last executing test programs:

2.722092251s ago: executing program 0 (id=26):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
syz_read_part_table(0x5be, &(0x7f00000005c0)="$eJzs2z9o02kYB/AnekFQOBcnh8M6OLkojmawkkRFIUS7iIOCImKmCEKEgKCDZlCaoXTsUgpZ+mdqmqHD0dJC51I69Ch06HS0S6FLf0ev7+3t9Q8Inw/8ePK+7zd58gy/8Q1+aefi7yzLchGRXTj6twc6xdLDa5V71WcRuXgREX1//j65f5JLif9+9Xpar6X16MjF3vftB/nO6tOdGy/nWufS+ef0XBrrDhx7OE7deGH+8pev9fKPRuHdSrm58W156cnEVrHafdxqTz7K33+dcgup/pbqh2jEp3gfr6IWtXgT9RPqP9xZv7V3tdyZfnt3t9T7OXs75SrHnPOw/T/2DT5vN/tvTl0ZutOYWaxunj/I1f7H2wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNkbL8xf/vK1Xv7RKLxbKTc3vi0vPZnYKla7j1vtyUf5+69TbiHVLMuy/fohGvEp3serqEUt3kT9hPoPd9Zv7V0td6bf3t0t9X7O3k65yvFHPVT/j32Dz9vN/ptTV4buNGYWq5vnD3K1C6f0BwAAAAAAAAAAAAAAAAAAACAiiqWH1yr3qs8icvEiIrp/9P971T9L991zKXc9fVhL+6MjF3vftx/kO6tPd268nGv9lfY/p+fSWHfg7KfhqP4JAAD//9Dsmb8=") (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) (async, rerun: 64)
io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) (rerun: 64)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000217100000001010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000016d8ce4db711d5e46c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e30000000000000000000000014000100677265e52ea619052f9c08000000040008000140000000005c000000180a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626f6e64300000000000000000000000140001006970766c616e31"], 0x4b0}}, 0x0)

2.5350433s ago: executing program 0 (id=28):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x2a8, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x3, 0x2, 0x0, 0x1], 0x4, 0x1}, {0x3, [0x6, 0x2, 0x5, 0x7, 0x6, 0x2], 0x2}}}}, {{@uncond, 0x0, 0xb8, 0x118, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x9c, 0x1}}, @common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="5d8822c32bfd", 0x7, 0x8, [0x10, 0x16, 0x22, 0x24, 0x2e, 0x37, 0x2f, 0x3d, 0x4, 0x7, 0x2a, 0x3c, 0x24, 0x8, 0xa, 0xe], 0x1, 0x1, 0xffffffffffffa67f}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3d}, @multicast2, 0xff000000, 0xff, 'veth0_to_hsr\x00', 'gretap0\x00', {0xff}, {}, 0x84, 0x2, 0x85f71f1e0ce46d3}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x3}, {0xffffffffffffffff, 0x1, 0x1}, 0xfffffff7, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x240140c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
poll(&(0x7f0000000000)=[{r1, 0x4002}], 0x1, 0xef)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000300000000000005000600ff4700000a004e220000000000000000"], 0xa0}}, 0x0)
close(r1)
syz_clone(0x4010e000, 0x0, 0x0, 0x0, 0x0, 0x0)

2.50771173s ago: executing program 2 (id=30):
r0 = socket(0xa, 0x3, 0x3a)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000008c0)={{{@in=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000500)=0xe8)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="dd506e1a", @ANYRES16=0x0, @ANYBLOB="00012abd7000fddbdf250900000040000180060004004e210000080009001e00000014000300fc020000000000000000000000000000080005000100000008000b0073697000060001000a000000340002800800090004000000080007004109000006000f000000000006000e004e21000008000800ffff000008000600b7000000"], 0x88}}, 0x4000)
quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000902, r2, &(0x7f0000000480))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
r6 = socket$netlink(0x10, 0x3, 0x5)
sendmsg$nl_generic(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="380000001800290200000000000000000200000008000000000000001c00098008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\b\x00+\x00', @ANYRES32=0x0, @ANYBLOB="91eeecbb7ec2643de5399c1a5df1f0650b59cf8f72b92fbdcfe995e9145f1aaf45a4ceb1f3fd83d61bb55d01e740395b008d6393085066a907c8919e4007da136d53dd41643c3ecb3f2b6e5266ce5793e7a6b14f2f29fd4f30b89172909522415e4a4b53872c289473e0701a6d1be6a9fe0d6ada697298c2efc9c12a8101d012f7f67094b911ff18b58414604027b1b5e3ffe429670fb5e5ee4ead82d6275df05ce08f85426ba085d31b7905f69528f392a92f097e71f1154a"], 0x38}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x48)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3040000000080005400000000c08000640ffffff00080003"], 0xe8}}, 0x0)
r8 = getpgid(0xffffffffffffffff)
prlimit64(r8, 0x1, &(0x7f0000000540)={0xffffffffffffb8f7, 0x9}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0)
r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r9, 0x40103d0b, &(0x7f00000001c0)={0x101, 0x4})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x3, 0x1}, 0xc)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0)

2.311009299s ago: executing program 2 (id=38):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3, 0xffffffffffffffff, {}, 0xfe}, 0x18) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r4}, 0x10)
bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r3, 0x3, {0x1, 0x0, 0x4}, 0xfd}, 0x18) (async)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1)

2.212243159s ago: executing program 2 (id=41):
pause()
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = syz_open_dev$loop(&(0x7f0000000180), 0x28, 0x80000)
ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000640)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0x3, 0x453, &(0x7f0000000cc0)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xc, 0x0, 0x7ffc1ffb}]})
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
link(&(0x7f0000000200)='./file1\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000840)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', <r7=>0x0})
sendto$packet(r5, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14)

2.179895499s ago: executing program 4 (id=42):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0)
write(r5, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)
syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x4}}}}}}}, 0x0)
listen(r2, 0xfff)
syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000006340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd608a35f200140600fe8000000000000000000000000000bbfe8000000400000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5007000090780000"], 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r7, @ANYRESOCT=r7, @ANYRES8=r7, @ANYRES32=r1], 0x48)
sendmmsg$inet6(r6, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0)

2.136692339s ago: executing program 4 (id=43):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4d0, &(0x7f00000002c0)="$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")

1.865590347s ago: executing program 4 (id=44):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0)
write(r5, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)
syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x4}}}}}}}, 0x0)
listen(r2, 0xfff)
syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000006340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd608a35f200140600fe8000000000000000000000000000bbfe8000000400000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5007000090780000"], 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=r7, @ANYRES8=r7, @ANYRES32=r1], 0x48)
sendmmsg$inet6(r6, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0)

1.864988577s ago: executing program 0 (id=46):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x9, 0x8, 0xe, 0x1ce}, {0x3, 0x1, 0x7, 0x100}]})
setpriority(0x1, 0x0, 0x7)

1.771502507s ago: executing program 0 (id=48):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000003, 0x0, @perf_bp={0x0, 0x764922f6ef795283}, 0x4208, 0x0, 0x9, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0xff0f}], 0x1, 0x0, 0x0, 0x500}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000485c001b838d620080ff0000"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='neigh_create\x00', r6}, 0x18)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.kill\x00', 0x275a, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10, 0x0, 0x7}, 0x18)
write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a)
ioctl$FS_IOC_RESVSP(r9, 0x4030582a, &(0x7f0000000300)={0x113e, 0x0, 0x0, 0x10000})
bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
listen(r8, 0x1ff)
r11 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="0242891a60f2ddca86bd7000fcdbdf25"], 0x10}}, 0x40)
connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10)

1.762087467s ago: executing program 4 (id=49):
syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, 0x0, &(0x7f0000000600)=<r0=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
r1 = io_uring_setup(0x47ba, 0x0)
io_uring_enter(r1, 0x0, 0x0, 0xf, &(0x7f0000000000), 0x18)
syz_io_uring_submit(0x0, r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000000), 0x1, 0x457, &(0x7f0000000700)="$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")
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) (fail_nth: 7)

1.761790497s ago: executing program 3 (id=50):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$kcm(0x29, 0x5, 0x0)
sendmmsg$inet(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, 0x0, 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}], 0x2, 0x0)
close(r1)

1.730976437s ago: executing program 3 (id=51):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r2}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040000)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xd, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48855}, 0x0)

1.682065467s ago: executing program 3 (id=52):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00'})
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000000), 0x10, &(0x7f0000000140)={&(0x7f0000001c40)=ANY=[@ANYBLOB="01000000370300"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES16=r0, @ANYRES64=0x2710, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'dvmrp1\x00', {0xff}}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x248)
getsockopt$MRT6(r2, 0x29, 0xd0, 0x0, &(0x7f0000000040))

1.596072166s ago: executing program 3 (id=53):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0)
write(r5, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)
syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x4}}}}}}}, 0x0)
listen(r2, 0xfff)
syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000006340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd608a35f200140600fe8000000000000000000000000000bbfe8000000400000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5007000090780000"], 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r7, @ANYRESOCT=r7, @ANYRES8=r7, @ANYRES32=r1], 0x48)
sendmmsg$inet6(r6, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0)

