last executing test programs: 3.067837606s ago: executing program 4 (id=62): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000110000002"], 0x48) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0x40000022) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000001c0)={0xfffffff9, 0x0, 0x300, 0x1, 0x4, "f996ff109a04000000028000", 0x0, 0xa56e}) 3.011976396s ago: executing program 4 (id=64): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0, @ANYBLOB="902885beef78531a25da5ef1637f7b80141318d22326b14762fa8f9686983c70", @ANYRES32=r0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="130000001a001f00030300f9002304000a04d6", 0x13) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = syz_open_dev$loop(&(0x7f00000002c0), 0x8, 0x200) ioctl$BLKROSET(r5, 0x125d, &(0x7f0000000300)=0x8000) r6 = inotify_init() r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) inotify_add_watch(r6, &(0x7f0000000240)='./file0\x00', 0x8c7) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0001400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 2.973087036s ago: executing program 4 (id=66): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 2.794363166s ago: executing program 4 (id=71): timer_create(0x2, &(0x7f0000000000)={0x0, 0x18, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000040)) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @tid=r0}, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000280)={0x0, 0x2f, 0x0, @thr={&(0x7f0000000140)="da525fc33306ca630fd48e423bdbc0c0f23806167801c878ad4591b2e68a4d7bd58b35fa20d289542d08f64a8eb2a2712a5ee518b2157507f2", &(0x7f0000000180)="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"}}, &(0x7f00000002c0)=0x0) timer_gettime(r1, &(0x7f0000000300)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000340)={'ipvlan0\x00', 0x8000}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x810, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x7cc, 0x3, 0x0, 0x1, [{0x2dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x184, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb2, 0x1, "7e7c51042a1a1589b0d483f8000546818e8ff5666948c8db80d4be2a8db59e4f565090c7576f32529aac6b3331f5ac6412284387857b796e21f9ca59371be49aecebef5446e173f8ca7e0f379164e03fff4c2efef0b6535b3f3b0f7faea33fa1ab632b6bf1781372d1957d4406b6f1dd0056ec2ae61d31284dca52fcec51a86453886f618321b6beebbbd36d51bf059339b27fede2c6098bd6d9fdd89774a0fd40b4c1bf342a7d619d6660e99c1e"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xb7, 0x1, "d758fc8e090491b1deab43fd17e909eb545fdcfee19fe2f606f6ebfbe4fc83f668f17ef6a191d154a01ec47c2d3bc5dd71ac6c607eb6985bed581342c4544959a33d90112a41c24066fb39dbcd3e40744a2ecda4814e1a28d115fae59bc9ce48855150f8f976588e775b35d5bdfa1295f4fff7d7a82da0578f8a92acaa5c2a06b615d7d8606e1928f282fa869c6c647070ea4e977ed99f5d199edcb13def187d5753929b0f1b85100b562c4e5ce9a2c579f3d1"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1000}, @NFTA_SET_ELEM_EXPRESSIONS={0x13c, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x58, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x50, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xac}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}]}, {0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x31}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}]}, {0x4}, {0x180, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0x38, 0x6, 0x1, 0x0, "c9c9a17ab1b2a5ce5bfb88c446520e73a2faadcd8902512428edc3b58d8c9009a31224164f1f5dddcb25b979dbbbc65529dc4dd2"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0xf0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xeb, 0x1, "d011e2260cf341db9368a5e259b9362c0c623a1edbb93b9a52c71863670e796d1eadd66b4110cfe3b1f3ea015ff11a7b36f999b3161544921dc5baea9d12a2d231c715fe14cca461021bef7291d9d3f8d00d3c13b924a0ddd04b0ec633e08e7f5991e78a06cf79df8677e030319c3be7179868d8929145fafbd9b4e2b59ed7f7f1c098bbdf146fa42a92a52f8ce88642a5998a986760009389013156052ded92029863538bc22c84605e7129703f00ce06a9c2e2a8e4b928b7746a5feacf6d28874bb8ee69c8a79693c0e65d3cebd62fcb3bc47b0bb530769238b7cefe28fd5b8ab59e52141091"}]}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x288, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x284, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xf0, 0x1, "262771ed0bfa6d47757f7b8da9ba915f99a5a697bbbfc8706bcb0e841de9efc53533015e414cb9f313d7d9dc0ec78d6de498a03bf5c11b030e02067bb9acf96e3128267c4f427179b4a6a70db04654c950d2417fc68e189adea8aff23241a0573c0c4f93e08f22ac96dce7b86e3442f3f9634d902d8a49b71a1fc3327f4a2433a2bba9280edc364fde2fa5d003d2879f7aec2cff6a56d37bcd0c6ac0f029c5eca03a3636790104b527e8be705b69b312739bc2c250c04174904e018a2f32a5a8ed503b5c8a0bf878e5d2f8bdf09a5199696cf5df9de426dd0d66732e5b9254cabcad2a812182e95492b5c1d7"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x61, 0x1, "f1e1bfd37147ba83e1298a3e219e0cbd9d47e7ffcc22a70a6fa1a17bef333718f49311079a00b80d943c6d5369885cab883e468ae88e21933532432c84d73bdab98446f0c7a5b7f3e023acadc833ede65cc6448c5db6d8525a0fa9168c"}, @NFTA_DATA_VALUE={0x2e, 0x1, "dc659e510dc805edc4498f8f9f71fa0feb33db95c711ed663cb36aa7abc659902765b641ebaa7796eddf"}, @NFTA_DATA_VALUE={0x41, 0x1, "c711edd6d3e250cd39e504c4e49bdf00536a1f99569f589b7e35336528fb22d953f23145e2ea976f001954d62a7f92144f40805e2adb220ccdaf03b7e8"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x98, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x7b, 0x6, 0x1, 0x0, "edf4a898c982e0076c3efddea65c60207a30306430992a8699f758c79bdde5c8258930aa0917ec7847a31e45cbe9a16d6977cc1dd379617e8113bf3a26581b12d4430f3bfaad3b2096e0b93978880bb27bdbb1edcef632173de7d7eb308049e05ca59d0e3a09f525ca7fba79f226e603add3368486a442"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0xc4, 0xe, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x98, 0x3, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_USERDATA={0x61, 0x6, 0x1, 0x0, "611c996becfc17830f08ce82bcfd932d758cef37ca23063738b09b9cc680f19b9bb565657b6ad94400f06b324f8577fa602e914af48c205f219ba01c6def97c7002e2ef335aee68953a4a4f36a09bd06f88e66da7b9087737a5806a76a"}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @immediate={{0xe}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xc9}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x3c, 0x18, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x301, 0x0, 0x0, {0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x34, 0x5, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELRULE={0x26c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1a4, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xd8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xfc}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_BYTEORDER_OP={0x8}]}}}, {0x54, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x1e}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_INNER_FLAGS={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x94}, @NFTA_INNER_HDRSIZE={0x8}]}}}, {0x24, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}, {0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x3}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xe}]}}}, {0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x30, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x90, 0x7, 0x1, 0x0, "c3ff48c869b222ac1878f9029ea7ca6ef9baad704663314bb0cd8540be73b5e199622fcaacec7fedc2c253d42854cdad2ef15ed15d84611eddc8744d15dafcd8571ec473ac9b51211f308671e859d868b8cbb20bcd572ce7da619dd4a9b01201c91a90be31a513b440da6863394e62367c138e2dffbdde154053f1b5dcc1d36ac6ed974df3b31e9579c1ac07"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc3c}, 0x1, 0x0, 0x0, 0x5}, 0x8005) r3 = syz_open_dev$usbfs(&(0x7f0000001080), 0xf, 0x101200) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f00000010c0)={0x478, 0x1, "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"}) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001240)={0x5, &(0x7f0000001200)=[{0x8, 0x46, 0xf0, 0xffffff01}, {0x2, 0x2e, 0xbc, 0x6}, {0xaa, 0xe4, 0x5, 0x10}, {0x5, 0x16, 0x5, 0x7}, {0xa, 0x19, 0x3, 0x3}]}) (async) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000001280), &(0x7f00000012c0)=0xc) (async) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000001300)={0x2, 0x3, 0x4, 0x80, 0xf}) r6 = socket$inet(0x2, 0x4, 0xc) recvmsg(r6, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/178, 0xb2}, {&(0x7f0000002400)=""/79, 0x4f}, {&(0x7f0000002480)=""/227, 0xe3}, {&(0x7f0000002580)=""/143, 0x8f}], 0x5, &(0x7f00000026c0)=""/249, 0xf9}, 0x40000021) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f0000002800)="1ff197abfd8c6412fef4afa30bb7e92f6b4e085ea9783829bd835c2e49be943a33bca94ccf889fdef5ce88158dbd72245a724258e3138a513592831988321a510e99a7c4da30de37ef415c008d1715331610da36803bbf8c0dd041796e1bf4f97b3ae6554530b161f9434e9ffc11fb8e372f7f97cc8981a950e92613ef594a255ebbb852fa0b06b3d83254c038a06ecf78ca36038dce6439d4da15a2c4c0d32a6e2a7433ffcd041f4e6fb042b01d0fff95b4d9d64b3462bad8c5789d73c65bec187e") (async) timer_gettime(r1, &(0x7f0000002900)) timer_create(0x1, &(0x7f0000002940)={0x0, 0x39, 0x2, @tid=r0}, &(0x7f0000002980)=0x0) timer_delete(r8) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGPTPEER(r9, 0x5441, 0x6) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) bind$inet(r6, &(0x7f00000029c0)={0x2, 0x4e20, @local}, 0x10) (async, rerun: 32) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000002a00)={0x2, 0x4e22, @loopback}, 0x10) (async) r11 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) sendmsg$kcm(r11, &(0x7f0000003f00)={&(0x7f0000002a40)=@phonet={0x23, 0x0, 0x8}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002ac0)="3275c057c77d05537330b2242b4c1e49c48ca7c8bd397afa53286b0fe10ecba639ac2c09ec858f8f016223e8384c39f7f49ff99ebb7ade3030d53e46db7f3659883d1887620882363dfaba028d0ed36ba7b760b31b6232296ad63df2d1d3f9d4b201e8fb1c824300ab99c11a87e0271023ab537fa7e4b5d8cb507c", 0x7b}, {&(0x7f0000002b40)="21aac63855729d381ce03cb11f9113b5e36871a3ca604f1b1a3a6b24ebf6d7d92e50d7998fa07f537a62e90f66fc94460e6eea8026fce75cd4322fcf50d000f30887b41ba548b608b8f962caadae2812b2f6042340c3d634a0fdf693d75152198fe793d5de8e975bd034b971c47344d884b9e52351a612aeb86d3d022fe2a8e11219e0b76f3059398b327989c7464dc8ae1ccd410e671ba2aee38b63720e24b964347ddb9d82ff3d75398660f9ad89502abf9fb4e7135e32", 0xb8}, {&(0x7f0000002c00)="fba57288355e34862cce783587045fd981be655acad8817fe7f9d0d95d1388e9152d0fc3c5af413a208296b7a83197633eb153959693ccfe212b5c2f1b4f471ff908715c37fd3610b95f2d56f2181893a415f571cd7f7d96deb6cd1b2d1a24d57e4daad20fc4834b0375e037a98840f65fc65fb86719bf051003bc84a71ad53c0218803be82aeb19539807310af977f5363350563df82ffa5431b085f9ca0365d60b89d5dd640171a82a78b2f510efa49571f6e133b8ae4adaddfb1e5bfd63e88e10e2129393b58be087658a634dfaafb28744847ca86f5a5adfd72a338e1b2cb0e150d43109b26bf96c457ab48542c62c", 0xf1}], 0x3, &(0x7f0000002d40)=[{0x1010, 0x109, 0x3, "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"}, {0xe8, 0x116, 0x40, "c17095d98c7b9210b1fe83f640e6ce8e3888773b9dced7ec0c44b23a80dd9573a4a782773bf1e4bdf86f8f7fade3704970b0c69843d6c5af7a1297a045f90533017b9608fa7b27b329c5a82fcffb7cbfd88b503a048503399bfd662f96f5e82e24952853a146e424a06f64841f3e642afc02d0b86366943f26d5e129a0604b25b7eb3bb263f5e487696b8cbf287c74c302239c0d918b87cae5e098407e30ec2f6ae80300d71c909e0b0f1cc7088d56c7278a4af9e84c7af3ba0bb9e012cd6518be9a221e40d1a34422779229bac205646c37fca7eefbf7bf"}, {0x10, 0x107}, {0xb0, 0x10c, 