Warning: Permanently added '10.128.1.146' (ED25519) to the list of known hosts. 2024/02/23 21:14:20 fuzzer started 2024/02/23 21:14:21 dialing manager at 10.128.0.163:30015 [ 25.743105][ T27] audit: type=1400 audit(1708722861.050:82): avc: denied { node_bind } for pid=3065 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 25.763862][ T27] audit: type=1400 audit(1708722861.050:83): avc: denied { name_bind } for pid=3065 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 25.951525][ T27] audit: type=1400 audit(1708722861.250:84): avc: denied { mounton } for pid=3073 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.952752][ T3073] cgroup: Unknown subsys name 'net' [ 25.974254][ T27] audit: type=1400 audit(1708722861.260:85): avc: denied { mount } for pid=3073 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.002629][ T27] audit: type=1400 audit(1708722861.280:86): avc: denied { unmount } for pid=3073 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.143390][ T3073] cgroup: Unknown subsys name 'rlimit' [ 26.263545][ T27] audit: type=1400 audit(1708722861.570:87): avc: denied { mounton } for pid=3073 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.288423][ T27] audit: type=1400 audit(1708722861.570:88): avc: denied { mount } for pid=3073 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.311816][ T27] audit: type=1400 audit(1708722861.570:89): avc: denied { create } for pid=3073 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.315958][ T3076] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.332294][ T27] audit: type=1400 audit(1708722861.570:90): avc: denied { write } for pid=3073 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 2024/02/23 21:14:21 syscalls: 2890 2024/02/23 21:14:21 code coverage: enabled 2024/02/23 21:14:21 comparison tracing: enabled 2024/02/23 21:14:21 extra coverage: enabled 2024/02/23 21:14:21 delay kcov mmap: enabled 2024/02/23 21:14:21 setuid sandbox: enabled 2024/02/23 21:14:21 namespace sandbox: enabled 2024/02/23 21:14:21 Android sandbox: enabled 2024/02/23 21:14:21 fault injection: enabled 2024/02/23 21:14:21 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2024/02/23 21:14:21 net packet injection: enabled 2024/02/23 21:14:21 net device setup: enabled 2024/02/23 21:14:21 concurrency sanitizer: enabled 2024/02/23 21:14:21 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/02/23 21:14:21 NIC VF setup: PCI device 0000:00:11.0 is not available 2024/02/23 21:14:21 USB emulation: /dev/raw-gadget does not exist 2024/02/23 21:14:21 hci packet injection: /dev/vhci does not exist 2024/02/23 21:14:21 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 2024/02/23 21:14:21 802.15.4 emulation: enabled 2024/02/23 21:14:21 swap file: enabled 2024/02/23 21:14:21 suppressing KCSAN reports in functions: 'exit_mm' 'pcpu_alloc' 2024/02/23 21:14:21 fetching corpus: 0, signal 0/2000 (executing program) [ 26.361384][ T27] audit: type=1400 audit(1708722861.570:91): avc: denied { read } for pid=3073 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.387474][ T3073] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/02/23 21:14:21 fetching corpus: 44, signal 17212/20375 (executing program) 2024/02/23 21:14:21 fetching corpus: 94, signal 27698/31711 (executing program) 2024/02/23 21:14:21 fetching corpus: 143, signal 35576/40172 (executing program) 2024/02/23 21:14:21 fetching corpus: 192, signal 41362/46383 (executing program) 2024/02/23 21:14:22 fetching corpus: 241, signal 46388/51792 (executing program) 2024/02/23 21:14:22 fetching corpus: 290, signal 49277/55100 (executing program) 2024/02/23 21:14:22 fetching corpus: 340, signal 52684/58697 (executing program) 2024/02/23 21:14:22 fetching corpus: 389, signal 55199/61413 (executing program) 2024/02/23 21:14:22 fetching corpus: 439, signal 58282/64519 (executing program) 2024/02/23 21:14:22 fetching corpus: 489, signal 61072/67202 (executing program) 2024/02/23 21:14:22 fetching corpus: 538, signal 63136/69231 (executing program) 2024/02/23 21:14:22 fetching corpus: 587, signal 65385/71334 (executing program) 2024/02/23 21:14:22 fetching corpus: 637, signal 67405/73115 (executing program) 2024/02/23 21:14:22 fetching corpus: 687, signal 69693/75010 (executing program) 2024/02/23 21:14:22 fetching corpus: 734, signal 72559/77154 (executing program) 2024/02/23 21:14:22 fetching corpus: 784, signal 74322/78501 (executing program) 2024/02/23 21:14:22 fetching corpus: 833, signal 77493/80553 (executing program) 2024/02/23 21:14:22 fetching corpus: 883, signal 79548/81874 (executing program) 2024/02/23 21:14:22 fetching corpus: 933, signal 82229/83412 (executing program) 2024/02/23 21:14:22 fetching corpus: 937, signal 82298/83506 (executing program) 2024/02/23 21:14:22 fetching corpus: 937, signal 82298/83563 (executing program) 2024/02/23 21:14:22 fetching corpus: 937, signal 82298/83619 (executing program) 2024/02/23 21:14:22 fetching corpus: 937, signal 82298/83671 (executing program) 2024/02/23 21:14:22 fetching corpus: 937, signal 82301/83729 (executing program) 2024/02/23 21:14:22 fetching corpus: 937, signal 82301/83795 (executing program) 2024/02/23 21:14:22 fetching corpus: 937, signal 82301/83854 (executing program) 2024/02/23 21:14:22 fetching corpus: 937, signal 82301/83916 (executing program) 2024/02/23 21:14:22 fetching corpus: 937, signal 82301/83966 (executing program) 2024/02/23 21:14:22 fetching corpus: 937, signal 82301/84018 (executing program) 2024/02/23 21:14:22 fetching corpus: 937, signal 82301/84074 (executing program) 2024/02/23 21:14:22 fetching corpus: 937, signal 82301/84133 (executing program) 2024/02/23 21:14:22 fetching corpus: 937, signal 82301/84194 (executing program) 2024/02/23 21:14:22 fetching corpus: 937, signal 82301/84246 (executing program) 2024/02/23 21:14:22 fetching corpus: 937, signal 82303/84297 (executing program) 2024/02/23 21:14:22 fetching corpus: 937, signal 82303/84342 (executing program) 2024/02/23 21:14:22 fetching corpus: 937, signal 82303/84400 (executing program) 2024/02/23 21:14:22 fetching corpus: 937, signal 82303/84445 (executing program) 2024/02/23 21:14:22 fetching corpus: 937, signal 82303/84494 (executing program) 2024/02/23 21:14:22 fetching corpus: 937, signal 82303/84550 (executing program) 2024/02/23 21:14:22 fetching corpus: 937, signal 82313/84615 (executing program) 2024/02/23 21:14:22 fetching corpus: 937, signal 82313/84668 (executing program) 2024/02/23 21:14:22 fetching corpus: 937, signal 82313/84679 (executing program) 2024/02/23 21:14:22 fetching corpus: 937, signal 82313/84679 (executing program) 2024/02/23 21:14:24 starting 5 fuzzer processes [ 30.000492][ T3084] chnl_net:caif_netlink_parms(): no params data found [ 30.108527][ T3084] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.116981][ T3084] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.124451][ T3084] bridge_slave_0: entered allmulticast mode [ 30.131229][ T3084] bridge_slave_0: entered promiscuous mode [ 30.138378][ T3084] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.145773][ T3084] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.154695][ T3084] bridge_slave_1: entered allmulticast mode [ 30.161325][ T3084] bridge_slave_1: entered promiscuous mode [ 30.198805][ T3084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.211219][ T3084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.244338][ T3087] chnl_net:caif_netlink_parms(): no params data found [ 30.255989][ T3095] chnl_net:caif_netlink_parms(): no params data found [ 30.265493][ T3084] team0: Port device team_slave_0 added [ 30.274167][ T3084] team0: Port device team_slave_1 added [ 30.295835][ T3118] chnl_net:caif_netlink_parms(): no params data found [ 30.304610][ T3097] chnl_net:caif_netlink_parms(): no params data found [ 30.336270][ T3084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.343774][ T3084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.371132][ T3084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.403687][ T3084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.411567][ T3084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.438242][ T3084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.490795][ T3087] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.498173][ T3087] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.508624][ T3087] bridge_slave_0: entered allmulticast mode [ 30.515143][ T3087] bridge_slave_0: entered promiscuous mode [ 30.522606][ T3095] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.529770][ T3095] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.537030][ T3095] bridge_slave_0: entered allmulticast mode [ 30.543578][ T3095] bridge_slave_0: entered promiscuous mode [ 30.554861][ T3087] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.562090][ T3087] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.569490][ T3087] bridge_slave_1: entered allmulticast mode [ 30.576494][ T3087] bridge_slave_1: entered promiscuous mode [ 30.593335][ T3095] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.600692][ T3095] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.608912][ T3095] bridge_slave_1: entered allmulticast mode [ 30.615393][ T3095] bridge_slave_1: entered promiscuous mode [ 30.653838][ T3087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.674087][ T3118] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.681323][ T3118] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.689270][ T3118] bridge_slave_0: entered allmulticast mode [ 30.695819][ T3118] bridge_slave_0: entered promiscuous mode [ 30.702832][ T3118] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.710100][ T3118] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.717275][ T3118] bridge_slave_1: entered allmulticast mode [ 30.724331][ T3118] bridge_slave_1: entered promiscuous mode [ 30.730521][ T3097] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.737668][ T3097] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.744951][ T3097] bridge_slave_0: entered allmulticast mode [ 30.751241][ T3097] bridge_slave_0: entered promiscuous mode [ 30.760167][ T3084] hsr_slave_0: entered promiscuous mode [ 30.766373][ T3084] hsr_slave_1: entered promiscuous mode [ 30.778746][ T3087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.794511][ T3095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.817531][ T3118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.827248][ T3097] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.834345][ T3097] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.841616][ T3097] bridge_slave_1: entered allmulticast mode [ 30.848062][ T3097] bridge_slave_1: entered promiscuous mode [ 30.866237][ T3095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.876588][ T3118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.891775][ T3097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.906915][ T3087] team0: Port device team_slave_0 added [ 30.913390][ T3087] team0: Port device team_slave_1 added [ 30.929436][ T3097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.961142][ T3095] team0: Port device team_slave_0 added [ 30.974254][ T3118] team0: Port device team_slave_0 added [ 30.988690][ T3097] team0: Port device team_slave_0 added [ 30.996087][ T3087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.003102][ T3087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.029580][ T3087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.041257][ T3095] team0: Port device team_slave_1 added [ 31.052328][ T3118] team0: Port device team_slave_1 added [ 31.067757][ T3097] team0: Port device team_slave_1 added [ 31.073820][ T3087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.080788][ T3087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.107459][ T3087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.148684][ T3095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.155799][ T3095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.182450][ T3095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.194023][ T3118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.201318][ T3118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.227553][ T3118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.249741][ T3097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.256832][ T3097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.284136][ T3097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.295291][ T3097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.302342][ T3097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.328377][ T3097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.339647][ T3095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.346739][ T3095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.374096][ T3095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.387424][ T3118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.394611][ T3118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.421016][ T3118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.481785][ T3095] hsr_slave_0: entered promiscuous mode [ 31.488232][ T3095] hsr_slave_1: entered promiscuous mode [ 31.494596][ T3095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.502381][ T3095] Cannot create hsr debugfs directory [ 31.509819][ T3087] hsr_slave_0: entered promiscuous mode [ 31.516110][ T3087] hsr_slave_1: entered promiscuous mode [ 31.522049][ T3087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.529799][ T3087] Cannot create hsr debugfs directory [ 31.547384][ T3097] hsr_slave_0: entered promiscuous mode [ 31.553500][ T3097] hsr_slave_1: entered promiscuous mode [ 31.559651][ T3097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.567275][ T3097] Cannot create hsr debugfs directory [ 31.585490][ T3118] hsr_slave_0: entered promiscuous mode [ 31.591906][ T3118] hsr_slave_1: entered promiscuous mode [ 31.597885][ T3118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.605755][ T3118] Cannot create hsr debugfs directory [ 31.628405][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 31.628420][ T27] audit: type=1400 audit(1708722866.930:105): avc: denied { create } for pid=3084 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.628873][ T3084] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.661208][ T27] audit: type=1400 audit(1708722866.930:106): avc: denied { write } for pid=3084 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.685007][ T27] audit: type=1400 audit(1708722866.930:107): avc: denied { read } for pid=3084 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.718413][ T3084] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.745347][ T3084] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.754432][ T3084] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.820775][ T3097] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.829635][ T3097] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.838771][ T3097] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.851927][ T3097] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.887607][ T3087] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.896442][ T3087] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.910379][ T3087] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.921385][ T3087] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.941859][ T3118] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.950610][ T3118] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.978289][ T3118] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.987379][ T3118] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.015174][ T3095] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.024031][ T3095] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.033146][ T3095] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.044290][ T3095] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.060481][ T3097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.081643][ T3097] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.096242][ T3084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.124100][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.131186][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.140956][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.148149][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.169333][ T3084] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.192846][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.199939][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.209066][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.216842][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.247669][ T3087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.267976][ T3087] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.289699][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.296893][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.306719][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.313970][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.322990][ T27] audit: type=1400 audit(1708722867.630:108): avc: denied { remove_name } for pid=2756 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.336590][ T3118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.345951][ T27] audit: type=1400 audit(1708722867.630:109): avc: denied { rename } for pid=2756 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.362691][ T3118] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.378161][ T27] audit: type=1400 audit(1708722867.630:110): avc: denied { create } for pid=2756 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.389719][ T3084] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.414986][ T3084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.448474][ T3166] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.455658][ T3166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.472532][ T3166] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.479657][ T3166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.521031][ T3118] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.531793][ T3118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.565796][ T3084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.580255][ T3095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.590523][ T3097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.610527][ T3095] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.660981][ T3166] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.668298][ T3166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.677948][ T3166] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.685056][ T3166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.708638][ T3087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.728713][ T3118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.818551][ T3097] veth0_vlan: entered promiscuous mode [ 32.845930][ T3084] veth0_vlan: entered promiscuous mode [ 32.860410][ T3095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.872621][ T3097] veth1_vlan: entered promiscuous mode [ 32.882976][ T3084] veth1_vlan: entered promiscuous mode [ 32.919679][ T3097] veth0_macvtap: entered promiscuous mode [ 32.961290][ T3097] veth1_macvtap: entered promiscuous mode [ 32.968741][ T3084] veth0_macvtap: entered promiscuous mode [ 32.975383][ T3118] veth0_vlan: entered promiscuous mode [ 32.984975][ T3084] veth1_macvtap: entered promiscuous mode [ 32.993844][ T3087] veth0_vlan: entered promiscuous mode [ 33.012453][ T3087] veth1_vlan: entered promiscuous mode [ 33.021265][ T3097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.037369][ T3095] veth0_vlan: entered promiscuous mode [ 33.046294][ T3118] veth1_vlan: entered promiscuous mode [ 33.059531][ T3084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.070274][ T3084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.083259][ T3084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.092678][ T3084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.109725][ T3095] veth1_vlan: entered promiscuous mode [ 33.116673][ T3097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.127547][ T3097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.138778][ T3097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.146795][ T3084] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.155641][ T3084] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.164432][ T3084] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.173165][ T3084] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.191408][ T3097] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.200460][ T3097] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.209618][ T3097] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.219200][ T3097] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.245533][ T3087] veth0_macvtap: entered promiscuous mode [ 33.255790][ T27] audit: type=1400 audit(1708722868.560:111): avc: denied { mounton } for pid=3084 comm="syz-executor.2" path="/dev/binderfs" dev="devtmpfs" ino=452 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 33.296486][ T3087] veth1_macvtap: entered promiscuous mode [ 33.305768][ T27] audit: type=1400 audit(1708722868.610:112): avc: denied { read write } for pid=3084 comm="syz-executor.2" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.320357][ T3095] veth0_macvtap: entered promiscuous mode [ 33.330273][ T27] audit: type=1400 audit(1708722868.610:113): avc: denied { open } for pid=3084 comm="syz-executor.2" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 21:14:28 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="04338900", @ANYRES32=0xffffffffffffffff], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000003580)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="300000000000000084000000010000000000000044"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x14, &(0x7f0000000500), 0x8) [ 33.339727][ T3095] veth1_macvtap: entered promiscuous mode [ 33.361198][ T27] audit: type=1400 audit(1708722868.610:114): avc: denied { ioctl } for pid=3084 comm="syz-executor.2" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.388957][ T3095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.403564][ T3095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.413728][ T3095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.424190][ T3095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.435388][ T3095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.453487][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 21:14:28 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="04338900", @ANYRES32=0xffffffffffffffff], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000003580)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="300000000000000084000000010000000000000044"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x14, &(0x7f0000000500), 0x8) 21:14:28 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@typedef={0x4, 0x0, 0x0, 0x8, 0x2}, @typedef={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x37}, 0x20) 21:14:28 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@typedef={0x4, 0x0, 0x0, 0x8, 0x2}, @typedef={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x37}, 0x20) [ 33.464248][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.474203][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.485086][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.495344][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 21:14:28 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@typedef={0x4, 0x0, 0x0, 0x8, 0x2}, @typedef={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x37}, 0x20) 21:14:28 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@typedef={0x4, 0x0, 0x0, 0x8, 0x2}, @typedef={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x37}, 0x20) [ 33.506018][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.517886][ T3087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.533086][ T3095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.544055][ T3095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.554076][ T3095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 21:14:28 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="04338900", @ANYRES32=0xffffffffffffffff], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000003580)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="300000000000000084000000010000000000000044"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x14, &(0x7f0000000500), 0x8) 21:14:28 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="04338900", @ANYRES32=0xffffffffffffffff], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000003580)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="300000000000000084000000010000000000000044"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x14, &(0x7f0000000500), 0x8) [ 33.564664][ T3095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.584905][ T3095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.596681][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.607225][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.617095][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.627690][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.637874][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.648447][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 21:14:28 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="04338900", @ANYRES32=0xffffffffffffffff], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000003580)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="300000000000000084000000010000000000000044"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x14, &(0x7f0000000500), 0x8) 21:14:28 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="04338900", @ANYRES32=0xffffffffffffffff], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000003580)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="300000000000000084000000010000000000000044"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x14, &(0x7f0000000500), 0x8) [ 33.660314][ T3087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.672628][ T3118] veth0_macvtap: entered promiscuous mode [ 33.680991][ T3118] veth1_macvtap: entered promiscuous mode [ 33.698991][ T3095] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.707812][ T3095] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.716638][ T3095] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.725495][ T3095] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.745271][ T3087] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.754096][ T3087] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 21:14:29 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="04338900", @ANYRES32=0xffffffffffffffff], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000003580)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="300000000000000084000000010000000000000044"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x14, &(0x7f0000000500), 0x8) 21:14:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) [ 33.763144][ T3087] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.771893][ T3087] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.803903][ T3118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.814422][ T3118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.824308][ T3118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.835006][ T3118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.845444][ T3118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.855986][ T3118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 21:14:29 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x60}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 21:14:29 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x60}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 21:14:29 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x60}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 33.866297][ T3118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.876822][ T3118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.894667][ T3118] batman_adv: batadv0: Interface activated: batadv_slave_0 21:14:29 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x60}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 33.915310][ T3118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.925944][ T3118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.936182][ T3118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.946914][ T3118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 21:14:29 executing program 0: request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rus+\xe3\xcf\xd15\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) 21:14:29 executing program 0: request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rus+\xe3\xcf\xd15\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) [ 33.956881][ T3118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.967382][ T3118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.977328][ T3118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.987802][ T3118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.000054][ T3118] batman_adv: batadv0: Interface activated: batadv_slave_1 21:14:29 executing program 0: request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rus+\xe3\xcf\xd15\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) 21:14:29 executing program 0: request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rus+\xe3\xcf\xd15\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) 21:14:29 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @void}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$LINK_DETACH(0xf, &(0x7f0000000000)=r4, 