1.565721106s ago: executing program 3 (id=54):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x1, @loopback, 0x6592}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x31b52000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil)
brk(0x20001000)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket(0x10, 0x803, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
getrlimit(0x5, 0x0)
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, 0x0)
socket(0x400000000010, 0x3, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x61)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000000)=0x56, 0x4)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)

1.353974726s ago: executing program 2 (id=56):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) (async)
r3 = socket(0x10, 0x803, 0x0)
ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f00000001c0)={0x3, 0x0, "f7e59f", 0x4, 0x7}) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYRESDEC=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000480), &(0x7f00000003c0)=r5}, 0x20)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r7, 0x5608, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x29, 0xc, 0x99, 0x8, 0x14, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x80, 0x2}})
r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r9, &(0x7f00000001c0)='t', 0x1)
sendfile(r9, r8, 0x0, 0x3ffff) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESDEC=r0, @ANYBLOB="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", @ANYRES32=r5, @ANYRES32=r6, @ANYRES64=r0], 0x50) (async)
r10 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r10, &(0x7f0000000180)={0x28, 0x0, 0x2710, @local}, 0x10)
connect$vsock_stream(r10, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r11, &(0x7f00000001c0)=ANY=[], 0x118) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0)
getsockname$packet(r10, &(0x7f0000000340)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x30000000) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x1}, {}, 0x0, 0x0, 0x20}}, @TCA_TBF_BURST={0x8, 0x6, 0x7fffffff}]}}]}, 0x60}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}}}, 0x24}}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="fffffffffffdffffffffffff86dd6000000000383a00fe8000000000000000000000000000aaff02000000000000000000000000000102009078000007d1608cb02b00002f0000000000000000000000000000000001fc0200000000000000000000000000020000040000000000"], 0x0)

1.232330005s ago: executing program 2 (id=58):
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40eb, 0x0, r2, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000580))

1.231594795s ago: executing program 2 (id=59):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]})
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10400, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000840)="$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")
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmmsg$inet(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000340)="08bf203c6d66c7bccd026b0dbaa9052e4df65a76e0a84a46b5679ea9e618bcfd4acb63fc4699e2bfc567257377c30e426ace4b2aa31513cfa32de96de32d3e07ac409919ed7b52e9f2", 0x49}, {&(0x7f00000003c0)="d6ce890462af0aa7d1aa134728796cb00f5246b6f9c676d563a24aadedb046624255859353d030bd528ed9294682d35ec49ba8824369e46721d6cb03c886df55210b65b88baf327a9ad894eb6ae59fadcd3b3304ba2e7dc4e1296a3b60d18d0bb061fe0212e7149c7236b4b30a9a4ca7fd7ea1e091547783e4e9436554d07758eb4d56e6824ddb7213ef9c3fb31f5a1995588be82803d28b592dbab1ab9462169cf4d12f45dc7e2aebb80e701c096a34ad29e274127efde797e2fbc1ae48b07d40a9072522c0503fbabf3622197d17e51db25dbefcf5dd5cc00bd2be5b98d8138e4fcd", 0xe3}, {&(0x7f0000000180)="50e184898caa464bd1b1b431dc642d03e7f4cdccdf9f5d191e3daff6d88caac92997b81208a532d95d53cfdb2cf7dfae808acf2f2ffa6672ca1f1a5dda54c219dd706f01304d1c23d74c502c29486714100e3e73ccad194506b1012f05aa150b7985b3a5327c82c27e281b4ed52da0be31875bd65b42e225", 0x78}, {&(0x7f0000000500)="92f94b31aaeabb736ce27cd3fc40b5b0be47d843c8d0857751862577725ab0d47e6190596a38df1482f9d71a7892093ed4bf78da94e912a49f1dd94dff1f02b74e5e7063bc3e5f5accb49523acfd7aeec684e858da6b10dbca5213b1ffb31389654416daa3170c503612a6a7c22fa3413fd2422812e6bf687f5565fea712a8355dfa76c2b3b3e8eb3bbff248224f30dcb721056a86f1e9582e6f9937e5a5fae7185b72ef8e78745aabd5d20f6cf7520e026a85762e31b09b2e848a92d6", 0xbd}, {&(0x7f00000005c0)="4d0dc480f4bd1b7fb74a212db4273a24cd31f9e7bdf4e66aab0bc18239e551b8238f53eabadb70cdacfa357c2d0deec828d1c645001dbc79c638751920a554f6a45338dcaa6602326f1d83bb4fd52cc804", 0x51}, {&(0x7f0000000240)}, {&(0x7f0000000ac0)="46907e5caefda7b0912b46d66b5126fbf5939c67771f1b1bf19725558f0484f9ae05bf088558c0a801c045227a953e0d16a5ec6b87ab38ec25aee667e1e8b1dda1679f8ba2a2195223ca8d6df0ec760f57566c841ac0ea38fb16288d46c76dec70d1519e07aabb676cff0b09b95d517e265175a5ba05c8b589f111f872379f7970f655520c53eb9a839587bd57d2afa83cac4b574f9a6abce4a1b47b8f6f97d5cf816b6a4e7674742f229b32e75d353531626984f6866ef08aa2590a0cef18ef4f8e0c35f30466b0af357ebaaeb982c496e0fd9311affcd34e512716b0", 0xdd}], 0x7}}], 0x1, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd00383a00fe8000000000000000000000000000caffecff0000000000000000000000000102009078000000006001b02b00006c0000000000000000000000000000000001fe8000000000000000000000000000aa000004000000000000000000"], 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r3=>0x0})
r4 = socket$can_raw(0x1d, 0x3, 0x1)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bind$can_raw(r4, &(0x7f0000000000)={0x1d, r3}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@getchain={0x24, 0x11, 0x1, 0x4, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}}, 0x24}}, 0x40044)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6gre0\x00', <r6=>0x0, 0x2f, 0x7, 0x9, 0x3, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x80, 0x8000, 0x5, 0xa}})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000004c0)=<r7=>0x0, &(0x7f0000000500)=0x4)
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x4}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000004)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xc4, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24000050}, 0x800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000004900cfd42f488b76a1b700000abef900", @ANYRES32, @ANYBLOB="00000000080002000000000014"], 0x38}}, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000080))
socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0))

1.143179315s ago: executing program 1 (id=60):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000080)=0x4)
write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
getsockopt$llc_int(r0, 0x10c, 0x6, 0x0, &(0x7f0000000000))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000100)=""/165)
setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0x3, 0x4)
setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f00000000c0)=0xfa0, 0x4)
getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000300))

1.127944825s ago: executing program 1 (id=61):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x24, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0)
sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)

975.735764ms ago: executing program 3 (id=62):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x2000000000000138)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0x700, 0x0, 0x0)

921.109574ms ago: executing program 1 (id=63):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

800.159063ms ago: executing program 1 (id=64):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
timer_delete(0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000500)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_procs(r6, &(0x7f0000000380)='tasks\x00', 0x2, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000005c0)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x1c, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x1c, 0x0, @gue={{0x2, 0x0, 0x2, 0x75, 0x100, @val=0x80}, "b36c92abce83cd95ef534e0b"}}}}}}}, 0x0)

744.701173ms ago: executing program 0 (id=65):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$kcm(0x29, 0x5, 0x0)
sendmmsg$inet(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00), 0x0, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}], 0x2, 0x0)
close(r1)

