lru_noprof+0x2c1/0x490 [ 381.703932][T15952] ? __d_alloc+0x3d/0x340 [ 381.704009][T15952] __d_alloc+0x3d/0x340 [ 381.704052][T15952] d_make_root+0x2a/0xb0 [ 381.704092][T15952] mqueue_fill_super+0x195/0x1d0 [ 381.704134][T15952] ? __pfx_mqueue_fill_super+0x10/0x10 [ 381.704163][T15952] get_tree_nodev+0x83/0x100 [ 381.704219][T15952] mqueue_get_tree+0x63/0x90 [ 381.704245][T15952] vfs_get_tree+0x57/0x1d0 [ 381.704270][T15952] fc_mount_longterm+0x18/0xb0 [ 381.704294][T15952] mq_init_ns+0x249/0x2f0 [ 381.704396][T15952] copy_ipcs+0x1ed/0x3a0 [ 381.704423][T15952] create_new_namespaces+0x12a/0x3d0 [ 381.704470][T15952] unshare_nsproxy_namespaces+0xe8/0x120 [ 381.704535][T15952] ksys_unshare+0x3d0/0x6d0 [ 381.704651][T15952] ? ksys_write+0x192/0x1a0 [ 381.704687][T15952] __x64_sys_unshare+0x1f/0x30 [ 381.704777][T15952] x64_sys_call+0x2915/0x3000 [ 381.704877][T15952] do_syscall_64+0xd2/0x200 [ 381.704907][T15952] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 381.704945][T15952] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 381.704994][T15952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.705029][T15952] RIP: 0033:0x7f7436d3f749 [ 381.705049][T15952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.705068][T15952] RSP: 002b:00007f7435786038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 381.705088][T15952] RAX: ffffffffffffffda RBX: 00007f7436f96090 RCX: 00007f7436d3f749 [ 381.705152][T15952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000200 [ 381.705169][T15952] RBP: 00007f7435786090 R08: 0000000000000000 R09: 0000000000000000 [ 381.705186][T15952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 381.705202][T15952] R13: 00007f7436f96128 R14: 00007f7436f96090 R15: 00007ffc9dd2a088 [ 381.705294][T15952] [ 381.710966][T15921] hsr_slave_0: entered promiscuous mode [ 381.975958][T15921] hsr_slave_1: entered promiscuous mode [ 381.983062][T15921] debugfs: 'hsr0' already exists in 'hsr' [ 381.988885][T15921] Cannot create hsr debugfs directory [ 381.998822][T15954] loop7: detected capacity change from 0 to 128 [ 382.008962][T15623] bridge_slave_1: left allmulticast mode [ 382.014689][T15623] bridge_slave_1: left promiscuous mode [ 382.020379][T15623] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.073104][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 382.073125][ T29] audit: type=1326 audit(1764011841.899:12136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15953 comm="syz.7.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7436d3f749 code=0x7ffc0000 [ 382.103301][T15623] bridge_slave_0: left allmulticast mode [ 382.109054][T15623] bridge_slave_0: left promiscuous mode [ 382.114861][T15623] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.146541][ T29] audit: type=1326 audit(1764011841.929:12137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15953 comm="syz.7.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7436d3f749 code=0x7ffc0000 [ 382.307591][T15959] loop7: detected capacity change from 0 to 128 [ 382.317540][T15959] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 382.325512][T15959] FAT-fs (loop7): Filesystem has been set read-only [ 382.347275][T15959] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 382.355220][T15959] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 382.414901][T15960] buffer_io_error: 43030 callbacks suppressed [ 382.414952][T15960] Buffer I/O error on dev loop7, logical block 2065, async page read [ 382.430336][T15960] Buffer I/O error on dev loop7, logical block 2066, async page read [ 382.438609][T15960] Buffer I/O error on dev loop7, logical block 2067, async page read [ 382.446884][T15960] Buffer I/O error on dev loop7, logical block 2068, async page read [ 382.455005][T15960] Buffer I/O error on dev loop7, logical block 2069, async page read [ 382.463206][T15960] Buffer I/O error on dev loop7, logical block 2070, async page read [ 382.471441][T15960] Buffer I/O error on dev loop7, logical block 2071, async page read [ 382.471547][T15623] batman_adv: batadv0: Interface deactivated: macvtap1 [ 382.479724][T15960] Buffer I/O error on dev loop7, logical block 2072, async page read [ 382.479775][T15959] Buffer I/O error on dev loop7, logical block 2065, async page read [ 382.519030][T15623] batman_adv: batadv0: Interface deactivated: macvtap2 [ 382.519050][T15959] Buffer I/O error on dev loop7, logical block 2066, async page read [ 382.538722][T15623] batman_adv: batadv0: Interface deactivated: macvtap3 [ 382.560838][T15623] batman_adv: batadv0: Interface deactivated: macvtap4 [ 382.580094][T15623] bridge0 (unregistering): left allmulticast mode [ 382.613580][T15623] batman_adv: batadv0: Removing interface: macvtap1 [ 382.676241][T15623] batman_adv: batadv0: Removing interface: macvtap2 [ 382.696311][T15623] batman_adv: batadv0: Removing interface: macvtap3 [ 382.738019][T15623] batman_adv: batadv0: Removing interface: macvtap4 [ 383.236715][T15623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.257144][T15623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.276907][T15623] bond0 (unregistering): Released all slaves [ 383.306467][T15623] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 383.314941][T15623] wireguard0: left promiscuous mode [ 383.327505][T15623] bond1 (unregistering): Released all slaves [ 383.466248][T15963] loop7: detected capacity change from 0 to 128 [ 383.489030][T15963] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 383.497088][T15963] FAT-fs (loop7): Filesystem has been set read-only [ 383.503988][T15963] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 383.511889][T15963] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 383.549555][T15623] hsr_slave_0: left promiscuous mode [ 383.575688][T15623] hsr_slave_1: left promiscuous mode [ 383.585776][T15623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.593289][T15623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.631382][T15623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.638957][T15623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.686521][T15623] veth1_macvtap: left promiscuous mode [ 383.692083][T15623] veth0_macvtap: left promiscuous mode [ 383.716684][T15623] veth1_vlan: left promiscuous mode [ 383.726528][T15623] veth0_vlan: left promiscuous mode [ 383.944462][T15623] team0 (unregistering): Port device team_slave_1 removed [ 383.983277][T15623] team0 (unregistering): Port device team_slave_0 removed [ 384.016892][T15618] smc: removing ib device syz! [ 384.372208][T15921] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 384.409009][T15921] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 384.459011][T15921] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 384.475016][ T29] audit: type=1326 audit(1764011844.299:12138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15971 comm="syz.7.4126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7436d3f749 code=0x7ffc0000 [ 384.475750][T15921] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 384.498997][ T29] audit: type=1326 audit(1764011844.299:12139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15971 comm="syz.7.4126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7436d3f749 code=0x7ffc0000 [ 384.532231][ T29] audit: type=1326 audit(1764011844.349:12140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15971 comm="syz.7.4126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f7436d3f749 code=0x7ffc0000 [ 384.556029][ T29] audit: type=1326 audit(1764011844.349:12141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15971 comm="syz.7.4126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7436d3f749 code=0x7ffc0000 [ 384.579625][ T29] audit: type=1326 audit(1764011844.349:12142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15971 comm="syz.7.4126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7436d3f749 code=0x7ffc0000 [ 384.603371][ T29] audit: type=1326 audit(1764011844.349:12143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15971 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7436d3f749 code=0x7ffc0000 [ 384.626486][ T29] audit: type=1326 audit(1764011844.349:12144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15971 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7436d3f749 code=0x7ffc0000 [ 384.649692][ T29] audit: type=1326 audit(1764011844.349:12145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15971 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7436d3f749 code=0x7ffc0000 [ 384.780460][T15921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.822021][T15921] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.862249][T15618] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.869424][T15618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.883955][T15989] loop7: detected capacity change from 0 to 512 [ 384.893099][T15989] EXT4-fs: Ignoring removed i_version option [ 384.899262][T15989] EXT4-fs: Ignoring removed bh option [ 384.907617][T15618] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.914704][T15618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.967127][T15989] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.988050][T15989] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 385.003587][T15921] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 385.014119][T15921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.061429][T15989] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.072473][T15623] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.139509][T15623] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.191901][T15921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.265173][T15623] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.328663][T15968] chnl_net:caif_netlink_parms(): no params data found [ 385.350652][T15623] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.487138][T15968] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.494307][T15968] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.516712][T15968] bridge_slave_0: entered allmulticast mode [ 385.529946][T15968] bridge_slave_0: entered promiscuous mode [ 385.543500][T15968] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.550722][T15968] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.573209][T15968] bridge_slave_1: entered allmulticast mode [ 385.587130][T15968] bridge_slave_1: entered promiscuous mode [ 385.661784][T15968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.686526][T15921] veth0_vlan: entered promiscuous mode [ 385.709448][T15968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.722639][T15921] veth1_vlan: entered promiscuous mode [ 385.738145][T15623] bridge_slave_1: left allmulticast mode [ 385.743834][T15623] bridge_slave_1: left promiscuous mode [ 385.749623][T15623] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.782058][T15623] bridge_slave_0: left allmulticast mode [ 385.787806][T15623] bridge_slave_0: left promiscuous mode [ 385.793482][T15623] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.947584][T15623] batman_adv: batadv0: Interface deactivated: macvtap1 [ 385.955045][T15623] batman_adv: batadv0: Interface deactivated: macvtap2 [ 385.986466][T15623] bridge0 (unregistering): left allmulticast mode [ 385.998837][T15623] batman_adv: batadv0: Removing interface: macvtap1 [ 386.020423][T15623] batman_adv: batadv0: Removing interface: macvtap2 [ 386.256599][T15623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.278076][T15623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.297656][T15623] bond0 (unregistering): Released all slaves [ 386.360483][T15968] team0: Port device team_slave_0 added [ 386.385454][T15921] veth0_macvtap: entered promiscuous mode [ 386.396194][T15968] team0: Port device team_slave_1 added [ 386.415621][T15623] hsr_slave_0: left promiscuous mode [ 386.427123][T15623] hsr_slave_1: left promiscuous mode [ 