0x4) [ 34.038947][ T3118] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.048019][ T3118] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.056929][ T3118] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.065965][ T3118] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 21:14:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$eJzs3U1oE2kYwPGnH9t2u7QJy7KwC7v77PayigxNzkIbpBUxUNFGqgVhaicaMiYhE6Ip0kQQevHgxa+zCiKFgngQhFIPnqRFevPgrbcerCeLiCPp9COp6Qc1bQr9/w7tQ573mTx538mQvIFk/ujtK/GoY0TNjNS31El9txRksU78Ui8rCnLo6sTbv86cO38yFA73nFbtDfUHgqra/s/k4PXx/6Yyv5x93v6yWab9F+YXgnPTv0//Mf+1/3LM0ZijiWRGTR1KJjPmkG3p8F0nbqiesi3TsTSWcKx0WT5qJ1OpnJqJ4bbWVNpyHDUTOY1bOc0kNZPOqXnJjCXUMAxtaxVsbjz7ILRxNvJ00XVlIfPGdZsL4rpu8caWPWwPNba0/q5bsv63at0S9lDJRb1FxB7LRrIR77+XD0UlJrZY0ik++SLFc8R9OOEunSrFv9eCE+HZw69fqapfRu38cn0+G2korw+IT/xejceLe0+EewLqKa//SVpL64Pik98q1wcr1jfJ/x0l9Yb4ZPaiJMWWmcl/P831jd1bqR8NqB7rC6+r/1mG16bpyccarQ8AAAAAAAAAADth6KqK+/dGccDNEVVtW5f36it9PrB+f76z4v58o/zZWNvHDgAAAADAQeHkRuKmbVvpHwyKb+WrcZzqB81S2zYe3dj+4L97Nx/T0dUw0/2ukLKtdF72x/RuJ/g8sC/aKA9kefdpq8ENVX6mrAUfqnKcuuX+Nh5zfPD9sy2P0/Td/GxkavevSgAAAAB2w9qL/i7JR19k8wNH7tS6JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpodfOXYzP1KKS0Gvz6ulFq9M+/3xQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPaVbwEAAP//u5TQrw==") r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x8038) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef84) 21:14:29 executing program 0: openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff76, 0x10, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd3}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) nanosleep(&(0x7f0000000240), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet6(0xa, 0x4, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) shmat(0xffffffffffffffff, &(0x7f0000002000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 21:14:29 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) 21:14:29 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) 21:14:29 executing program 0: openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff76, 0x10, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd3}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) nanosleep(&(0x7f0000000240), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet6(0xa, 0x4, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) shmat(0xffffffffffffffff, &(0x7f0000002000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) [ 34.170810][ T3289] loop3: detected capacity change from 0 to 128 21:14:29 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @void}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$LINK_DETACH(0xf, &(0x7f0000000000)=r4, 0x4) 21:14:29 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) 21:14:29 executing program 0: openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff76, 0x10, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd3}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) nanosleep(&(0x7f0000000240), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet6(0xa, 0x4, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) shmat(0xffffffffffffffff, &(0x7f0000002000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 21:14:29 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) 21:14:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x8038) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef84) 21:14:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x8038) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef84) 21:14:29 executing program 0: openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff76, 0x10, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd3}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) nanosleep(&(0x7f0000000240), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet6(0xa, 0x4, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) shmat(0xffffffffffffffff, &(0x7f0000002000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 21:14:29 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @void}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$LINK_DETACH(0xf, &(0x7f0000000000)=r4, 0x4) [ 34.344993][ T3317] loop4: detected capacity change from 0 to 128 21:14:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x8038) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef84) [ 34.392742][ T3325] loop3: detected capacity change from 0 to 128 [ 34.434803][ T3330] loop0: detected capacity change from 0 to 128 21:14:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x8038) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef84) 21:14:29 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @void}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$LINK_DETACH(0xf, &(0x7f0000000000)=r4, 0x4) 21:14:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x8038) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef84) 21:14:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$eJzs3U1oE2kYwPGnH9t2u7QJy7KwC7v77PayigxNzkIbpBUxUNFGqgVhaicaMiYhE6Ip0kQQevHgxa+zCiKFgngQhFIPnqRFevPgrbcerCeLiCPp9COp6Qc1bQr9/w7tQ573mTx538mQvIFk/ujtK/GoY0TNjNS31El9txRksU78Ui8rCnLo6sTbv86cO38yFA73nFbtDfUHgqra/s/k4PXx/6Yyv5x93v6yWab9F+YXgnPTv0//Mf+1/3LM0ZijiWRGTR1KJjPmkG3p8F0nbqiesi3TsTSWcKx0WT5qJ1OpnJqJ4bbWVNpyHDUTOY1bOc0kNZPOqXnJjCXUMAxtaxVsbjz7ILRxNvJ00XVlIfPGdZsL4rpu8caWPWwPNba0/q5bsv63at0S9lDJRb1FxB7LRrIR77+XD0UlJrZY0ik++SLFc8R9OOEunSrFv9eCE+HZw69fqapfRu38cn0+G2korw+IT/xejceLe0+EewLqKa//SVpL64Pik98q1wcr1jfJ/x0l9Yb4ZPaiJMWWmcl/P831jd1bqR8NqB7rC6+r/1mG16bpyccarQ8AAAAAAAAAADth6KqK+/dGccDNEVVtW5f36it9PrB+f76z4v58o/zZWNvHDgAAAADAQeHkRuKmbVvpHwyKb+WrcZzqB81S2zYe3dj+4L97Nx/T0dUw0/2ukLKtdF72x/RuJ/g8sC/aKA9kefdpq8ENVX6mrAUfqnKcuuX+Nh5zfPD9sy2P0/Td/GxkavevSgAAAAB2w9qL/i7JR19k8wNH7tS6JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpodfOXYzP1KKS0Gvz6ulFq9M+/3xQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPaVbwEAAP//u5TQrw==") r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x8038) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef84) 21:14:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) [ 34.601287][ T3337] loop4: detected capacity change from 0 to 128 [ 34.637872][ T3339] loop3: detected capacity change from 0 to 128 21:14:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) [ 34.695655][ T3345] loop0: detected capacity change from 0 to 128 21:14:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x8038) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0xef84) 21:14:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x8038) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef84) [ 34.869654][ T3353] loop4: detected capacity change from 0 to 128 [ 34.937065][ T3355] loop0: detected capacity change from 0 to 128 21:14:30 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x8038) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef84) [ 35.301011][ T3365] loop3: detected capacity change from 0 to 128 21:14:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:31 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:32 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:32 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:32 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:32 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:33 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:33 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:34 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:35 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:35 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x8038) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef84) 21:14:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) [ 40.601060][ T3464] loop3: detected capacity change from 0 to 128 21:14:35 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x8038) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef84) [ 40.769751][ T3473] loop3: detected capacity change from 0 to 128 21:14:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x8038) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0xef84) [ 40.950202][ T3476] loop3: detected capacity change from 0 to 128 21:14:36 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x8038) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0xef84) 21:14:36 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) [ 41.120297][ T3482] loop3: detected capacity change from 0 to 128 21:14:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$eJzs3U1oE2kYwPGnH9t2u7QJy7KwC7v77PayigxNzkIbpBUxUNFGqgVhaicaMiYhE6Ip0kQQevHgxa+zCiKFgngQhFIPnqRFevPgrbcerCeLiCPp9COp6Qc1bQr9/w7tQ573mTx538mQvIFk/ujtK/GoY0TNjNS31El9txRksU78Ui8rCnLo6sTbv86cO38yFA73nFbtDfUHgqra/s/k4PXx/6Yyv5x93v6yWab9F+YXgnPTv0//Mf+1/3LM0ZijiWRGTR1KJjPmkG3p8F0nbqiesi3TsTSWcKx0WT5qJ1OpnJqJ4bbWVNpyHDUTOY1bOc0kNZPOqXnJjCXUMAxtaxVsbjz7ILRxNvJ00XVlIfPGdZsL4rpu8caWPWwPNba0/q5bsv63at0S9lDJRb1FxB7LRrIR77+XD0UlJrZY0ik++SLFc8R9OOEunSrFv9eCE+HZw69fqapfRu38cn0+G2korw+IT/xejceLe0+EewLqKa//SVpL64Pik98q1wcr1jfJ/x0l9Yb4ZPaiJMWWmcl/P831jd1bqR8NqB7rC6+r/1mG16bpyccarQ8AAAAAAAAAADth6KqK+/dGccDNEVVtW5f36it9PrB+f76z4v58o/zZWNvHDgAAAADAQeHkRuKmbVvpHwyKb+WrcZzqB81S2zYe3dj+4L97Nx/T0dUw0/2ukLKtdF72x/RuJ/g8sC/aKA9kefdpq8ENVX6mrAUfqnKcuuX+Nh5zfPD9sy2P0/Td/GxkavevSgAAAAB2w9qL/i7JR19k8wNH7tS6JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpodfOXYzP1KKS0Gvz6ulFq9M+/3xQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPaVbwEAAP//u5TQrw==") r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x8038) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef84) [ 41.300464][ T3489] loop3: detected capacity change from 0 to 128 [ 41.379391][ T3490] ================================================================== [ 41.387632][ T3490] BUG: KCSAN: data-race in filemap_splice_read / generic_write_end [ 41.395581][ T3490] [ 41.397929][ T3490] write to 0xffff8881069cf778 of 8 bytes by task 3489 on cpu 1: [ 41.405582][ T3490] generic_write_end+0x94/0x230 [ 41.410463][ T3490] fat_write_end+0x4e/0x160 [ 41.414987][ T3490] generic_perform_write+0x267/0x410 [ 41.420321][ T3490] __generic_file_write_iter+0xa1/0x120 [ 41.426001][ T3490] generic_file_write_iter+0x7d/0x1c0 [ 41.431431][ T3490] iter_file_splice_write+0x5de/0x950 [ 41.436832][ T3490] direct_splice_actor+0x167/0x2c0 [ 41.442063][ T3490] splice_direct_to_actor+0x2fb/0x660 [ 41.447471][ T3490] do_splice_direct+0xd7/0x150 [ 41.452274][ T3490] do_sendfile+0x3b9/0x960 [ 41.456732][ T3490] __x64_sys_sendfile64+0xbd/0x150 [ 41.461896][ T3490] do_syscall_64+0xcd/0x1d0 [ 41.466527][ T3490] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 41.472448][ T3490] [ 41.474789][ T3490] read to 0xffff8881069cf778 of 8 bytes by task 3490 on cpu 0: [ 41.482363][ T3490] filemap_splice_read+0x373/0x8f0 [ 41.488143][ T3490] splice_direct_to_actor+0x268/0x660 [ 41.493681][ T3490] do_splice_direct+0xd7/0x150 [ 41.498486][ T3490] do_sendfile+0x3b9/0x960 [ 41.502939][ T3490] __x64_sys_sendfile64+0x110/0x150 [ 41.508173][ T3490] do_syscall_64+0xcd/0x1d0 [ 41.512717][ T3490] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 41.518917][ T3490] [ 41.521256][ T3490] value changed: 0x0000000000003d0a -> 0x0000000000003d20 21:14:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:36 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) [ 41.528890][ T3490] [ 41.531234][ T3490] Reported by Kernel Concurrency Sanitizer on: [ 41.537463][ T3490] CPU: 0 PID: 3490 Comm: syz-executor.3 Not tainted 6.8.0-rc5-syzkaller-00278-g603c04e27c3e #0 [ 41.547800][ T3490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 41.557872][ T3490] ================================================================== 21:14:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x8038) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef84) [ 41.660554][ T3497] loop3: detected capacity change from 0 to 128 21:14:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x8038) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef84) [ 41.828009][ T3502] loop3: detected capacity change from 0 to 128 21:14:37 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) 21:14:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x8038) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0xef84) 21:14:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'dvmrp1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x9000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000001c00)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/7, 0x7}], 0x9, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000020) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r13 = openat$cgroup_int(r11, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x615, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) recvmsg$unix(r4, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYRES32=r4], 0x18}, 0x40000040) ioctl$TUNSETNOCSUM(r14, 0x8943, 0x20000000) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/25, 0x19}, {&(0x7f0000002400)=""/5, 0x5}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x2040) close(r0) sendmsg$inet(r10, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="0026fa8f66a69cd66943022daa88820dd531cb1252d72e7379edfd6c4e32e55187c9698758b548fc94ad4b9030dcf578177879d8767a9bc94ecd51d5", 0x3c}, {&(0x7f0000002100)="b8cc23781d0d65ebace56206ee88c90b6e4566ad07ddec7ad61f32847c15589636ab39fd06d720c50f2df437983e7979d6eeb0b9440ab7d1c91bbb149c3374eb52d0a97879b2cc35ff38bcdf076d13aa10e1372f84b45b73", 0x58}, {&(0x7f0000002180)="3ec875", 0x3}], 0x3, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x68}, 0x44) openat$cgroup_ro(r8, &(0x7f0000002080)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002040)={&(0x7f0000001c40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/168, 0xa8}, {&(0x7f0000001e40)=""/255, 0xff}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x4}, 0x41) [ 41.998422][ T3510] loop3: detected capacity change from 0 to 128 21:14:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x8038) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef84) [ 42.172316][ T3515] loop3: detected capacity change from 0 to 128 21:14:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$eJzs3U1oE2kYwPGnH9t2u7QJy7KwC7v77PayigxNzkIbpBUxUNFGqgVhaicaMiYhE6Ip0kQQevHgxa+zCiKFgngQhFIPnqRFevPgrbcerCeLiCPp9COp6Qc1bQr9/w7tQ573mTx538mQvIFk/ujtK/GoY0TNjNS31El9txRksU78Ui8rCnLo6sTbv86cO38yFA73nFbtDfUHgqra/s/k4PXx/6Yyv5x93v6yWab9F+YXgnPTv0//Mf+1/3LM0ZijiWRGTR1KJjPmkG3p8F0nbqiesi3TsTSWcKx0WT5qJ1OpnJqJ4bbWVNpyHDUTOY1bOc0kNZPOqXnJjCXUMAxtaxVsbjz7ILRxNvJ00XVlIfPGdZsL4rpu8caWPWwPNba0/q5bsv63at0S9lDJRb1FxB7LRrIR77+XD0UlJrZY0ik++SLFc8R9OOEunSrFv9eCE+HZw69fqapfRu38cn0+G2korw+IT/xejceLe0+EewLqKa//SVpL64Pik98q1wcr1jfJ/x0l9Yb4ZPaiJMWWmcl/P831jd1bqR8NqB7rC6+r/1mG16bpyccarQ8AAAAAAAAAADth6KqK+/dGccDNEVVtW5f36it9PrB+f76z4v58o/zZWNvHDgAAAADAQeHkRuKmbVvpHwyKb+WrcZzqB81S2zYe3dj+4L97Nx/T0dUw0/2ukLKtdF72x/RuJ/g8sC/aKA9kefdpq8ENVX6mrAUfqnKcuuX+Nh5zfPD9sy2P0/Td/GxkavevSgAAAAB2w9qL/i7JR19k8wNH7tS6JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpodfOXYzP1KKS0Gvz6ulFq9M+/3xQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPaVbwEAAP//u5TQrw==") r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x8038) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef84) [ 42.360931][ T3518] loop3: detected capacity change from 0 to 128 21:14:37 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$eJzs3U1oE2kYwPGnH9t2u7QJy7KwC7v77PayigxNzkIbpBUxUNFGqgVhaicaMiYhE6Ip0kQQevHgxa+zCiKFgngQhFIPnqRFevPgrbcerCeLiCPp9COp6Qc1bQr9/w7tQ573mTx538mQvIFk/ujtK/GoY0TNjNS31El9txRksU78Ui8rCnLo6sTbv86cO38yFA73nFbtDfUHgqra/s/k4PXx/6Yyv5x93v6yWab9F+YXgnPTv0//Mf+1/3LM0ZijiWRGTR1KJjPmkG3p8F0nbqiesi3TsTSWcKx0WT5qJ1OpnJqJ4bbWVNpyHDUTOY1bOc0kNZPOqXnJjCXUMAxtaxVsbjz7ILRxNvJ00XVlIfPGdZsL4rpu8caWPWwPNba0/q5bsv63at0S9lDJRb1FxB7LRrIR77+XD0UlJrZY0ik++SLFc8R9OOEunSrFv9eCE+HZw69fqapfRu38cn0+G2korw+IT/xejceLe0+EewLqKa//SVpL64Pik98q1wcr1jfJ/x0l9Yb4ZPaiJMWWmcl/P831jd1bqR8NqB7rC6+r/1mG16bpyccarQ8AAAAAAAAAADth6KqK+/dGccDNEVVtW5f36it9PrB+f76z4v58o/zZWNvHDgAAAADAQeHkRuKmbVvpHwyKb+WrcZzqB81S2zYe3dj+4L97Nx/T0dUw0/2ukLKtdF72x/RuJ/g8sC/aKA9kefdpq8ENVX6mrAUfqnKcuuX+Nh5zfPD9sy2P0/Td/GxkavevSgAAAAB2w9qL/i7JR19k8wNH7tS6JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpodfOXYzP1KKS0Gvz6ulFq9M+/3xQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPaVbwEAAP//u5TQrw==") r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x8038) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef84) 21:14:37 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @void}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$LINK_DETACH(0xf, &(0x7f0000000000)=r4, 0x4) 21:14:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x8038) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef84) [ 42.470199][ T3522] loop2: detected capacity change from 0 to 128 21:14:37 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @void}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$LINK_DETACH(0xf, &(0x7f0000000000)=r4, 0x4) [ 42.558159][ T3527] loop3: detected capacity change from 0 to 128 21:14:37 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x8038) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef84) 21:14:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x8038) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef84) 21:14:38 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @void}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$LINK_DETACH(0xf, &(0x7f0000000000)=r4, 0x4) 21:14:38 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @void}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$LINK_DETACH(0xf, &(0x7f0000000000)=r4, 0x4) [ 42.703000][ T3533] loop2: detected capacity change from 0 to 128 [ 42.738168][ T3537] loop3: detected capacity change from 0 to 128 21:14:38 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @void}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$LINK_DETACH(0xf, &(0x7f0000000000)=r4, 0x4) 21:14:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x8038) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef84) 21:14:38 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff76, 0x10, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd3}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) nanosleep(&(0x7f0000000240), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet6(0xa, 0x4, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) shmat(0xffffffffffffffff, &(0x7f0000002000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 21:14:38 executing program 3: openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff76, 0x10, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd3}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) nanosleep(&(0x7f0000000240), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet6(0xa, 0x4, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) shmat(0xffffffffffffffff, &(0x7f0000002000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 21:14:38 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff76, 0x10, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd3}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) nanosleep(&(0x7f0000000240), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet6(0xa, 0x4, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) shmat(0xffffffffffffffff, &(0x7f0000002000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 21:14:38 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff76, 0x10, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd3}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) nanosleep(&(0x7f0000000240), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet6(0xa, 0x4, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) shmat(0xffffffffffffffff, &(0x7f0000002000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 21:14:38 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @void}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$LINK_DETACH(0xf, &(0x7f0000000000)=r4, 