707.039433ms ago: executing program 1 (id=66):
syz_io_uring_setup(0x24fb, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@sysvgroups}, {@usrjquota}]}, 0x3, 0x467, &(0x7f0000002280)="$eJzs3M9rHFUcAPDvzCb93SbWKrRWjRYx+CNp0qo9eFEUPFQU9FCPcZOW0m0jTQRbio0i9SJIQc/iUfAv8OZF1JPgVe9SKBqEVk+R2Z1JN9vdZNNsdmv384Fp39t5M/O+O+/tvJm3mwD61kj2TxKxKyJ+i4ihWnZlgZHafzcXL5X/WbxUTmJp6a0/k2q5G4uXykXRYrudeWY0jUg/SfKDxNb63c5duHhmqlKZOZ/nx+fPvjc+d+His6fPTp2aOTVzbvLYsaNHJl54fvK5tuJI1lifxXXjwIezB/e/9s7V18snrr7707fZNrvy9fVxdMpIFvhfS1WN657o9MF6bHddOhnoYUVYl1JEZKdrsNr/h6IUt07eULz6cU8rB2yq7Nq0tfXqhSXgHpbE2mX+7kZFgC4rLvTZ/W+xdGnocVe4/lLtBiiL+2a+1NYMRJqXGWy4v+2kkYg4sfDvV9kSm/QcAgCg3mflL4/HM83Gf2k8WFduTz6HMhwR90XE3oi4PyL2RcQDEVnZxiFlW0Ya8rePf9JrdxhaW7Lx34v53NbK8V8x+ovhUp7bXY1/MDl5ujJzOH9PRmNwa5afWOUY37/y6+et1tWP/7IlO34xFszrcW2g4QHd9NT8VHVQ2gHXP4o4MNAs/mR5JiCJiP0RcWB9u95TJE4/9c3B7QebF1o7/lV0YJ5p6euIJ2vnfyEa4i8kq89Pjm+Lyszh8aJV3O7nX6682er4LeLfsvHI2pOd/x0r239jkeGkfr52bv3HuPL7py3vae60/W9J3q6el+KN+mBqfv78RMSW5Hg1v+L1yVvbFvmifBb/6KHm/X9vvk12nIciImvCD0fEIxHxaF73xyLi8Yg4tEr8P76cJ5q01w21/w7I4p9u+vm33P4bzv/6E6UzP3xX7GzbuuPPzv/Ramo0f6X6+beGdiu40fcPAAAA/g/S6nfgk3RsOZ2mY2O17/Dvix1pZXZu/umTs++fm659V344BtPiSddQ3fPQiWQh32MtP5k/Ky7WH8mfG39R2l7Nj5VnK9M9jh363c4W/T/zR6nXtQM2XbN5tMmuTUEBvdTY/9OV2ctvdLMyQFf5vTb0rzX6f9qtegDd5/oP/atZ/7/ckDcXAPcm13/oX/o/9C/9H/qX/g99aSO/65fo50Sklcr0tojVCxd/EOjuqLNE+4lefzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0xn8BAAD///xQ9VA=")
setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0], 0xff27, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000e1ff00002951a73c6ff9e81000e56fbe07c60d7cebd6e357c9caec73f3111c3b1dfdd990acc8407457bb3dd2a098ddf51695c2be1b4e20fb06ca08761244f5de851b88dc", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x18)
syz_emit_ethernet(0x86, &(0x7f00000007c0)={@link_local, @broadcast, @void, {@llc_tr={0x11, {@snap={0x1, 0x1, 'u', 'z)[', 0x883e, "a2d3a9e46621371c2c2627f5483a2415fe43c112de9c0e9bd7a599161a22907b54bf362cb4fbc8896ebfe262275a58652875f78d3d756e7cb6f134c8097c723548a48f5d84f7adf63331616460b68d2f2479a6aba9d452d0d73fd9f6840a1aa6835f70b9912dfcae65cc0ba301c63c98"}}}}}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x44000, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffffff54ac5b5149fd000d040000aad4bcb5d0d10e6fb1c03705000033a4f4b853fecd4a9fadef9f000000b00f482841f2748abf0e775a6ab773930a84527d5498ae35c9a3d30d6b253079b4712c7b365ed721eee6be64cc5b995d401ba67e8c66d88c28943629ef2c978ed68d375744bef8988b9e14d1a43fe2fb5e9de8c6b3049198bb5b2523258a5719aa474788297174ddfcac94bb439d2034c1a229120c62faf683023b78"], 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f00000001c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xfffffffffffffd2a, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00ed1dfca7159af6", @ANYRES16=0x0, @ANYBLOB="00032bbd7000fedbdf250b000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000010)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x18)
r7 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8<X\xfa\xdd\x8a6\xa1\x82\xf7r\xd8z\x85\x8do\xa5\xed\xd4\xbc8\xfb\x16\x8e\x8b-W\xd4\xc9\xbc\x94CR[Du8U^\xf2tl8\xfe\xd0\x94\xfe\xf5\x1c+\x00U\te\xfa6\xca\xb9\xb4Q\xd9\xee\r6\x861h{\xc7z\'F\xc7\x91\x06x\xe1`\xf1:\xbd+\xd5\f\xb2\xce\xa4\x06\x90\x90\x9b\x1d\xcaa\xf7\x8f\x9e\x80\x93\xafT\xdfl\xec\xc6\x8e\x96', 0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="000000fe1e43b8b0672f5d800b0001006264dc0895f7c3cc3960270004000000"], 0x44}}, 0x4000090)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@gettclass={0x24, 0x2a, 0x10d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, {0x81ff}}}, 0x24}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x4, 0x700, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'sit0\x00'}}]}, 0x38}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0002}]})
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000bc0)=ANY=[@ANYBLOB="2550b1c218e846325c690dc1dbca80daf4b27b9b11d8f6c762bbd12436473860b635370cd40ff549a2821188c2004c93c421bbbab6127d3e3739741f5dccfb5b718b34d8dce9460fb29e2072a1a88f94af04813a2c131d83648f4d3b1f39b2a24f7bfd05e66d9c3747c8375ef017a378baa2bf9737cce8d6283aff6145b0213e6a92680980c184f3ba409fe2e6882f136d", @ANYRES8=r4, @ANYBLOB="0f00000000200000", @ANYRES32, @ANYRES32=r7, @ANYBLOB="88bd1bf8b338124d71e5ab0b2f7d189e2db9c1de82bddf3db38898794372cd2be08b9ba740e8bf586456a5e57b68bb5b815500029e00"/73, @ANYRES64=r6], 0x20)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000fdffffff03000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00800000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0)
connect$inet6(r5, &(0x7f0000000500)={0xa, 0x4e24, 0x8, @remote, 0x7}, 0x1c)
r12 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r12, &(0x7f0000001240)=""/102400, 0x200000, 0x0)

704.820943ms ago: executing program 0 (id=67):
pause()
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = syz_open_dev$loop(&(0x7f0000000180), 0x28, 0x80000)
ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000640)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0x3, 0x453, &(0x7f0000000cc0)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xc, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
link(&(0x7f0000000200)='./file1\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000840)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', <r5=>0x0})
sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14)

387.907452ms ago: executing program 4 (id=68):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xc, 0x0, 0x7ffc1ffb}]})
setpriority(0x1, 0x0, 0x7) (fail_nth: 10)

357.024791ms ago: executing program 1 (id=69):
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40eb, 0x0, r2, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000580))

0s ago: executing program 4 (id=70):
r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000010, &(0x7f0000000a80), 0x0, 0x535, &(0x7f0000000ac0)="$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")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000000e0601080000000000000000050000060500010007000000090002007379"], 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000014)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="a5fdad88402000006000128008000100677265005400028006001800080000000800140001000000050017000400000008001500330d0e00060011004e2100000500090004000000060010004e240800050008000800000006000f"], 0x8c}, 0x1, 0x0, 0x0, 0x404c804}, 0x0)
r3 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='sys_enter\x00', r5, 0x0, 0x1}, 0x18)
open(0x0, 0x40, 0x0)
ustat(0x1, 0x0)
gettid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x74)
syz_emit_ethernet(0x46, &(0x7f0000000800)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd60df60c676100000fe880000000000000000000000000001ff0200000000000000000000000000012c000000000000000001000000000000"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
truncate(&(0x7f0000000000)='./file0\x00', 0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8a, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEV(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9cf066b7", @ANYRES16=r3, @ANYBLOB="000025bd7000fddbdf251b00000010002e800c000400000000000000000008000300", @ANYRES32=r7, @ANYBLOB="10002e800c0004000203aaaaaaaaaaaa0c00060002000000000000000c000600020000000000000010002e800c00040000000000000000000c00060003000000000000000c000600030000000000000010002e800c0004000203aaaaaaaaaaaa10002e800c0004000200aaaaaaaaaaaa"], 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x20004000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r3, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4080014)
syz_emit_ethernet(0x86, &(0x7f00000001c0)=ANY=[@ANYBLOB="591a1d9a2bdb0180c2250000080045140078000000000029907800880000e00000010000000000649078200200000000000000000000bfd8a5dd2002c02142c4391145badd28fd7b0ffc0e896f38da000000000000000bb10000085b2e000000000000000000bb3b6900000000000000a70864abf1f0524a72fc460b8cd26e095f24ab642591"], 0x0)
syz_usb_connect$uac1(0x0, 0xa1, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109028f0003010000000904000000010100000a24010000000201020b24040000000000000000090401000001020000090401010101020000072401000000000c2402"], 0x0)

kernel console output (not intermixed with test programs):



