last executing test programs: 12m49.764890465s ago: executing program 4 (id=5): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x14, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffe42) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6c"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000580)=[{0x0, 0x0, 0x3ff, 0x8}], 0x3e0000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES16=r2], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknod$loop(&(0x7f0000000180)='./file0\x00', 0xc000, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x4, 0x8}, 0x11c0, 0x1, 0x7, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r7, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff020002000000000800040001000000", 0x24) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000080)=0x4, 0x8) syz_clone(0x24001100, 0x0, 0x0, 0x0, 0x0, 0x0) 12m48.807235022s ago: executing program 4 (id=10): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES8, @ANYRES64=0x0], 0x0, 0x249, &(0x7f00000006c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r0, 0x33, 0x1, 0x10001, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x5, &(0x7f00000000c0)={0x1, 0x2, 0x0, 0x80000000}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x13f, 0x6}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0xa3500, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) 12m48.582661671s ago: executing program 4 (id=13): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x2410, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x9, 0x40}, 0x14105, 0x30, 0x8, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x400) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 12m48.469727461s ago: executing program 4 (id=14): syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x6fd, &(0x7f0000000c40)="$eJzs3V2P21gZB/D/STJJJoWqAlStqm7ndMpKUzGkTmabKipIGOckY0jiyPbAjIS0KnRmNWqmQFskmpt2bniRli/A3d5wwYdYiQuu9lvAFUgrEDesQMjIx3ZeJk5m0knb7e7/N9qNYz8+5/Gx61N37GMQERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERhNUwjIpA2+7u7MrZrIbrdJIvWUwtj0pbwc1o4ua8OlfCegER/odiEW9Fs9/62ijkcvi/dVyNvl1FMfwoYnDh8qW7X81lkvXnJPwisGiBj58OHtzr9/cfnSE2i4WLf52QOUNQS3Vtz7E7ZktJ23NkvVYzbm03Pdm028rb83zVkZarMr7jyg3rpqzU61tSlfecnW6rYbZVMvPON6uGUZPfK0Q7GkDZs7btdtvutnRMuDiMuSM/+FEUoMyOlAeH/f2tsXyepbVxGFRJST4zHhwGVU/b3KpRrVYq1Wqldrt++45h5KZmGCFhDGEqYukHLb1hlnsCJzqHjNX4r/EXAbRRRBc72IVM/bHQgAsHnRnLY0n//84tNbfe8f4/6eVXRouvQPf/16Jv12b1/zNykZB6hbQlYsb8xX5WdEYSj/EUAzzAPfTRxz4eLaFsCbl27hLyRtySS8ln5k8LCl3Y8ODARgcmWvgyZDxHoo4aajDwHrbRhAeJJmy0oeBhDx58qPCIyoeZKpjw4cCFxAYs3IREBXXUsQUJhTL24GAHXbTQgIl/B0FwgEPd7ltxPs9TthpJUGXGRhSQS467fVTnbO2s/v/Hz6K14/7fYP//RRUdB4Xo4+N5MUSfAUF8/b+gtZeTDRERERERERG9DEL/67vQv5V/G0CApt1WxkRM4bVlR0RERERERETLIBAUcBUiuisfb0NMX/8TERERERER0ZtN6GfsBICSvqlfjB6XOss/AmRfQYpEREREREREdE76yf9reSDQd/mvQSx0/U9EREREREREb4DfjI2xn8vGY+wGya/1MwDW/loQH/2jAHdFHPd2vy6OzHCJeRTHTN0B4DeviIvxQL36Iw9Af7PUVRHXFg+CORx38JOD9LH+nwcRIYR7IoF8dryAGQmIsOZaLv6GD3A9WuV6PM78/UEGekk0onCpabdV2XLadyswzYsZX+36v3h4+EvAHW7nwWF/v/yTn/bv61yOw1nHR2GhzybSyaQ3xiiXJ3q8Bf3MRdroxqtoJlX+ttspCV2vkWx/FuZRZryieTugtgpEW/krrEf7bD2IYkuD4Yj7AljTgz9UynqXTWy9uyJGWVRObnnajpix5UWdxY0o5sbGjegjaZOwnIwofiMLVMvT+2Aii+p4Fqe3hfjnifafnwVEMWyLrTCLP4UFncjihx9FK2/1dpPhMc6SxdRRQET0uhyMeiE9iPnUGPtJ95Cc1M7e7yAHxGe5Gb37qJYg7j+S3v3J74Ooh8oCufh3E+m1JP0KwjP6htDl5KMB3XNXUs7oRvnTIAjMi0WMn9H/F/89Y9jHnq13Ow6C4OQZ/Y+jdyDFaU9l8Z8gCO5WdE/yuxO96ofhCh/OrNdrV7NhE956cvQzPQB+6P399/cfVqtbNeNdw7hdxYr+q0L8kQX7HiIimnL6O3Z0RGZOhHgX16Myrt//+zvR1ESP95X4lgLtFtDHfWwmrxBYSy+1hAN8+1/RbQib0VUrsF6KPksDefnS3fCqdhh7KHL6DS+bM6/qdF8axerbG6rD2OS9QyevAEexWy95LxAREb1a6zP6YWCi/8dk/1+c6P83sRFFbFxJve4ujd1SuJlcHQ8v6QcXjlNjK6cn/50lNwYREdEXhHI/ESX/18J17d57lXq9YvrbSrqO9X3p2o2WknbXV661bXZbSvZcx3cspy17Lgr2qvKkt9PrOa4vm44re45n7+o3v8v41e+e6phd37a8XluZnpKW0/VNy5cN27Nkb+e7bdvbVq5e2espy27alunbTld6zo5rqbKUnlJjgXZDdX27aYeTXdlz7Y7p7skfOO2djpIN5Vmu3fOdqMCkLrvbdNyOLraMYOEXHRIREX0ePX46eHCv399/dHJiNbw0j+YcY0bM9EQ+pUCOEURERPQZM+quF1ip+BITIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiKiKac/0rfgxEraw4LAcM7PL8Zz8ByjRwynyhE4bz6fun/WA/u9yOqZRStNHokYPPh4TvDqcE7S/OMxx4tUikvAC7fP374EXNBzEM3JLfEAmH5+dOnHWNrEtw6iFp0VoxemLioM90Vu+X8cwomHf5heJMKWD4IgmL96YbIN82c/nnMAHuXPsQte9ZmIiF61/wcAAP//iYxA9A==") r0 = socket(0x1, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10) bind$unix(r0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) 12m48.07931601s ago: executing program 2 (id=18): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2410}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x4000) 12m47.903604459s ago: executing program 2 (id=21): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x1c1c41, 0x6) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, 0x0, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x312, 0x0, 0x54, 0x4}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="380100001000332e0000000000000000ac141400000000000000000000000000fc0200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e0001000000000000000000000000000000006c000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000005fa1acaab819194b6f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480003006c7a6a680000000000000000000000000000000000000000000000498903ad00"/249], 0x138}}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280080002000000e3b60800010001000000140003007866726d30"], 0x58}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="050000"], 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010001fff28bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8254010088520300200012800b000100697036746e6c0000100002800400130005000900290000000800040000000001"], 0x48}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x2) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e674135aaa5262148233f324527909cfc03b96f88c28eead55cca7a98a9495edf934146cea3ae2f3fb6d74c5e1a20d4b66bd11250cdaf0e", 0x38}], 0x1, 0xb, 0x4, 0x18) dup(r0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b708002d018cbc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000000029eaae05c78ff5c778c317abefdc9596c72cefab358a298b82fede66827d6b53f5c1af0dda26ccf81358933c76410b39a06681c5fc7e38bcfb2e64bdcab7f5f37eab60021a2fab175f39486f943eecdef9eb160410b2466d252cc1e4"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 12m47.806041709s ago: executing program 2 (id=23): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000f4d3cfc326947e34df2c4b43773a6bf546dd8a80224d1f78220508fd660f7afc1b72fce96b23f7e3948ff5bfd512a6cd43df1e930a42957769e7b118c4bb19a57a4c940f7244b6e04ba9cfe0c531872ca7e9ada00a890698173a3d222d82b1cf2b2562a4aae8792a8c58466044e259890936c1f72ece425f6f30748f5b16a3b50939572d7bedf2d52f557740e99c5b6253f7dd505f9550eb11dcf39339d979ab8f97f9933f77d43e733c37a35845f7786cee8a713c50ef442ac1ae4f3da07532b57f3e4315f9852d94de274be031"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9) close_range(r2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x24, 0x2c, 0xd27, 0xfffffffc, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {}, {0x3}}}, 0x24}}, 0x20040054) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x80, 0x0, 0x9}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001a00010100000000000000000a0000bb"], 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e1f, 0x4000, @empty}, {0xa, 0x4e22, 0x0, @mcast2, 0xffffffff}, r7, 0x100}}, 0x48) r8 = dup2(r6, r6) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f00000008c0)={0x16, 0x98, 0xfa00, {0x0, 0x2, r7, 0x10, 0x0, @in={0x2, 0x4e22, @loopback}}}, 0xa0) close(0xffffffffffffffff) 12m47.619009248s ago: executing program 2 (id=29): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0), 0x0, 0x531, &(0x7f0000000640)="$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") r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x201, &(0x7f0000000000)={0x0, 0x300}) 12m47.294432147s ago: executing program 2 (id=33): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0), 0x0, 0x531, &(0x7f0000000640)="$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") ptrace(0x10, 0x0) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f0000000000)={0x0, 0x300}) 12m46.845411626s ago: executing program 2 (id=34): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000100)='wg0\x00', 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) chown(0x0, 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f0000000180)=""/219, &(0x7f0000000080)=0xdb) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x565) utimensat(r1, &(0x7f0000000280)='\x00', &(0x7f00000002c0)={{0x77359400}, {0x77359400}}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e23, @multicast1}, 0x1, 0x3, 0x1, 0x2}}, 0x26) 12m46.845124506s ago: executing program 32 (id=34): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000100)='wg0\x00', 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) chown(0x0, 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f0000000180)=""/219, &(0x7f0000000080)=0xdb) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x565) utimensat(r1, &(0x7f0000000280)='\x00', &(0x7f00000002c0)={{0x77359400}, {0x77359400}}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e23, @multicast1}, 0x1, 0x3, 0x1, 0x2}}, 0x26) 12m33.279104511s ago: executing program 33 (id=14): syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000b00)=ANY=[@ANYBLOB="6d61703d6f66662c6d61703d61636f726e006e6f726f636b2c73657373696f6e3d307830203030303030303030332c636865636b3d72656c617865642c6e6f726f636b416e0400000000000000c86b2c6d6f44653d30783030303030303090cf5cee73e4fdbccf1ad8f6238d714830303030303030756e686964652c6d61703d61636f726e2c6f76657272696467726f636b706572916964652c00add51ea2b35249a135fa479f9069028397e9808a385f6e0c9ab44fb55e327ad812fe293a6347f7f50263af07e2638e5c5522fc046bdeb75ac5ae4dfa74f42b394b1587068ecfa5acd43d2ca29a5d67adb9bfb87ce6ccb85cb9ae05ac0000000000", @ANYRESDEC], 0x1, 0x6fd, &(0x7f0000000c40)="$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") r0 = socket(0x1, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10) bind$unix(r0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) 11m5.152509852s ago: executing program 1 (id=1719): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 11m5.080866202s ago: executing program 1 (id=1721): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000100001040000", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280080002000000e3b6080001"], 0x58}}, 0x0) 11m5.019890721s ago: executing program 1 (id=1722): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES8, @ANYRES64=0x0], 0x0, 0x249, &(0x7f00000006c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r0, 0x33, 0x1, 0x10001, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x5, &(0x7f00000000c0)={0x1, 0x2, 0x0, 0x80000000}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x13f, 0x6}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0xa3500, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) 11m4.930750341s ago: executing program 1 (id=1724): syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@nombcache}, {@norecovery}, {@data_err_ignore}, {@acl}, {@debug}, {@sysvgroups}, {@nomblk_io_submit}]}, 0x3, 0x585, &(0x7f0000000c00)="$eJzs3V9rW+UfAPDvSdutW/f7rYMxVEQKu3Ayl66tfyYIzkvR4UDvZ2izMpsuo0nHWgfrLtyNNzIEEQfiC/Dey+Eb8FUMdDBkFL3wpnLSky1rk3RtM9N5Ph847fOcP3nON+c8T74nJyEB5NZY+qcQ8WKsxNdJxOGWZYORLRxbX2/14fXpdEpibe2TP5JIsnnN9ZPs/0hWeSEifvky4mRhc7u1peW5UqVSXsjq4/X5K+O1peVTl+ZLs+XZ8uXJqakzb05NvvP2Wz2L9bXzf3338d0Pznx1fPXbn+4fuZ3E2TiULWuNY/uSiJVGYaV17liMZc/JUJzdsMXEzhvbk5J+7wA7MpD186FIx4DDMZD1euC/70ZErAE5lej/kFPNPKB5bb+76+Dnz4P31y+ANsc/uP7eSAw3ro0OriZPXBml17ujPWg/bePn3+/cTqfY4n2IGz1oD6Bp5WZEnB4c3Dz+Jdn4t3OnG28ed7exjby9/kA/3U3zn9fb5T+FR/lPtMl/Rtr03Z3Yuv8X7vegmY7S/O/dtvnvo6FrdCCr/a+R8w0lFy9Vyqcj4v8RcSKG9qf1bvdzzqzeW+u0rDX/S6e0/WYumO3H/cH9T24zU6qXdhNzqwc3I156nP8msWn8H27kuhuPf/p8nH/KNo6V77zSadnW8bfqfQa89mPEq22P/+M7Wkn3+5PjjfNhvHlWbPbnrWO/dmp/e/H3Xnr8D3aPfzRpvV9ba/84I13a+GH473KnZTs9//clnzbK+7J510r1+sJExL7ko83zJx9v26w310/jP3G8+/jX7vw/EBGfdYm51a2jtzquuheO/8y2jv/2C/c+/OL7Tu0/3fF/o1E6kc3pOP61ZJtPu4O7ff4AAAAAAABgLylExKFICsVH5UKhWFy/n3s0DhYq1Vr95MXq4uWZaHxXdjSGCs073YdbPg8xkX0etlmf3FCfiogjEfHNwIFGvThdrcz0O3gAAAAAAAAAAAAAAAAAAADYI0Y6fP8/9dtAv/cOeOb85Dfk15b9vxe/9ATsSV7/Ib869H/DAuSAjg75pf9Dfun/kF/6P+SX/g/5pf8DAAAAAAAAAAAAAAAAAAAAAAAAAABAT50/dy6d1lYfXp9O6zNXlxbnqldPzZRrc8X5xenidHXhSnG2Wp2tlIvT1fmtHq9SrV6ZmIzFa+P1cq0+XltavjBfXbxcv3BpvjRbvlAe+leiAgAAAAAAAAAAAAAAAAAAgOdLbWl5rlSplBee38JwFsoza+K96Hekn7+8m82T9kc5aQlw3Y6aGOz7CaDwLAp9HJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYIN/AgAA//+Z+jCj") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x1}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000080)={0x0, 0x0, 0xbd9, 0x400000004}) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x40, 0x2}, 0xa, 0x0, 0x0, 0x0, 0x2}, r5, 0x0, 0xffffffffffffffff, 0x0) alarm(0x5) r6 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x80000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x1080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x1}, 0x4020}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e26, @broadcast}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r7, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)="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", 0x581}], 0x1}}], 0x1, 0x81) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000500)={'wg0\x00', 0x1}) r8 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) setsockopt$sock_int(r7, 0x1, 0x21, &(0x7f0000000040), 0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) fsetxattr$security_capability(r9, &(0x7f0000000280), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x4}, {0xfffffffe, 0x7}], 0xee01}, 0x18, 0x0) syz_usbip_server_init(0x3) 11m3.963793328s ago: executing program 1 (id=1745): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$binfmt_aout(r1, 0x0, 0x28) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") fsopen(&(0x7f0000000280)='sockfs\x00', 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2) madvise(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0xe) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r4, 0x0, 0xffffffffffffffff) stat(0x0, 0x0) fchown(r3, r4, r5) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, r6, &(0x7f0000000100)={0xffffffffffff2734, 0xb6b0, 0x5, 0x4, 0x10, 0xdc, 0x171, 0x8000, 0x10000}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) 11m3.713190777s ago: executing program 1 (id=1752): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f00000001c0)=0x8) io_uring_enter(r0, 0xf9, 0x2d77, 0x4a, &(0x7f0000000500)={[0x58]}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x32}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x3, 0x9, 0x401, 0x2000, r0, 0x8000, '\x00', 0x0, r0, 0x3, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x14, 0x0, 0x405, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@newtclass={0x24, 0x28, 0x100, 0x70bd25, 0x8, {0x0, 0x0, 0x0, 0x0, {0x2, 0xb}, {0x7, 0x10}, {0xd, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x8045) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=@newtfilter={0xf0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xc0, 0x2, [@TCA_CGROUP_EMATCHES={0xbc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb0, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xac, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x8a, 0x5, "f7040a55a5f36d3631a4a3e1e188221dfb6ad664db9cedd4c1f5bdd733a68668bac56366265c26e75c65e421f2a4183fa59623777695c6514cf70171432260bf20abf5270553cdca771ace8297ffc32dbc2cea6d0ebbab49fe7515e92ae6c6c7d7e106cc9f765c6a7fd0848c4864d77a9789390a0103a54678e0aa4b9b0c32a084783b6bc5ec"}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0xf0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10m48.666055186s