0x4) [ 42.929986][ T3559] loop2: detected capacity change from 0 to 128 21:14:38 executing program 3: openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff76, 0x10, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd3}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) nanosleep(&(0x7f0000000240), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet6(0xa, 0x4, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) shmat(0xffffffffffffffff, &(0x7f0000002000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 21:14:38 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff76, 0x10, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd3}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) nanosleep(&(0x7f0000000240), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet6(0xa, 0x4, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) shmat(0xffffffffffffffff, &(0x7f0000002000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 21:14:38 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @void}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$LINK_DETACH(0xf, &(0x7f0000000000)=r4, 0x4) 21:14:38 executing program 3: openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff76, 0x10, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd3}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) nanosleep(&(0x7f0000000240), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet6(0xa, 0x4, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) shmat(0xffffffffffffffff, &(0x7f0000002000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 21:14:38 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff76, 0x10, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd3}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) nanosleep(&(0x7f0000000240), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet6(0xa, 0x4, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) shmat(0xffffffffffffffff, &(0x7f0000002000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 21:14:38 executing program 3: openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff76, 0x10, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd3}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) nanosleep(&(0x7f0000000240), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet6(0xa, 0x4, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) shmat(0xffffffffffffffff, &(0x7f0000002000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 21:14:38 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff76, 0x10, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd3}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) nanosleep(&(0x7f0000000240), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet6(0xa, 0x4, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) shmat(0xffffffffffffffff, &(0x7f0000002000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 21:14:38 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @void}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$LINK_DETACH(0xf, &(0x7f0000000000)=r4, 0x4) 21:14:38 executing program 2: openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff76, 0x10, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd3}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) nanosleep(&(0x7f0000000240), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet6(0xa, 0x4, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) shmat(0xffffffffffffffff, &(0x7f0000002000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 21:14:38 executing program 3: openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff76, 0x10, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd3}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) nanosleep(&(0x7f0000000240), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet6(0xa, 0x4, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) shmat(0xffffffffffffffff, &(0x7f0000002000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 21:14:38 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff76, 0x10, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd3}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) nanosleep(&(0x7f0000000240), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet6(0xa, 0x4, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) shmat(0xffffffffffffffff, &(0x7f0000002000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 21:14:38 executing program 3: openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff76, 0x10, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd3}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) nanosleep(&(0x7f0000000240), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet6(0xa, 0x4, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) shmat(0xffffffffffffffff, &(0x7f0000002000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 21:14:38 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff76, 0x10, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd3}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) nanosleep(&(0x7f0000000240), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet6(0xa, 0x4, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) shmat(0xffffffffffffffff, &(0x7f0000002000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 21:14:38 executing program 2: openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff76, 0x10, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd3}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) nanosleep(&(0x7f0000000240), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet6(0xa, 0x4, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) shmat(0xffffffffffffffff, &(0x7f0000002000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 21:14:38 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) 21:14:38 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @void}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$LINK_DETACH(0xf, &(0x7f0000000000)=r4, 0x4) 21:14:38 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff76, 0x10, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd3}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) nanosleep(&(0x7f0000000240), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet6(0xa, 0x4, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) shmat(0xffffffffffffffff, &(0x7f0000002000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 21:14:38 executing program 2: openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff76, 0x10, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd3}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) nanosleep(&(0x7f0000000240), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet6(0xa, 0x4, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) shmat(0xffffffffffffffff, &(0x7f0000002000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 21:14:38 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) 21:14:38 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) 21:14:38 executing program 1: rt_sigsuspend(0x0, 0x0) 21:14:38 executing program 2: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) 21:14:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 21:14:38 executing program 1: rt_sigsuspend(0x0, 0x0) 21:14:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaaaa88a800008100000086dd6017785e00482c"], 0xfdef) [ 43.367016][ T27] kauditd_printk_skb: 25 callbacks suppressed [ 43.367108][ T27] audit: type=1400 audit(1708722878.670:140): avc: denied { open } for pid=3667 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 21:14:38 executing program 1: rt_sigsuspend(0x0, 0x0) 21:14:38 executing program 2: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) 21:14:38 executing program 1: rt_sigsuspend(0x0, 0x0) 21:14:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 21:14:38 executing program 0: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) [ 43.416833][ T27] audit: type=1400 audit(1708722878.670:141): avc: denied { kernel } for pid=3667 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 43.457185][ T3673] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) 21:14:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x498, 0xffffffff, 0x98, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x400, 0x400, 0x400, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x0, 0x3ac, 0x0, 0x0, 0x0, 0x9, 0x1000}}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@addrtype={{0x30}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) 21:14:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 21:14:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x498, 0xffffffff, 0x98, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x400, 0x400, 0x400, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x0, 0x3ac, 0x0, 0x0, 0x0, 0x9, 0x1000}}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@addrtype={{0x30}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) 21:14:38 executing program 2: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) 21:14:38 executing program 0: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) 21:14:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x498, 0xffffffff, 0x98, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x400, 0x400, 0x400, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x0, 0x3ac, 0x0, 0x0, 0x0, 0x9, 0x1000}}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@addrtype={{0x30}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) 21:14:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaaaa88a800008100000086dd6017785e00482c"], 0xfdef) [ 43.530116][ T3689] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.543137][ T3689] xt_l2tp: wrong L2TP version: 0 [ 43.545851][ T27] audit: type=1400 audit(1708722878.850:142): avc: denied { setopt } for pid=3686 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 21:14:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x498, 