syzkaller
syzkaller login: [   18.105236][   T29] kauditd_printk_skb: 64 callbacks suppressed
[   18.105252][   T29] audit: type=1400 audit(1734497392.527:76): avc:  denied  { transition } for  pid=3178 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   18.109327][   T29] audit: type=1400 audit(1734497392.527:77): avc:  denied  { noatsecure } for  pid=3178 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   18.112297][   T29] audit: type=1400 audit(1734497392.537:78): avc:  denied  { write } for  pid=3178 comm="sh" path="pipe:[2050]" dev="pipefs" ino=2050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   18.116099][   T29] audit: type=1400 audit(1734497392.537:79): avc:  denied  { rlimitinh } for  pid=3178 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   18.118925][   T29] audit: type=1400 audit(1734497392.537:80): avc:  denied  { siginh } for  pid=3178 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   20.960360][   T29] audit: type=1400 audit(1734497395.397:81): avc:  denied  { read } for  pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
Warning: Permanently added '10.128.0.85' (ED25519) to the list of known hosts.
[   26.425995][   T29] audit: type=1400 audit(1734497400.857:82): avc:  denied  { mounton } for  pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   26.427272][ T3287] cgroup: Unknown subsys name 'net'
[   26.448727][   T29] audit: type=1400 audit(1734497400.857:83): avc:  denied  { mount } for  pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.476118][   T29] audit: type=1400 audit(1734497400.887:84): avc:  denied  { unmount } for  pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.656389][ T3287] cgroup: Unknown subsys name 'cpuset'
[   26.662603][ T3287] cgroup: Unknown subsys name 'rlimit'
[   26.792927][   T29] audit: type=1400 audit(1734497401.217:85): avc:  denied  { setattr } for  pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   26.818430][   T29] audit: type=1400 audit(1734497401.217:86): avc:  denied  { create } for  pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.835421][ T3291] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   26.838942][   T29] audit: type=1400 audit(1734497401.217:87): avc:  denied  { write } for  pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.867882][   T29] audit: type=1400 audit(1734497401.217:88): avc:  denied  { read } for  pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   26.882042][ T3287] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   26.888124][   T29] audit: type=1400 audit(1734497401.227:89): avc:  denied  { mounton } for  pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   26.921769][   T29] audit: type=1400 audit(1734497401.227:90): avc:  denied  { mount } for  pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   26.945193][   T29] audit: type=1400 audit(1734497401.277:91): avc:  denied  { relabelto } for  pid=3291 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   28.186501][ T3303] chnl_net:caif_netlink_parms(): no params data found
[   28.202032][ T3300] chnl_net:caif_netlink_parms(): no params data found
[   28.253278][ T3298] chnl_net:caif_netlink_parms(): no params data found
[   28.311923][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.319086][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.326397][ T3300] bridge_slave_0: entered allmulticast mode
[   28.332713][ T3300] bridge_slave_0: entered promiscuous mode
[   28.341752][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.348863][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.356159][ T3300] bridge_slave_1: entered allmulticast mode
[   28.362605][ T3300] bridge_slave_1: entered promiscuous mode
[   28.380321][ T3305] chnl_net:caif_netlink_parms(): no params data found
[   28.397831][ T3299] chnl_net:caif_netlink_parms(): no params data found
[   28.418033][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.425115][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.432550][ T3303] bridge_slave_0: entered allmulticast mode
[   28.439009][ T3303] bridge_slave_0: entered promiscuous mode
[   28.445779][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.452898][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.460088][ T3303] bridge_slave_1: entered allmulticast mode
[   28.466481][ T3303] bridge_slave_1: entered promiscuous mode
[   28.488947][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.514398][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.534285][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.553122][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.560304][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.567556][ T3298] bridge_slave_0: entered allmulticast mode
[   28.573886][ T3298] bridge_slave_0: entered promiscuous mode
[   28.581253][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.590398][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.597508][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.604735][ T3298] bridge_slave_1: entered allmulticast mode
[   28.611139][ T3298] bridge_slave_1: entered promiscuous mode
[   28.643184][ T3300] team0: Port device team_slave_0 added
[   28.667974][ T3300] team0: Port device team_slave_1 added
[   28.673855][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.680948][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.688168][ T3299] bridge_slave_0: entered allmulticast mode
[   28.694786][ T3299] bridge_slave_0: entered promiscuous mode
[   28.701899][ T3303] team0: Port device team_slave_0 added
[   28.708673][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.727676][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.734806][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.742255][ T3299] bridge_slave_1: entered allmulticast mode
[   28.748579][ T3299] bridge_slave_1: entered promiscuous mode
[   28.755504][ T3303] team0: Port device team_slave_1 added
[   28.762313][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.771618][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.778809][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.786009][ T3305] bridge_slave_0: entered allmulticast mode
[   28.792623][ T3305] bridge_slave_0: entered promiscuous mode
[   28.817634][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.824713][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.831895][ T3305] bridge_slave_1: entered allmulticast mode
[   28.838335][ T3305] bridge_slave_1: entered promiscuous mode
[   28.844571][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.851587][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.877813][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.907320][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.914290][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.940427][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.955863][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.965179][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.972229][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.998180][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.009401][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.016400][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.042349][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.053948][ T3298] team0: Port device team_slave_0 added
[   29.066567][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.076663][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.093493][ T3298] team0: Port device team_slave_1 added
[   29.104806][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.136216][ T3300] hsr_slave_0: entered promiscuous mode
[   29.142213][ T3300] hsr_slave_1: entered promiscuous mode
[   29.148925][ T3299] team0: Port device team_slave_0 added
[   29.175473][ T3303] hsr_slave_0: entered promiscuous mode
[   29.182043][ T3303] hsr_slave_1: entered promiscuous mode
[   29.188303][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.195906][ T3303] Cannot create hsr debugfs directory
[   29.202048][ T3299] team0: Port device team_slave_1 added
[   29.213019][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.219996][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.246168][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.257636][ T3305] team0: Port device team_slave_0 added
[   29.263647][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.270669][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.296593][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.331711][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.338731][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.364778][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.376529][ T3305] team0: Port device team_slave_1 added
[   29.393507][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.400517][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.426472][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.462794][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.469804][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.495967][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.507352][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.514365][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.540300][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.583956][ T3299] hsr_slave_0: entered promiscuous mode
[   29.590146][ T3299] hsr_slave_1: entered promiscuous mode
[   29.596131][ T3299] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.603705][ T3299] Cannot create hsr debugfs directory
[   29.613526][ T3298] hsr_slave_0: entered promiscuous mode
[   29.619833][ T3298] hsr_slave_1: entered promiscuous mode
[   29.626261][ T3298] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.634003][ T3298] Cannot create hsr debugfs directory
[   29.669767][ T3305] hsr_slave_0: entered promiscuous mode
[   29.675932][ T3305] hsr_slave_1: entered promiscuous mode
[   29.682040][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.689667][ T3305] Cannot create hsr debugfs directory