386.438343][T15623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.445866][T15623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.469076][T15623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.476604][T15623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.496156][T15623] veth1_macvtap: left promiscuous mode [ 386.512138][T15623] veth0_macvtap: left promiscuous mode [ 386.526768][T15623] veth1_vlan: left promiscuous mode [ 386.532192][T15623] veth0_vlan: left promiscuous mode [ 386.641483][T16026] loop7: detected capacity change from 0 to 128 [ 386.655723][T15623] team0 (unregistering): Port device team_slave_1 removed [ 386.665406][T16026] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 386.673331][T16026] FAT-fs (loop7): Filesystem has been set read-only [ 386.681776][T16026] bio_check_eod: 59898 callbacks suppressed [ 386.681801][T16026] syz.7.4130: attempt to access beyond end of device [ 386.681801][T16026] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 386.701924][T15623] team0 (unregistering): Port device team_slave_0 removed [ 386.706557][T16026] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 386.717029][T16026] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 386.725620][T16026] syz.7.4130: attempt to access beyond end of device [ 386.725620][T16026] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 386.739287][T16026] syz.7.4130: attempt to access beyond end of device [ 386.739287][T16026] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 386.753007][T16026] syz.7.4130: attempt to access beyond end of device [ 386.753007][T16026] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 386.766938][T16027] syz.7.4130: attempt to access beyond end of device [ 386.766938][T16027] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 386.780419][T16027] syz.7.4130: attempt to access beyond end of device [ 386.780419][T16027] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 386.788128][T15921] veth1_macvtap: entered promiscuous mode [ 386.796444][T16026] syz.7.4130: attempt to access beyond end of device [ 386.796444][T16026] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 386.822331][T16026] syz.7.4130: attempt to access beyond end of device [ 386.822331][T16026] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 386.835892][T16026] syz.7.4130: attempt to access beyond end of device [ 386.835892][T16026] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 386.850118][T15968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.857145][T15968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.883192][T15968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.894312][T16022] syz.7.4130: attempt to access beyond end of device [ 386.894312][T16022] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 386.947327][T15968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.954423][T15968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.980471][T15968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.054888][T15968] hsr_slave_0: entered promiscuous mode [ 387.060999][T15968] hsr_slave_1: entered promiscuous mode [ 387.088464][T15921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.118038][T15921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.227487][T15618] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.260815][T15618] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.310714][T15618] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.326037][T15968] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 387.338444][T15968] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 387.382345][T15618] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.391603][T15968] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 387.454768][T15968] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 387.485090][T16037] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4132'. [ 387.508669][T15623] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.520581][T16037] IPVS: Error connecting to the multicast addr [ 387.537054][T16023] chnl_net:caif_netlink_parms(): no params data found [ 387.570356][T15623] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.589037][T16047] 9pnet_fd: Insufficient options for proto=fd [ 387.625874][T16047] loop8: detected capacity change from 0 to 1024 [ 387.633386][T16047] ext4: Unknown parameter 'dont_hash' [ 387.641735][T15623] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.735066][T16053] loop8: detected capacity change from 0 to 4096 [ 387.759698][T15623] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.778437][T16053] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.799700][T16023] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.806827][T16023] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.834327][T16023] bridge_slave_0: entered allmulticast mode [ 387.855871][T16023] bridge_slave_0: entered promiscuous mode [ 387.872012][T16023] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.879193][T16023] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.897020][T16023] bridge_slave_1: entered allmulticast mode [ 387.930861][T16023] bridge_slave_1: entered promiscuous mode [ 387.947695][T16061] 9pnet_fd: Insufficient options for proto=fd [ 387.959774][T15968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.033967][T16023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.070963][T15968] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.111072][T16023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.136701][T15625] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.143952][T15625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.185664][T15625] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.193020][T15625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.241844][T15623] bridge_slave_1: left allmulticast mode [ 388.247582][T15623] bridge_slave_1: left promiscuous mode [ 388.253232][T15623] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.309511][T15623] bridge_slave_0: left allmulticast mode [ 388.315219][T15623] bridge_slave_0: left promiscuous mode [ 388.320977][T15623] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.451202][T15921] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.487716][T15623] bridge0 (unregistering): left allmulticast mode [ 388.516717][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 388.516736][ T29] audit: type=1326 audit(1764011848.339:12195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16066 comm="syz.8.