0xffffffff, 0x98, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x400, 0x400, 0x400, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x0, 0x3ac, 0x0, 0x0, 0x0, 0x9, 0x1000}}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@addrtype={{0x30}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) 21:14:38 executing program 2: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) 21:14:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 21:14:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaaaa88a800008100000086dd6017785e00482c"], 0xfdef) 21:14:39 executing program 0: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) [ 43.584722][ T3692] xt_l2tp: wrong L2TP version: 0 [ 43.625871][ T3696] xt_l2tp: wrong L2TP version: 0 [ 43.662289][ T3703] xt_l2tp: wrong L2TP version: 0 21:14:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x498, 0xffffffff, 0x98, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x400, 0x400, 0x400, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x0, 0x3ac, 0x0, 0x0, 0x0, 0x9, 0x1000}}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@addrtype={{0x30}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) 21:14:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaaaa88a800008100000086dd6017785e00482c"], 0xfdef) 21:14:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3, r1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x3, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}]}]}, 0x50}}, 0x0) 21:14:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3, r1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x3, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}]}]}, 0x50}}, 0x0) 21:14:39 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x11, 0x0, 0x0) 21:14:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x498, 0xffffffff, 0x98, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x400, 0x400, 0x400, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x0, 0x3ac, 0x0, 0x0, 0x0, 0x9, 0x1000}}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@addrtype={{0x30}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) [ 43.753031][ T3714] xt_l2tp: wrong L2TP version: 0 21:14:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaaaa88a800008100000086dd6017785e00482c"], 0xfdef) 21:14:39 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x11, 0x0, 0x0) 21:14:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3, r1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x3, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}]}]}, 0x50}}, 0x0) 21:14:39 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x11, 0x0, 0x0) 21:14:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x498, 0xffffffff, 0x98, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x400, 0x400, 0x400, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x0, 0x3ac, 0x0, 0x0, 0x0, 0x9, 0x1000}}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@addrtype={{0x30}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) [ 43.814894][ T27] audit: type=1400 audit(1708722879.120:143): avc: denied { setopt } for pid=3718 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.854303][ T3724] xt_l2tp: wrong L2TP version: 0 21:14:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaaaa88a800008100000086dd6017785e00482c"], 0xfdef) 21:14:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3, r1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x3, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}]}]}, 0x50}}, 0x0) 21:14:39 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 21:14:39 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x11, 0x0, 0x0) 21:14:39 executing program 2: r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000300)=ANY=[@ANYBLOB=' '], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) [ 43.911346][ T3730] xt_l2tp: wrong L2TP version: 0 21:14:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaaaa88a800008100000086dd6017785e00482c"], 0xfdef) 21:14:39 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) [ 43.967865][ T27] audit: type=1400 audit(1708722879.270:144): avc: denied { create } for pid=3739 comm="syz-executor.2" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 43.989449][ T27] audit: type=1400 audit(1708722879.270:145): avc: denied { map } for pid=3739 comm="syz-executor.2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5377 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 21:14:39 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) 21:14:39 executing program 2: r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000300)=ANY=[@ANYBLOB=' '], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) [ 44.014223][ T27] audit: type=1400 audit(1708722879.270:146): avc: denied { read write } for pid=3739 comm="syz-executor.2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5377 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 21:14:39 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 21:14:39 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) [ 44.065844][ T3752] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 21:14:39 executing program 3: r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000300)=ANY=[@ANYBLOB=' '], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 21:14:39 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) 21:14:39 executing program 2: r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000300)=ANY=[@ANYBLOB=' '], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 21:14:39 executing program 1: r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000300)=ANY=[@ANYBLOB=' '], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 21:14:39 executing program 3: r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000300)=ANY=[@ANYBLOB=' '], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) [ 44.104822][ T27] audit: type=1400 audit(1708722879.410:147): avc: denied { getopt } for pid=3751 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 21:14:39 executing program 4: r0 = socket(0x2a, 0x2, 0x0) sendto$packet(r0, 0x0, 0x2000000, 0x0, 0x0, 0x3) 21:14:39 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) 21:14:39 executing program 2: r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000300)=ANY=[@ANYBLOB=' '], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 21:14:39 executing program 4: r0 = socket(0x2a, 0x2, 0x0) sendto$packet(r0, 0x0, 0x2000000, 0x0, 0x0, 0x3) 21:14:39 executing program 3: r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000300)=ANY=[@ANYBLOB=' '], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 21:14:39 executing program 1: r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000300)=ANY=[@ANYBLOB=' '], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 21:14:39 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) [ 44.220703][ T27] audit: type=1400 audit(1708722879.520:148): avc: denied { create } for pid=3767 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 21:14:39 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000340)={0xfffffff8}) 21:14:39 executing program 4: r0 = socket(0x2a, 0x2, 0x0) sendto$packet(r0, 0x0, 0x2000000, 0x0, 0x0, 0x3) 21:14:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002340)={{0x14}, [@NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) 21:14:39 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hso', 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7b, &(0x7f00000077c0)={r1}, 0x8) 21:14:39 executing program 1: r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000300)=ANY=[@ANYBLOB=' '], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 21:14:39 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000340)={0xfffffff8}) 21:14:39 executing program 4: r0 = socket(0x2a, 0x2, 0x0) sendto$packet(r0, 0x0, 0x2000000, 0x0, 0x0, 0x3) [ 44.289530][ T27] audit: type=1400 audit(1708722879.520:149): avc: denied { write } for pid=3767 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 21:14:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002340)={{0x14}, [@NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) 21:14:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002340)={{0x14}, [@NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) 21:14:39 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hso', 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7b, &(0x7f00000077c0)={r1}, 0x8) 21:14:39 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hso', 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7b, &(0x7f00000077c0)={r1}, 0x8) 21:14:39 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x2}]}, {0x0, [0x0, 0x2e, 0x5f]}}, 0x0, 0x29}, 0x20) 21:14:39 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000340)={0xfffffff8}) 21:14:39 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hso', 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7b, &(0x7f00000077c0)={r1}, 0x8) 21:14:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002340)={{0x14}, [@NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) 21:14:39 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x2}]}, {0x0, [0x0, 0x2e, 0x5f]}}, 0x0, 0x29}, 0x20) 21:14:39 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hso', 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7b, &(0x7f00000077c0)={r1}, 0x8) 21:14:39 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000340)={0xfffffff8}) 21:14:39 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0xe) 21:14:39 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hso', 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7b, &(0x7f00000077c0)={r1}, 0x8) 21:14:39 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 21:14:39 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hso', 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7b, &(0x7f00000077c0)={r1}, 0x8) 21:14:39 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x2}]}, {0x0, [0x0, 0x2e, 0x5f]}}, 0x0, 