[   29.793792][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   29.815574][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   29.835044][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   29.858388][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   29.880954][ T3300] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   29.889646][ T3300] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   29.898465][ T3300] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   29.907234][ T3300] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   29.932082][ T3298] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   29.944751][ T3298] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   29.962040][ T3298] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   29.971109][ T3298] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   29.996877][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   30.017736][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   30.029063][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   30.039240][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   30.067231][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   30.084754][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   30.093545][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   30.109231][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   30.133304][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.145758][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.161402][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.179551][ T3303] 8021q: adding VLAN 0 to HW filter on device team0
[   30.191202][ T3298] 8021q: adding VLAN 0 to HW filter on device team0
[   30.200791][ T3300] 8021q: adding VLAN 0 to HW filter on device team0
[   30.212788][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.219897][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.229316][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.236402][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.258373][ T2753] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.265500][ T2753] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.274262][ T2753] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.281348][ T2753] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.301803][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.308974][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.318238][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.325292][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.373168][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.400766][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.414311][ T3299] 8021q: adding VLAN 0 to HW filter on device team0
[   30.446576][ T2753] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.453681][ T2753] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.474298][ T2753] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.481422][ T2753] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.499155][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.509645][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.553672][ T3305] 8021q: adding VLAN 0 to HW filter on device team0
[   30.562787][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.577192][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.594958][ T2753] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.602090][ T2753] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.615098][ T2753] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.622668][ T2753] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.662468][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   30.673036][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.709313][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.744414][ T3298] veth0_vlan: entered promiscuous mode
[   30.782828][ T3298] veth1_vlan: entered promiscuous mode
[   30.810519][ T3303] veth0_vlan: entered promiscuous mode
[   30.819784][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.831891][ T3298] veth0_macvtap: entered promiscuous mode
[   30.840108][ T3298] veth1_macvtap: entered promiscuous mode
[   30.849343][ T3303] veth1_vlan: entered promiscuous mode
[   30.860253][ T3300] veth0_vlan: entered promiscuous mode
[   30.882142][ T3300] veth1_vlan: entered promiscuous mode
[   30.895261][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.914318][ T3303] veth0_macvtap: entered promiscuous mode
[   30.929659][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.937800][ T3299] veth0_vlan: entered promiscuous mode
[   30.945657][ T3303] veth1_macvtap: entered promiscuous mode
[   30.956658][ T3298] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.965477][ T3298] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.974183][ T3298] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.983077][ T3298] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.003534][ T3299] veth1_vlan: entered promiscuous mode
[   31.011253][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.021760][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.033036][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.048928][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.059515][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.070327][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.097729][ T3300] veth0_macvtap: entered promiscuous mode
[   31.105223][ T3300] veth1_macvtap: entered promiscuous mode
[   31.112726][ T3303] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.113117][ T3298] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   31.121560][ T3303] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.121653][ T3303] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.153668][ T3303] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.171217][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.181767][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.191704][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.202166][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.212758][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.221346][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.231833][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.241701][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.252277][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.272811][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.298859][ T3300] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.307692][ T3300] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.316449][ T3300] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.325292][ T3300] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.345080][ T3299] veth0_macvtap: entered promiscuous mode
[   31.367719][ T3305] veth0_vlan: entered promiscuous mode
[   31.374080][ T3299] veth1_macvtap: entered promiscuous mode
[   31.396988][ T3305] veth1_vlan: entered promiscuous mode
[   31.427678][ T3435] mmap: syz.2.3 (3435) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   31.428779][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.449988][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.459854][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.470313][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.480156][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.482591][ T3442] netlink: 'syz.0.1': attribute type 1 has an invalid length.
[   31.490609][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.490868][   T29] kauditd_printk_skb: 79 callbacks suppressed
[   31.490884][   T29] audit: type=1326 audit(1734497405.857:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3433 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7faeac515d29 code=0x7ffc0000
[   31.537462][   T29] audit: type=1326 audit(1734497405.887:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3433 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac515d29 code=0x7ffc0000
[   31.538016][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.560578][   T29] audit: type=1326 audit(1734497405.897:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3433 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faeac515d29 code=0x7ffc0000
[   31.586863][ T3305] veth0_macvtap: entered promiscuous mode
[   31.591123][   T29] audit: type=1326 audit(1734497405.897:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3433 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac515d29 code=0x7ffc0000
[   31.617397][ T3305] veth1_macvtap: entered promiscuous mode
[   31.619980][   T29] audit: type=1326 audit(1734497405.897:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3433 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7faeac515d29 code=0x7ffc0000
[   31.637822][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.648810][   T29] audit: type=1400 audit(1734497405.907:176): avc:  denied  { create } for  pid=3439 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   31.659216][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.678366][   T29] audit: type=1400 audit(1734497405.917:177): avc:  denied  { create } for  pid=3439 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   31.688127][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.688146][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.727913][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.727933][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.727944][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.727958][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.729666][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.748906][   T29] audit: type=1326 audit(1734497405.937:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3433 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac515d29 code=0x7ffc0000
[   31.799622][   T29] audit: type=1326 audit(1734497405.937:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3433 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faeac515d29 code=0x7ffc0000
[   31.823005][   T29] audit: type=1326 audit(1734497406.027:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3433 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeac515d29 code=0x7ffc0000
[   31.845799][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.857103][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.866942][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.877463][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.887359][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.897918][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.909372][ T3444] loop3: detected capacity change from 0 to 512
[   31.923361][ T3444] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   31.935768][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.936575][ T3444] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   31.956628][ T3440] gretap1: entered promiscuous mode
[   31.965031][ T3444] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   31.966470][ T3450] FAULT_INJECTION: forcing a failure.
[   31.966470][ T3450] name failslab, interval 1, probability 0, space 0, times 1
[   31.982220][ T3444] EXT4-fs (loop3): 1 truncate cleaned up
[   31.990830][ T3450] CPU: 0 UID: 0 PID: 3450 Comm: syz.2.7 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0
[   31.996931][ T3444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   32.006979][ T3450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[   32.006996][ T3450] Call Trace:
[   32.007011][ T3450]  <TASK>
[   32.024694][ T3444] FAULT_INJECTION: forcing a failure.