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20598bf749 code=0x7ffc0000 [ 388.584853][ T29] audit: type=1326 audit(1764011848.339:12196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16066 comm="syz.8.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20598bf749 code=0x7ffc0000 [ 388.598807][T16071] loop7: detected capacity change from 0 to 512 [ 388.608823][ T29] audit: type=1326 audit(1764011848.349:12197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16066 comm="syz.8.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20598bf749 code=0x7ffc0000 [ 388.638783][ T29] audit: type=1326 audit(1764011848.349:12198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16066 comm="syz.8.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20598bf749 code=0x7ffc0000 [ 388.662692][ T29] audit: type=1326 audit(1764011848.349:12199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16066 comm="syz.8.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20598bf749 code=0x7ffc0000 [ 388.686451][ T29] audit: type=1326 audit(1764011848.349:12200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16066 comm="syz.8.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20598bf749 code=0x7ffc0000 [ 388.687653][T16071] EXT4-fs (loop7): 1 orphan inode deleted [ 388.710155][ T29] audit: type=1326 audit(1764011848.349:12201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16066 comm="syz.8.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20598bf749 code=0x7ffc0000 [ 388.726919][T16071] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.739828][ T29] audit: type=1326 audit(1764011848.349:12202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16066 comm="syz.8.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20598bf749 code=0x7ffc0000 [ 388.775436][ T29] audit: type=1326 audit(1764011848.349:12203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16066 comm="syz.8.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20598bf749 code=0x7ffc0000 [ 388.776202][T16071] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.799093][ T29] audit: type=1326 audit(1764011848.349:12204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16066 comm="syz.8.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f20598bf749 code=0x7ffc0000 [ 388.909337][T15623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.923772][T15623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.943807][T15623] bond0 (unregistering): Released all slaves [ 388.990329][T16073] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4140'. [ 388.999461][T16073] netem: unknown loss type 13 [ 389.004155][T16073] netem: change failed [ 389.038285][T15623] hsr_slave_0: left promiscuous mode [ 389.044401][T15623] hsr_slave_1: left promiscuous mode [ 389.050761][T16082] loop7: detected capacity change from 0 to 4096 [ 389.056785][T15623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.064595][T15623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.066475][T16082] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.095018][T15623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.102519][T15623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.121527][T15623] veth1_macvtap: left promiscuous mode [ 389.136459][T15623] veth0_macvtap: left promiscuous mode [ 389.147028][T15623] veth1_vlan: left promiscuous mode [ 389.156643][T15623] veth0_vlan: left promiscuous mode [ 389.274389][T16098] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4149'. [ 389.349229][T15623] team0 (unregistering): Port device team_slave_1 removed [ 389.375832][T15623] team0 (unregistering): Port device team_slave_0 removed [ 389.437300][T15836] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.481213][T16023] team0: Port device team_slave_0 added [ 389.521350][T16023] team0: Port device team_slave_1 added [ 389.669153][T16023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.676180][T16023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.702187][T16023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.731107][T16023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.738203][T16023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.764411][T16023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.779451][T16109] netlink: 'wg1': attribute type 6 has an invalid length. [ 389.846665][T16116] loop8: detected capacity change from 0 to 512 [ 389.857062][T16023] hsr_slave_0: entered promiscuous mode [ 389.863099][T16023] hsr_slave_1: entered promiscuous mode [ 389.871098][T16023] debugfs: 'hsr0' already exists in 'hsr' [ 389.876922][T16023] Cannot create hsr debugfs directory [ 389.900201][T15968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.917174][T16116] EXT4-fs (loop8): 1 orphan inode deleted [ 389.935279][T16116] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.952493][T15614] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:25: Failed to release dquot type 1 [ 389.965046][T16116] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.237618][T15968] veth0_vlan: entered promiscuous mode [ 390.247589][T15968] veth1_vlan: entered promiscuous mode [ 390.293451][T15968] veth0_macvtap: entered promiscuous mode [ 390.317287][T15968] veth1_macvtap: entered promiscuous mode [ 390.318458][T16023] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 390.326660][T16023] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 