ago: executing program 34 (id=1752): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f00000001c0)=0x8) io_uring_enter(r0, 0xf9, 0x2d77, 0x4a, &(0x7f0000000500)={[0x58]}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x32}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x3, 0x9, 0x401, 0x2000, r0, 0x8000, '\x00', 0x0, r0, 0x3, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x14, 0x0, 0x405, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@newtclass={0x24, 0x28, 0x100, 0x70bd25, 0x8, {0x0, 0x0, 0x0, 0x0, {0x2, 0xb}, {0x7, 0x10}, {0xd, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x8045) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=@newtfilter={0xf0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xc0, 0x2, [@TCA_CGROUP_EMATCHES={0xbc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb0, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xac, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x8a, 0x5, "f7040a55a5f36d3631a4a3e1e188221dfb6ad664db9cedd4c1f5bdd733a68668bac56366265c26e75c65e421f2a4183fa59623777695c6514cf70171432260bf20abf5270553cdca771ace8297ffc32dbc2cea6d0ebbab49fe7515e92ae6c6c7d7e106cc9f765c6a7fd0848c4864d77a9789390a0103a54678e0aa4b9b0c32a084783b6bc5ec"}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0xf0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10m32.473671541s ago: executing program 0 (id=2286): syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@nombcache}, {@norecovery}, {@data_err_ignore}, {@acl}, {@debug}, {@sysvgroups}, {@nomblk_io_submit}]}, 0x3, 0x585, &(0x7f0000000c00)="$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") r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x1}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000080)={0x0, 0x0, 0xbd9, 0x400000004}) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x40, 0x2}, 0xa, 0x0, 0x0, 0x0, 0x2}, r4, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000000000000001, 0x6, &(0x7f0000000180)) alarm(0x5) r5 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x80000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, r3, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x1080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x1}, 0x4020}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e26, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r6, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)="6b093db1947bc296cf697e335c7aa0e9afc07b5f0c819e3522eaad2a74224b7a5bed182fec91c96271033eec5d14ede20a6d1c36c3e7a445ccb5b158ffaec30b8b846de0d5b327a6b1d322a80d00b5c08428fb6ef0d6bdfef436fd9a0027a7cce11f65f633449199149e065a48b3f6bb51b5e305aa20ec347027ace732178271cb92f3e4bdda6732a10715efe7a7eae23413207a9cd1c24ea5ad8f333bfedf8e93e880fc51fb9051917d5488a13c22f1a575b1767424074c84444b29becb98de0e479ae50c12711cc5e26973d496458de4969e51dd5aee7ae9ca5da879f96737d626b447cdf675bc4af3e1ffec688c6945d0786b8ff146cab2e441e3438f3ddd2832b9ac4c9693141785b844f706c8137d0ebf12347ee82f9bd1968c51803a81998a149178952f712f57c09038a8f8a2e871a1f3b026ec617a77cb2163cea2164504b5ae989034b7ceb91545c2d968b9852181505afb7422606d1db2982240a7583260c32f5e3ea677edfeffc6cb30ef79c96938f7b571a3747042c4db17296ea799f65205b5cc2bf60f5921db65d28ae0a3ce76601fb0dfc04c7fa3900aff36af6c018df195fe6e97e6aa3a81c06130489c24b82c920681d3efb1fc33c73f8645ff0baa0be3a9a92b601f9602a2ef119e527c156bd8d8c91ec92baed92c43bc153fb5c7a5b08f8c8c03b0d266bcadbb061ae5e0f15eab9ba116923a27d961377383fae7b837a448e786371140ee20733f1fc82b565f4f1dc3859c49c5e9e18180e8511ddf854609ed7fcb50ca1c43934883488c9689e0de4f05ee35a254c900b2dee5b1367c7dae5adbc3f793917ad556654e4df993f2bbd4b9b9259efdcbd3c3c2d315cb1c92438cdea1792c390cef68d3926d44cd9361912518732211458bdc92f855c9c018e3a7b35da0d8c8f934dbc3cfba39a9fa99e1a76759d09e705e0e4d84a32987c661b2e3f58ca446ca835fabdaf163ae94f2a59481ab62298d4350ae9358fdbd2b1b20da4afaaf2982903c2805b6caf71719d0d74852ae8414baa491363af0d20a7ad133b81356c30e77d036ba519867fe35391c36ecd0464b40a3871637dc81af3c19f59f347749cb07ac25f96e0cbf84288d32aff6dcd9cd2ebbd905d53dc87b14002cf971df0b76c5171e392f78cd002fd34a28454a32531ab9fccb16820b462bd13005da9d2fbd0ed02a4a7527b9b40b939bbf0686d16fa3070f129ae48da709408dfdb12c661148e282d50794b34b2e15236bf2f967bba67a7c650a02743ec3b852b5511c1ab32efc7d85a97bb622935b72d5c06e7bde3f389172684a6e61c852f6ec2a323858f67f8f9dde9f9eaa26cfcf958dafe5ed23b6c06f094fa1550ce0a39447769218060cb9e78a0e6f61a08b629e2512d8972a2a337b0b6b97220d292af823b8800ef45e72089659a0b1cbc750d6491d55f9bde4d1c4abe796d6951be456b8ad327794ddc74042c9e303832ccbf2d2fcb6d01007b8cf0552b568af89adc9b198cbea6b8137ef70ad16919ade2bdbd29d23c78c04cce6dedf07598d33841d8f02f7ed5a349fddbc742ea7e742636a2cb4ff663192cb1102addc019b92caac00f5a644afc2d03b68f933aa6b8eddd6c39a0de8913034a0b48ddabd39aee173350f3dfa0329c308fb94e3528e5afc25835969bda2461f0e518ce79d57272d73774c049191315583fd820a0c4c0b8a5025dbd6ba606ccd3279f40c623d545e3558decf128f090a136f92556657aea2f37e8efc215ee87b783bb2f82e2cd50826a2c384df08475c6389c2b1d1b8fad487c2fd4b4c24a8511ef4fa54275311c500a5f9e6d69e91c5a3f862b776844fa6e8fb3e8fdc18d66cdcc33be663dce13c4636e79500a76586988a52c275de2ce83dfe607ae9484444ce79df1e780eab2e8c22e62f192c2ca34387839e4d2129c778109732c58d7ceaee2a3d6c54b2ce7f0b12caab2e79920fe66ba5b9664584193d3d4a8c972609", 0x581}], 0x1}}], 0x1, 0x81) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000500)={'wg0\x00', 0x1}) r7 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0xb, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) setsockopt$sock_int(r6, 0x1, 0x21, &(0x7f0000000040), 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) fsetxattr$security_capability(r8, &(0x7f0000000280), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x4}, {0xfffffffe, 0x7}], 0xee01}, 0x18, 0x0) syz_usbip_server_init(0x3) 10m31.753373758s ago: executing program 0 (id=2302): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0305000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3, @ANYRES32=r3], 0x44}}, 0x0) 10m31.613042378s ago: executing program 0 (id=2304): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000900000000000000002000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x7ffc1ffb}]}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x20000400) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r2, 0x1008957) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) setsockopt(r3, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="000129da7000fcdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) connect$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e20, 0xb940, @local, 0x3}, 0x1c) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xf, 0x0, @thr={&(0x7f0000000200)="9b73aaccf11a8c83ccc8abe28caaac7507be9272054eb3390afb69593ddfcfca1888de4c4a907829d0b4866d5f4b96047a541cb5d09507c244813a62d6711e2cf6dc78ef474929e829b830803168b16c6c07ce87d6627bc0a18ab24e17354acba19384089620ec7b1f3e21fb45b74c2482134442a0c1917a0e26a92680527020c765b7dcde4534ef03bb93151e38fe288da9a61b216a79ccf1eb1c73591e3978d3cafd0883a7c5374a2d061782ac45b94d7648", &(0x7f0000000400)="a6abbf0592ff209a577a709f2dc5dd8b08b8eef5626dbcca320b4f89fb82ae2f2bcea61f887869815b75d22566b02daa5dcf7dca9574eeffbff56178"}}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040815) 10m30.676090934s ago: executing program 0 (id=2313): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000000700000002"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmmsg(r4, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000d0000000c00018008000100", @ANYRES32=r8], 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip_vti0\x00', r8, 0x1, 0x8, 0x0, 0x772, {{0xa, 0x4, 0x3, 0x22, 0x28, 0x67, 0x0, 0x1, 0xa3d6e7c982a6d8a7, 0x0, @local, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x14, 0x13, 0x1, 0x0, [{@private=0xa010102, 0x5}, {@remote, 0x19c}]}]}}}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x2000000000000074, &(0x7f0000000280)=ANY=[@ANYRESDEC=r10], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'wg2\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x821c10, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x112dd10, 0x0) 10m30.450697614s ago: executing program 0 (id=2319): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x6, [@ptr={0x8}, @enum64={0x5, 0x6, 0x0, 0x13, 0x0, 0x2, [{0x7, 0xa, 0xb28}, {0xc, 0x4, 0xe}, {0x7, 0xc54, 0x1}, {0x2, 0x4, 0x1}, {0x3, 0x273, 0x3}, {0x1, 0x4, 0xb}]}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x2, 0xa}]}, {0x0, [0x30, 0x2e, 0x0, 0x5f]}}, &(0x7f0000000340)=""/119, 0x8e, 0x77, 0x1, 0x800, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) open(&(0x7f0000000040)='.\x00', 0x418601, 0x8) 10m30.109503352s ago: executing program 0 (id=2328): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mlockall(0x3) 10m30.109340972s ago: executing program 35 (id=2328): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mlockall(0x3) 13.072424695s ago: executing program 5 (id=8881): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x8, 0x20000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newtclass={0x24, 0x28, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0xd}, {0x5, 0x9}, {0x4}}}, 0x24}}, 0x800) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f00000003c0)=""/79, 0x4f}], 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 12.565513933s ago: executing program 5 (id=8887): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='kmem_cache_free\x00'}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x80000000}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") 11.909569591s ago: executing program 5 (id=8895): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kvm_set_irq\x00', r0, 0x0, 0xfff}, 0x18) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f000000c9c0)) 11.845147171s ago: executing program 5 (id=8897): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x0) r2 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x6fd, &(0x7f0000000c40)="$eJzs3V2P21gZB/D/STJJJoWqAlStqm7ndMpKUzGkTmabKipIGOckY0jiyPbAjIS0KnRmNWqmQFskmpt2bniRli/A3d5wwYdYiQuu9lvAFUgrEDesQMjIx3ZeJk5m0knb7e7/N9qNYz8+5/Gx61N37GMQERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERhNUwjIpA2+7u7MrZrIbrdJIvWUwtj0pbwc1o4ua8OlfCegER/odiEW9Fs9/62ijkcvi/dVyNvl1FMfwoYnDh8qW7X81lkvXnJPwisGiBj58OHtzr9/cfnSE2i4WLf52QOUNQS3Vtz7E7ZktJ23NkvVYzbm03Pdm028rb83zVkZarMr7jyg3rpqzU61tSlfecnW6rYbZVMvPON6uGUZPfK0Q7GkDZs7btdtvutnRMuDiMuSM/+FEUoMyOlAeH/f2tsXyepbVxGFRJST4zHhwGVU/b3KpRrVYq1Wqldrt++45h5KZmGCFhDGEqYukHLb1hlnsCJzqHjNX4r/EXAbRRRBc72IVM/bHQgAsHnRnLY0n//84tNbfe8f4/6eVXRouvQPf/16Jv12b1/zNykZB6hbQlYsb8xX5WdEYSj/EUAzzAPfTRxz4eLaFsCbl27hLyRtySS8ln5k8LCl3Y8ODARgcmWvgyZDxHoo4aajDwHrbRhAeJJmy0oeBhDx58qPCIyoeZKpjw4cCFxAYs3IREBXXUsQUJhTL24GAHXbTQgIl/B0FwgEPd7ltxPs9TthpJUGXGRhSQS467fVTnbO2s/v/Hz6K14/7fYP//RRUdB4Xo4+N5MUSfAUF8/b+gtZeTDRERERERERG9DEL/67vQv5V/G0CApt1WxkRM4bVlR0RERERERETLIBAUcBUiuisfb0NMX/8TERERERER0ZtN6GfsBICSvqlfjB6XOss/AmRfQYpEREREREREdE76yf9reSDQd/mvQSx0/U9EREREREREb4DfjI2xn8vGY+wGya/1MwDW/loQH/2jAHdFHPd2vy6OzHCJeRTHTN0B4DeviIvxQL36Iw9Af7PUVRHXFg+CORx38JOD9LH+nwcRIYR7IoF8dryAGQmIsOZaLv6GD3A9WuV6PM78/UEGekk0onCpabdV2XLadyswzYsZX+36v3h4+EvAHW7nwWF/v/yTn/bv61yOw1nHR2GhzybSyaQ3xiiXJ3q8Bf3MRdroxqtoJlX+ttspCV2vkWx/FuZRZryieTugtgpEW/krrEf7bD2IYkuD4Yj7AljTgz9UynqXTWy9uyJGWVRObnnajpix5UWdxY0o5sbGjegjaZOwnIwofiMLVMvT+2Aii+p4Fqe3hfjnifafnwVEMWyLrTCLP4UFncjihx9FK2/1dpPhMc6SxdRRQET0uhyMeiE9iPnUGPtJ95Cc1M7e7yAHxGe5Gb37qJYg7j+S3v3J74Ooh8oCufh3E+m1JP0KwjP6htDl5KMB3XNXUs7oRvnTIAjMi0WMn9H/F/89Y9jHnq13Ow6C4OQZ/Y+jdyDFaU9l8Z8gCO5WdE/yuxO96ofhCh/OrNdrV7NhE956cvQzPQB+6P399/cfVqtbNeNdw7hdxYr+q0L8kQX7HiIimnL6O3Z0RGZOhHgX16Myrt//+zvR1ESP95X4lgLtFtDHfWwmrxBYSy+1hAN8+1/RbQib0VUrsF6KPksDefnS3fCqdhh7KHL6DS+bM6/qdF8axerbG6rD2OS9QyevAEexWy95LxAREb1a6zP6YWCi/8dk/1+c6P83sRFFbFxJve4ujd1SuJlcHQ8v6QcXjlNjK6cn/50lNwYREdEXhHI/ESX/18J17d57lXq9YvrbSrqO9X3p2o2WknbXV661bXZbSvZcx3cspy17Lgr2qvKkt9PrOa4vm44re45n7+o3v8v41e+e6phd37a8XluZnpKW0/VNy5cN27Nkb+e7bdvbVq5e2espy27alunbTld6zo5rqbKUnlJjgXZDdX27aYeTXdlz7Y7p7skfOO2djpIN5Vmu3fOdqMCkLrvbdNyOLraMYOEXHRIREX0ePX46eHCv399/dHJiNbw0j+YcY0bM9EQ+pUCOEURERPQZM+quF1ip+BITIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiKiKac/0rfgxEraw4LAcM7PL8Zz8ByjRwynyhE4bz6fun/WA/u9yOqZRStNHokYPPh4TvDqcE7S/OMxx4tUikvAC7fP374EXNBzEM3JLfEAmH5+dOnHWNrEtw6iFp0VoxemLioM90Vu+X8cwomHf5heJMKWD4IgmL96YbIN82c/nnMAHuXPsQte9ZmIiF61/wcAAP//iYxA9A==") r3 = socket(0x1, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000680)={'gretap0\x00', 0x0, 0x1, 0x80, 0x429261aa, 0x9, {{0x38, 0x4, 0x2, 0x0, 0xe0, 0x66, 0x0, 0x6, 0x4, 0x0, @loopback, @remote, {[@rr={0x7, 0x13, 0xff, [@rand_addr=0x64010101, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x23}, @loopback]}, @lsrr={0x83, 0x17, 0xc6, [@loopback, @remote, @remote, @empty, @multicast2]}, @cipso={0x86, 0x1c, 0x3, [{0x6, 0x5, "b440de"}, {0x6, 0x11, "aa32a0b0d3242770d51fd751c07fe6"}]}, @ssrr={0x89, 0x7, 0xa5, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x7, 0x2b, [@rand_addr=0x64010102]}, @generic={0x83, 0x8, "d8bd2bda4e52"}, @cipso={0x86, 0x2b, 0x0, [{0x2, 0x2}, {0x6, 0xa, "2e3173e2d7a90de2"}, {0x2, 0x3, 'V'}, {0x1, 0x11, "df1363a0e4ddf14fb4076d06e81ad1"}, {0x1, 0x5, "d201d7"}]}, @timestamp_prespec={0x44, 0x44, 0x8c, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffe000}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x101}, {@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}, {@remote, 0x1}, {@multicast1}, {@local, 0x4}]}]}}}}}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xd, '\x00', 0x0, r3, 0x4, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@generic={&(0x7f0000000880)='./file0\x00'}, 0x18) r10 = socket(0x2c, 0x3, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r11, &(0x7f0000000140), &(0x7f0000000080)=@udp=r10, 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x2a, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x5, 0xfffffffffffffffc, 0xfffffffffffffff9}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xf}, @tail_call, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @exit, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x3cf64fb0, 0x69, &(0x7f0000000380)=""/105, 0x0, 0x21, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x5, 0x3, 0x101, 0x6}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000900)=[r8, r9, r11, r2, 0x1, 0xffffffffffffffff, r2], &(0x7f0000000940)=[{0x5, 0x1, 0xa, 0x2}, {0x5, 0x5, 0x6, 0xa}, {0x5, 0x4, 0x0, 0xc}, {0x2, 0x3, 0xd, 0x6}, {0x4, 0x1, 0xa, 0xc}, {0x5, 0x5, 0x3, 0x5}, {0x5, 0x4, 0x7, 0x4}, {0x3, 0x2, 0xa, 0x8}], 0x10, 0x1, @void, @value}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r13}, 0x10) bind$unix(r3, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) 11.47860763s ago: executing program 5 (id=8903): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x880) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000002002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 4.359642475s ago: executing program 5 (id=8916): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.289992151s ago: executing program 6 (id=8990): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3e5, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket(0xa, 0x40000000002, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x80, 0x100}}) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000600)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) 3.07376798s ago: executing program 6 (id=8992): r0 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x880) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000002002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 2.140247247s ago: executing program 6 (id=8998): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newtclass={0x24, 0x28, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0xd}, {0x5, 0x9}, {0x4}}}, 0x24}}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 1.952703547s ago: executing program 6 (id=9001): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"/643], 0x1, 0x120b, &(0x7f0000002300)="$eJzs3M9rXFUUB/CTNv1hajJRa7UF6UE3unk2WbhyEyQF6YDSNoVWEF7NRIeZzIS8ITBFbHdu/TvEpTtB/AeyceNacJeNyy7EJ84LtglxEcFOWz6fzRzm3i9zH28YeJd7Zu/9bzZ7G1WxUY7ixMxMzG5F5MOMjBNxMhoP4p1bv/z6xo3bd66ttNur1zOvrtxcei8zFy7/+MmX37350+jcre8XfjgTu4uf7v2+/Nvuhd2Le3/e/KJbZbfKwXCUZd4dDkfl3X4n17tVr8j8uN8pq052B1Vn+8D4Rn+4tTXOcrA+P7e13amqLAfj7HXGORrmaHuc5edld5BFUeT8XPDfnY61bx/WdR1R16fidNR1Xb8Qc3EuXoz5WIhWLMZL8XK8Eufj1bgQr8XrcXEya9orBwAAAAAAAAAAAAAAAAAAgOeL/n8AAAAAAAAAAAAAAAAAAACYPv3/AAAAAAAAAAAAAAAAAAAAMH36/wEAAAAAAAAAAAAAAAAAAGD6bty+c22l3V69nnk2YvPrnbWdtea1GV/ZiG70oxNXohV/xKT7v9HUVz9sr17JicV4d/P+fv7+ztrJg/mlyd8JHJlfavJ5MH8m5h7PL0crzh+dXz4yfzbefuuxfBGt+PmzGEY/1uPv7KP8V0uZH3zUPpS/NJkHAAAAz4Mi/3Hk83tR5MxMM/XQePPmv+8P1K1D+wOHnq9n49LsFC+ciWp8r1f2+53tZ6vY/0rGvV55+WlYj+IYxf69e/C0rOcZLU5FxP/4EVP8UeKJeXTTp70SAAAAAAAAAAAAjuMYBwNnm/O2xz9OOO1rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5iB44FAAAAAIT5W6fRsQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFcFAAD//78558w=") mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='binfmt_misc\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x20, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x3, 0x7, 0x43, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x7, 0xbc, 0x7}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000340)={0x0, {{0xa, 0x4e24, 0x5, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80}}}, 0x13e) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r4, &(0x7f0000000180)="4d6e4893228aa2ae28f252f5775ac5c7b79a9745fd625493562f41c6cfafb9fcb999b65982681438c38f06a6df8c0979e83eb39cd55aabc737ec5760ea0fc9598c10ce43406bbc8249d35402b04200722e71c6ddaae2befbb646e5c4ecdbe73b05d63483b6f974cd875b2ac035d229d77c18c34cb54f265bd415e94ef8059e07c1a932f31f95e0dad394e637267865037c51eb2f3360190781d17adf5489fbb5240d0f4cb188dafb15af3b54298c870881f30a1e52f5db03878a50", 0xbb) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, r7, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)={'#! ', './file0', [{0x20, 'vfat\x00'}, {0x20, 'batadv_slave_1\x00'}, {0x20, 'batadv_slave_1\x00'}, {0x20, '&\\'}, {0x20, '\'@\\..'}, {0x20, '+,'}, {0x20, '&.\\'}], 0xa, "6ff36681bbc287b2b21d07a199121334ce094ad1fca3b967a9a34ab18c88846022cae7fa5068fe961e61cc83d2430beec05c96e5b42fd6186fb9455cec0f1e4f8d78bcf52494ac1f0312a410f214a1dd39ea53092b6dd370c49647b0b5cb769171bef756d9fcd9c4d34bb3dbce6a4a7ccb8d94234e2f8fc5506769978792c5236119"}, 0xc3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffffff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.945328697s ago: executing program 3 (id=9002): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newtclass={0x24, 0x28, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0xd}, {0x5, 0x9}, {0x4}}}, 0x24}}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) 1.915101996s ago: executing program 8 (id=9003): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x28}, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) 1.793998696s ago: executing program 3 (id=9005): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='kmem_cache_free\x00'}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x80000000}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") 1.670742836s ago: executing program 8 (id=9006): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)='%pB \x00'}, 0x20) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 1.453314765s ago: executing program 6 (id=9008): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000002060300000000000000000c000300686173683a6970000500040000000000090002007379873f000000000c000780080008400000005305000500020000000500010006000000"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x0, 0x2, 0x1, 0x0, @remote}}]}]}, 0xfffffc6a}, 0x1, 0x0, 0x0, 0x10008057}, 0x4000084) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="00000080000000001900", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_icmp(0x2, 0x2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) ftruncate(0xffffffffffffffff, 0xf2d) lstat(0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x8000, 0x8000, 0x6, 0x5, {{0x6, 0x4, 0x3, 0x2, 0x18, 0x67, 0x0, 0x1, 0x29, 0x0, @local, @loopback, {[@noop]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000580)=[{0x0, 0x0, 0x3ff, 0x8}], 0x3e0000) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x14, 0x2, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x90) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="58000000100003040000000000000000000000c8", @ANYRES32=0x0, @ANYBLOB="42420000000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.228689404s ago: executing program 7 (id=9010): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0) 1.228342864s ago: executing program 3 (id=9011): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x30, r2, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x3, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000800}, 0x40000) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.101543753s ago: executing program 7 (id=9012): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4(r0, 0x0, 0x0, 0x0) 1.101266854s ago: executing program 6 (id=9013): r0 = socket$inet6(0xa, 0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x7}, 0x120, 0x5dd8, 0x1000003, 0x0, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) connect$inet6(r0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='schedstat\x00') fchmodat(r3, &(0x7f00000002c0)='./file0\x00', 0x140) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x14a8}, 0x0, 0x0, 0x1}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 1.091053904s ago: executing program 36 (id=9013): r0 = socket$inet6(0xa, 0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x7}, 0x120, 0x5dd8, 0x1000003, 0x0, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) connect$inet6(r0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='schedstat\x00') fchmodat(r3, &(0x7f00000002c0)='./file0\x00', 0x140) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x14a8}, 0x0, 0x0, 0x1}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 1.050226674s ago: executing program 3 (id=9015): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x80000000}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") 939.910843ms ago: executing program 7 (id=9016): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x28}, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) 771.039353ms ago: executing program 8 (id=9017): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) (fail_nth: 3) 718.212242ms ago: executing program 3 (id=9018): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r0 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1}], 0x1, 0x880) sendmmsg$inet_sctp(r0, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000002002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 579.983792ms ago: executing program 7 (id=9019): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) rt_sigaction(0x19, &(0x7f0000000340)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) 455.685322ms ago: executing program 7 (id=9020): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), 0x0, 0x2}, 0x20) 385.485471ms ago: executing program 8 (id=9021): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000001400)=ANY=[], 0x835, 0x1) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 385.140121ms ago: executing program 3 (id=9022): socket$inet6(0xa, 0x80002, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket(0x1, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0xb67, @local}, 0x1c) bind$netlink(r2, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfd, 0x80000}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000004000000000000000201801000020786c3500000000002020207b1af8ff00000000bfa10000000000000701000094ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r4, 0x0, 0x2001) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff98) creat(&(0x7f00000000c0)='./file0\x00', 0xd4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='initcall_level\x00', r1, 0x0, 0x8001}, 0x18) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x6db6e559) 325.767781ms ago: executing program 7 (id=9023): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "0daf7461cfccf6ce"}, 0x28) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) close(r2) 250.967281ms ago: executing program 8 (id=9024): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x30, r2, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x3, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000800}, 0x40000) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 8 (id=9025): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4(r0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ctor_system: invalid value (79) [ 754.727379][T30611] loop3: detected capacity change from 0 to 512 [ 754.735930][T30611] EXT4-fs: Ignoring removed oldalloc option [ 754.747314][T30613] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 754.753855][T30613] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 754.761507][T30613] vhci_hcd vhci_hcd.0: Device attached [ 754.784050][T30611] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.8513: Parent and EA inode have the same ino 15 [ 754.810001][T30613] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(5) [ 754.816567][T30613] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 754.824236][T30613] vhci_hcd vhci_hcd.0: Device attached [ 754.836276][T30611] EXT4-fs (loop3): Remounting filesystem read-only [ 754.842833][T30611] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 754.872042][T30620] loop5: detected capacity change from 0 to 512 [ 754.881502][T30620] EXT4-fs: Ignoring removed oldalloc option [ 754.888343][T30611] EXT4-fs (loop3): 1 orphan inode deleted [ 754.895771][T30611] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 754.909392][T30622] loop7: detected capacity change from 0 to 1024 [ 754.913497][T30620] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.8516: Parent and EA inode have the same ino 15 [ 754.920586][T30622] EXT4-fs: Ignoring removed nomblk_io_submit option [ 754.954574][T30620] EXT4-fs (loop5): Remounting filesystem read-only [ 754.961214][T30620] EXT4-fs warning (device loop5): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 754.987886][T30620] EXT4-fs (loop5): 1 orphan inode deleted [ 754.994203][T30620] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 755.021734][T30622] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c119, mo2=0002] [ 755.036746][T30622] System zones: 0-1, 3-12 [ 755.245314][T30633] loop8: detected capacity change from 0 to 512 [ 755.286363][T30633] EXT4-fs: Ignoring removed oldalloc option [ 755.287310][T30613] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(14) [ 755.298875][T30613] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 755.306703][T30613] vhci_hcd vhci_hcd.0: Device attached [ 755.323712][T30633] EXT4-fs error (device loop8): ext4_xattr_inode_iget:436: comm syz.8.8520: Parent and EA inode have the same ino 15 [ 755.338690][T30633] EXT4-fs (loop8): Remounting filesystem read-only [ 755.345217][T30633] EXT4-fs warning (device loop8): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 755.363762][T30614] vhci_hcd: connection closed [ 755.364337][T30618] vhci_hcd: connection closed [ 755.369900][ T2269] vhci_hcd: stop threads [ 755.378873][ T2269] vhci_hcd: release socket [ 755.380794][T30640] vhci_hcd: connection closed [ 755.383377][ T2269] vhci_hcd: disconnect device [ 755.383882][T30633] EXT4-fs (loop8): 1 orphan inode deleted [ 755.388487][ T2269] vhci_hcd: stop threads [ 755.394383][T30647] ebt_limit: overflow, try lower: 570423552/2483027968 [ 755.398623][ T2269] vhci_hcd: release socket [ 755.414267][ T2269] vhci_hcd: disconnect device [ 755.419583][T30633] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 755.426203][ T2269] vhci_hcd: stop threads [ 755.430487][ T2269] vhci_hcd: release socket [ 755.434921][ T2269] vhci_hcd: disconnect device [ 755.752190][T30658] loop8: detected capacity change from 0 to 512 [ 755.776042][T30660] loop5: detected capacity change from 0 to 512 [ 755.921247][T30660] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.8526: casefold flag without casefold feature [ 755.988402][T30660] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.8526: couldn't read orphan inode 15 (err -117) [ 756.022879][T30660] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8526'. [ 756.035669][T30650] loop3: detected capacity change from 0 to 8192 [ 756.045136][T30660] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 756.054032][T30660] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (79) [ 756.071869][T30658] EXT4-fs (loop8): too many log groups per flexible block group [ 756.079719][T30658] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 756.093700][T30658] EXT4-fs (loop8): mount failed [ 756.223497][T30667] loop7: detected capacity change from 0 to 512 [ 756.229244][T30668] netem: change failed [ 756.253495][T30667] EXT4-fs: Ignoring removed oldalloc option [ 756.261487][T30671] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 756.267285][T30668] netlink: 'syz.6.8529': attribute type 16 has an invalid length. [ 756.277436][T30668] netlink: 'syz.6.8529': attribute type 17 has an invalid length. [ 756.304735][T30670] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8530'. [ 756.348205][T30667] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.8527: Parent and EA inode have the same ino 15 [ 756.382910][T30668] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 756.390012][T30667] EXT4-fs (loop7): Remounting filesystem read-only [ 756.405032][T30667] EXT4-fs warning (device loop7): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 756.453585][T30667] EXT4-fs (loop7): 1 orphan inode deleted [ 756.471760][T30667] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 756.497254][T30649] loop3: detected capacity change from 0 to 128 [ 756.522241][T30649] ext4 filesystem being mounted at /516/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 756.706019][T30685] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8534'. [ 756.769352][T30687] loop6: detected capacity change from 0 to 1024 [ 756.794528][T30687] EXT4-fs: Ignoring removed nobh option [ 756.816282][T30687] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 756.997626][T30700] loop5: detected capacity change from 0 to 512 [ 757.020428][T30700] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.8538: casefold flag without casefold feature [ 757.034574][T30700] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.8538: couldn't read orphan inode 15 (err -117) [ 757.055408][T30698] loop7: detected capacity change from 0 to 512 [ 757.063289][T30698] EXT4-fs: Ignoring removed oldalloc option [ 757.073751][T30700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8538'. [ 757.084403][T30700] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 757.091790][T30698] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.8539: Parent and EA inode have the same ino 15 [ 757.093288][T30700] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (79) [ 757.122612][T30698] EXT4-fs (loop7): Remounting filesystem read-only [ 757.129236][T30698] EXT4-fs warning (device loop7): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 