[   32.024694][ T3444] name failslab, interval 1, probability 0, space 0, times 1
[   32.029016][ T3450]  dump_stack_lvl+0xf2/0x150
[   32.052601][ T3450]  dump_stack+0x15/0x1a
[   32.056916][ T3450]  should_fail_ex+0x223/0x230
[   32.061624][ T3450]  should_failslab+0x8f/0xb0
[   32.066236][ T3450]  kmem_cache_alloc_noprof+0x52/0x320
[   32.071619][ T3450]  ? posix_lock_inode+0x156/0x2470
[   32.076793][ T3450]  posix_lock_inode+0x156/0x2470
[   32.081765][ T3450]  ? file_has_perm+0x329/0x370
[   32.086559][ T3450]  fcntl_setlk+0x686/0x980
[   32.090996][ T3450]  do_fcntl+0x58b/0xe10
[   32.095291][ T3450]  __se_sys_fcntl+0xbd/0x1b0
[   32.099906][ T3450]  __x64_sys_fcntl+0x43/0x50
[   32.104516][ T3450]  x64_sys_call+0x2129/0x2dc0
[   32.109224][ T3450]  do_syscall_64+0xc9/0x1c0
[   32.113829][ T3450]  ? clear_bhb_loop+0x55/0xb0
[   32.118518][ T3450]  ? clear_bhb_loop+0x55/0xb0
[   32.123231][ T3450]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   32.129271][ T3450] RIP: 0033:0x7faeac515d29
[   32.133787][ T3450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   32.153489][ T3450] RSP: 002b:00007faeaab87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[   32.161932][ T3450] RAX: ffffffffffffffda RBX: 00007faeac705fa0 RCX: 00007faeac515d29
[   32.169944][ T3450] RDX: 0000000020000180 RSI: 0000000000000025 RDI: 0000000000000006
[   32.177977][ T3450] RBP: 00007faeaab87090 R08: 0000000000000000 R09: 0000000000000000
[   32.185962][ T3450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   32.193950][ T3450] R13: 0000000000000000 R14: 00007faeac705fa0 R15: 00007ffd07ddf318
[   32.202058][ T3450]  </TASK>
[   32.205093][ T3444] CPU: 1 UID: 0 PID: 3444 Comm: syz.3.4 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0
[   32.215546][ T3444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[   32.225635][ T3444] Call Trace:
[   32.228918][ T3444]  <TASK>
[   32.231864][ T3444]  dump_stack_lvl+0xf2/0x150
[   32.236552][ T3444]  dump_stack+0x15/0x1a
[   32.240744][ T3444]  should_fail_ex+0x223/0x230
[   32.245437][ T3444]  should_failslab+0x8f/0xb0
[   32.250044][ T3444]  kmem_cache_alloc_noprof+0x52/0x320
[   32.255438][ T3444]  ? getname_flags+0x81/0x3b0
[   32.260132][ T3444]  getname_flags+0x81/0x3b0
[   32.264677][ T3444]  __x64_sys_unlink+0x21/0x40
[   32.269375][ T3444]  x64_sys_call+0x2329/0x2dc0
[   32.274063][ T3444]  do_syscall_64+0xc9/0x1c0
[   32.278574][ T3444]  ? clear_bhb_loop+0x55/0xb0
[   32.283261][ T3444]  ? clear_bhb_loop+0x55/0xb0
[   32.288035][ T3444]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   32.293985][ T3444] RIP: 0033:0x7f3582e45d29
[   32.298445][ T3444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   32.318164][ T3444] RSP: 002b:00007f35814b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
[   32.326593][ T3444] RAX: ffffffffffffffda RBX: 00007f3583035fa0 RCX: 00007f3582e45d29
[   32.334571][ T3444] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180
[   32.342700][ T3444] RBP: 00007f35814b1090 R08: 0000000000000000 R09: 0000000000000000
[   32.350696][ T3444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   32.358683][ T3444] R13: 0000000000000000 R14: 00007f3583035fa0 R15: 00007fffec0cfa88
[   32.366840][ T3444]  </TASK>
[   32.375188][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.385775][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.395648][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.406130][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.415986][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.426487][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.436380][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.446940][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.468138][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.505667][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.509372][ T3299] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.523377][ T3299] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.532254][ T3299] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.541094][ T3299] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.583370][ T3305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.592363][ T3305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.592424][ T3305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.592461][ T3305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.744212][ T3482] FAULT_INJECTION: forcing a failure.
[   32.744212][ T3482] name failslab, interval 1, probability 0, space 0, times 0
[   32.757158][ T3482] CPU: 1 UID: 0 PID: 3482 Comm: syz.4.5 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0
[   32.768020][ T3482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[   32.778098][ T3482] Call Trace:
[   32.781400][ T3482]  <TASK>
[   32.784351][ T3482]  dump_stack_lvl+0xf2/0x150
[   32.788988][ T3482]  dump_stack+0x15/0x1a
[   32.793185][ T3482]  should_fail_ex+0x223/0x230
[   32.797958][ T3482]  should_failslab+0x8f/0xb0
[   32.802661][ T3482]  kmem_cache_alloc_noprof+0x52/0x320
[   32.808062][ T3482]  ? posix_lock_inode+0x156/0x2470
[   32.813282][ T3482]  posix_lock_inode+0x156/0x2470
[   32.818291][ T3482]  ? file_has_perm+0x329/0x370
[   32.823152][ T3482]  fcntl_setlk+0x686/0x980
[   32.827676][ T3482]  do_fcntl+0x58b/0xe10
[   32.831935][ T3482]  __se_sys_fcntl+0xbd/0x1b0
[   32.836566][ T3482]  __x64_sys_fcntl+0x43/0x50
[   32.841416][ T3482]  x64_sys_call+0x2129/0x2dc0
[   32.846187][ T3482]  do_syscall_64+0xc9/0x1c0
[   32.847516][ T3485] loop3: detected capacity change from 0 to 256
[   32.850711][ T3482]  ? clear_bhb_loop+0x55/0xb0
[   32.850743][ T3482]  ? clear_bhb_loop+0x55/0xb0
[   32.866428][ T3482]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   32.872454][ T3482] RIP: 0033:0x7f8e0b2b5d29
[   32.876106][ T3485] FAT-fs (loop3): bogus number of FAT sectors
[   32.876870][ T3482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   32.882957][ T3485] FAT-fs (loop3): Can't find a valid FAT filesystem
[   32.902523][ T3482] RSP: 002b:00007f8e09921038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[   32.902554][ T3482] RAX: ffffffffffffffda RBX: 00007f8e0b4a5fa0 RCX: 00007f8e0b2b5d29
[   32.902569][ T3482] RDX: 0000000020000180 RSI: 0000000000000025 RDI: 0000000000000006
[   32.902584][ T3482] RBP: 00007f8e09921090 R08: 0000000000000000 R09: 0000000000000000
[   32.902599][ T3482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   32.902614][ T3482] R13: 0000000000000000 R14: 00007f8e0b4a5fa0 R15: 00007ffd9416c248
[   32.902679][ T3482]  </TASK>
[   32.982532][    T8] IPVS: starting estimator thread 0...
[   32.988471][ T3484] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[   33.055510][ T3493] loop0: detected capacity change from 0 to 512
[   33.075573][ T3489] IPVS: using max 2112 ests per chain, 105600 per kthread
[   33.085104][ T3493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.104425][ T3499] loop4: detected capacity change from 0 to 512
[   33.111816][ T3493] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   33.123422][ T3499] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.13: corrupted in-inode xattr: invalid ea_ino
[   33.137361][ T3499] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.13: couldn't read orphan inode 15 (err -117)
[   33.149634][ T3499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.175370][ T3499] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz.4.13: deleted inode referenced: 15
[   33.193345][ T3499] IPv4: Oversized IP packet from 127.202.26.0
[   33.225005][ T3504] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[   33.270553][ T3506] SELinux:  Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped).
[   33.327849][ T3501] x_tables: duplicate underflow at hook 1
[   33.420765][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.438212][ T3522] SELinux: syz.2.18 (3522) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   33.598683][ T3533] loop3: detected capacity change from 0 to 512
[   33.612109][ T3530] No such timeout policy "syz1"
[   33.631510][ T3533] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   33.678385][ T3533] EXT4-fs (loop3): 1 truncate cleaned up
[   33.695034][ T3533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.714190][ T3375] IPVS: starting estimator thread 0...
[   33.730948][ T3540] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[   33.778994][ T3540] loop2: detected capacity change from 0 to 512
[   33.805425][ T3541] IPVS: using max 2304 ests per chain, 115200 per kthread
[   33.837880][ T3540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.870326][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.891886][ T3540] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   33.919682][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.011352][ T3548] loop0: detected capacity change from 0 to 2048
[   34.028682][ T3540] x_tables: duplicate underflow at hook 1
[   34.158489][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.169001][ T3495] syz.1.15 (3495) used greatest stack depth: 7328 bytes left
[   34.288059][ T3566] pim6reg: entered allmulticast mode
[   34.338719][ T3583] sit0: entered promiscuous mode
[   34.367793][ T3583] netlink: 'syz.2.38': attribute type 1 has an invalid length.
[   34.375570][ T3583] netlink: 1 bytes leftover after parsing attributes in process `syz.2.38'.
[   34.419184][ T3591] FAULT_INJECTION: forcing a failure.
[   34.419184][ T3591] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   34.432415][ T3591] CPU: 1 UID: 0 PID: 3591 Comm: syz.3.40 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0
[   34.442958][ T3591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[   34.453062][ T3591] Call Trace:
[   34.456389][ T3591]  <TASK>
[   34.459479][ T3591]  dump_stack_lvl+0xf2/0x150
[   34.464260][ T3591]  dump_stack+0x15/0x1a
[   34.468482][ T3591]  should_fail_ex+0x223/0x230
[   34.473207][ T3591]  should_fail+0xb/0x10
[   34.477449][ T3591]  should_fail_usercopy+0x1a/0x20
[   34.482586][ T3591]  _copy_from_user+0x1e/0xb0
[   34.486482][ T3593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3593 comm=syz.4.42
[   34.487205][ T3591]  do_ipv6_getsockopt+0x12d/0x1430
[   34.504569][ T3591]  ? __rcu_read_unlock+0x4e/0x70
[   34.509549][ T3591]  ? avc_has_perm_noaudit+0x1cc/0x210
[   34.515127][ T3591]  ipv6_getsockopt+0x75/0x1e0
[   34.519923][ T3591]  tcp_getsockopt+0xaa/0xe0
[   34.524508][ T3591]  sock_common_getsockopt+0x5b/0x70
[   34.529793][ T3591]  ? __pfx_sock_common_getsockopt+0x10/0x10
[   34.533647][ T3595] loop4: detected capacity change from 0 to 512
[   34.535715][ T3591]  do_sock_getsockopt+0x1ca/0x260
[   34.535751][ T3591]  __x64_sys_getsockopt+0x18c/0x200
[   34.535783][ T3591]  x64_sys_call+0x1288/0x2dc0
[   34.544152][ T3595] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   34.547058][ T3591]  do_syscall_64+0xc9/0x1c0