390.345414][T15968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.356618][T15968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.360175][ T52] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.360295][ T52] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.360353][ T52] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.360687][ T52] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.364262][T16023] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 390.392304][T16023] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 390.479290][T16160] loop9: detected capacity change from 0 to 2048 [ 390.519513][T16160] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.520198][T16023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.577047][T16023] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.585503][T15614] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.585711][T15614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.601895][T15614] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.601935][T15614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.125165][T15921] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.180595][T16023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.342017][T15968] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.501417][T16023] veth0_vlan: entered promiscuous mode [ 391.536039][T16023] veth1_vlan: entered promiscuous mode [ 391.590553][T16023] veth0_macvtap: entered promiscuous mode [ 391.599777][T16239] loop7: detected capacity change from 0 to 128 [ 391.618151][T16023] veth1_macvtap: entered promiscuous mode [ 391.636737][T16239] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 391.644709][T16239] FAT-fs (loop7): Filesystem has been set read-only [ 391.661035][T16023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.675377][T16239] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 391.683551][T16239] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 391.693508][T16023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.700710][T16249] bio_check_eod: 7126 callbacks suppressed [ 391.700730][T16249] syz.7.4163: attempt to access beyond end of device [ 391.700730][T16249] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 391.716275][T15618] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.743566][T16239] syz.7.4163: attempt to access beyond end of device [ 391.743566][T16239] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 391.778408][T15618] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.783024][T16249] syz.7.4163: attempt to access beyond end of device [ 391.783024][T16249] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 391.801029][T16239] syz.7.4163: attempt to access beyond end of device [ 391.801029][T16239] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 391.824897][T15618] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.848407][T15618] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.864384][T16239] syz.7.4163: attempt to access beyond end of device [ 391.864384][T16239] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 391.896527][T16239] syz.7.4163: attempt to access beyond end of device [ 391.896527][T16239] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 391.930556][T16239] syz.7.4163: attempt to access beyond end of device [ 391.930556][T16239] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 391.959737][T16239] syz.7.4163: attempt to access beyond end of device [ 391.959737][T16239] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 391.993582][T16239] syz.7.4163: attempt to access beyond end of device [ 391.993582][T16239] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 392.020236][T16239] syz.7.4163: attempt to access beyond end of device [ 392.020236][T16239] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 392.086975][T16271] loop4: detected capacity change from 0 to 2048 [ 392.131941][T16271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.956547][T16023] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.268418][T16326] netlink: 'wg1': attribute type 6 has an invalid length. [ 393.424430][T16334] loop4: detected capacity change from 0 to 128 [ 393.462061][T16334] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 393.470111][T16334] FAT-fs (loop4): Filesystem has been set read-only [ 393.507433][T16334] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 393.515327][T16334] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 393.742143][ T52] bridge_slave_1: left allmulticast mode [ 393.747873][ T52] bridge_slave_1: left promiscuous mode [ 393.753666][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.782695][ T52] bridge_slave_0: left allmulticast mode [ 393.788503][ T52] bridge_slave_0: left promiscuous mode [ 393.794195][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.949938][ T52] bridge0 (unregistering): left allmulticast mode [ 394.107381][T16361] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4180'. [ 394.157947][T16362] netlink: 'syz.8.4180': attribute type 10 has an invalid length. [ 394.165950][T16362] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4180'. [ 394.210399][T16363] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 394.230815][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.257284][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.277560][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 394.277579][ T29] audit: type=1400 audit(1764011854.109:12431): avc: denied { setopt } for pid=16364 comm="syz.4.4181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 394.303911][ T52] bond0 (unregistering): Released all slaves [ 394.348516][T16362] batman_adv: batadv0: Adding interface: veth1_vlan [ 394.355173][T16362] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.382091][ T29] audit: type=1400 audit(1764011854.149:12432): avc: denied { ioctl } for pid=16364 comm="syz.4.4181" path="socket:[53393]" dev="sockfs" ino=53393 