757.149337][T30698] EXT4-fs (loop7): 1 orphan inode deleted [ 757.171860][T30698] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 757.323058][ T29] kauditd_printk_skb: 1583 callbacks suppressed [ 757.323076][ T29] audit: type=1400 audit(1738267423.264:132441): avc: denied { prog_load } for pid=30707 comm="syz.6.8541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 757.347455][T30708] loop7: detected capacity change from 0 to 8192 [ 757.378995][ T29] audit: type=1400 audit(1738267423.264:132442): avc: denied { bpf } for pid=30707 comm="syz.6.8541" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 757.400001][ T29] audit: type=1400 audit(1738267423.264:132443): avc: denied { perfmon } for pid=30707 comm="syz.6.8541" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 757.421278][ T29] audit: type=1400 audit(1738267423.264:132444): avc: denied { prog_run } for pid=30707 comm="syz.6.8541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 757.440655][ T29] audit: type=1400 audit(1738267423.274:132445): avc: denied { read write } for pid=30706 comm="syz.7.8540" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 757.464950][ T29] audit: type=1400 audit(1738267423.274:132446): avc: denied { open } for pid=30706 comm="syz.7.8540" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 757.489229][ T29] audit: type=1400 audit(1738267423.274:132447): avc: denied { ioctl } for pid=30706 comm="syz.7.8540" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 757.515084][ T29] audit: type=1400 audit(1738267423.294:132448): avc: denied { create } for pid=30710 comm="syz.5.8542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 757.534942][ T29] audit: type=1400 audit(1738267423.304:132449): avc: denied { create } for pid=30707 comm="syz.6.8541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 757.554719][ T29] audit: type=1400 audit(1738267423.304:132450): avc: denied { map_create } for pid=30707 comm="syz.6.8541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 757.587902][T30708] loop7: p1 p2 p3 [ 757.591877][T30708] loop7: p1 start 51379968 is beyond EOD, truncated [ 757.615238][T30708] loop7: p3 size 100663552 extends beyond EOD, truncated [ 757.788113][T30720] loop5: detected capacity change from 0 to 512 [ 757.858060][T30720] EXT4-fs (loop5): too many log groups per flexible block group [ 757.865830][T30720] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 757.908905][T30720] EXT4-fs (loop5): mount failed [ 757.916317][T30722] loop3: detected capacity change from 0 to 512 [ 757.948880][T30722] EXT4-fs: Ignoring removed oldalloc option [ 758.036026][T30722] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.8545: Parent and EA inode have the same ino 15 [ 758.174470][T30722] EXT4-fs (loop3): Remounting filesystem read-only [ 758.181139][T30722] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 758.194153][T30722] EXT4-fs (loop3): 1 orphan inode deleted [ 758.200718][T30722] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 758.217099][T30737] ebt_limit: overflow, try lower: 570423552/2483027968 [ 758.291560][T30736] loop6: detected capacity change from 0 to 512 [ 758.297082][T30743] sd 0:0:1:0: device reset [ 758.338384][T30746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.346997][T30746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.355213][T30736] EXT4-fs: Ignoring removed oldalloc option [ 758.383278][T30736] EXT4-fs error (device loop6): ext4_xattr_inode_iget:436: comm syz.6.8550: Parent and EA inode have the same ino 15 [ 758.408919][T30736] EXT4-fs (loop6): Remounting filesystem read-only [ 758.415467][T30736] EXT4-fs warning (device loop6): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 758.429472][T30736] EXT4-fs (loop6): 1 orphan inode deleted [ 758.435661][T30736] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 758.549307][T30752] loop7: detected capacity change from 0 to 8192 [ 758.616259][ T3375] vhci_hcd: vhci_device speed not set [ 758.719645][T30752] bond0: (slave vlan3): Opening slave failed [ 758.815963][T30752] loop7: detected capacity change from 0 to 128 [ 758.832305][T30752] ext4 filesystem being mounted at /566/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 759.253283][T30772] loop3: detected capacity change from 0 to 512 [ 759.291916][T30772] EXT4-fs (loop3): too many log groups per flexible block group [ 759.299751][T30772] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 759.308398][T30772] EXT4-fs (loop3): mount failed [ 759.423223][T30778] loop3: detected capacity change from 0 to 512 [ 759.432363][T30780] sd 0:0:1:0: device reset [ 759.447755][T30778] EXT4-fs: Ignoring removed oldalloc option [ 759.492771][T30778] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.8562: Parent and EA inode have the same ino 15 [ 759.543297][T30778] EXT4-fs (loop3): Remounting filesystem read-only [ 759.550002][T30778] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 759.611909][T30778] EXT4-fs (loop3): 1 orphan inode deleted [ 759.639215][T30778] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 759.742410][T30791] loop7: detected capacity change from 0 to 164 [ 759.945455][T30791] rock: directory entry would overflow storage [ 759.951792][T30791] rock: sig=0x4f50, size=4, remaining=3 [ 759.957457][T30791] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 759.967018][T30804] loop6: detected capacity change from 0 to 512 [ 759.988406][T30804] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #15: comm syz.6.8572: casefold flag without casefold feature [ 760.031063][T30804] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.8572: couldn't read orphan inode 15 (err -117) [ 760.072594][T30807] loop5: detected capacity change from 0 to 512 [ 760.100135][T30804] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8572'. [ 760.129748][T30804] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 760.138864][T30804] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (79) [ 760.153296][T30807] EXT4-fs (loop5): too many log groups per flexible block group [ 760.161068][T30807] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 760.185272][T30807] EXT4-fs (loop5): mount failed [ 760.356060][T30818] loop6: detected capacity change from 0 to 1024 [ 760.373951][T30818] EXT4-fs: Ignoring removed orlov option [ 760.551802][T30826] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 761.103515][T30841] loop7: detected capacity change from 0 to 512 [ 761.132830][T30841] EXT4-fs: Ignoring removed oldalloc option [ 761.133064][T30843] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 761.154222][T30841] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.8585: Parent and EA inode have the same ino 15 [ 761.188945][T30841] EXT4-fs (loop7): Remounting filesystem read-only [ 761.195490][T30841] EXT4-fs warning (device loop7): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 761.214522][T30841] EXT4-fs (loop7): 1 orphan inode deleted [ 761.220826][T30841] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 761.404261][T30848] loop7: detected capacity change from 0 to 512 [ 761.454386][T30848] EXT4-fs (loop7): too many log groups per flexible block group [ 761.462174][T30848] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 761.472331][T30848] EXT4-fs (loop7): mount failed [ 761.604827][T30856] loop7: detected capacity change from 0 to 1024 [ 761.617361][T30856] EXT4-fs: Ignoring removed nobh option [ 761.638688][T30856] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 761.687784][T30864] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8592'. [ 761.803905][T30868] loop8: detected capacity change from 0 to 164 [ 761.898940][T30868] rock: directory entry would overflow storage [ 761.905227][T30868] rock: sig=0x4f50, size=4, remaining=3 [ 761.911204][T30868] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 762.043965][T30870] loop6: detected capacity change from 0 to 512 [ 762.097214][T30870] EXT4-fs (loop6): too many log groups per flexible block group [ 762.104955][T30870] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 762.115824][T30870] EXT4-fs (loop6): mount failed [ 762.178135][T30880] loop8: detected capacity change from 0 to 512 [ 762.200008][T30880] EXT4-fs: Ignoring removed oldalloc option [ 762.243025][T30880] EXT4-fs error (device loop8): ext4_xattr_inode_iget:436: comm syz.8.8598: Parent and EA inode have the same ino 15 [ 762.264112][T30886] loop3: detected capacity change from 0 to 164 [ 762.286576][T30880] EXT4-fs (loop8): Remounting filesystem read-only [ 762.293231][T30880] EXT4-fs warning (device loop8): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 762.308043][T30880] EXT4-fs (loop8): 1 orphan inode deleted [ 762.318444][T30880] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 762.328483][ T29] kauditd_printk_skb: 1431 callbacks suppressed [ 762.328498][ T29] audit: type=1326 audit(1738267428.274:133882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30878 comm="syz.8.8598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7bd83cb710 code=0x7ffc0000 [ 762.387788][T30891] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 762.399528][T30886] rock: directory entry would overflow storage [ 762.405820][T30886] rock: sig=0x4f50, size=4, remaining=3 [ 762.411524][T30886] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 762.413969][ T29] audit: type=1400 audit(1738267428.274:133883): avc: denied { read write } for pid=30878 comm="syz.8.8598" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 762.443357][ T29] audit: type=1400 audit(1738267428.274:133884): avc: denied { open } for pid=30878 comm="syz.8.8598" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 762.467652][ T29] audit: type=1326 audit(1738267428.274:133885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30878 comm="syz.8.8598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7bd83cc9ab code=0x7ffc0000 [ 762.491391][ T29] audit: type=1400 audit(1738267428.274:133886): avc: denied { ioctl } for pid=30878 comm="syz.8.8598" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 762.517110][ T29] audit: type=1326 audit(1738267428.274:133887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30878 comm="syz.8.8598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7bd83cba0a code=0x7ffc0000 [ 762.540613][ T29] audit: type=1326 audit(1738267428.274:133888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30878 comm="syz.8.8598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd83ccda9 code=0x7ffc0000 [ 762.564614][ T29] audit: type=1326 audit(1738267428.274:133889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30878 comm="syz.8.8598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd83ccda9 code=0x7ffc0000 [ 762.588454][ T29] audit: type=1400 audit(1738267428.274:133890): avc: denied { map_create } for pid=30887 comm="syz.6.8603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 762.607918][ T29] audit: type=1400 audit(1738267428.274:133891): avc: denied { bpf } for pid=30887 comm="syz.6.8603" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 762.790924][T30897] loop7: detected capacity change from 0 to 1024 [ 762.798820][T30897] EXT4-fs: Ignoring removed nobh option [ 762.811947][T30897] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 762.867780][T30901] loop3: detected capacity change from 0 to 164 [ 762.917944][T30901] rock: directory entry would overflow storage [ 762.924142][T30901] rock: sig=0x4f50, size=4, remaining=3 [ 762.929780][T30901] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 763.299754][T30912] loop3: detected capacity change from 0 to 2048 [ 763.329673][T30915] loop7: detected capacity change from 0 to 512 [ 763.370206][T30915] EXT4-fs (loop7): too many log groups per flexible block group [ 763.377982][T30915] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 763.402922][T30912] netlink: 252 bytes leftover after parsing attributes in process `syz.3.8613'. [ 763.435564][T30920] netem: change failed [ 763.448928][T30915] EXT4-fs (loop7): mount failed [ 763.459727][T30906] loop8: detected capacity change from 0 to 8192 [ 763.498418][T30920] netlink: 'syz.6.8615': attribute type 16 has an invalid length. [ 763.506358][T30920] netlink: 'syz.6.8615': attribute type 17 has an invalid length. [ 763.581138][T30920] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 763.742833][T30932] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 763.938465][T30937] loop3: detected capacity change from 0 to 1024 [ 763.965574][T30937] EXT4-fs: Ignoring removed nobh option [ 763.999258][T30937] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 764.212054][T30946] loop5: detected capacity change from 0 to 512 [ 764.260118][T30946] EXT4-fs: Ignoring removed oldalloc option [ 764.335672][T30946] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.8624: Parent and EA inode have the same ino 15 [ 764.365783][T30946] EXT4-fs (loop5): Remounting filesystem read-only [ 764.372371][T30946] EXT4-fs warning (device loop5): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 764.382549][T30946] EXT4-fs (loop5): 1 orphan inode deleted [ 764.388670][T30946] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 764.422531][T30955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 764.461072][T30954] loop3: detected capacity change from 0 to 1024 [ 764.483662][T30954] EXT4-fs: Ignoring removed orlov option [ 764.665163][T30961] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 764.731129][T30963] loop6: detected capacity change from 0 to 2048 [ 764.795052][T30963] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a800c029, mo2=0002] [ 764.829864][T30963] System zones: 0-7 [ 764.891785][T30963] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8630: bg 0: block 234: padding at end of block bitmap is not set [ 764.918367][T30969] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8631'. [ 764.928211][T30965] loop5: detected capacity change from 0 to 8192 [ 764.969020][T30963] EXT4-fs (loop6): Remounting filesystem read-only [ 765.472504][T30982] loop6: detected capacity change from 0 to 1024 [ 765.485801][T30982] EXT4-fs: Ignoring removed nobh option [ 765.501353][T30982] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 765.717064][T30987] loop3: detected capacity change from 0 to 512 [ 765.737865][T30987] EXT4-fs: Ignoring removed oldalloc option [ 765.768913][T30987] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.8637: Parent and EA inode have the same ino 15 [ 765.818095][T30987] EXT4-fs (loop3): Remounting filesystem read-only [ 765.824653][T30987] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 765.888707][T30987] EXT4-fs (loop3): 1 orphan inode deleted [ 765.921733][T30987] EXT4-fs mount: 69 callbacks suppressed [ 765.921753][T30987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 766.012055][T30987] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 766.047050][T30987] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.394696][T31018] netem: change failed [ 766.451442][T31018] netlink: 'syz.8.8647': attribute type 16 has an invalid length. [ 766.459445][T31018] netlink: 'syz.8.8647': attribute type 17 has an invalid length. [ 766.626290][T31018] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 766.673772][T31000] lo speed is unknown, defaulting to 1000 [ 766.964608][T31035] loop7: detected capacity change from 0 to 512 [ 767.000098][T31035] EXT4-fs: Ignoring removed oldalloc option [ 767.063340][T31035] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.8655: Parent and EA inode have the same ino 15 [ 767.114270][T31035] EXT4-fs (loop7): Remounting filesystem read-only [ 767.120932][T31035] EXT4-fs warning (device loop7): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 767.157351][T31038] loop3: detected capacity change from 0 to 8192 [ 767.175573][T31000] chnl_net:caif_netlink_parms(): no params data found [ 767.210845][T31035] EXT4-fs (loop7): 1 orphan inode deleted [ 767.260791][T31035] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 767.306483][T31035] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 767.313550][T31035] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.410776][ T29] kauditd_printk_skb: 1496 callbacks suppressed [ 767.410838][ T29] audit: type=1326 audit(1738267433.354:135388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31034 comm="syz.7.