0x2, "01624501c8083ea36be9c808a6d86e76bb7e95e2e9d6fa1991c4be258a6286d41b2c77d074fdff272492c2c28040f6dfd409b4e6d31ff98b86d35b9a6c573953410129c1bc4518a41e625d3bf091a3cb4512c809524b96dd8c6ff3b44b2f4e6787cb55bdc2e194c207b642e7564157e44297d217bec8e54717d3a41f186b67b266f5857223fdde3141d5fe07287f31ed3a444fd68fd2f9e5c45446a81b79c7"}], 0x11b8}, 0x40010) (async) process_madvise(r11, &(0x7f00000041c0)=[{&(0x7f0000003f40)="b362e83077c79e06da9dcdceea986064796f18c255462638216e7a51c0c988418577e38acd9ee1d6632175bcb28f13f8fc85cb6be740017499d37e8dacfc1f68746f3a3cc5631050f6e50cd139d24e009de30ae804daf0820e", 0x59}, {&(0x7f0000003fc0)="6bbcbbe8a5abd51e9db80dbfb0a60bd017ab6e892051ccbf7090f2d581baa06ebdc8200cd7d2ddc0f9286d59d9be93f6ade112a0316a764590a4bed2002b79a6389a932bb4eef201600b23ceab239180db4e", 0x52}, {&(0x7f0000004040)="493cea964f5d26d3b8b5c6de972725737b1f49525b97bd34241857599848fc250b9c08e95eeec3ef39448d86d663a237aaf4156fd3a8be953e67dd496173ccd8", 0x40}, {&(0x7f0000004080)="a33e9f0fd43ca3043964303b41dbc8eae84c0107385478a6b8c8c33787d7f81083180e832a7b0c", 0x27}, {&(0x7f00000040c0)="d7c48e7672e97bb9adba", 0xa}, {&(0x7f0000004100)="5c7a612ad3663d621e3c3093c65dcc8d017cda0b88bcfea9677979cb883e7eb317ce2a2c0c98de583e3c9d80a0ef01f42898425fa5c7c56d55e2ed266b75c8863b327e", 0x43}, {&(0x7f0000004180)='c', 0x1}], 0x7, 0x11, 0x0) 2.647161796s ago: executing program 3 (id=75): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) (async, rerun: 64) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (rerun: 64) r3 = fcntl$dupfd(r2, 0x0, r2) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) (async) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="090000000000000002000000e000000200000000000000000002000000000000fa000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000001000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000085b2614595b300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d73199281b10e75a0000005e5dec3a5b087614e934058a25647dbed1c78523eef222a1a0cc540868dfb90fe1d7448395748cd2d0c5345e88dbe9a1a5db58fe96f3f2bd082fe7c6a87da169f6344a1c1fdf29afe1a1c262a6aef5f8ca0d9dee8f52975d3f5ab5cbc8480169ebc4a3e43e1b69e0041451b219c4c63a63856b4e0654ec20a756f61d82194a8642ccdb65"], 0x110) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000500)={{{@in=@private, @in=@multicast1}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) (async) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r5, 0x400, 0x0) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r6, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) fcntl$getflags(r6, 0x401) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000280)='sched_switch\x00', r7, 0x0, 0x1}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='xen_mmu_flush_tlb_one_user\x00', r7, 0x0, 0x3}, 0x18) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000002f40)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}], 0x1, 0x0) (async) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f00000004c0)={{0xda7, 0xfd}, {0xfffffffffffff000, 0x1}, 0x8f}) shutdown(r8, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x7ff}, &(0x7f0000000080)=0x8) (async, rerun: 64) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r5], 0x48) (rerun: 64) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00"/144], 0x90) (async) write$binfmt_aout(r3, &(0x7f0000000700)=ANY=[@ANYBLOB="cc00010ab5"], 0x108) 2.588909826s ago: executing program 4 (id=78): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000ee0001000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_cancel(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r5}, 0x10) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r6, &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200"], 0xfe44, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000000c50000140012800c0001006d6163767461700004000280080005002bf097da33676ca10bf0b108034b", @ANYRES32=r1, @ANYBLOB], 0x3c}}, 0x0) r8 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r9 = socket$inet6_dccp(0xa, 0x6, 0x0) r10 = socket(0x10, 0x3, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400007dbba06ccc23c5d788409b835002008438", @ANYRES32=r12, @ANYBLOB="0000000000000000340012800900010069706970000000002400028006001000000000000500040003000000060011000000000008000300ac1414aa"], 0x54}}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff63, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r13}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sched_getscheduler(0x0) sendto$inet6(r9, &(0x7f0000000080)="fa7bc50c58dc4c511240bf38381237d5b37d99b56cecaca3faca04a1a5facd31f1ea95f84d80de420682da51401fa90de7f86baf592337b3ac079d", 0x3b, 0x20004000, &(0x7f00000000c0)={0xa, 0x4e21, 0x1, @mcast2, 0xe}, 0x1c) write$selinux_access(r8, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000180)={[{@data_err_abort}, {@minixdf}, {@quota}, {@nojournal_checksum}, {@usrquota}, {@nomblk_io_submit}, {@noload}, {@nodioread_nolock}]}, 0x1, 0x530, &(0x7f0000000b40)="$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") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r10, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0, 0x9e, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xfc, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) 2.382996656s ago: executing program 3 (id=82): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0xf0, 0x11, 0x713, 0x0, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@mcast2, 0x0, 0x32}, @in=@local, {0x4}, {}, {}, 0x0, 0x0, 0x2, 0x4}}, 0xf0}}, 0x0) (fail_nth: 1) 1.896627867s ago: executing program 3 (id=85): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000580000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f008006000000e00001100630277", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000a0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) getpid() socket$netlink(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8911, &(0x7f0000000900)={'wg2\x00', @random='\x00\x00\x00 \x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) 1.896341067s ago: executing program 4 (id=86): socketpair(0x10, 0x3, 0x8, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000cf1e4827d32f081a78a200000000008000"/38], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x42800, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0x7005, 0x0) r3 = syz_io_uring_setup(0x804, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000002c0)=0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) 1.865985957s ago: executing program 1 (id=87): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000007c0)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@local, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast2, {0x5, 0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3}, {}, {0x1}, 0x0, 0x0, 0xa, 0x4, 0xfd}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd29, 0x70bd29, 0x70bd28, 0x70bd27, 0x7}}]}, 0x154}, 0x1, 0xe}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="000000000070b600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = semget$private(0x0, 0x4, 0x0) semtimedop(r9, &(0x7f0000000340)=[{0x0, 0x1}], 0x1, 0x0) semop(r9, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}, {0x0, 0x5, 0x400}], 0x2) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='ext4_mb_release_group_pa\x00', 0xffffffffffffffff, 0x0, 0xeadd680}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_getevents(r11, 0x1, 0x800000000000116, &(0x7f0000004600), 0x0) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6000, 0x100, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r10, 0xee01, r12) 1.795987427s ago: executing program 3 (id=88): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f00000000c0)={[{}]}, 0x1, 0x4e2, &(0x7f0000000b80)="$eJzs3c9vG1kdAPDvTOImm81usrASPwRsWRYKqmon7m602tNyAaHVSogVJw7ZkLhRFDuOYmdpQiXS/wGJSpzgT+CAxAGpJ+7c4MalHJAKVKAGiYPRjCdpSOMkbRMb7M9HGs28eeP5vldr3nO/SfwCGFlXI2IvIq5ExMcRMVOcT4ot3u9u2XWPH91Z3n90ZzmJTuejvyV5fXYujrwm83Jxz8mI+N63I36YPB23tbO7vlSv17aKcqXd2Ky0dnZvrDWWVmurtY1qdWF+Ye7dm+9UL6yvbzR+9fBbax98/7e/+eKD3+9948dZs6aLuqP9uEjdrpcO42TGI+KDywg2AGNFf64MuiE8lzQiPhURb+bP/0yM5e/m+ZzwWAMA/wc6nZnozBwtAwDDLs1zYElaLnIB05Gm5XI3h/d6TKX1Zqt9/VZze2OlmyubjVJ6a61emytyhbNRSrLyfH78pFw9Vr4ZEa9FxE8nXsrL5eXz5xkAgIv18rH5/58T3fkfABhyk2ddsNifdgAA/XPm/A8ADB3zPwCMHvM/AIwe8z8AjB7zPwCMnmL+Hxt0OwCAvvjuhx9mW2e/+P7rlU92ttebn9xYqbXWy43t5fJyc2uzvNpsrtZr5eVm46z71ZvNzfm3Y/t2pV1rtSutnd3FRnN7o72Yf6/3Yq3Ul14BAKd57Y37f0wiYu+9l/ItjqzlYK6G4ZYOugHAwMj5w+jyLdwwuvwfHzhrLc+evyJ87zmCdX7yHC8CLtq1z8n/w6iS/4fRJf8Po0v+H0ZXp5P0WvM/PbwEABgqcvxAX3/+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAENiOt+StFysBT4daVouR7wSEbNRSm6t1WtzEfFqRPxhojSRlecH3WgA4AWlf0mK9b+uzbw1fbz2SvKviXwfET/6+Uc/u73Ubm/NZ+f/fni+fa84Xx1E+wGAsxzM0wfz+IHHj+4sH2z9bM/Db3YXF83i7hdbt2Y8xvP9ZJQiYuofSVHuyj6vjF1A/L27EfHZk/qf5LmR2WLl0+Pxs9iv9DV++l/x07yuu8/+LT79DDHPWusVRsX9bPx5/6TnL42r+X7yxMWPJ/MR6sUdjH/7T41/6eH4N9Zj/Lt63hhv/+47PevuRnx+/KT4yWH8pEf8t84Z/09f+NKbveo6v4i4FifHPxqr0m5sVlo7uzfWGkurtdXaRrW6ML8w9+7Nd6qVPEddOchUP+2v711/9bT+T/WIP3lG/796aq87EwdHv/z3xz/48inxv/6Vk9//10+Jn82JXzs1/hNLU7/uuXx3Fn+l2/+7z/r+Xz9n/Ad/3l0556UAQB+0dnbXl+r12taFHpTigm945CC5pDY7GPKD7PP4i97nM0XK7H+gO5d9MOiRCbhsTx76QbcEAAAAAAAAAAAAAADo5dL/nCgddA8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYZv8JAAD//wqryik=") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40eb, 0x0, r3, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501", @ANYRES16=r0, @ANYRES8=r2, @ANYRES16=r0, @ANYRES64=r2, @ANYRESOCT=r2, @ANYRES8, @ANYBLOB="3e5e42895cd544f9e711df9d1729632fe9dc1e8a3373e06ad6e3ddec5909bc7efe7f532c6325d042b7a172db3fadc917f0a5ac60bcbafc1ebc37ca8e700d27f438df25392baa47a26a013122b05d303614c29acd90a31915a301dcdec209c8274f8ecf22b4be67dd26f89fc97840cd941e6d0ea1456df0be0955559d5565c204490f3c55a01d6007f5ac0efacd87104a4f3a65308a616e26d66c0f"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000006c0)) r4 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x28a003, 0x20) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x10, "ef359f413bb93852f7d6a4ae00ddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0ecb110ff4f37639c2eb4b78c66ee677701905b9aafab4afaaf755a3f6a00400", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r6, 0x4) listen(r6, 0x8) write$vga_arbiter(r4, &(0x7f0000000000)=@unlock_all, 0xb) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) 1.724329988s ago: executing program 1 (id=90): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES64], 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r3 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200410, &(0x7f0000000140)={[{@nodiscard}, {}, {@acl}, {@nomblk_io_submit}, {@quota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@errors_continue}, {@errors_continue}, {@nogrpid}]}, 0xd, 0x591, &(0x7f0000000f80)="$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") open(0x0, 0x14d27e, 0x60) chdir(&(0x7f0000000380)='./file0\x00') creat(&(0x7f0000000300)='./file2\x00', 0x177) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r0], 0x68}}, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000a00)={0xa, 0x4, 0xfa00, {r4}}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES8=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000140)={0x0, 0xbd3, 0x0, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000001c0)=0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000180)={0xbad, 0x3, 0x81, 0x912b}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061104c000000000007000000000000209500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2000000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r9, 