[   34.570116][ T3591]  ? clear_bhb_loop+0x55/0xb0
[   34.574805][ T3591]  ? clear_bhb_loop+0x55/0xb0
[   34.576782][ T3595] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #2: comm syz.4.43: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   34.579478][ T3591]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   34.598644][ T3595] EXT4-fs (loop4): get root inode failed
[   34.602894][ T3591] RIP: 0033:0x7f3582e45d29
[   34.608719][ T3595] EXT4-fs (loop4): mount failed
[   34.612966][ T3591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   34.637531][ T3591] RSP: 002b:00007f35814b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[   34.645965][ T3591] RAX: ffffffffffffffda RBX: 00007f3583035fa0 RCX: 00007f3582e45d29
[   34.653950][ T3591] RDX: 0000000000000006 RSI: 0000000000000029 RDI: 0000000000000003
[   34.661973][ T3591] RBP: 00007f35814b1090 R08: 0000000020000300 R09: 0000000000000000
[   34.669958][ T3591] R10: 0000000020000440 R11: 0000000000000246 R12: 0000000000000001
[   34.678063][ T3591] R13: 0000000000000000 R14: 00007f3583035fa0 R15: 00007fffec0cfa88
[   34.686058][ T3591]  </TASK>
[   34.702746][ T3599] loop2: detected capacity change from 0 to 512
[   34.731017][ T3599] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.41: corrupted in-inode xattr: invalid ea_ino
[   34.748447][ T3599] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.41: couldn't read orphan inode 15 (err -117)
[   34.763116][ T3598] netlink: 256 bytes leftover after parsing attributes in process `syz.1.39'.
[   34.775908][ T3599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.794696][ T3599] EXT4-fs error (device loop2): ext4_lookup:1817: inode #2: comm syz.2.41: deleted inode referenced: 15
[   34.816777][ T3599] IPv4: Oversized IP packet from 127.202.26.0
[   34.851473][ T3609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3609 comm=syz.4.44
[   34.885354][    C0] hrtimer: interrupt took 28093 ns
[   34.923781][ T3616] loop4: detected capacity change from 0 to 1024
[   34.932750][ T3616] EXT4-fs: Ignoring removed orlov option
[   34.938588][ T3616] EXT4-fs: Ignoring removed nomblk_io_submit option
[   34.993058][ T3616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.036110][ T3625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3625 comm=syz.3.53
[   35.236828][ T3634] syz.3.54[3634] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   35.236899][ T3634] syz.3.54[3634] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   35.284365][ T3634] syz.3.54[3634] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   35.319844][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.371665][ T3642] Zero length message leads to an empty skb
[   35.400460][ T3643] FAULT_INJECTION: forcing a failure.
[   35.400460][ T3643] name failslab, interval 1, probability 0, space 0, times 0
[   35.413379][ T3643] CPU: 1 UID: 0 PID: 3643 Comm: syz.4.49 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0
[   35.423918][ T3643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[   35.433999][ T3643] Call Trace:
[   35.437363][ T3643]  <TASK>
[   35.440298][ T3643]  dump_stack_lvl+0xf2/0x150
[   35.445010][ T3643]  dump_stack+0x15/0x1a
[   35.449203][ T3643]  should_fail_ex+0x223/0x230
[   35.453990][ T3643]  should_failslab+0x8f/0xb0
[   35.458619][ T3643]  kmem_cache_alloc_lru_noprof+0x57/0x320
[   35.464377][ T3643]  ? ext4_alloc_inode+0x38/0x320
[   35.469399][ T3643]  ? __ext4_check_dir_entry+0x36b/0x500
[   35.475009][ T3643]  ext4_alloc_inode+0x38/0x320
[   35.480072][ T3643]  ? __pfx_ext4_alloc_inode+0x10/0x10
[   35.485492][ T3643]  alloc_inode+0x3c/0x160
[   35.489881][ T3643]  iget_locked+0xf2/0x5d0
[   35.494242][ T3643]  __ext4_iget+0x17f/0x1d70
[   35.498830][ T3643]  ? d_alloc_parallel+0xbf0/0xc60
[   35.503893][ T3643]  ext4_lookup+0x15b/0x390
[   35.508391][ T3643]  __lookup_slow+0x184/0x250
[   35.513048][ T3643]  lookup_slow+0x3c/0x60
[   35.517322][ T3643]  walk_component+0x1f5/0x230
[   35.522109][ T3643]  ? path_lookupat+0xfd/0x2b0
[   35.526816][ T3643]  path_lookupat+0x10a/0x2b0
[   35.531459][ T3643]  filename_lookup+0x150/0x340
[   35.536271][ T3643]  filename_setxattr+0x59/0x2a0
[   35.541177][ T3643]  path_setxattrat+0x284/0x310
[   35.546084][ T3643]  __x64_sys_setxattr+0x6e/0x90
[   35.550982][ T3643]  x64_sys_call+0x2247/0x2dc0
[   35.555680][ T3643]  do_syscall_64+0xc9/0x1c0
[   35.560195][ T3643]  ? clear_bhb_loop+0x55/0xb0
[   35.564956][ T3643]  ? clear_bhb_loop+0x55/0xb0
[   35.569653][ T3643]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   35.575617][ T3643] RIP: 0033:0x7f8e0b2b5d29
[   35.580074][ T3643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   35.599705][ T3643] RSP: 002b:00007f8e098d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[   35.608191][ T3643] RAX: ffffffffffffffda RBX: 00007f8e0b4a6160 RCX: 00007f8e0b2b5d29
[   35.616169][ T3643] RDX: 0000000020001400 RSI: 00000000200001c0 RDI: 0000000020000200
[   35.624145][ T3643] RBP: 00007f8e098d5090 R08: 0000000000000000 R09: 0000000000000000
[   35.632286][ T3643] R10: 0000000000000835 R11: 0000000000000246 R12: 0000000000000001
[   35.640298][ T3643] R13: 0000000000000000 R14: 00007f8e0b4a6160 R15: 00007ffd9416c248
[   35.648351][ T3643]  </TASK>
[   35.810202][ T3656] loop2: detected capacity change from 0 to 128
[   35.840220][ T3656] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   35.878230][ T3656] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   35.978277][ T3665] loop1: detected capacity change from 0 to 512
[   36.000169][ T3665] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.66: corrupted in-inode xattr: invalid ea_ino
[   36.008854][ T3656] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[   36.025637][ T3665] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.66: couldn't read orphan inode 15 (err -117)
[   36.041175][ T3667] loop0: detected capacity change from 0 to 512
[   36.048534][ T3665] EXT4-fs (loop1): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.077697][ T3667] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.67: corrupted in-inode xattr: invalid ea_ino
[   36.093801][ T3667] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.67: couldn't read orphan inode 15 (err -117)
[   36.108131][ T3667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.123573][ T3667] EXT4-fs error (device loop0): ext4_lookup:1817: inode #2: comm syz.0.67: deleted inode referenced: 15
[   36.126751][ T3669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'.
[   36.144933][ T3665] netlink: 36 bytes leftover after parsing attributes in process `syz.1.66'.
[   36.148774][ T3667] IPv4: Oversized IP packet from 127.202.26.0
[   36.162743][ T3669] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   36.170348][ T3669] batman_adv: batadv0: Removing interface: batadv_slave_0
[   36.179300][ T3669] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   36.186859][ T3669] batman_adv: batadv0: Removing interface: batadv_slave_1
[   36.268416][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.292195][ T3671] FAULT_INJECTION: forcing a failure.
[   36.292195][ T3671] name failslab, interval 1, probability 0, space 0, times 0
[   36.305018][ T3671] CPU: 0 UID: 0 PID: 3671 Comm: syz.4.68 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0
[   36.315622][ T3671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[   36.325838][ T3671] Call Trace:
[   36.329149][ T3671]  <TASK>
[   36.332138][ T3671]  dump_stack_lvl+0xf2/0x150
[   36.336767][ T3671]  dump_stack+0x15/0x1a
[   36.341037][ T3671]  should_fail_ex+0x223/0x230
[   36.345760][ T3671]  ? audit_log_d_path+0x96/0x250
[   36.350849][ T3671]  should_failslab+0x8f/0xb0
[   36.355502][ T3671]  __kmalloc_cache_noprof+0x4e/0x320
[   36.360995][ T3671]  audit_log_d_path+0x96/0x250
[   36.365795][ T3671]  ? __rcu_read_unlock+0x4e/0x70
[   36.370768][ T3671]  audit_log_d_path_exe+0x42/0x70
[   36.375811][ T3671]  audit_log_task+0x192/0x1c0
[   36.380608][ T3671]  audit_seccomp+0x68/0x130
[   36.385215][ T3671]  __seccomp_filter+0x6fa/0x1180
[   36.390192][ T3671]  ? arch_scale_cpu_capacity+0x15/0x70
[   36.395665][ T3671]  ? update_curr_dl_se+0x5f/0x230
[   36.400705][ T3671]  ? update_curr+0x18c/0x410
[   36.405376][ T3671]  __secure_computing+0x9f/0x1c0
[   36.410489][ T3671]  syscall_trace_enter+0xd1/0x1f0
[   36.415606][ T3671]  ? fpregs_assert_state_consistent+0x83/0xa0
[   36.421694][ T3671]  do_syscall_64+0xaa/0x1c0
[   36.426297][ T3671]  ? clear_bhb_loop+0x55/0xb0
[   36.430988][ T3671]  ? clear_bhb_loop+0x55/0xb0
[   36.435704][ T3671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   36.441624][ T3671] RIP: 0033:0x7f8e0b2b473c
[   36.446102][ T3671] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   36.465818][ T3671] RSP: 002b:00007f8e09921030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   36.474319][ T3671] RAX: ffffffffffffffda RBX: 00007f8e0b4a5fa0 RCX: 00007f8e0b2b473c
[   36.482424][ T3671] RDX: 000000000000000f RSI: 00007f8e099210a0 RDI: 0000000000000005
[   36.490438][ T3671] RBP: 00007f8e09921090 R08: 0000000000000000 R09: 0000000000000000
[   36.498440][ T3671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   36.506510][ T3671] R13: 0000000000000000 R14: 00007f8e0b4a5fa0 R15: 00007ffd9416c248
[   36.514700][ T3671]  </TASK>
[   36.519499][   T29] kauditd_printk_skb: 368 callbacks suppressed
[   36.519515][   T29] audit: type=1326 audit(1734497410.717:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3670 comm="syz.4.68" exe="<no_memory>" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f8e0b2b473c code=0x7ffc0000
[   36.536290][ T3299] EXT4-fs (loop1): unmounting filesystem 00000007-0000-0000-0000-000000000000.
[   36.548923][   T29] audit: type=1326 audit(1734497410.957:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3670 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8e0b2b47df code=0x7ffc0000
[   36.581787][   T29] audit: type=1326 audit(1734497410.957:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3670 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8e0b2b498a code=0x7ffc0000
[   36.605499][   T29] audit: type=1326 audit(1734497410.957:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3670 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0b2b5d29 code=0x7ffc0000
[   36.628991][   T29] audit: type=1326 audit(1734497410.957:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3670 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0b2b5d29 code=0x7ffc0000
[   36.655069][ T3287] ==================================================================
[   36.663373][ T3287] BUG: KCSAN: data-race in virtqueue_disable_cb / virtqueue_disable_cb
[   36.671740][ T3287] 
[   36.674127][ T3287] write to 0xffff88810300e078 of 2 bytes by interrupt on cpu 0:
[   36.681880][ T3287]  virtqueue_disable_cb+0x85/0x180
[   36.687038][ T3287]  skb_xmit_done+0x5f/0x140
[   36.691563][ T3287]  vring_interrupt+0x161/0x190
[   36.696522][ T3287]  __handle_irq_event_percpu+0x95/0x490
[   36.702191][ T3287]  handle_irq_event+0x64/0xf0
[   36.706990][ T3287]  handle_edge_irq+0x16d/0x5b0
[   36.711875][ T3287]  __common_interrupt+0x58/0xe0
[   36.716852][ T3287]  common_interrupt+0x7c/0x90
[   36.721554][ T3287]  asm_common_interrupt+0x26/0x40
[   36.726586][ T3287]  kcsan_setup_watchpoint+0x404/0x410
[   36.731970][ T3287]  shmem_get_inode+0x30f/0x730
[   36.736781][ T3287]  shmem_mknod+0x44/0x180
[   36.741139][ T3287]  shmem_mkdir+0x33/0x70
[   36.746093][ T3287]  vfs_mkdir+0x1f4/0x320
[   36.750362][ T3287]  do_mkdirat+0x12f/0x2b0
[   36.755329][ T3287]  __x64_sys_mkdirat+0x4e/0x60
[   36.760237][ T3287]  x64_sys_call+0x1b6f/0x2dc0
[   36.765096][ T3287]  do_syscall_64+0xc9/0x1c0
[   36.769884][ T3287]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   36.776082][ T3287] 
[   36.778511][ T3287] read to 0xffff88810300e078 of 2 bytes by task 3287 on cpu 1:
[   36.786071][ T3287]  virtqueue_disable_cb+0x63/0x180
[   36.791405][ T3287]  start_xmit+0x15c/0x1310
[   36.795995][ T3287]  dev_hard_start_xmit+0x119/0x3f0
[   36.801232][ T3287]  sch_direct_xmit+0x1a9/0x580
[   36.806025][ T3287]  __dev_queue_xmit+0xf6a/0x2090
[   36.811037][ T3287]  ip_finish_output2+0x721/0x890
[   36.816443][ T3287]  ip_finish_output+0x11a/0x2a0
[   36.821314][ T3287]  ip_output+0xab/0x170
[   36.825485][ T3287]  __ip_queue_xmit+0xbf2/0xc10
[   36.830349][ T3287]  ip_queue_xmit+0x38/0x50
[   36.835293][ T3287]  __tcp_transmit_skb+0x15ca/0x1980
[   36.840540][ T3287]  tcp_write_xmit+0x1410/0x3220
[   36.845412][ T3287]  __tcp_push_pending_frames+0x6a/0x1a0
[   36.850993][ T3287]  tcp_push+0x320/0x340
[   36.855155][ T3287]  tcp_sendmsg_locked+0x21ed/0x2710
[   36.860363][ T3287]  tcp_sendmsg+0x30/0x50
[   36.864720][ T3287]  inet_sendmsg+0x77/0xd0
[   36.869257][ T3287]  __sock_sendmsg+0x102/0x180
[   36.873943][ T3287]  sock_write_iter+0x15e/0x1a0
[   36.878717][ T3287]  vfs_write+0x77f/0x920
[   36.882968][ T3287]  ksys_write+0xe8/0x1b0
[   36.887226][ T3287]  __x64_sys_write+0x42/0x50
[   36.891835][ T3287]  x64_sys_call+0x287e/0x2dc0
[   36.896535][ T3287]  do_syscall_64+0xc9/0x1c0
[   36.901145][ T3287]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   36.907064][ T3287] 
[   36.909402][ T3287] value changed: 0x0000 -> 0x0001
[   36.914428][ T3287] 
[   36.916753][ T3287] Reported by Kernel Concurrency Sanitizer on:
[   36.922907][ T3287] CPU: 1 UID: 0 PID: 3287 Comm: syz-executor Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0
[   36.934062][ T3287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[   36.944314][ T3287] ==================================================================
SYZFAIL: failed to send rpc
fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe)
[   36.975625][ T3674] loop4: detected capacity change from 0 to 512
[   36.982025][   T29] audit: type=1400 audit(1734497411.397:554): avc:  denied  { write } for  pid=3287 comm="syz-executor" path="pipe:[2134]" dev="pipefs" ino=2134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   37.060367][ T3674] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent
[   37.094578][ T3662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.140592][ T3655] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   37.334243][   T28] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.377881][   T28] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.427761][   T28] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.478206][   T28] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.538659][   T28] bridge_slave_1: left allmulticast mode
[   37.544561][   T28] bridge_slave_1: left promiscuous mode
[   37.550398][   T28] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.558387][   T28] bridge_slave_0: left allmulticast mode
[   37.564056][   T28] bridge_slave_0: left promiscuous mode
[   37.569866][   T28] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.648474][   T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   37.658697][   T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   37.668592][   T28] bond0 (unregistering): Released all slaves
[   37.703381][   T29] audit: type=1400 audit(1734497412.127:555): avc:  denied  { read } for  pid=3677 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   37.728393][   T29] audit: type=1400 audit(1734497412.127:556): avc:  denied  { open } for  pid=3677 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   37.754198][   T29] audit: type=1400 audit(1734497412.127:557): avc:  denied  { getattr } for  pid=3677 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   37.784669][   T28] hsr_slave_0: left promiscuous mode
[   37.790580][   T29] audit: type=1400 audit(1734497412.187:558): avc:  denied  { write } for  pid=3676 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=414 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   37.815617][   T28] hsr_slave_1: left promiscuous mode
[   37.821607][   T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   37.829095][   T28] batman_adv: batadv0: Removing interface: batadv_slave_0
[   37.837250][   T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   37.844714][   T28] batman_adv: batadv0: Removing interface: batadv_slave_1
[   37.853920][   T28] veth1_macvtap: left promiscuous mode
[   37.859541][   T28] veth0_macvtap: left promiscuous mode
[   37.865121][   T28] veth1_vlan: left promiscuous mode
[   37.870458][   T28] veth0_vlan: left promiscuous mode
[   37.930412][   T28] team0 (unregistering): Port device team_slave_1 removed
[   37.940944][   T28] team0 (unregistering): Port device team_slave_0 removed
[   38.153287][   T28] IPVS: stop unused estimator thread 0...
[   38.202002][   T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.241037][   T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.289266][   T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.340654][   T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.410578][   T28] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.458668][   T28] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.529326][   T28] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.598049][   T28] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.684558][   T28] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.728292][   T28] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.784831][   T28] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.828232][   T28] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.894639][   T28] bridge_slave_1: left allmulticast mode
[   38.900523][   T28] bridge_slave_1: left promiscuous mode
[   38.906341][   T28] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.914185][   T28] bridge_slave_0: left allmulticast mode
[   38.920060][   T28] bridge_slave_0: left promiscuous mode
[   38.925888][   T28] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.934254][   T28] bridge_slave_1: left allmulticast mode
[   38.939997][   T28] bridge_slave_1: left promiscuous mode
[   38.945763][   T28] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.953611][   T28] bridge_slave_0: left allmulticast mode
[   38.959416][   T28] bridge_slave_0: left promiscuous mode
[   38.965099][   T28] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.973499][   T28] bridge_slave_1: left allmulticast mode
[   38.979224][   T28] bridge_slave_1: left promiscuous mode
[   38.984955][   T28] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.992939][   T28] bridge_slave_0: left allmulticast mode
[   38.998750][   T28] bridge_slave_0: left promiscuous mode
[   39.004471][   T28] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.297382][   T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   39.307387][   T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   39.316989][   T28] bond0 (unregistering): Released all slaves
[   39.325907][   T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   39.335821][   T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   39.345423][   T28] bond0 (unregistering): Released all slaves
[   39.355553][   T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   39.365690][   T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   39.375463][   T28] bond0 (unregistering): Released all slaves
[   39.422586][   T28] hsr_slave_0: left promiscuous mode
[   39.428499][   T28] hsr_slave_1: left promiscuous mode
[   39.434274][   T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   39.441813][   T28] batman_adv: batadv0: Removing interface: batadv_slave_0
[   39.450187][   T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   39.457949][   T28] batman_adv: batadv0: Removing interface: batadv_slave_1
[   39.468180][   T28] hsr_slave_0: left promiscuous mode
[   39.473904][   T28] hsr_slave_1: left promiscuous mode
[   39.479693][   T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   39.487162][   T28] batman_adv: batadv0: Removing interface: batadv_slave_0
[   39.495361][   T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   39.502832][   T28] batman_adv: batadv0: Removing interface: batadv_slave_1
[   39.513263][   T28] hsr_slave_0: left promiscuous mode
[   39.519225][   T28] hsr_slave_1: left promiscuous mode
[   39.525007][   T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   39.532542][   T28] batman_adv: batadv0: Removing interface: batadv_slave_0
[   39.540107][   T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   39.547759][   T28] batman_adv: batadv0: Removing interface: batadv_slave_1
[   39.559456][   T28] veth1_macvtap: left promiscuous mode
[   39.564963][   T28] veth0_macvtap: left promiscuous mode
[   39.570629][   T28] veth1_vlan: left promiscuous mode
[   39.575996][   T28] veth0_vlan: left promiscuous mode
[   39.581673][   T28] veth1_macvtap: left promiscuous mode
[   39.587227][   T28] veth0_macvtap: left promiscuous mode
[   39.592849][   T28] veth1_vlan: left promiscuous mode
[   39.598135][   T28] veth0_vlan: left promiscuous mode
[   39.603942][   T28] veth1_macvtap: left promiscuous mode
[   39.609492][   T28] veth0_macvtap: left promiscuous mode
[   39.615153][   T28] veth1_vlan: left promiscuous mode
[   39.620448][   T28] veth0_vlan: left promiscuous mode
[   39.745117][   T28] team0 (unregistering): Port device team_slave_1 removed
[   39.755086][   T28] team0 (unregistering): Port device team_slave_0 removed
[   39.806938][   T28] team0 (unregistering): Port device team_slave_1 removed
[   39.817267][   T28] team0 (unregistering): Port device team_slave_0 removed
[   39.867668][   T28] team0 (unregistering): Port device team_slave_1 removed
[   39.878564][   T28] team0 (unregistering): Port device team_slave_0 removed