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ed5b5b710 code=0x7ffc0000 [ 767.450082][ T29] audit: type=1400 audit(1738267433.354:135389): avc: denied { read write } for pid=31034 comm="syz.7.8655" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 767.474446][ T29] audit: type=1400 audit(1738267433.354:135390): avc: denied { open } for pid=31034 comm="syz.7.8655" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 767.498732][ T29] audit: type=1326 audit(1738267433.354:135391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31034 comm="syz.7.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4ed5b5c9ab code=0x7ffc0000 [ 767.522445][ T29] audit: type=1400 audit(1738267433.354:135392): avc: denied { ioctl } for pid=31034 comm="syz.7.8655" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 767.548298][ T29] audit: type=1326 audit(1738267433.354:135393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31034 comm="syz.7.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4ed5b5ba0a code=0x7ffc0000 [ 767.571827][ T29] audit: type=1326 audit(1738267433.354:135394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31034 comm="syz.7.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed5b5cda9 code=0x7ffc0000 [ 767.595638][ T29] audit: type=1326 audit(1738267433.354:135395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31034 comm="syz.7.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed5b5cda9 code=0x7ffc0000 [ 767.698992][T31052] audit: audit_backlog=65 > audit_backlog_limit=64 [ 767.705597][T31052] audit: audit_lost=264 audit_rate_limit=0 audit_backlog_limit=64 [ 767.773068][T31000] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.780244][T31000] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.811625][T31000] bridge_slave_0: entered allmulticast mode [ 767.818242][T31000] bridge_slave_0: entered promiscuous mode [ 767.827205][T31000] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.834286][T31000] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.841750][T31000] bridge_slave_1: entered allmulticast mode [ 767.848448][T31000] bridge_slave_1: entered promiscuous mode [ 767.883102][T31000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 767.895081][T31058] loop5: detected capacity change from 0 to 164 [ 767.923812][T31000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 767.999652][T31063] rock: directory entry would overflow storage [ 768.005840][T31063] rock: sig=0x4f50, size=4, remaining=3 [ 768.011475][T31063] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 768.033453][T31000] team0: Port device team_slave_0 added [ 768.052314][T31000] team0: Port device team_slave_1 added [ 768.146812][T31000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.153780][T31000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 768.179805][T31000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 768.206492][T31000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 768.213533][T31000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 768.239372][T31074] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 768.239497][T31000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 768.360711][T31079] loop7: detected capacity change from 0 to 512 [ 768.368887][T31079] EXT4-fs: Ignoring removed oldalloc option [ 768.385834][T31000] hsr_slave_0: entered promiscuous mode [ 768.392526][T31000] hsr_slave_1: entered promiscuous mode [ 768.401314][T31079] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.8669: Parent and EA inode have the same ino 15 [ 768.402293][T31000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 768.421401][T31000] Cannot create hsr debugfs directory [ 768.467575][T31079] EXT4-fs (loop7): Remounting filesystem read-only [ 768.474135][T31079] EXT4-fs warning (device loop7): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 768.486373][T31079] EXT4-fs (loop7): 1 orphan inode deleted [ 768.513369][T31079] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 768.525566][T31079] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 768.532499][T31079] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.595360][T31086] loop7: detected capacity change from 0 to 1024 [ 768.606923][T31000] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.632217][T31075] loop5: detected capacity change from 0 to 8192 [ 768.641809][T31086] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 768.671545][T31086] EXT4-fs (loop7): shut down requested (0) [ 768.700777][T31000] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.731068][T31092] $Hÿ: renamed from bond0 (while UP) [ 768.739437][T31092] $Hÿ: entered promiscuous mode [ 768.744513][T31092] bond_slave_0: entered promiscuous mode [ 768.750437][T31092] bond_slave_1: entered promiscuous mode [ 768.797078][T31000] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.894270][T31000] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.921888][T31096] loop8: detected capacity change from 0 to 164 [ 769.041328][T31093] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 769.064974][T31000] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 769.084123][T31104] rock: directory entry would overflow storage [ 769.090411][T31104] rock: sig=0x4f50, size=4, remaining=3 [ 769.095984][T31104] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 769.138108][T31000] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 769.150946][T31093] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 769.183486][T31000] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 769.230835][T31000] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 769.324949][T31101] loop3: detected capacity change from 0 to 8192 [ 769.418742][T31109] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8676'. [ 769.427838][T31109] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8676'. [ 769.568726][T19524] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.684288][T31117] FAULT_INJECTION: forcing a failure. [ 769.684288][T31117] name failslab, interval 1, probability 0, space 0, times 0 [ 769.697028][T31117] CPU: 0 UID: 0 PID: 31117 Comm: syz.7.8680 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 769.697050][T31117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 769.697060][T31117] Call Trace: [ 769.697067][T31117] [ 769.697073][T31117] dump_stack_lvl+0xf2/0x150 [ 769.697097][T31117] dump_stack+0x15/0x1a [ 769.697181][T31117] should_fail_ex+0x24a/0x260 [ 769.697210][T31117] should_failslab+0x8f/0xb0 [ 769.697237][T31117] __kmalloc_node_noprof+0xad/0x410 [ 769.697302][T31117] ? vmemdup_user+0x42/0x1b0 [ 769.697328][T31117] vmemdup_user+0x42/0x1b0 [ 769.697347][T31117] path_setxattrat+0x1c9/0x310 [ 769.697385][T31117] __x64_sys_setxattr+0x6e/0x90 [ 769.697468][T31117] x64_sys_call+0x2247/0x2dc0 [ 769.697491][T31117] do_syscall_64+0xc9/0x1c0 [ 769.697579][T31117] ? clear_bhb_loop+0x55/0xb0 [ 769.697602][T31117] ? clear_bhb_loop+0x55/0xb0 [ 769.697684][T31117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.697710][T31117] RIP: 0033:0x7f4ed5b5cda9 [ 769.697723][T31117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 769.697740][T31117] RSP: 002b:00007f4ed41c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 769.697813][T31117] RAX: ffffffffffffffda RBX: 00007f4ed5d75fa0 RCX: 00007f4ed5b5cda9 [ 769.697826][T31117] RDX: 0000000020001400 RSI: 00000000200001c0 RDI: 0000000000000000 [ 769.697839][T31117] RBP: 00007f4ed41c7090 R08: 0000000000000000 R09: 0000000000000000 [ 769.697849][T31117] R10: 0000000000000835 R11: 0000000000000246 R12: 0000000000000001 [ 769.697859][T31117] R13: 0000000000000000 R14: 00007f4ed5d75fa0 R15: 00007ffe731df568 [ 769.697875][T31117] [ 769.945627][T31122] loop5: detected capacity change from 0 to 512 [ 769.974679][T31122] EXT4-fs: Ignoring removed oldalloc option [ 769.987441][T31000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 770.028069][T31122] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.8681: Parent and EA inode have the same ino 15 [ 770.044041][T31000] 8021q: adding VLAN 0 to HW filter on device team0 [ 770.082487][ T563] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.089743][ T563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 770.130292][T31122] EXT4-fs (loop5): Remounting filesystem read-only [ 770.136871][T31122] EXT4-fs warning (device loop5): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 770.171438][ T3406] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.178667][ T3406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 770.194522][T31122] EXT4-fs (loop5): 1 orphan inode deleted [ 770.212062][T31122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.213800][T31132] netem: change failed [ 770.260118][T31129] netem: change failed [ 770.285250][T31137] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8685'. [ 770.289698][T31122] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 770.308140][T31132] netlink: 'syz.3.8683': attribute type 16 has an invalid length. [ 770.315996][T31132] netlink: 'syz.3.8683': attribute type 17 has an invalid length. [ 770.381723][T31122] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.469683][T31132] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 770.480890][T31129] netlink: 'syz.7.8684': attribute type 16 has an invalid length. [ 770.488857][T31129] netlink: 'syz.7.8684': attribute type 17 has an invalid length. [ 770.516276][T31132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 770.670428][T31129] bridge0: left promiscuous mode [ 770.702986][T31129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 770.727479][T31151] loop3: detected capacity change from 0 to 1024 [ 770.745644][T31151] EXT4-fs: Ignoring removed nobh option [ 770.758317][T31151] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 770.781532][T31129] 8021q: adding VLAN 0 to HW filter on device team0 [ 770.782486][T31151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 770.808379][T31154] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8691'. [ 770.833588][T31129] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 770.982404][T31000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 771.210085][T22751] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.263580][T31158] loop5: detected capacity change from 0 to 8192 [ 771.419506][T31175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8695'. [ 771.574205][T31179] loop8: detected capacity change from 0 to 2048 [ 771.645403][T31179] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a800c029, mo2=0002] [ 771.685043][T31179] System zones: 0-7 [ 771.698733][T31179] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 771.734247][T31190] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 771.740858][T31194] netem: change failed [ 771.740875][T31190] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 771.740970][T31190] vhci_hcd vhci_hcd.0: Device attached [ 771.766421][T31196] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 771.772939][T31196] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 771.780560][T31196] vhci_hcd vhci_hcd.0: Device attached [ 771.800165][T31179] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.8696: bg 0: block 234: padding at end of block bitmap is not set [ 771.802169][T31194] netlink: 'syz.7.8699': attribute type 16 has an invalid length. [ 771.822591][T31194] netlink: 'syz.7.8699': attribute type 17 has an invalid length. [ 771.843236][T31190] loop3: detected capacity change from 0 to 1024 [ 771.850011][T31194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 771.868287][T31190] EXT4-fs: Ignoring removed nomblk_io_submit option [ 771.890303][T31000] veth0_vlan: entered promiscuous mode [ 771.890450][T31179] EXT4-fs (loop8): Remounting filesystem read-only [ 771.935720][T31000] veth1_vlan: entered promiscuous mode [ 771.954473][T31190] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c119, mo2=0002] [ 771.972426][T31000] veth0_macvtap: entered promiscuous mode [ 771.979544][T31000] veth1_macvtap: entered promiscuous mode [ 771.993360][T31000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.997035][ T3377] usb 7-1: new high-speed USB device number 40 using vhci_hcd [ 772.004268][T31000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.021603][T31000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.032113][T31000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.041949][T31000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.052451][T31000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.057817][T31190] System zones: 0-1, 3-12 [ 772.062299][T31000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.077157][T31000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.087128][T31000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.097659][T31000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.102506][T31190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 772.107559][T31000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.107573][T31000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.107602][T31000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.107614][T31000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.117416][T31000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 772.169014][T29604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.171753][T31000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.188497][T31000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.198403][T31000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.209052][T31000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.218985][T31000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.229479][T31000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.239318][T31000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.249777][T31000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.259672][T31000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.270126][T31000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.279942][T31000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.290481][T31000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.300379][T31000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.310919][T31000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.321994][T31000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 772.334436][T31000] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.343258][T31000] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.352013][T31000] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.360790][T31000] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.419514][ T29] kauditd_printk_skb: 1316 callbacks suppressed [ 772.419529][ T29] audit: type=1400 audit(1738267438.364:136681): avc: denied { write } for pid=31210 