0x84, 0x74, &(0x7f0000000300)=""/147, &(0x7f0000000200)=0x93) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) r10 = socket(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0xf0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x0, 0x6c, 0x0, 0x0, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x92, 0x0, 0xf1, 0x0, 0x3}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x0) 1.229405978s ago: executing program 3 (id=96): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x800000, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@empty, @random="6a2ddcf6177a", @val={@void, {0x8100, 0x1, 0x1, 0x1}}, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x57, 0x0, 0x6, 0x0, @empty, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x5, 0x0, 0x0, 0x3}}}}}}, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000004000000000000", @ANYRES16=r0, @ANYBLOB='\x00'/14], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3e0, 0x3d8, 0x3d8, 0x3e0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x10000000, {}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x6dbf}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0x3, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) 1.180108228s ago: executing program 0 (id=97): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], &(0x7f0000000040)=""/227, 0x1a, 0xe3, 0x1, 0x0, 0x0, @void, @value}, 0x28) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0x0, 0x5, 0x0, 0x0, 0x3, 0x89008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_config_ext={0x3}, 0xaf1, 0x19fbcc0a, 0x0, 0x3, 0x1, 0x2}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000240), 0x4) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r3], 0x48}, 0x20028814) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x24000800, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @local}, 0x1c) recvmmsg(r4, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8924, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000002ee0000000000000000000000001e53a70390835be2badd39b1b7ad2680bc1ebb54feedcd519a15b509f888418e366e12dd34984aeb78202d66d6f0e1759c4bff39c11ad279c5d4ca741433309a", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000002c0ef10900", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x200006, 0xc, 0xb, 0x59b}) ioctl$SG_BLKTRACETEARDOWN(r7, 0x1276, 0x0) 1.123441858s ago: executing program 1 (id=98): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3d, 0x3d, 0x8, [@const={0x10, 0x0, 0x0, 0xa, 0x1}, @datasec={0x5, 0x2, 0x0, 0xf, 0x1, [{0x3, 0x5, 0x7}, {0x4, 0x7, 0x8000}], "1f"}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x30, 0x30, 0x5f, 0x2e, 0x30, 0x61]}}, &(0x7f0000000580)=""/191, 0x60, 0xbf, 0x1, 0x9, 0x0, @void, @value}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r0}, 0x8) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='kfree\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0x2c, r5, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {}, {0x1c, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}}, 0x44050) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000400)=@raw=[@cb_func={0x18, 0xe, 0x4, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x101}], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff27, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x1004404, &(0x7f0000000240)={[{@noinit_itable}, {@dioread_lock}, {@noauto_da_alloc}, {@lazytime}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0xa}}]}, 0x23, 0x44d, &(0x7f0000000980)="$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") r8 = creat(&(0x7f0000000100)='./bus\x00', 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fcntl$setstatus(r8, 0x4, 0x6100) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r9}, 0x10) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) write$cgroup_type(r8, &(0x7f0000000200), 0x175d9003) clock_settime(0x2, &(0x7f0000000000)) 887.313819ms ago: executing program 2 (id=99): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6a, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000400000008000000080000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x6, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3450, &(0x7f0000000440)={0x0, 0xffffe7f9, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x14) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x3014490, &(0x7f0000001040)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@dax_inode}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {@resuid}]}, 0x45, 0x7ce, &(0x7f0000000500)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r4, 0x1, &(0x7f00000000c0)) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000004c0)={r1, 0x0, 0x95, 0x0, &(0x7f0000000340)="8cd07c194baa9528562502c3708e0fbbc07a96b3564c75d4031d4b94365e70902f9df715d51b14b677b5d4d606cdf9c3016290ce0d5971b6b1cd8dbd9174a33a9ded20e9dd871036e17dbce973433f9683dcfc41822776662c7c4f79f09276563275dd07e6ee32220d348aaec14ebd3246f5e88b6f0ee9a92970a9464a310deb60abf970802ef6759361a898494f16389ffa30480b", 0x0, 0x8001, 0x0, 0x7a, 0x0, &(0x7f00000000c0)="b239805ffed15d198379d7c550e28a377cfb0bd971372d840682931b619824e4097c39152f4fe1cbafc20e36653288fca6986a88406471efc2cffefa24dbfc59cd4ddedb5bc12af7ef5cabb484b6def6950c38db2f5225b72301bd7867c2687718863a4d2f7490a23443dd2c44e939463542f42cb9cc55dc9e6b", 0x0, 0x2, 0x0, 0x6}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000000008000000000000000000000000000268ef18456d83dd0e8e48c4ae4d85a0ad8f7e4898f0646588c3da6adb581e5b1529528a57cf0bb4871122c542c50b9e70ab3488e57bd861e51a16e3793e8bb3d7dfddfcba0e06e52867afcae1eef5b1c7ddf75d5e11e559562977c10ddda4c2f29146feb66ca526ab79d332a59e9ae2a1f8ce1ea5046540928ad4ccf7e198ba1cde01231103d159ed6a117007b708bbe2ee71408f497190632f1683d013ff1628ebab9f0", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYRES8=r5], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r8, &(0x7f0000000280)="e10770c730f1", 0x6, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0xfd}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, 0x0, 0x0) 595.840499ms ago: executing program 3 (id=100): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) pread64(r3, &(0x7f00000009c0)=""/156, 0x9c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="1805000000dcc217f45fee40f2936ce20010000000000000000000b7080000000000007b8af844d238d7381ec8c5e359c0ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r2, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0xffffff85) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = getpgid(0x0) r6 = gettid() rt_tgsigqueueinfo(r5, r6, 0x3b, &(0x7f0000000280)={0x1f, 0x8, 0x80}) remap_file_pages(&(0x7f00006b3000/0x2000)=nil, 0x2000, 0x2, 0x0, 0x0) r7 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000700)='./file2\x00', 0x0, &(0x7f0000000740)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ftruncate(r8, 0x100c17a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES8, @ANYRESDEC=0x0, @ANYRES32, @ANYRES8, @ANYRES8], 0x1, 0x0, &(0x7f0000000000)) dup3(r7, r8, 0x147da90c9d99d384) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r9}, 0x10) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) getsockname$packet(r10, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000640)=0x14) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) 577.679149ms ago: executing program 32 (id=100): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) pread64(r3, &(0x7f00000009c0)=""/156, 0x9c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="1805000000dcc217f45fee40f2936ce20010000000000000000000b7080000000000007b8af844d238d7381ec8c5e359c0ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r2, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0xffffff85) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = getpgid(0x0) r6 = gettid() rt_tgsigqueueinfo(r5, r6, 0x3b, &(0x7f0000000280)={0x1f, 0x8, 0x80}) remap_file_pages(&(0x7f00006b3000/0x2000)=nil, 0x2000, 0x2, 0x0, 0x0) r7 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000700)='./file2\x00', 0x0, &(0x7f0000000740)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ftruncate(r8, 0x100c17a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES8, @ANYRESDEC=0x0, @ANYRES32, @ANYRES8, @ANYRES8], 0x1, 0x0, &(0x7f0000000000)) dup3(r7, r8, 0x147da90c9d99d384) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r9}, 0x10) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) getsockname$packet(r10, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000640)=0x14) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) 574.811219ms ago: executing program 0 (id=102): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004580), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r3}, 0x14) 574.214199ms ago: executing program 2 (id=103): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000600"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 498.613899ms ago: executing program 0 (id=104): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/4, 0x4}, 0xe}], 0x1, 0x0, 0x0) 422.099719ms ago: executing program 2 (id=105): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000640)={{0x1, 0x0, 0x0, 0x3, 0xfff}}) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x2c) listen(r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r3, 0x402, 0x29) fcntl$notify(r3, 0x402, 0x5) shutdown(r0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x232042, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x21ac, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 420.135149ms ago: executing program 0 (id=106): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0x2e34, &(0x7f0000000180)={0x0, 0xfffffffe}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) (fail_nth: 1) 383.157269ms ago: executing program 1 (id=107): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='sys_enter\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setuid(0xee01) io_setup(0x5ff, 0x0) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r8}, 0x18) fsetxattr$security_selinux(r7, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r9 = io_uring_setup(0x2e34, &(0x7f0000000180)={0x0, 0xfffffffe, 0x20, 0xfffffffc, 0x0, 0x0, r6}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4000000016fc02020000000000000000020000000900020073797a32000000000900010073797a2ffffd0000140080080002400000000008000140000000001400000011000100"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 201.269439ms ago: executing program 2 (id=108): r0 = syz_pidfd_open(0x0, 0x0) setns(r0, 0x2e020000) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="1808000000000000000000000000000285"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) (async) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) (async) r6 = fsmount(r1, 0x0, 0x8b) process_mrelease(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000980)={[{@nodioread_nolock}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x8000003}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x83}}, {@errors_remount}, {@jqfmt_vfsv1}], [{@smackfshat={'smackfshat', 0x3d, 'debug_want_extra_isize'}}, {@subj_type={'subj_type', 0x3d, '[,/n^//'}}]}, 0x3, 0x446, &(0x7f0000000380)="$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") r7 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r10 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x0) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r11}, 