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 394.422296][T16362] batman_adv: batadv0: Interface activated: veth1_vlan [ 394.469924][ T52] hsr_slave_0: left promiscuous mode [ 394.505947][ T52] hsr_slave_1: left promiscuous mode [ 394.656643][ T52] team0 (unregistering): Port device team_slave_1 removed [ 394.696590][ T52] team0 (unregistering): Port device team_slave_0 removed [ 395.159007][T16340] chnl_net:caif_netlink_parms(): no params data found [ 395.357092][T16340] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.364207][T16340] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.404655][T16340] bridge_slave_0: entered allmulticast mode [ 395.436804][T16340] bridge_slave_0: entered promiscuous mode [ 395.496738][T16340] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.503864][T16340] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.540957][T16340] bridge_slave_1: entered allmulticast mode [ 395.567090][T16340] bridge_slave_1: entered promiscuous mode [ 395.663439][T16340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.699395][T16340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.741333][T16340] team0: Port device team_slave_0 added [ 395.748452][T16340] team0: Port device team_slave_1 added [ 395.836791][T16340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.843801][T16340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.869782][T16340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.937369][ T29] audit: type=1326 audit(1764011855.769:12433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16427 comm="syz.8.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20598bf749 code=0x7ffc0000 [ 395.986572][ T29] audit: type=1326 audit(1764011855.789:12434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16427 comm="syz.8.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f20598bf749 code=0x7ffc0000 [ 395.997379][T16340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.010312][ T29] audit: type=1326 audit(1764011855.789:12435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16427 comm="syz.8.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20598bf749 code=0x7ffc0000 [ 396.017265][T16340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.041314][ T29] audit: type=1326 audit(1764011855.789:12436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16427 comm="syz.8.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20598bf749 code=0x7ffc0000 [ 396.066950][T16340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.314150][T16340] hsr_slave_0: entered promiscuous mode [ 396.343008][T16340] hsr_slave_1: entered promiscuous mode [ 396.349698][T16340] debugfs: 'hsr0' already exists in 'hsr' [ 396.355479][T16340] Cannot create hsr debugfs directory [ 396.377670][T16438] bridge0: entered promiscuous mode [ 396.398080][T16438] macvtap1: entered allmulticast mode [ 396.403523][T16438] bridge0: entered allmulticast mode [ 396.477366][ T29] audit: type=1326 audit(1764011856.309:12437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16437 comm="syz.8.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20598bf749 code=0x7ffc0000 [ 396.501050][ T29] audit: type=1326 audit(1764011856.309:12438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16437 comm="syz.8.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20598bf749 code=0x7ffc0000 [ 396.539074][ T29] audit: type=1326 audit(1764011856.369:12439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16437 comm="syz.8.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f20598b65e7 code=0x7ffc0000 [ 396.562670][ T29] audit: type=1326 audit(1764011856.369:12440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16437 comm="syz.8.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f205985b829 code=0x7ffc0000 [ 397.019198][T16340] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 397.037045][T16340] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 397.055817][T16340] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 397.068368][T16340] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 397.228830][T16448] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 397.237311][T16340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.247924][T16340] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.277161][T15618] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.284347][T15618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.296716][T15623] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.303809][T15623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.403539][T16340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.589219][T16340] veth0_vlan: entered promiscuous mode [ 397.613884][T16340] veth1_vlan: entered promiscuous mode [ 397.641138][T16476] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 397.655208][T16340] veth0_macvtap: entered promiscuous mode [ 397.688810][T16340] veth1_macvtap: entered promiscuous mode [ 397.710656][T16340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.738208][T16340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.787501][T15614] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.817743][T15614] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.848396][T15614] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.870430][T15614] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.925185][T16484] netlink: 432 bytes leftover after parsing attributes in process `syz.8.4202'. [ 397.926582][T16486] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 398.347066][T16509] netlink: 432 bytes leftover after parsing attributes in process `syz.8.4214'. [ 398.428563][T16513] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 399.346977][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 399.346997][ T29] audit: type=1326 audit(1764011859.179:12674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16517 comm="syz.8.