comm="syz.8.8702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 772.423168][T31212] netlink: 36 bytes leftover after parsing attributes in process `syz.8.8702'. [ 772.459906][ T29] audit: type=1400 audit(1738267438.394:136682): avc: denied { read append open } for pid=31187 comm="syz.3.8698" path="/554/file1/cgroup.events" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 772.480733][T31190] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(14) [ 772.484727][ T29] audit: type=1400 audit(1738267438.394:136683): avc: denied { setattr } for pid=31187 comm="syz.3.8698" name="cgroup.events" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 772.491176][T31190] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 772.491307][T31190] vhci_hcd vhci_hcd.0: Device attached [ 772.514286][ T29] audit: type=1400 audit(1738267438.404:136684): avc: denied { read write } for pid=19524 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 772.552097][ T29] audit: type=1400 audit(1738267438.404:136685): avc: denied { open } for pid=19524 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 772.576503][ T29] audit: type=1400 audit(1738267438.404:136686): avc: denied { ioctl } for pid=19524 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 772.608422][T31197] vhci_hcd: connection closed [ 772.608575][T31192] vhci_hcd: connection reset by peer [ 772.629041][T31214] vhci_hcd: connection closed [ 772.636454][ T2269] vhci_hcd: stop threads [ 772.645409][ T2269] vhci_hcd: release socket [ 772.649943][ T2269] vhci_hcd: disconnect device [ 772.663773][ T29] audit: type=1400 audit(1738267438.484:136687): avc: denied { execmem } for pid=31210 comm="syz.8.8702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 772.683377][ T29] audit: type=1400 audit(1738267438.494:136688): avc: denied { prog_load } for pid=31210 comm="syz.8.8702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 772.702958][ T29] audit: type=1400 audit(1738267438.494:136689): avc: denied { bpf } for pid=31210 comm="syz.8.8702" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 772.724018][ T29] audit: type=1400 audit(1738267438.514:136690): avc: denied { prog_load } for pid=31210 comm="syz.8.8702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 772.747220][ T2269] vhci_hcd: stop threads [ 772.751542][ T2269] vhci_hcd: release socket [ 772.755992][ T2269] vhci_hcd: disconnect device [ 772.762062][ T2269] vhci_hcd: stop threads [ 772.766401][ T2269] vhci_hcd: release socket [ 772.770998][ T2269] vhci_hcd: disconnect device [ 772.930546][T31223] loop6: detected capacity change from 0 to 512 [ 773.117971][T31233] $Hÿ: renamed from bond0 (while UP) [ 773.125365][T31233] $Hÿ: entered promiscuous mode [ 773.130571][T31233] bond_slave_0: entered promiscuous mode [ 773.136401][T31233] bond_slave_1: entered promiscuous mode [ 773.143557][T31239] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8708'. [ 773.162655][T31237] loop5: detected capacity change from 0 to 512 [ 773.213813][T22751] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 773.235313][ T28] bridge_slave_1: left allmulticast mode [ 773.241097][ T28] bridge_slave_1: left promiscuous mode [ 773.246902][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.275131][ T28] bridge_slave_0: left allmulticast mode [ 773.280870][ T28] bridge_slave_0: left promiscuous mode [ 773.286642][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.299428][T31237] EXT4-fs (loop5): too many log groups per flexible block group [ 773.307249][T31237] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 773.314596][T31237] EXT4-fs (loop5): mount failed [ 773.400384][T31246] 9pnet_fd: Insufficient options for proto=fd [ 773.408449][T31248] loop3: detected capacity change from 0 to 2048 [ 773.478136][T31246] loop6: detected capacity change from 0 to 512 [ 773.501358][T31248] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a800c029, mo2=0002] [ 773.514541][T31246] ext4: Unknown parameter 'subj_type' [ 773.527704][T31248] System zones: 0-7 [ 773.532091][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 773.540203][T31248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 773.560720][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 773.576626][ T28] bond0 (unregistering): Released all slaves [ 773.597080][ T28] bond1 (unregistering): Released all slaves [ 773.630816][T31248] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8711: bg 0: block 234: padding at end of block bitmap is not set [ 773.642538][ T28] bond2 (unregistering): Released all slaves [ 773.666342][ T28] bond3 (unregistering): Released all slaves [ 773.666562][T31248] EXT4-fs (loop3): Remounting filesystem read-only [ 773.692419][ T28] bond4 (unregistering): Released all slaves [ 773.734720][ T28] bond5 (unregistering): Released all slaves [ 773.771417][T22751] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 773.898843][T31271] loop5: detected capacity change from 0 to 512 [ 773.999508][ T28] hsr_slave_0: left promiscuous mode [ 774.011832][T31275] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 774.018418][T31275] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 774.026115][T31275] vhci_hcd vhci_hcd.0: Device attached [ 774.028861][ T28] hsr_slave_1: left promiscuous mode [ 774.061558][ T28] pim6reg (unregistering): left allmulticast mode [ 774.084080][T31280] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(6) [ 774.088236][T31282] netlink: 'syz.5.8722': attribute type 4 has an invalid length. [ 774.090612][T31280] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 774.106021][T31280] vhci_hcd vhci_hcd.0: Device attached [ 774.204176][ T28] team0 (unregistering): Port device team_slave_0 removed [ 774.205895][T31288] netlink: 'syz.5.8722': attribute type 4 has an invalid length. [ 774.246804][T31275] loop8: detected capacity change from 0 to 1024 [ 774.254443][T31275] EXT4-fs: Ignoring removed nomblk_io_submit option [ 774.286385][ T5284] usb 17-1: new high-speed USB device number 32 using vhci_hcd [ 774.321701][T31275] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c119, mo2=0002] [ 774.368181][T31275] System zones: 0-1, 3-12 [ 774.388948][T31275] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 774.584499][T31275] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(14) [ 774.591145][T31275] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 774.598790][T31275] vhci_hcd vhci_hcd.0: Device attached [ 774.609933][T31304] vhci_hcd: connection closed [ 774.610322][ T28] vhci_hcd: stop threads [ 774.619313][ T28] vhci_hcd: release socket [ 774.623750][ T28] vhci_hcd: disconnect device [ 774.628605][T31276] vhci_hcd: connection reset by peer [ 774.636473][T31281] vhci_hcd: connection closed [ 774.640143][ T28] vhci_hcd: stop threads [ 774.649310][ T28] vhci_hcd: release socket [ 774.653738][ T28] vhci_hcd: disconnect device [ 774.678899][ T28] vhci_hcd: stop threads [ 774.683234][ T28] vhci_hcd: release socket [ 774.687704][ T28] vhci_hcd: disconnect device [ 774.725831][T31311] loop5: detected capacity change from 0 to 2048 [ 774.740751][T31287] lo speed is unknown, defaulting to 1000 [ 774.763534][T31310] loop3: detected capacity change from 0 to 512 [ 774.767872][T31311] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a800c029, mo2=0002] [ 774.780325][T31311] System zones: 0-7 [ 774.784804][T31311] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 774.843928][T31311] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.8728: bg 0: block 234: padding at end of block bitmap is not set [ 774.862977][T31310] EXT4-fs (loop3): too many log groups per flexible block group [ 774.870740][T31310] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 774.904843][T31311] EXT4-fs (loop5): Remounting filesystem read-only [ 774.912128][T31310] EXT4-fs (loop3): mount failed [ 774.969306][T22496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.037797][T31287] chnl_net:caif_netlink_parms(): no params data found [ 775.155047][T29604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.230117][T31287] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.237243][T31287] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.249519][T31287] bridge_slave_0: entered allmulticast mode [ 775.262126][T31287] bridge_slave_0: entered promiscuous mode [ 775.273167][T31342] loop6: detected capacity change from 0 to 164 [ 775.281387][T31287] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.288467][T31287] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.314205][T31343] netlink: 'syz.5.8736': attribute type 4 has an invalid length. [ 775.316614][T31287] bridge_slave_1: entered allmulticast mode [ 775.354489][T31287] bridge_slave_1: entered promiscuous mode [ 775.372317][T31350] rock: directory entry would overflow storage [ 775.378560][T31350] rock: sig=0x4f50, size=4, remaining=3 [ 775.384339][T31350] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 775.405472][T31346] loop3: detected capacity change from 0 to 512 [ 775.425282][T31351] netlink: 'syz.5.8736': attribute type 4 has an invalid length. [ 775.438648][T31346] EXT4-fs: Ignoring removed oldalloc option [ 775.447855][T31287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.468606][T31346] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.8738: Parent and EA inode have the same ino 15 [ 775.499216][T31287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.519101][T31346] EXT4-fs (loop3): Remounting filesystem read-only [ 775.525675][T31346] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 775.568859][T31346] EXT4-fs (loop3): 1 orphan inode deleted [ 775.584950][T31346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.607437][T31346] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 775.620400][T31346] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.645250][T31287] team0: Port device team_slave_0 added [ 775.684242][T31287] team0: Port device team_slave_1 added [ 775.693326][T31358] loop6: detected capacity change from 0 to 2048 [ 775.723313][T31287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.730332][T31287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.756661][T31287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.778082][T31358] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a800c029, mo2=0002] [ 775.786308][T31358] System zones: 0-7 [ 775.791081][T31358] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.806180][T31287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.813293][T31287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.839386][T31287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.842503][T31358] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8741: bg 0: block 234: padding at end of block bitmap is not set [ 775.881911][T31287] hsr_slave_0: entered promiscuous mode [ 775.896574][T31287] hsr_slave_1: entered promiscuous mode [ 775.902763][T31287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 775.910716][T31287] Cannot create hsr debugfs directory [ 775.923536][T31358] EXT4-fs (loop6): Remounting filesystem read-only [ 775.955211][T31367] loop3: detected capacity change from 0 to 512 [ 776.009238][T31356] loop8: detected capacity change from 0 to 8192 [ 776.021523][T31367] EXT4-fs (loop3): too many log groups per flexible block group [ 776.029306][T31367] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 776.037721][T31367] EXT4-fs (loop3): mount failed [ 776.087211][T31000] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.197990][T31376] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 776.204577][T31376] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 776.212198][T31376] vhci_hcd vhci_hcd.0: Device attached [ 776.243837][T31380] netem: change failed [ 776.248089][T31376] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 776.254631][T31376] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 776.262355][T31376] vhci_hcd vhci_hcd.0: Device attached [ 776.277354][T31376] loop3: detected capacity change from 0 to 1024 [ 776.285117][T31376] EXT4-fs: Ignoring removed nomblk_io_submit option [ 776.340255][T31376] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c119, mo2=0002] [ 776.356286][T31376] System zones: 0-1, 3-12 [ 776.377672][T31376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 776.394287][T31380] netlink: 'syz.6.8745': attribute type 16 has an invalid length. [ 776.402202][T31380] netlink: 'syz.6.8745': attribute type 17 has an invalid length. [ 776.464194][T31388] loop5: detected capacity change from 0 to 512 [ 776.479043][T31376] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(14) [ 776.485664][T31376] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 776.493293][T31376] vhci_hcd vhci_hcd.0: Device attached [ 776.510499][T31390] vhci_hcd: connection closed [ 776.510775][T31377] vhci_hcd: connection closed [ 776.510927][ T3406] vhci_hcd: stop threads [ 776.524447][ T3406] vhci_hcd: release socket [ 776.528928][ T3406] vhci_hcd: disconnect device [ 776.529718][T31380] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 776.533930][T31381] vhci_hcd: connection closed [ 776.545419][T31388] EXT4-fs: Ignoring removed oldalloc option [ 776.558901][ T3406] vhci_hcd: stop threads [ 776.563232][ T3406] vhci_hcd: release socket [ 776.567805][ T3406] vhci_hcd: disconnect device [ 776.583969][T31380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 776.585085][ T3406] vhci_hcd: stop threads [ 776.599562][T31287] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 776.603622][ T3406] vhci_hcd: release socket [ 776.603634][ T3406] vhci_hcd: disconnect device [ 776.618201][T31388] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.8748: Parent and EA inode have the same ino 15 [ 776.646284][T31388] EXT4-fs (loop5): Remounting filesystem read-only [ 776.652899][T31388] EXT4-fs warning (device loop5): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 776.663599][T31388] EXT4-fs (loop5): 1 orphan inode deleted [ 776.669767][T31287] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 776.676918][T31388] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 776.693228][T31287] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 776.700122][T31388] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 776.710984][T31287] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 776.719309][T31388] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.819732][T31287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.871438][T31287] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.904219][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.911349][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.960440][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.967589][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.080407][T22751] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.176317][ T3377] vhci_hcd: vhci_device speed not set [ 777.229340][T31411] 9pnet_fd: Insufficient options for proto=fd [ 777.321916][T31411] loop6: detected capacity change from 0 to 512 [ 777.324396][T31417] loop3: detected capacity change from 0 to 1024 [ 777.349525][T31411] ext4: Unknown parameter 'subj_type' [ 777.397304][T31417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 777.428973][ T29] kauditd_printk_skb: 1614 callbacks suppressed [ 777.428988][ T29] audit: type=1400 audit(1738267443.374:138305): avc: denied { prog_load } for pid=31426 comm="syz.8.8763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 777.439514][T31417] EXT4-fs (loop3): shut down requested (0) [ 777.460976][ T29] audit: type=1400 audit(1738267443.374:138306): avc: denied { bpf } for pid=31426 comm="syz.8.8763" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 777.481832][ T29] audit: type=1400 audit(1738267443.374:138307): avc: denied { perfmon } for pid=31426 comm="syz.8.8763" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 777.503178][ T29] audit: type=1400 audit(1738267443.374:138308): avc: denied { mount } for pid=31416 comm="syz.3.8759" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 777.525187][ T29] audit: type=1400 audit(1738267443.374:138309): avc: denied { read write } for pid=31416 comm="syz.3.8759" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 777.550141][ T29] audit: type=1400 audit(1738267443.374:138310): avc: denied { read write open } for pid=31416 comm="syz.3.8759" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 777.575435][ T29] audit: type=1400 audit(1738267443.374:138311): avc: denied { write } for pid=31416 comm="syz.3.8759" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 777.597535][ T29] audit: type=1400 audit(1738267443.374:138312): avc: denied { add_name } for pid=31416 comm="syz.3.8759" name="memory.numa_stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 777.619717][ T29] audit: type=1400 audit(1738267443.374:138313): avc: denied { create } for pid=31416 comm="syz.3.8759" name="memory.numa_stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 777.641225][ T29] audit: type=1400 audit(1738267443.374:138314): avc: denied { read append open } for pid=31416 comm="syz.3.8759" path="/566/file2/memory.numa_stat" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 777.665303][T31427] loop8: detected capacity change from 0 to 1024 [ 777.699478][T31427] EXT4-fs: Ignoring removed nobh option [ 777.722754][T31427] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 777.752005][T31427] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 777.833205][T29604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.845238][T31435] loop6: detected capacity change from 0 to 8192 [ 777.983519][T31429] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 777.995489][T31429] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 778.484002][T22751] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.056553][T31478] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8776'. [ 779.070989][T31466] lo speed is unknown, defaulting to 1000 [ 779.080774][T31478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 779.088465][T31478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 779.108534][T31478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 779.116030][T31478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 779.367691][T31466] chnl_net:caif_netlink_parms(): no params data found [ 779.404221][T31487] loop8: detected capacity change from 0 to 512 [ 779.420085][ T5284] vhci_hcd: vhci_device speed not set [ 779.466367][T31466] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.473503][T31466] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.506868][T31487] EXT4-fs (loop8): too many log groups per flexible block group [ 779.514786][T31487] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 779.521929][T31466] bridge_slave_0: entered allmulticast mode [ 779.528478][T31466] bridge_slave_0: entered promiscuous mode [ 779.534684][T31487] EXT4-fs (loop8): mount failed [ 779.542575][T31466] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.549764][T31466] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.557409][T31466] bridge_slave_1: entered allmulticast mode [ 779.564057][T31466] bridge_slave_1: entered promiscuous mode [ 779.652477][T31466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.702304][ T11] bridge_slave_1: left allmulticast mode [ 779.708128][ T11] bridge_slave_1: left promiscuous mode [ 779.713758][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.754561][ T11] bridge_slave_0: left allmulticast mode [ 779.760347][ T11] bridge_slave_0: left promiscuous mode [ 779.766050][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.980303][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 780.014628][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 780.043557][ T11] bond0 (unregistering): Released all slaves [ 780.069017][T31466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.163970][T31466] team0: Port device team_slave_0 added [ 780.193087][T31466] team0: Port device team_slave_1 added [ 780.275220][T31533] loop6: detected capacity change from 0 to 2048 [ 780.299318][ T11] hsr_slave_0: left promiscuous mode [ 780.305492][ T11] hsr_slave_1: left promiscuous mode [ 780.314220][T31533] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a800c029, mo2=0002] [ 780.323173][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.332940][T31533] System zones: 0-7 [ 780.337843][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 780.347819][T31533] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 780.375626][T31466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.382666][T31466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.408745][T31466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.426291][T31533] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8791: bg 0: block 234: padding at end of block bitmap is not set [ 780.460186][ T11] team0 (unregistering): Port device team_slave_1 removed [ 780.471387][ T11] team0 (unregistering): Port device team_slave_0 removed [ 780.473042][T31533] EXT4-fs (loop6): Remounting filesystem read-only [ 780.519499][T31466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.526587][T31466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.552615][T31466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.567975][T31000] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.713698][T31466] hsr_slave_0: entered promiscuous mode [ 780.731671][T31466] hsr_slave_1: entered promiscuous mode [ 780.759214][T31466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 780.771091][T31466] Cannot create hsr debugfs directory [ 780.779689][T31544] loop5: detected capacity change from 0 to 164 [ 780.911872][T31544] rock: directory entry would overflow storage [ 780.918224][T31544] rock: sig=0x4f50, size=4, remaining=3 [ 780.923917][T31544] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 781.123698][T31557] netlink: 'syz.6.8797': attribute type 4 has an invalid length. [ 781.150784][T31561] loop3: detected capacity change from 0 to 164 [ 781.174570][T31557] netlink: 'syz.6.8797': attribute type 4 has an invalid length. [ 781.224317][T31563] 9pnet_fd: Insufficient options for proto=fd [ 781.238110][T31557] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8797'. [ 781.247200][T31557] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8797'. [ 781.307874][T31568] rock: directory entry would overflow storage [ 781.314115][T31568] rock: sig=0x4f50, size=4, remaining=3 [ 781.319746][T31568] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 781.336417][T31563] loop5: detected capacity change from 0 to 512 [ 781.352137][T31563] ext4: Unknown parameter 'subj_type' [ 781.401866][T31466] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 781.435991][T31466] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 781.470363][T31466] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 781.509138][T31466] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 781.521141][T31573] loop6: detected capacity change from 0 to 512 [ 781.555016][T31573] EXT4-fs: Ignoring removed oldalloc option [ 781.605439][T31573] EXT4-fs error (device loop6): ext4_xattr_inode_iget:436: comm syz.6.8803: Parent and EA inode have the same ino 15 [ 781.642283][T31573] EXT4-fs (loop6): Remounting filesystem read-only [ 781.648878][T31573] EXT4-fs warning (device loop6): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 781.710042][T31573] EXT4-fs (loop6): 1 orphan inode deleted [ 781.732935][T31573] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 781.768569][T31573] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 781.776007][T31466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.780491][T31573] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.788829][T31466] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.804843][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.812031][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.873201][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.880339][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.251228][T31600] loop6: detected capacity change from 0 to 512 [ 782.290505][T31466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 782.300183][T31600] EXT4-fs (loop6): too many log groups per flexible block group [ 782.308030][T31600] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 782.339161][T31600] EXT4-fs (loop6): mount failed [ 782.436773][ T29] kauditd_printk_skb: 1536 callbacks suppressed [ 782.436802][ T29] audit: type=1400 audit(1738267448.374:139851): avc: denied { read write open } for pid=22496 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 782.468524][ T29] audit: type=1400 audit(1738267448.374:139852): avc: denied { read write open } for pid=29604 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 782.493984][ T29] audit: type=1400 audit(1738267448.374:139853): avc: denied { ioctl } for pid=22496 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 782.573837][T31615] loop6: detected capacity change from 0 to 512 [ 782.585689][ T29] audit: type=1400 audit(1738267448.384:139854): avc: denied { ioctl } for pid=29604 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 782.611587][ T29] audit: type=1400 audit(1738267448.434:139855): avc: denied { sys_module } for pid=31466 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 782.615496][T31616] loop5: detected capacity change from 0 to 164 [ 782.633228][ T29] audit: type=1400 audit(1738267448.434:139856): avc: denied { module_request } for pid=31466 comm="syz-executor" kmod="netdevsim7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 782.633277][ T29] audit: type=1400 audit(1738267448.464:139857): avc: denied { read write } for pid=22751 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 782.686274][ T29] audit: type=1400 audit(1738267448.464:139858): avc: denied { open } for pid=22751 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 782.710710][ T29] audit: type=1400 audit(1738267448.464:139859): avc: denied { ioctl } for pid=22751 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 782.720797][T31617] netlink: 'syz.3.8817': attribute type 4 has an invalid length. [ 782.736679][ T29] audit: type=1400 audit(1738267448.474:139860): avc: denied { map_create } for pid=31609 comm="syz.8.8816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 782.820648][T31615] EXT4-fs (loop6): too many log groups per flexible block group [ 782.828402][T31615] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 782.844646][T31615] EXT4-fs (loop6): mount failed [ 782.879400][T31617] netlink: 'syz.3.8817': attribute type 4 has an invalid length. [ 782.911024][T31617] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8817'. [ 782.920186][T31617] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8817'. [ 782.934371][T31627] rock: directory entry would overflow storage [ 782.940622][T31627] rock: sig=0x4f50, size=4, remaining=3 [ 782.946186][T31627] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 783.307560][T31649] netem: change failed [ 783.313034][T31647] loop8: detected capacity change from 0 to 2048 [ 783.351721][T31647] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a800c029, mo2=0002] [ 783.360100][T31647] System zones: 0-7 [ 783.366873][T31647] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 783.414731][T31466] veth0_vlan: entered promiscuous mode [ 783.415176][T31647] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.8824: bg 0: block 234: padding at end of block bitmap is not set [ 783.423394][T31654] loop6: detected capacity change from 0 to 2048 [ 783.450809][T31466] veth1_vlan: entered promiscuous mode [ 783.460064][T31647] EXT4-fs (loop8): Remounting filesystem read-only [ 783.481538][T31466] veth0_macvtap: entered promiscuous mode [ 783.493953][T31466] veth1_macvtap: entered promiscuous mode [ 783.495923][T31654] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a800c029, mo2=0002] [ 783.529423][T29604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.543694][T31466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.550160][T31654] System zones: 0-7 [ 783.554325][T31466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.554341][T31466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.558159][T31654] [ 783.581026][T31466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.585154][T31654] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 783.590858][T31466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.590879][T31466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.590891][T31466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.590906][T31466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.590928][T31466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.654116][T31466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.663988][T31466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.674865][T31466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.685069][T31466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.695537][T31466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.710105][T31466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 783.728181][T31466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.738684][T31466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.748645][T31466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.759123][T31466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.768972][T31466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.779535][T31466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.789367][T31466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.792702][T31662] loop3: detected capacity change from 0 to 512 [ 783.799791][T31466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.799850][T31466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.826577][T31466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.836408][T31466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.846856][T31466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.856690][T31466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.867150][T31466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.882335][T31466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 783.901020][T31654] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8826: bg 0: block 234: padding at end of block bitmap is not set [ 783.918941][T31662] EXT4-fs (loop3): too many log groups per flexible block group [ 783.926824][T31662] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 783.943229][T31662] EXT4-fs (loop3): mount failed [ 783.955650][T31466] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.964371][T31654] EXT4-fs (loop6): Remounting filesystem read-only [ 783.971004][T31466] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.979783][T31466] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.988572][T31466] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.998113][T31000] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.093408][T31669] netlink: 'syz.8.8830': attribute type 4 has an invalid length. [ 784.149430][T31669] netlink: 