0x38) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) (async) fsetxattr$security_capability(r10, &(0x7f00000002c0), &(0x7f0000000340)=@v3={0x3000000, [{0x80}, {0x3, 0x9}]}, 0x18, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x54, 0x1e5, 0x0, 0x0, {0x7, r9}}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf650900020073797a32000000000800410073697700140033006c6f0000000040000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) (async) fstatfs(r7, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000214010029bd709097dcdf25080001000000000005005400030000008572fc140379c156858917604ef6d8a02d59bf8f4dc285bbeec49e35eb3f2f41a186e9b3f5352bb4cc1cbbe0991e08f5b7e5f8cce75d8903ccb33869774bb2eb752dd540e6d495197a3e979e8371e4828ae8887d746428fcf92441a4817a1782b89c53b20e5b58e2fa11080d25346be4fc781161798f19ba49918d5e9b55a824270bd8"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x20040000) (async) sendmsg$nl_route(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=@getaddr={0x14, 0x16, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40044}, 0x8040080) 200.585579ms ago: executing program 2 (id=109): iopl(0x3) setreuid(0x0, 0xee00) keyctl$session_to_parent(0x12) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2d) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00'}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x74) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xd0}}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x208600, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000850000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0000000000001000000000000000"], 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup(r4) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xf6}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000003cecffff3b000000060000000200000004000085060000000600000001000000080000000800000005000000040000000900000004000000e345cf5505000000050000000500000000615f2e2e00"], &(0x7f0000000500)=""/246, 0x5a, 0xf6, 0x0, 0x80000000, 0x0, @void, @value}, 0x28) 144.370899ms ago: executing program 0 (id=110): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf38, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x5c4, @local}, 0x1c) 97.448939ms ago: executing program 1 (id=111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}]}, 0x2c}}, 0x48085) 19.92348ms ago: executing program 0 (id=112): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], &(0x7f0000000040)=""/227, 0x1a, 0xe3, 0x1, 0x0, 0x0, @void, @value}, 0x28) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0x0, 0x5, 0x0, 0x0, 0x3, 0x89008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_config_ext={0x3}, 0xaf1, 0x19fbcc0a, 0x0, 0x3, 0x1, 0x2}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000240), 0x4) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r3], 0x48}, 0x20028814) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x24000800, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @local}, 0x1c) recvmmsg(r4, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8924, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000002ee0000000000000000000000001e53a70390835be2badd39b1b7ad2680bc1ebb54feedcd519a15b509f888418e366e12dd34984aeb78202d66d6f0e1759c4bff39c11ad279c5d4ca741433309a", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000002c0ef10900", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x200006, 0xc, 0xb, 0x59b}) ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x0) 4.35291ms ago: executing program 1 (id=113): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004580), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r3}, 0x14) 0s ago: executing program 2 (id=114): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="020000000400000006000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) kernel console output (not intermixed with test programs): [ 21.562102][ T29] audit: type=1400 audit(1733709148.038:81): avc: denied { read } for pid=2984 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.93' (ED25519) to the list of known hosts. [ 26.096080][ T29] audit: type=1400 audit(1733709152.578:82): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.097253][ T3289] cgroup: Unknown subsys name 'net' [ 26.118808][ T29] audit: type=1400 audit(1733709152.578:83): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.146182][ T29] audit: type=1400 audit(1733709152.608:84): avc: denied { unmount } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.345141][ T3289] cgroup: Unknown subsys name 'cpuset' [ 26.351324][ T3289] cgroup: Unknown subsys name 'rlimit' [ 26.483163][ T29] audit: type=1400 audit(1733709152.958:85): avc: denied { setattr } for pid=3289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.508300][ T29] audit: type=1400 audit(1733709152.968:86): avc: denied { create } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.529011][ T29] audit: type=1400 audit(1733709152.968:87): avc: denied { write } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.538118][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.549382][ T29] audit: type=1400 audit(1733709152.968:88): avc: denied { read } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.578555][ T29] audit: type=1400 audit(1733709152.968:89): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.603360][ T29] audit: type=1400 audit(1733709152.968:90): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.626659][ T29] audit: type=1400 audit(1733709153.048:91): avc: denied { relabelto } for pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.656311][ T3289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.749323][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 27.773933][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 27.829979][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 27.884881][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 27.899610][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.906736][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.913926][ T3307] bridge_slave_0: entered allmulticast mode [ 27.920341][ T3307] bridge_slave_0: entered promiscuous mode [ 27.935531][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 27.946370][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.953427][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.960632][ T3307] bridge_slave_1: entered allmulticast mode [ 27.967042][ T3307] bridge_slave_1: entered promiscuous mode [ 28.011048][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.021407][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.030526][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.037698][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.044983][ T3301] bridge_slave_0: entered allmulticast mode [ 28.051309][ T3301] bridge_slave_0: entered promiscuous mode [ 28.060078][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.067209][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.074405][ T3301] bridge_slave_1: entered allmulticast mode [ 28.080821][ T3301] bridge_slave_1: entered promiscuous mode [ 28.129173][ T3307] team0: Port device team_slave_0 added [ 28.135099][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.142175][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.149423][ T3305] bridge_slave_0: entered allmulticast mode [ 28.155923][ T3305] bridge_slave_0: entered promiscuous mode [ 28.169773][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.176878][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.183991][ T3300] bridge_slave_0: entered allmulticast mode [ 28.190280][ T3300] bridge_slave_0: entered promiscuous mode [ 28.197129][ T3307] team0: Port device team_slave_1 added [ 28.202922][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.210040][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.217207][ T3300] bridge_slave_1: entered allmulticast mode [ 28.223515][ T3300] bridge_slave_1: entered promiscuous mode [ 28.233892][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.241057][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.248266][ T3305] bridge_slave_1: entered allmulticast mode [ 28.254624][ T3305] bridge_slave_1: entered promiscuous mode [ 28.261630][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.271945][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.320615][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.335306][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.344974][ T3301] team0: Port device team_slave_0 added [ 28.350745][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.357843][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.365094][ T3310] bridge_slave_0: entered allmulticast mode [ 28.371430][ T3310] bridge_slave_0: entered promiscuous mode [ 28.377911][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.384896][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.410883][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.422027][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.429017][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.454999][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.466583][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.476547][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.491125][ T3301] team0: Port device team_slave_1 added [ 28.501403][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.508549][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.515776][ T3310] bridge_slave_1: entered allmulticast mode [ 28.522043][ T3310] bridge_slave_1: entered promiscuous mode [ 28.548470][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.555549][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.581703][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.602070][ T3300] team0: Port device team_slave_0 added [ 28.608864][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.615857][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.641849][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.653785][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.663417][ T3305] team0: Port device team_slave_0 added [ 28.669800][ T3300] team0: Port device team_slave_1 added [ 28.683739][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.693415][ T3305] team0: Port device team_slave_1 added [ 28.733482][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.740479][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.766501][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.785672][ T3307] hsr_slave_0: entered promiscuous mode [ 28.791899][ T3307] hsr_slave_1: entered promiscuous mode [ 28.803562][ T3310] team0: Port device team_slave_0 added [ 28.809565][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.816570][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.842596][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.860045][ T3301] hsr_slave_0: entered promiscuous mode [ 28.865977][ T3301] hsr_slave_1: entered promiscuous mode [ 28.871944][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.879528][ T3301] Cannot create hsr debugfs directory [ 28.885248][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.892230][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.918201][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.936948][ T3310] team0: Port device team_slave_1 added [ 