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20598bf749 code=0x7ffc0000 [ 399.376839][ T29] audit: type=1326 audit(1764011859.179:12675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16517 comm="syz.8.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20598bf749 code=0x7ffc0000 [ 399.456483][ T29] audit: type=1326 audit(1764011859.229:12676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16517 comm="syz.8.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f20598bf749 code=0x7ffc0000 [ 399.480223][ T29] audit: type=1326 audit(1764011859.229:12677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16517 comm="syz.8.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20598bf749 code=0x7ffc0000 [ 399.503949][ T29] audit: type=1326 audit(1764011859.229:12678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16517 comm="syz.8.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20598bf749 code=0x7ffc0000 [ 399.777734][T16524] 9pnet_fd: Insufficient options for proto=fd [ 400.320331][ T29] audit: type=1326 audit(1764011860.149:12679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16525 comm="syz.8.4221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20598bf749 code=0x7ffc0000 [ 400.366546][ T29] audit: type=1326 audit(1764011860.169:12680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16525 comm="syz.8.4221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20598bf749 code=0x7ffc0000 [ 400.390237][ T29] audit: type=1326 audit(1764011860.169:12681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16525 comm="syz.8.4221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20598bf749 code=0x7ffc0000 [ 400.414119][ T29] audit: type=1326 audit(1764011860.169:12682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16525 comm="syz.8.4221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20598bf749 code=0x7ffc0000 [ 400.876468][ T29] audit: type=1326 audit(1764011860.699:12683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16539 comm="syz.8.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20598bf749 code=0x7ffc0000 [ 401.192163][T16548] netlink: 444 bytes leftover after parsing attributes in process `syz.8.4231'. [ 401.252134][T16549] ================================================================== [ 401.260274][T16549] BUG: KCSAN: data-race in get_signal / ptrace_attach [ 401.267056][T16549] [ 401.269376][T16549] write to 0xffff88811ad66330 of 4 bytes by task 16548 on cpu 0: [ 401.277084][T16549] ptrace_attach+0x26c/0x590 [ 401.281701][T16549] __se_sys_ptrace+0x146/0x2c0 [ 401.286827][T16549] __x64_sys_ptrace+0x55/0x70 [ 401.291533][T16549] x64_sys_call+0x2870/0x3000 [ 401.296214][T16549] do_syscall_64+0xd2/0x200 [ 401.300718][T16549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.306609][T16549] [ 401.308930][T16549] read to 0xffff88811ad66330 of 4 bytes by task 16549 on cpu 1: [ 401.316555][T16549] get_signal+0x3a0/0xf70 [ 401.320885][T16549] arch_do_signal_or_restart+0x96/0x440 [ 401.326463][T16549] irqentry_exit_to_user_mode+0x5b/0xa0 [ 401.332054][T16549] irqentry_exit+0x12/0x50 [ 401.336481][T16549] asm_exc_page_fault+0x26/0x30 [ 401.341339][T16549] [ 401.343681][T16549] value changed: 0x00000000 -> 0x00000001 [ 401.349392][T16549] [ 401.351724][T16549] Reported by Kernel Concurrency Sanitizer on: [ 401.357969][T16549] CPU: 1 UID: 0 PID: 16549 Comm: syz.8.4231 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 401.369348][T16549] Tainted: [W]=WARN [ 401.373155][T16549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 401.383295][T16549] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 401.733398][T15614] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.789619][T15614] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.843965][T15614] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.889499][T15614] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.951563][T15614] bridge_slave_1: left allmulticast mode [ 401.957294][T15614] bridge_slave_1: left promiscuous mode [ 401.962995][T15614] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.970960][T15614] bridge_slave_0: left allmulticast mode [ 401.976646][T15614] bridge_slave_0: left promiscuous mode [ 401.982391][T15614] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.069282][T15614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.079308][T15614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.088755][T15614] bond0 (unregistering): Released all slaves [ 402.139856][T15614] hsr_slave_0: left promiscuous mode [ 402.145574][T15614] hsr_slave_1: left promiscuous mode [ 402.151223][T15614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.158659][T15614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.166187][T15614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.173853][T15614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.183755][T15614] veth1_macvtap: left promiscuous mode [ 402.189305][T15614] veth0_macvtap: left promiscuous mode [ 402.195009][T15614] veth1_vlan: left promiscuous mode [ 402.200663][T15614] veth0_vlan: left promiscuous mode [ 402.260207][T15614] team0 (unregistering): Port device team_slave_1 removed [ 402.269864][T15614] team0 (unregistering): Port device team_slave_0 removed [ 402.601723][T15614] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.670045][T15614] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.729016][T15614] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.799027][T15614] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.893125][T15614] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.939335][T15614] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.018894][T15614] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.059132][T15614] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.122594][T15614] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.179052][T15614] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.229011][T15614] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.288978][T15614] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.383788][T15614] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.419404][T15614] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.459251][T15614] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.499053][T15614] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.581745][T15614] bridge_slave_1: left allmulticast mode [ 403.587470][T15614] bridge_slave_1: left promiscuous mode [ 403.593146][T15614] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.601325][T15614] bridge_slave_0: left allmulticast mode [ 403.607104][T15614] bridge_slave_0: left promiscuous mode [ 403.612845][T15614] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.621046][T15614] bridge_slave_1: left allmulticast mode [ 403.626880][T15614] bridge_slave_1: left promiscuous mode [ 403.632698][T15614] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.641058][T15614] bridge_slave_0: left allmulticast mode [ 403.646753][T15614] bridge_slave_0: left promiscuous mode [ 403.652400][T15614] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.660849][T15614] bridge_slave_1: left allmulticast mode [ 403.666605][T15614] bridge_slave_1: left promiscuous mode [ 403.672254][T15614] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.680012][T15614] bridge_slave_0: left allmulticast mode [ 403.685663][T15614] bridge_slave_0: left promiscuous mode [ 403.691358][T15614] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.699541][T15614] bridge_slave_1: left allmulticast mode [ 403.705235][T15614] bridge_slave_1: left promiscuous mode [ 403.710925][T15614] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.718607][T15614] bridge_slave_0: left allmulticast mode [ 403.724343][T15614] bridge_slave_0: left promiscuous mode [ 403.730054][T15614] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.888611][T15614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.898221][T15614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.907735][T15614] bond0 (unregistering): Released all slaves [ 403.958920][T15614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.968725][T15614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.978254][T15614] bond0 (unregistering): Released all slaves [ 404.019725][T15614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.029419][T15614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.038803][T15614] bond0 (unregistering): Released all slaves [ 404.062125][T15614] bridge0 (unregistering): left allmulticast mode [ 404.119316][T15614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.129042][T15614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.138568][T15614] bond0 (unregistering): Released all slaves [ 404.194326][T15614] hsr_slave_0: left promiscuous mode [ 404.202163][T15614] hsr_slave_1: left promiscuous mode [ 404.207820][T15614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.215193][T15614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.222774][T15614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.230179][T15614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.239403][T15614] hsr_slave_0: left promiscuous mode [ 404.245005][T15614] hsr_slave_1: left promiscuous mode [ 404.250700][T15614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.258108][T15614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.265565][T15614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.272993][T15614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.282723][T15614] hsr_slave_0: left promiscuous mode [ 404.288485][T15614] hsr_slave_1: left promiscuous mode [ 404.294082][T15614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.301488][T15614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.309143][T15614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.316689][T15614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.325968][T15614] hsr_slave_0: left promiscuous mode [ 404.331721][T15614] hsr_slave_1: left promiscuous mode [ 404.337347][T15614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.344729][T15614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.352460][T15614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.360035][T15614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.367557][T15614] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 404.374663][T15614] batman_adv: batadv0: Removing interface: veth1_vlan [ 404.393259][T15614] veth1_macvtap: left promiscuous mode [ 404.398889][T15614] veth0_macvtap: left promiscuous mode [ 404.404450][T15614] veth1_vlan: left promiscuous mode [ 404.409746][T15614] veth0_vlan: left promiscuous mode [ 404.415737][T15614] veth1_macvtap: left promiscuous mode [ 404.421435][T15614] veth0_macvtap: left promiscuous mode [ 404.427405][T15614] veth1_vlan: left promiscuous mode [ 404.432729][T15614] veth0_vlan: left promiscuous mode [ 404.438604][T15614] veth1_macvtap: left promiscuous mode [ 404.444202][T15614] veth0_macvtap: left promiscuous mode [ 404.449882][T15614] veth1_vlan: left promiscuous mode [ 404.455233][T15614] veth0_vlan: left promiscuous mode [ 404.460999][T15614] veth1_macvtap: left promiscuous mode [ 404.466583][T15614] veth0_macvtap: left promiscuous mode [ 404.472115][T15614] veth1_vlan: left promiscuous mode [ 404.477402][T15614] veth0_vlan: left promiscuous mode [ 404.639402][T15614] team0 (unregistering): Port device team_slave_1 removed [ 404.649021][T15614] team0 (unregistering): Port device team_slave_0 removed [ 404.703044][T15614] team0 (unregistering): Port device team_slave_1 removed [ 404.713293][T15614] team0 (unregistering): Port device team_slave_0 removed [ 404.765989][T15614] team0 (unregistering): Port device team_slave_1 removed [ 404.776088][T15614] team0 (unregistering): Port device team_slave_0 removed [ 404.828648][T15614] team0 (unregistering): Port device team_slave_1 removed [ 404.839381][T15614] team0 (unregistering): Port device team_slave_0 removed