0x29}, 0x20) 21:14:39 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0xe) 21:14:39 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/139, 0x2}], 0x3) pwrite64(r0, &(0x7f00000001c0)="a6e0", 0x2, 0x0) 21:14:39 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x2}]}, {0x0, [0x0, 0x2e, 0x5f]}}, 0x0, 0x29}, 0x20) 21:14:39 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 21:14:39 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0xe) 21:14:39 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x401, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f00000002c0)='\x00', 0x1}]) lseek(r0, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x1ff01) 21:14:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "48028c935286ba00100b0c126540b1699ea600"}) ioctl$TCXONC(r0, 0x540a, 0x2) 21:14:39 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 21:14:39 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0xe) 21:14:39 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 21:14:39 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010006009400c292b3e34730a60000000f4cf50095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='hrtimer_init\x00', r0}, 0x10) r1 = epoll_create(0x3) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xa000000d}) 21:14:39 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010006009400c292b3e34730a60000000f4cf50095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='hrtimer_init\x00', r0}, 0x10) r1 = epoll_create(0x3) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xa000000d}) 21:14:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "48028c935286ba00100b0c126540b1699ea600"}) ioctl$TCXONC(r0, 0x540a, 0x2) 21:14:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "48028c935286ba00100b0c126540b1699ea600"}) ioctl$TCXONC(r0, 0x540a, 0x2) 21:14:39 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/139, 0x2}], 0x3) pwrite64(r0, &(0x7f00000001c0)="a6e0", 0x2, 0x0) 21:14:40 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/139, 0x2}], 0x3) pwrite64(r0, &(0x7f00000001c0)="a6e0", 0x2, 0x0) 21:14:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "48028c935286ba00100b0c126540b1699ea600"}) ioctl$TCXONC(r0, 0x540a, 0x2) 21:14:40 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010006009400c292b3e34730a60000000f4cf50095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='hrtimer_init\x00', r0}, 0x10) r1 = epoll_create(0x3) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xa000000d}) 21:14:40 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/139, 0x2}], 0x3) pwrite64(r0, &(0x7f00000001c0)="a6e0", 0x2, 0x0) 21:14:40 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010006009400c292b3e34730a60000000f4cf50095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='hrtimer_init\x00', r0}, 0x10) r1 = epoll_create(0x3) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xa000000d}) 21:14:40 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x401, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f00000002c0)='\x00', 0x1}]) lseek(r0, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x1ff01) 21:14:40 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/139, 0x2}], 0x3) pwrite64(r0, &(0x7f00000001c0)="a6e0", 0x2, 0x0) 21:14:40 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/139, 0x2}], 0x3) pwrite64(r0, &(0x7f00000001c0)="a6e0", 0x2, 0x0) 21:14:40 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/139, 0x2}], 0x3) pwrite64(r0, &(0x7f00000001c0)="a6e0", 0x2, 0x0) 21:14:40 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/139, 0x2}], 0x3) pwrite64(r0, &(0x7f00000001c0)="a6e0", 0x2, 0x0) 21:14:40 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x401, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f00000002c0)='\x00', 0x1}]) lseek(r0, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x1ff01) 21:14:40 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/139, 0x2}], 0x3) pwrite64(r0, &(0x7f00000001c0)="a6e0", 0x2, 0x0) 21:14:40 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/139, 0x2}], 0x3) pwrite64(r0, &(0x7f00000001c0)="a6e0", 0x2, 0x0) 21:14:40 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/139, 0x2}], 0x3) pwrite64(r0, &(0x7f00000001c0)="a6e0", 0x2, 0x0) 21:14:40 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/139, 0x2}], 0x3) pwrite64(r0, &(0x7f00000001c0)="a6e0", 0x2, 0x0) 21:14:40 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x401, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f00000002c0)='\x00', 0x1}]) lseek(r0, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x1ff01) 21:14:40 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/139, 0x2}], 0x3) pwrite64(r0, &(0x7f00000001c0)="a6e0", 0x2, 0x0) 21:14:40 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "48028c935286ba00100b0c126540b1699ea600"}) ioctl$TCXONC(r0, 0x540a, 0x2) 21:14:40 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "48028c935286ba00100b0c126540b1699ea600"}) ioctl$TCXONC(r0, 0x540a, 0x2) 21:14:40 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010006009400c292b3e34730a60000000f4cf50095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='hrtimer_init\x00', r0}, 0x10) r1 = epoll_create(0x3) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xa000000d}) 21:14:40 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "48028c935286ba00100b0c126540b1699ea600"}) ioctl$TCXONC(r0, 0x540a, 0x2) 21:14:40 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000480)={'filter\x00', 0x1002, 0x4, 0x3c8, 0x1d0, 0x0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@multicast2, @rand_addr, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'tunl0\x00', 'ipvlan0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d1}}, {{@arp={@multicast1, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netdevsim0\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 21:14:40 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010006009400c292b3e34730a60000000f4cf50095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='hrtimer_init\x00', r0}, 0x10) r1 = epoll_create(0x3) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xa000000d}) 21:14:40 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 21:14:40 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x600, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "e9255bb992464e73a02159d3720df19f7a1dfec3"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) 21:14:40 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000480)={'filter\x00', 0x1002, 0x4, 0x3c8, 0x1d0, 0x0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@multicast2, @rand_addr, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'tunl0\x00', 'ipvlan0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d1}}, {{@arp={@multicast1, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netdevsim0\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 21:14:40 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010006009400c292b3e34730a60000000f4cf50095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='hrtimer_init\x00', r0}, 0x10) r1 = epoll_create(0x3) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xa000000d}) 21:14:40 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f000000043000000000000000000000000000000280006800c000f0000000040000000000c00130000000e00000000000c000d000000070000000000080002000000000008"], 0xf0}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000006c0)={0x0, 0x0, "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", "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"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000b00010065727370616e00002800028004001200060003000080000006004d"], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@ipv4_delroute={0x1c, 0x19, 0x0, 0x0, 0x0, {0x2, 0x14}}, 0x1c}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x60, &(0x7f00000001c0)={@private}, 0xc) 21:14:40 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000480)={'filter\x00', 0x1002, 0x4, 0x3c8, 0x1d0, 0x0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@multicast2, @rand_addr, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'tunl0\x00', 'ipvlan0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d1}}, {{@arp={@multicast1, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netdevsim0\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 21:14:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, 0x8, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) 21:14:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0xb}]}}}]}, 0x3c}}, 0x0) 21:14:40 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000480)={'filter\x00', 0x1002, 0x4, 0x3c8, 0x1d0, 0x0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@multicast2, @rand_addr, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'tunl0\x00', 'ipvlan0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d1}}, {{@arp={@multicast1, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netdevsim0\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 21:14:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, 0x8, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) 21:14:40 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f000000043000000000000000000000000000000280006800c000f0000000040000000000c00130000000e00000000000c000d000000070000000000080002000000000008"], 0xf0}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000006c0)={0x0, 0x0, "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", "10d10128a9b3944b5bbba5a124d292c1eed078ca90e17745efd604c6f2184ef169e6ad8c99b170cdb0c29df36beca74fbb64fc6242081c774f3cced4034e5be23229ba6274044b7e31239675fa8d79ad66e205d3eb17685e24440f5679477fd7b36f47309f0e85956bc5061f0b6af49cbbb09344b37758de82ed05796ed6cf2040699c9ba3b857e4cd59d36b61f084fa970ffc140ea22d4c0b9636fdf1c7f755161ffd12b2731f1b8d7c7322439d39fe4daf629189aa9f42a9817f56ab0106f17e55fcea90e07fb670355347d6f2c359154ca0c23369c3d7b55ad684fa031711c73a6e6a080fdceb194e35318dfc