28.942928][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.949906][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.975833][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.022459][ T3300] hsr_slave_0: entered promiscuous mode [ 29.028526][ T3300] hsr_slave_1: entered promiscuous mode [ 29.034943][ T3300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.042512][ T3300] Cannot create hsr debugfs directory [ 29.075180][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.082153][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.108091][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.120922][ T3305] hsr_slave_0: entered promiscuous mode [ 29.127059][ T3305] hsr_slave_1: entered promiscuous mode [ 29.132918][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.140526][ T3305] Cannot create hsr debugfs directory [ 29.152699][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.159720][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.185674][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.241471][ T3310] hsr_slave_0: entered promiscuous mode [ 29.247574][ T3310] hsr_slave_1: entered promiscuous mode [ 29.253430][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.261071][ T3310] Cannot create hsr debugfs directory [ 29.334698][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.356672][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.380001][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.390478][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.421079][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.431711][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.442247][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.453981][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.469781][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.478424][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.487116][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.506419][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.539416][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.559550][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.568106][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.584902][ T3310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.593780][ T3310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.602643][ T3310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.611423][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.622309][ T3310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.655586][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.683956][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.708789][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.728608][ T2340] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.735715][ T2340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.744146][ T2340] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.751218][ T2340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.786563][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.802450][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.814835][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.831030][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.838172][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.852468][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.859660][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.876923][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.885196][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.905892][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.913016][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.932257][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.941440][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.948621][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.962303][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.969375][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.984465][ T3300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.994919][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.011675][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.019364][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.031604][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.063528][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.092772][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.099878][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.139528][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.163351][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.170475][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.198573][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.268039][ T3301] veth0_vlan: entered promiscuous mode [ 30.285379][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.300864][ T3301] veth1_vlan: entered promiscuous mode [ 30.321982][ T3301] veth0_macvtap: entered promiscuous mode [ 30.342196][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.351214][ T3301] veth1_macvtap: entered promiscuous mode [ 30.369310][ T3307] veth0_vlan: entered promiscuous mode [ 30.380657][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.400025][ T3307] veth1_vlan: entered promiscuous mode [ 30.409519][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.429140][ T3301] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.437957][ T3301] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.446749][ T3301] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.455482][ T3301] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.475526][ T3300] veth0_vlan: entered promiscuous mode [ 30.482116][ T3307] veth0_macvtap: entered promiscuous mode [ 30.493402][ T3300] veth1_vlan: entered promiscuous mode [ 30.507624][ T3307] veth1_macvtap: entered promiscuous mode [ 30.532881][ T3300] veth0_macvtap: entered promiscuous mode [ 30.547193][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.557775][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.577460][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.586225][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.596860][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.607828][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.615148][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.616306][ T3300] veth1_macvtap: entered promiscuous mode [ 30.647237][ T3307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.656647][ T3307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.665460][ T3307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.674322][ T3307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.690128][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.700678][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.710582][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.721035][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.739167][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.760227][ T3305] veth0_vlan: entered promiscuous mode [ 30.767455][ T3438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 30.775534][ T3310] veth0_vlan: entered promiscuous mode [ 30.783627][ T3310] veth1_vlan: entered promiscuous mode [ 30.795233][ T3310] veth0_macvtap: entered promiscuous mode [ 30.806863][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.817406][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.827509][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.838324][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.848969][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.859866][ T3305] veth1_vlan: entered promiscuous mode [ 30.867595][ T3300] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.876388][ T3300] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.885148][ T3300] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.893958][ T3300] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.910051][ T3310] veth1_macvtap: entered promiscuous mode [ 30.921454][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.931923][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.941777][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.952229][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.962084][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.972674][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.983289][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.994774][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.005335][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.015196][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.025653][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.035486][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.045932][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.056477][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.065022][ T3310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.073855][ T3310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.082747][ T3310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.091518][ T3310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.111164][ T3305] veth0_macvtap: entered promiscuous mode [ 31.135118][ T3305] veth1_macvtap: entered promiscuous mode [ 31.151004][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 31.151019][ T29] audit: type=1326 audit(1733709157.618:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3447 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e9fbfed9 code=0x7ffc0000 [ 31.180385][ T29] audit: type=1326 audit(1733709157.618:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3447 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5e9fbfed9 code=0x7ffc0000 [ 31.182333][ T3453] can: request_module (can-proto-0) failed. [ 31.203727][ T29] audit: type=1326 audit(1733709157.618:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3447 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e9fbfed9 code=0x7ffc0000 [ 31.232859][ T29] audit: type=1326 audit(1733709157.618:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3447 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5e9fbfed9 code=0x7ffc0000 [ 31.235725][ T3453] netlink: 'syz.1.9': attribute type 2 has an invalid length. [ 31.255983][ T29] audit: type=1326 audit(1733709157.618:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3447 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e9fbfed9 code=0x7ffc0000 [ 31.263462][ T3453] netlink: 'syz.1.9': attribute type 8 has an invalid length. [ 31.286638][ T29] audit: type=1326 audit(1733709157.618:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3447 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff5e9fbfed9 code=0x7ffc0000 [ 31.294024][ T3453] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9'. [ 31.317174][ T29] audit: type=1326 audit(1733709157.618:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3447 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff5e9fbff13 code=0x7ffc0000 [ 31.317206][ T29] audit: type=1326 audit(1733709157.618:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3447 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff5e9fbff13 code=0x7ffc0000 [ 31.331083][ T3452] netlink: 'syz.1.9': attribute type 2 has an invalid length. [ 31.348826][ T29] audit: type=1326 audit(1733709157.628:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3447 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e9fbfed9 code=0x7ffc0000 [ 31.348860][ T29] audit: type=1326 audit(1733709157.628:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3447 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e9fbfed9 code=0x7ffc0000 [ 31.371697][ T3452] netlink: 'syz.1.9': attribute type 8 has an invalid length. [ 31.433105][ T3452] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9'. [ 31.451729][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.462253][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.472191][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.482667][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.492630][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.503082][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.513028][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.523828][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.535063][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.570005][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.580669][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.590530][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.601105][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.610997][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.621459][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.631299][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.641787][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.653713][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.662001][ T3305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.670814][ T3305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.679580][ T3305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.688334][ T3305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.698984][ T3467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 31.733527][ T3467] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 31.772082][ T3468] loop3: detected capacity change from 0 to 2048 [ 31.821661][ T3468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.821731][ T3467] syz.4.5 (3467) used greatest stack depth: 10312 bytes left [ 31.852654][ T3475] loop1: detected capacity change from 0 to 512 [ 31.879137][ T3484] loop4: detected capacity change from 0 to 512 [ 31.893001][ T3475] EXT4-fs: Ignoring removed oldalloc option [ 31.938221][ T3475] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.13: Parent and EA inode have the same ino 15 [ 31.954074][ T3484] ext4: Unknown parameter 'fowner' [ 31.954480][ T3491] process 'syz.0.1' launched './file1' with NULL argv: empty string added [ 31.995236][ T3475] EXT4-fs (loop1): Remounting filesystem read-only [ 32.001876][ T3475] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.003973][ T3501] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 32.015033][ T3475] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 32.038948][ T3491] syz.0.1[3491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.039016][ T3491] syz.0.1[3491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.039659][ T3475] EXT4-fs (loop1): 1 orphan inode deleted [ 32.067482][ T3491] syz.0.1[3491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.075587][ T3475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.098993][ T3475] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 32.107466][ T3475] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.141699][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.163353][ T3510] loop4: detected capacity change from 0 to 128 [ 32.172803][ T3510] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 32.186900][ T3515] loop3: detected capacity change from 0 to 256 [ 32.205193][ T3510] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 32.299146][ T3526] syz.2.23 uses obsolete (PF_INET,SOCK_PACKET) [ 32.357137][ T3534] netlink: 'syz.4.21': attribute type 13 has an invalid length. [ 32.364977][ T3534] netlink: 152 bytes leftover after parsing attributes in process `syz.4.21'. [ 32.378169][ T3535] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.397931][ T3534] syz_tun: refused to change device tx_queue_len [ 32.404378][ T3534] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 32.506455][ T3544] netlink: 'syz.3.25': attribute type 13 has an invalid length. [ 32.546668][ T3544] gretap0: refused to change device tx_queue_len [ 32.553087][ T3544] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 32.615314][ T3552] pim6reg1: entered promiscuous mode [ 32.620675][ T3552] pim6reg1: entered allmulticast mode [ 32.675425][ T3547] mmap: syz.4.27 (3547): VmData 17453056 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 32.897839][ T3561] loop4: detected capacity change from 0 to 512 [ 32.915807][ T3561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.928422][ T3561] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.116234][ T3565] loop1: detected capacity change from 0 to 512 [ 33.136818][ T3565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.149742][ T3565] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.367330][ T3569] FAULT_INJECTION: forcing a failure. [ 33.367330][ T3569] name failslab, interval 1, probability 0, space 0, times 1 [ 33.380034][ T3569] CPU: 1 UID: 0 PID: 3569 Comm: syz.0.33 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 33.390566][ T3569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 33.400747][ T3569] Call Trace: [ 33.404034][ T3569] [ 33.406990][ T3569] dump_stack_lvl+0xf2/0x150 [ 33.411652][ T3569] dump_stack+0x15/0x1a [ 33.415962][ T3569] should_fail_ex+0x223/0x230 [ 33.420716][ T3569] should_failslab+0x8f/0xb0 [ 33.425351][ T3569] kmem_cache_alloc_noprof+0x52/0x320 [ 33.430753][ T3569] ? getname_flags+0x81/0x3b0 [ 33.435440][ T3569] getname_flags+0x81/0x3b0 [ 33.439960][ T3569] getname+0x17/0x20 [ 33.443877][ T3569] do_sys_openat2+0x67/0x120 [ 33.448569][ T3569] __x64_sys_openat+0xf3/0x120 [ 33.453342][ T3569] x64_sys_call+0x2b30/0x2dc0 [ 33.458088][ T3569] do_syscall_64+0xc9/0x1c0 [ 33.462605][ T3569] ? clear_bhb_loop+0x55/0xb0 [ 33.467377][ T3569] ? clear_bhb_loop+0x55/0xb0 [ 33.472129][ T3569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.478167][ T3569] RIP: 0033:0x7f559cbcfed9 [ 33.482673][ T3569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.502293][ T3569] RSP: 002b:00007f559b247058 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 33.510896][ T3569] RAX: ffffffffffffffda RBX: 00007f559cd95fa0 RCX: 00007f559cbcfed9 [ 33.518872][ T3569] RDX: 000000000000275a RSI: 00000000200000c0 RDI: 0000000000000003 [ 33.526877][ T3569] RBP: 00007f559b2470a0 R08: 0000000000000000 R09: 0000000000000000 [ 33.534858][ T3569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.542834][ T3569] R13: 0000000000000000 R14: 00007f559cd95fa0 R15: 00007ffd43c52068 [ 33.550821][ T3569] [ 33.616023][ T3574] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.647603][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.683858][ T3582] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.727979][ T3582] hub 6-0:1.0: USB hub found [ 33.732720][ T3582] hub 6-0:1.0: 8 ports detected [ 33.939339][ T3535] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.059105][ T3626] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 34.159018][ T3636] loop6: detected capacity change from 0 to 7 [ 34.165346][ T3636] Buffer I/O error on dev loop6, logical block 0, async page read [ 34.173187][ T3636] Buffer I/O error on dev loop6, logical block 0, async page read [ 34.181162][ T3636] loop6: unable to read partition table [ 34.187001][ T3636] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 34.187001][ T3636] ) failed (rc=-5) [ 34.202702][ T3636] SELinux: policydb magic number 0x50def28c does not match expected magic number 0xf97cff8c [ 34.213371][ T3636] SELinux: failed to load policy [ 34.219665][ T3636] futex_wake_op: syz.0.47 tries to shift op by 144; fix this program [ 34.229187][ T3636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.236654][ T3636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.244319][ T3636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.251727][ T3636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.363347][ C1] vcan0: j1939_tp_rxtimer: 0xffff888117d53a00: rx timeout, send abort [ 34.371659][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888117d53a00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 34.395660][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.435736][ T3642] Invalid ELF header magic: != ELF [ 34.447364][ T3642] loop1: detected capacity change from 0 to 1024 [ 34.454408][ T3642] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.465565][ T3642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.500405][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.540477][ T3535] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.622360][ T3535] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.682247][ T3535] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.711865][ T3535] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.739313][ T3535] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.751435][ T3535] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.901869][ T3707] netlink: 'syz.4.64': attribute type 4 has an invalid length. [ 34.909519][ T3707] netlink: 152 bytes leftover after parsing attributes in process `syz.4.64'. [ 34.936258][ T3712] loop2: detected capacity change from 0 to 512 [ 34.990513][ T3717] 9p: Unknown Cache mode or invalid value fs [ 35.016489][ T3719] loop0: detected capacity change from 0 to 512 [ 35.029948][ T3721] loop1: detected capacity change from 0 to 256 [ 35.037133][ T3721] ======================================================= [ 35.037133][ T3721] WARNING: The mand mount option has been deprecated and [ 35.037133][ T3721] and is ignored by this kernel. Remove the mand [ 35.037133][ T3721] option from the mount to silence this warning. [ 35.037133][ T3721] ======================================================= [ 35.082142][ T3721] FAT-fs (loop1): Directory bread(block 64) failed [ 35.085160][ T3719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.089391][ T3721] FAT-fs (loop1): Directory bread(block 65) failed [ 35.107707][ T3719] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.135378][ T3721] FAT-fs (loop1): Directory bread(block 66) failed [ 35.143260][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.143899][ T3721] FAT-fs (loop1): Directory bread(block 67) failed [ 35.157637][ T3725] loop3: detected capacity change from 0 to 512 [ 35.159867][ T3721] FAT-fs (loop1): Directory bread(block 68) failed [ 35.172064][ T3721] FAT-fs (loop1): Directory bread(block 69) failed [ 35.178837][ T3721] FAT-fs (loop1): Directory bread(block 70) failed [ 35.185619][ T3721] FAT-fs (loop1): Directory bread(block 71) failed [ 35.192197][ T3721] FAT-fs (loop1): Directory bread(block 72) failed [ 35.207677][ T3721] FAT-fs (loop1): Directory bread(block 73) failed [ 35.232520][ T3725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.247107][ T3721] syz.1.69: attempt to access beyond end of device [ 35.247107][ T3721] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 35.247498][ T3725] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.291029][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.324832][ T3743] netlink: 28 bytes leftover after parsing attributes in process `syz.2.76'. [ 35.390464][ T3747] netlink: 28 bytes leftover after parsing attributes in process `syz.4.78'. [ 35.409751][ T3758] netlink: 'syz.1.79': attribute type 4 has an invalid length. [ 35.417396][ T3758] netlink: 152 bytes leftover after parsing attributes in process `syz.1.79'. [ 35.461428][ T3747] loop4: detected capacity change from 0 to 512 [ 35.497562][ T3747] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.538250][ T3747] EXT4-fs (loop4): orphan cleanup on readonly fs [ 35.549706][ T3747] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.78: bg 0: block 248: padding at end of block bitmap is not set [ 35.572747][ T3774] FAULT_INJECTION: forcing a failure. [ 35.572747][ T3774] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 35.586032][ T3774] CPU: 1 UID: 0 PID: 3774 Comm: syz.3.82 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 35.596547][ T3774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 35.606608][ T3774] Call Trace: [ 35.609891][ T3774] [ 35.612823][ T3774] dump_stack_lvl+0xf2/0x150 [ 35.617460][ T3774] dump_stack+0x15/0x1a [ 35.621686][ T3774] should_fail_ex+0x223/0x230 [ 35.626420][ T3774] should_fail+0xb/0x10 [ 35.630586][ T3774] should_fail_usercopy+0x1a/0x20 [ 35.635675][ T3774] _copy_from_user+0x1e/0xb0 [ 35.640384][ T3774] copy_msghdr_from_user+0x54/0x2a0 [ 35.645608][ T3774] ? __fget_files+0x17c/0x1c0 [ 35.650328][ T3774] __sys_sendmsg+0x13e/0x230 [ 35.654972][ T3774] __x64_sys_sendmsg+0x46/0x50 [ 35.659899][ T3774] x64_sys_call+0x2734/0x2dc0 [ 35.663501][ T3747] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.78: Failed to acquire dquot type 1 [ 35.664587][ T3774] do_syscall_64+0xc9/0x1c0 [ 35.664611][ T3774] ? clear_bhb_loop+0x55/0xb0 [ 35.677031][ T3747] EXT4-fs (loop4): 1 truncate cleaned up [ 35.680176][ T3774] ? clear_bhb_loop+0x55/0xb0 [ 35.687419][ T3747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.690475][ T3774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.713565][ T3774] RIP: 0033:0x7ff5e9fbfed9 [ 35.717999][ T3774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.737713][ T3774] RSP: 002b:00007ff5e8637058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.746135][ T3774] RAX: ffffffffffffffda RBX: 00007ff5ea185fa0 RCX: 00007ff5e9fbfed9 [ 35.754124][ T3774] RDX: 0000000000000000 RSI: 0000000020000ec0 RDI: 0000000000000003 [ 35.762206][ T3774] RBP: 00007ff5e86370a0 R08: 0000000000000000 R09: 0000000000000000 [ 35.770184][ T3774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.778199][ T3774] R13: 0000000000000000 R14: 00007ff5ea185fa0 R15: 00007ffc68dd78a8 [ 35.786195][ T3774] [ 35.800512][ T3782] FAULT_INJECTION: forcing a failure. [ 35.800512][ T3782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 35.804496][ T3777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.83'. [ 35.813621][ T3782] CPU: 0 UID: 0 PID: 3782 Comm: syz.1.84 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 35.832863][ T3782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 35.833779][ T3747] syz.4.78 (3747) used greatest stack depth: 9232 bytes left [ 35.842943][ T3782] Call Trace: [ 35.842953][ T3782] [ 35.842962][ T3782] dump_stack_lvl+0xf2/0x150 [ 35.861207][ T3782] dump_stack+0x15/0x1a [ 35.865475][ T3782] should_fail_ex+0x223/0x230 [ 35.870190][ T3782] should_fail+0xb/0x10 [ 35.874370][ T3782] should_fail_usercopy+0x1a/0x20 [ 35.879496][ T3782] _copy_to_user+0x20/0xa0 [ 35.883983][ T3782] simple_read_from_buffer+0xa0/0x110 [ 35.889387][ T3782] proc_fail_nth_read+0xf9/0x140 [ 35.894390][ T3782] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 35.900051][ T3782] vfs_read+0x1a2/0x700 [ 35.904228][ T3782] ? __rcu_read_unlock+0x4e/0x70 [ 35.909278][ T3782] ? __fget_files+0x17c/0x1c0 [ 35.914011][ T3782] ksys_read+0xe8/0x1b0 [ 35.918351][ T3782] __x64_sys_read+0x42/0x50 [ 35.922871][ T3782] x64_sys_call+0x2874/0x2dc0 [ 35.927587][ T3782] do_syscall_64+0xc9/0x1c0 [ 35.932099][ T3782] ? clear_bhb_loop+0x55/0xb0 [ 35.936818][ T3782] ? clear_bhb_loop+0x55/0xb0 [ 35.941502][ T3782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.947454][ T3782] RIP: 0033:0x7f8dd767e8ec [ 35.951883][ T3782] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 35.972045][ T3782] RSP: 002b:00007f8dd5cf7050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 35.980474][ T3782] RAX: ffffffffffffffda RBX: 00007f8dd7845fa0 RCX: 00007f8dd767e8ec [ 35.988450][ T3782] RDX: 000000000000000f RSI: 00007f8dd5cf70b0 RDI: 0000000000000006 [ 35.996546][ T3782] RBP: 00007f8dd5cf70a0 R08: 0000000000000000 R09: 0000000000000000 [ 36.004522][ T3782] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 36.012497][ T3782] R13: 0000000000000000 R14: 00007f8dd7845fa0 R15: 00007ffc89432228 [ 36.020503][ T3782] [ 36.032600][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.109853][ T3797] loop3: detected capacity change from 0 to 512 [ 36.234957][ T29] kauditd_printk_skb: 608 callbacks suppressed [ 36.234975][ T29] audit: type=1400 audit(1733709162.698:756): avc: denied { read write } for pid=3809 comm="syz.1.90" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.239973][ T3810] loop1: detected capacity change from 0 to 1024 [ 36.241421][ T29] audit: type=1400 audit(1733709162.698:757): avc: denied { open } for pid=3809 comm="syz.1.90" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.311355][ T3815] lo speed is unknown, defaulting to 1000 [ 36.320148][ T3810] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.321047][ T29] audit: type=1400 audit(1733709162.788:758): avc: denied { read } for pid=3814 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.340347][ T3815] lo speed is unknown, defaulting to 1000 [ 36.347404][ T29] audit: type=1400 audit(1733709162.788:759): avc: denied { create } for pid=3813 comm="syz.2.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 36.372975][ T29] audit: type=1400 audit(1733709162.788:760): avc: denied { write } for pid=3813 comm="syz.2.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 36.392636][ T3815] lo speed is unknown, defaulting to 1000 [ 36.405539][ T3797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.426519][ T3810] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.440962][ T3797] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.466697][ T29] audit: type=1326 audit(1733709162.948:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e9fbfed9 code=0x7ffc0000 [ 36.545498][ T3815] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 36.557856][ T29] audit: type=1326 audit(1733709162.968:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5e9fbfed9 code=0x7ffc0000 [ 36.581965][ T29] audit: type=1326 audit(1733709162.968:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e9fbfed9 code=0x7ffc0000 [ 36.606585][ T29] audit: type=1326 audit(1733709162.968:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff5e9fbfed9 code=0x7ffc0000 [ 36.630383][ T29] audit: type=1400 audit(1733709162.968:765): avc: denied { create } for pid=3794 comm="syz.3.88" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.631366][ T3307] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 36.668588][ T3815] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 36.676280][ T3832] Zero length message leads to an empty skb [ 36.678693][ T3307] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 36.700366][ T3815] lo speed is unknown, defaulting to 1000 [ 36.708007][ T3815] lo speed is unknown, defaulting to 1000 [ 36.714028][ T3815] lo speed is unknown, defaulting to 1000 [ 36.720712][ T3815] lo speed is unknown, defaulting to 1000 [ 36.734885][ T3815] lo speed is unknown, defaulting to 1000 [ 36.766841][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.775218][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.783065][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.806590][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 36.826913][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.834971][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.842865][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.850731][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.858604][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.866465][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.874247][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.881853][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.889719][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.897595][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.905439][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.913986][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.921670][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.929537][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.937374][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.945161][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.953037][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.960689][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.968285][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.976162][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.984043][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.992189][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.000230][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.008393][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.016450][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.024148][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.031747][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.041277][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 37.080539][ T3839] loop1: detected capacity change from 0 to 512 [ 37.113504][ T3839] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.126656][ T3839] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 37.142283][ T2282] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.196841][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.211185][ T3847] loop2: detected capacity change from 0 to 2048 [ 37.218553][ T3839] EXT4-fs (loop1): 1 truncate cleaned up [ 37.226089][ T3847] EXT4-fs: dax option not supported [ 37.244671][ T3839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.271278][ T3839] netlink: 'syz.1.98': attribute type 10 has an invalid length. [ 37.302402][ T2282] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.316469][ T3839] veth0_macvtap: left promiscuous mode [ 37.370258][ T3839] veth0_macvtap: entered promiscuous mode [ 37.401309][ T3839] team0: Device macvtap0 failed to register rx_handler [ 37.449617][ T3839] veth0_macvtap: left promiscuous mode [ 37.496237][ T2282] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.527862][ T3863] 9pnet: Could not find request transport: 0xffffffffffffffff [ 37.547315][ T3868] FAULT_INJECTION: forcing a failure. [ 37.547315][ T3868] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 37.560686][ T3868] CPU: 1 UID: 0 PID: 3868 Comm: syz.0.106 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 37.571443][ T3868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 37.581522][ T3868] Call Trace: [ 37.584813][ T3868] [ 37.587759][ T3868] dump_stack_lvl+0xf2/0x150 [ 37.592399][ T3868] dump_stack+0x15/0x1a [ 37.596595][ T3868] should_fail_ex+0x223/0x230 [ 37.601293][ T3868] should_fail_alloc_page+0xfd/0x110 [ 37.606690][ T3868] __alloc_pages_noprof+0x109/0x340 [ 37.611949][ T3868] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 37.617401][ T3868] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 37.622800][ T3868] handle_mm_fault+0xdd7/0x2ac0 [ 37.627682][ T3868] exc_page_fault+0x3b9/0x650 [ 37.632394][ T3868] asm_exc_page_fault+0x26/0x30 [ 37.637281][ T3868] RIP: 0033:0x7f559cb7d51b [ 37.641752][ T3868] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 37.661427][ T3868] RSP: 002b:00007f559b244e30 EFLAGS: 00010246 [ 37.665019][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.667577][ T3868] RAX: 00007f559b246f50 RBX: 00007f559cd60620 RCX: 0000000000000000 [ 37.667604][ T3868] RDX: 00007f559b246f98 RSI: 00007f559cc2ed78 RDI: 00007f559b244e50 [ 37.667619][ T3868] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 37.667634][ T3868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.667649][ T3868] R13: 0000000000000000 R14: 00007f559cd95fa0 R15: 00007ffd43c52068 [ 37.667738][ T3868] [ 37.667987][ T3868] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 37.731237][ T2282] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.862750][ T3860] lo speed is unknown, defaulting to 1000 [ 37.891026][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.898687][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.906789][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.928822][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.936940][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.944810][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.952608][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.960399][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.968461][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.975994][ T3798] ================================================================== [ 37.976031][ T3798] BUG: KCSAN: data-race in rtc_dev_poll / rtc_pie_update_irq [ 37.976071][ T3798] [ 37.976075][ T3798] read-write to 0xffff888103141380 of 8 bytes by interrupt on cpu 0: [ 37.976097][ T3798] rtc_pie_update_irq+0x95/0xf0 [ 37.976125][ T3798] __hrtimer_run_queues+0x20d/0x5e0 [ 37.976165][ T3798] hrtimer_interrupt+0x235/0x4a0 [ 37.976202][ T3798] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 37.976237][ T3798] sysvec_apic_timer_interrupt+0x6e/0x80 [ 37.976270][ T3798] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 37.976315][ T3798] console_flush_all+0x56b/0x770 [ 37.976350][ T3798] console_unlock+0xab/0x330 [ 37.976382][ T3798] vprintk_emit+0x3f4/0x680 [ 37.984793][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.991797][ T3798] dev_vprintk_emit+0x1df/0x210 [ 37.991838][ T3798] dev_printk_emit+0x82/0xb0 [ 37.991874][ T3798] __dev_printk+0xf6/0x110 [ 37.991898][ T3798] _dev_warn+0x99/0xc0 [ 37.991933][ T3798] hid_parser_main+0x622/0x680 [ 37.994615][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.002310][ T3798] hid_open_report+0x541/0x7c0 [ 38.002353][ T3798] hid_generic_probe+0x33/0x70 [ 38.002393][ T3798] hid_device_probe+0x259/0x440 [ 38.002418][ T3798] really_probe+0x1cf/0x5d0 [ 38.002442][ T3798] __driver_probe_device+0x12d/0x200 [ 38.002463][ T3798] driver_probe_device+0x38/0x2f0 [ 38.002484][ T3798] __device_attach_driver+0x216/0x320 [ 38.002508][ T3798] bus_for_each_drv+0x1cd/0x240 [ 38.002539][ T3798] __device_attach+0x1c7/0x290 [ 38.007577][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.012572][ T3798] device_initial_probe+0x1a/0x20 [ 38.012616][ T3798] bus_probe_device+0x141/0x1d0 [ 38.012646][ T3798] device_add+0x5e2/0x790 [ 38.012682][ T3798] hid_add_device+0x26e/0x2f0 [ 38.012706][ T3798] uhid_device_add_worker+0x2b/0xa0 [ 38.017804][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.023519][ T3798] process_scheduled_works+0x483/0x9a0 [ 38.023559][ T3798] worker_thread+0x51d/0x6f0 [ 38.023592][ T3798] kthread+0x1d1/0x210 [ 38.023612][ T3798] ret_from_fork+0x4b/0x60 [ 38.023633][ T3798] ret_from_fork_asm+0x1a/0x30 [ 38.023659][ T3798] [ 38.023666][ T3798] read to 0xffff888103141380 of 8 bytes by task 3798 on cpu 1: [ 38.029775][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.035251][ T3798] rtc_dev_poll+0x76/0xb0 [ 38.035285][ T3798] __io_arm_poll_handler+0x1e5/0xd50 [ 38.035326][ T3798] io_arm_poll_handler+0x3f6/0x5b0 [ 38.035368][ T3798] io_queue_async+0x89/0x320 [ 38.035405][ T3798] io_req_task_submit+0xb9/0xc0 [ 38.035435][ T3798] io_poll_task_func+0x5fa/0x7c0 [ 38.035473][ T3798] io_handle_tw_list+0xe3/0x200 [ 38.035503][ T3798] tctx_task_work_run+0x6e/0x1c0 [ 38.035538][ T3798] tctx_task_work+0x40/0x80 [ 38.035565][ T3798] task_work_run+0x13a/0x1a0 [ 38.035588][ T3798] get_signal+0xe78/0x1000 [ 38.035618][ T3798] arch_do_signal_or_restart+0x95/0x4b0 [ 38.035652][ T3798] syscall_exit_to_user_mode+0x62/0x120 [ 38.051885][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.057428][ T3798] do_syscall_64+0xd6/0x1c0 [ 38.057456][ T3798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.057499][ T3798] [ 38.057504][ T3798] value changed: 0x0000000000000000 -> 0x00000000000008c0 [ 38.057524][ T3798] [ 38.057529][ T3798] Reported by Kernel Concurrency Sanitizer on: [ 38.057539][ T3798] CPU: 1 UID: 0 PID: 3798 Comm: syz.4.86 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 38.057569][ T3798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 38.057585][ T3798] ================================================================== [ 38.062571][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.365118][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.372925][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.380742][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.388521][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.396304][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.404128][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.411886][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.419695][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.427513][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.435396][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.443147][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.450925][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.458754][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.466589][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.494737][ T3377] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 38.616815][ T3860] chnl_net:caif_netlink_parms(): no params data found [ 38.665177][ T2282] bridge_slave_1: left allmulticast mode [ 38.671268][ T2282] bridge_slave_1: left promiscuous mode [ 38.677426][ T2282] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.687583][ T2282] bridge_slave_0: left allmulticast mode [ 38.693761][ T2282] bridge_slave_0: left promiscuous mode [ 38.699938][ T2282] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.846608][ T2282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.856860][ T2282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.893234][ T2282] bond0 (unregistering): Released all slaves [ 38.946607][ T3860] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.953765][ T3860] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.977464][ T3860] bridge_slave_0: entered allmulticast mode [ 38.984127][ T3860] bridge_slave_0: entered promiscuous mode [ 38.996013][ T2282] hsr_slave_0: left promiscuous mode [ 39.001782][ T2282] hsr_slave_1: left promiscuous mode [ 39.007617][ T2282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.015174][ T2282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.022777][ T2282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.030273][ T2282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.039442][ T2282] veth1_macvtap: left promiscuous mode [ 39.044985][ T2282] veth0_macvtap: left promiscuous mode [ 39.050491][ T2282] veth1_vlan: left promiscuous mode [ 39.055825][ T2282] veth0_vlan: left promiscuous mode [ 39.114089][ T2282] team0 (unregistering): Port device team_slave_1 removed [ 39.123516][ T2282] team0 (unregistering): Port device team_slave_0 removed [ 39.153096][ T3860] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.160260][ T3860] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.167419][ T3860] bridge_slave_1: entered allmulticast mode [ 39.173856][ T3860] bridge_slave_1: entered promiscuous mode [ 39.192630][ T3860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.203027][ T3860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.222550][ T3860] team0: Port device team_slave_0 added [ 39.229142][ T3860] team0: Port device team_slave_1 added [ 39.246467][ T3860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.253504][ T3860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.279637][ T3860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.293395][ T3860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.300405][ T3860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.326478][ T3860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.356904][ T3860] hsr_slave_0: entered promiscuous mode [ 39.363186][ T3860] hsr_slave_1: entered promiscuous mode [ 39.452152][ T3860] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 39.469036][ T3860] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 39.478943][ T3860] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 39.488021][ T3860] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 39.529596][ T3860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.548009][ T3860] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.561101][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.568235][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.589619][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.596799][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.612059][ T3860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.669161][ T3860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.796630][ T3860] veth0_vlan: entered promiscuous mode [ 39.804893][ T3860] veth1_vlan: entered promiscuous mode [ 39.819503][ T3860] veth0_macvtap: entered promiscuous mode [ 39.826969][ T3860] veth1_macvtap: entered promiscuous mode [ 39.837318][ T3860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.847827][ T3860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.857759][ T3860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.868244][ T3860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.878188][ T3860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.888729][ T3860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.900668][ T3860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.911168][ T3860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.921772][ T3860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.931671][ T3860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.942173][ T3860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.952068][ T3860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.962619][ T3860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.973718][ T3860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.983325][ T3860] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.992177][ T3860] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.001080][ T3860] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.009854][ T3860] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0