'syz.8.8830': attribute type 4 has an invalid length. [ 784.268110][T31676] netlink: 'syz.5.8833': attribute type 4 has an invalid length. [ 784.376441][T31676] netlink: 'syz.5.8833': attribute type 4 has an invalid length. [ 784.430702][T31676] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8833'. [ 784.439785][T31676] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8833'. [ 784.457903][T31681] loop8: detected capacity change from 0 to 1024 [ 784.488266][T31681] EXT4-fs: Ignoring removed nobh option [ 784.542752][T31681] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 784.606096][T31681] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 784.770519][T31699] loop3: detected capacity change from 0 to 2048 [ 784.779444][T29604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.845114][T31699] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a800c029, mo2=0002] [ 784.866449][T31699] System zones: 0-7 [ 784.873059][T31699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 784.917866][T31699] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8839: bg 0: block 234: padding at end of block bitmap is not set [ 784.984663][T31699] EXT4-fs (loop3): Remounting filesystem read-only [ 785.011594][T31717] netem: change failed [ 785.033501][T31717] netlink: 'syz.6.8842': attribute type 16 has an invalid length. [ 785.041436][T31717] netlink: 'syz.6.8842': attribute type 17 has an invalid length. [ 785.109105][T22751] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.139872][T31717] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 785.163906][T31712] loop8: detected capacity change from 0 to 8192 [ 785.823921][T31737] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8849'. [ 785.833124][T31737] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8849'. [ 786.270378][T31763] loop5: detected capacity change from 0 to 1024 [ 786.307687][T31763] EXT4-fs: Ignoring removed nobh option [ 786.329996][T31763] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 786.377900][T31762] loop7: detected capacity change from 0 to 512 [ 786.415116][T31762] EXT4-fs: Ignoring removed oldalloc option [ 786.432384][T31763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 786.508786][T31762] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.8858: Parent and EA inode have the same ino 15 [ 786.539725][T31762] EXT4-fs (loop7): Remounting filesystem read-only [ 786.546360][T31762] EXT4-fs warning (device loop7): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 786.630824][T31762] EXT4-fs (loop7): 1 orphan inode deleted [ 786.681391][T31762] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 786.697941][T31779] 9pnet_fd: Insufficient options for proto=fd [ 786.718885][T22496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.734550][T31762] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 786.751530][T31779] loop8: detected capacity change from 0 to 512 [ 786.764949][T31762] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.789021][T31779] ext4: Unknown parameter 'subj_type' [ 786.942957][T31787] validate_nla: 2 callbacks suppressed [ 786.943046][T31787] netlink: 'syz.6.8865': attribute type 4 has an invalid length. [ 787.055626][T31787] netlink: 'syz.6.8865': attribute type 4 has an invalid length. [ 787.059007][T31784] loop5: detected capacity change from 0 to 8192 [ 787.117075][T31787] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8865'. [ 787.126113][T31787] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8865'. [ 787.280667][T31795] loop3: detected capacity change from 0 to 512 [ 787.303218][T31799] loop7: detected capacity change from 0 to 512 [ 787.311548][T31795] EXT4-fs: Ignoring removed oldalloc option [ 787.341125][T31802] loop6: detected capacity change from 0 to 512 [ 787.345995][T31795] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.8868: Parent and EA inode have the same ino 15 [ 787.363973][T31795] EXT4-fs (loop3): Remounting filesystem read-only [ 787.370584][T31795] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 787.377382][T31799] EXT4-fs (loop7): too many log groups per flexible block group [ 787.388260][T31795] EXT4-fs (loop3): 1 orphan inode deleted [ 787.388627][T31795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 787.394075][T31799] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 787.406174][T31795] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 787.420039][T31795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.430293][T31799] EXT4-fs (loop7): mount failed [ 787.432728][T31802] EXT4-fs (loop6): too many log groups per flexible block group [ 787.442944][T31802] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 787.449936][ T29] kauditd_printk_skb: 1488 callbacks suppressed [ 787.449948][ T29] audit: type=1326 audit(1738267453.384:141349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31794 comm="syz.3.8868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f54044cb710 code=0x7ffc0000 [ 787.480017][ T29] audit: type=1400 audit(1738267453.384:141350): avc: denied { read write } for pid=31794 comm="syz.3.8868" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 787.504415][ T29] audit: type=1400 audit(1738267453.384:141351): avc: denied { open } for pid=31794 comm="syz.3.8868" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 787.528694][ T29] audit: type=1326 audit(1738267453.384:141352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31794 comm="syz.3.8868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f54044cc9ab code=0x7ffc0000 [ 787.539100][T31802] EXT4-fs (loop6): mount failed [ 787.552465][ T29] audit: type=1400 audit(1738267453.384:141353): avc: denied { ioctl } for pid=31794 comm="syz.3.8868" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 787.552501][ T29] audit: type=1326 audit(1738267453.384:141354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31794 comm="syz.3.8868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f54044cba0a code=0x7ffc0000 [ 787.606692][ T29] audit: type=1326 audit(1738267453.384:141355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31794 comm="syz.3.8868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54044ccda9 code=0x7ffc0000 [ 787.630575][ T29] audit: type=1326 audit(1738267453.384:141356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31798 comm="syz.7.8869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa1ddfb710 code=0x7ffc0000 [ 787.654325][ T29] audit: type=1326 audit(1738267453.384:141357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31798 comm="syz.7.8869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffa1ddfc9ab code=0x7ffc0000 [ 787.678446][ T29] audit: type=1326 audit(1738267453.384:141358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31798 comm="syz.7.8869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ffa1ddfba0a code=0x7ffc0000 [ 787.869147][T31811] loop3: detected capacity change from 0 to 1024 [ 787.887838][T31811] EXT4-fs: Ignoring removed nobh option [ 787.931345][T31811] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 787.945260][T31817] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8873'. [ 787.969846][T31811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 788.110264][T31812] loop7: detected capacity change from 0 to 512 [ 788.197385][T31822] loop8: detected capacity change from 0 to 164 [ 788.215343][T22751] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.352898][T31826] loop6: detected capacity change from 0 to 512 [ 788.382489][T31831] rock: directory entry would overflow storage [ 788.388739][T31831] rock: sig=0x4f50, size=4, remaining=3 [ 788.394299][T31831] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 788.444762][T31826] EXT4-fs (loop6): too many log groups per flexible block group [ 788.452298][T31833] loop5: detected capacity change from 0 to 512 [ 788.452512][T31826] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 788.486899][T31826] EXT4-fs (loop6): mount failed [ 788.510733][T31833] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.8881: casefold flag without casefold feature [ 788.575332][T31833] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.8881: couldn't read orphan inode 15 (err -117) [ 788.630961][T31833] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 788.724026][T31833] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8881'. [ 788.743059][T31837] 9pnet_fd: Insufficient options for proto=fd [ 788.756713][T31833] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 788.765546][T31833] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (79) [ 788.844226][T22496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.860707][T31843] loop3: detected capacity change from 0 to 8192 [ 788.861709][T31837] loop7: detected capacity change from 0 to 512 [ 788.896722][T31837] ext4: Unknown parameter 'subj_type' [ 789.063380][T31853] loop5: detected capacity change from 0 to 512 [ 789.096898][T31853] EXT4-fs: Ignoring removed oldalloc option [ 789.125149][T31853] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.8887: Parent and EA inode have the same ino 15 [ 789.155869][T31856] loop6: detected capacity change from 0 to 1024 [ 789.192107][T31856] EXT4-fs: Ignoring removed nobh option [ 789.202474][T31861] 9pnet_fd: Insufficient options for proto=fd [ 789.205906][T31853] EXT4-fs (loop5): Remounting filesystem read-only [ 789.215211][T31853] EXT4-fs warning (device loop5): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 789.221316][T31861] loop7: detected capacity change from 0 to 512 [ 789.233178][T31861] ext4: Unknown parameter 'subj_type' [ 789.249614][T31856] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 789.277869][T31853] EXT4-fs (loop5): 1 orphan inode deleted [ 789.295158][T31856] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 789.317641][T31853] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 789.336600][T31853] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 789.351393][T31853] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.520298][T31871] loop8: detected capacity change from 0 to 2048 [ 789.527232][T31000] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.623024][T31871] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a800c029, mo2=0002] [ 789.636491][T31871] System zones: 0-7 [ 789.640890][T31871] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 789.677300][T31880] loop5: detected capacity change from 0 to 164 [ 789.737407][T31871] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.8894: bg 0: block 234: padding at end of block bitmap is not set [ 789.796089][T31889] rock: directory entry would overflow storage [ 789.802512][T31889] rock: sig=0x4f50, size=4, remaining=3 [ 789.808194][T31889] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 789.829853][T31871] EXT4-fs (loop8): Remounting filesystem read-only [ 789.947067][T29604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.042735][T31897] 9pnet_fd: Insufficient options for proto=fd [ 790.044269][T31900] loop3: detected capacity change from 0 to 512 [ 790.074682][T31900] EXT4-fs: Ignoring removed oldalloc option [ 790.086564][T31902] loop6: detected capacity change from 0 to 1024 [ 790.099789][T31897] loop7: detected capacity change from 0 to 512 [ 790.102079][T31902] EXT4-fs: Ignoring removed nobh option [ 790.113589][T31900] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.8906: Parent and EA inode have the same ino 15 [ 790.120805][T31897] ext4: Unknown parameter 'subj_type' [ 790.130948][T31902] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 790.144037][T31900] EXT4-fs (loop3): Remounting filesystem read-only [ 790.150697][T31900] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 790.162017][T31900] EXT4-fs (loop3): 1 orphan inode deleted [ 790.168631][T31900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 790.180507][T31902] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 790.180781][T31900] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 790.286445][T31909] 9pnet_fd: Insufficient options for proto=fd [ 790.340963][T31909] loop8: detected capacity change from 0 to 512 [ 790.347425][T31913] netlink: 'syz.3.8910': attribute type 4 has an invalid length. [ 790.373325][T31909] ext4: Unknown parameter 'subj_type' [ 790.418386][T31913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8910'. [ 790.427567][T31913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8910'. [ 790.475355][T31911] loop6: detected capacity change from 0 to 8192 [ 790.623603][T31920] loop3: detected capacity change from 0 to 164 [ 790.751684][T31930] rock: directory entry would overflow storage [ 790.757919][T31930] rock: sig=0x4f50, size=4, remaining=3 [ 790.763476][T31930] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 790.929892][T31934] loop8: detected capacity change from 0 to 164 [ 790.982544][T31936] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 790.989072][T31936] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 790.996720][T31936] vhci_hcd vhci_hcd.0: Device attached [ 791.085433][T31943] rock: directory entry would overflow storage [ 791.091864][T31943] rock: sig=0x4f50, size=4, remaining=3 [ 791.097596][T31943] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 791.109425][T31944] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 791.116036][T31944] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 791.123670][T31944] vhci_hcd vhci_hcd.0: Device attached [ 791.220615][T31936] loop3: detected capacity change from 0 to 1024 [ 791.271777][T31936] EXT4-fs: Ignoring removed nomblk_io_submit option [ 791.296389][ T7216] usb 7-1: new high-speed USB device number 41 using vhci_hcd [ 791.335802][T31936] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c119, mo2=0002] [ 791.348976][T31936] System zones: 0-1, 3-12 [ 791.420982][T31955] 9pnet_fd: Insufficient options for proto=fd [ 791.511844][T31936] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(14) [ 791.518465][T31936] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 791.526169][T31936] vhci_hcd vhci_hcd.0: Device attached [ 791.548271][T31955] loop8: detected capacity change from 0 to 512 [ 791.569953][T31955] ext4: Unknown parameter 'subj_type' [ 791.584243][T31961] vhci_hcd: connection closed [ 791.584426][ T11] vhci_hcd: stop threads [ 791.593601][ T11] vhci_hcd: release socket [ 791.598212][ T11] vhci_hcd: disconnect device [ 791.606276][T31946] vhci_hcd: connection closed [ 791.606740][T31938] vhci_hcd: connection reset by peer [ 791.653554][ T11] vhci_hcd: stop threads [ 791.657862][ T11] vhci_hcd: release socket [ 791.662279][ T11] vhci_hcd: disconnect device [ 791.672775][T31942] lo speed is unknown, defaulting to 1000 [ 791.694065][ T11] vhci_hcd: stop threads [ 791.698490][ T11] vhci_hcd: release socket [ 791.702918][ T11] vhci_hcd: disconnect device [ 792.094809][T31983] 9pnet_fd: Insufficient options for proto=fd [ 792.111901][T31983] loop8: detected capacity change from 0 to 512 [ 792.125387][T31942] chnl_net:caif_netlink_parms(): no params data found [ 792.132456][T31983] ext4: Unknown parameter 'subj_type' [ 792.227811][T31953] loop7: detected capacity change from 0 to 8192 [ 792.327204][T31942] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.334382][T31942] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.382345][T31942] bridge_slave_0: entered allmulticast mode [ 792.412043][T31942] bridge_slave_0: entered promiscuous mode [ 792.441491][T31942] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.448702][T31942] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.466024][ T29] kauditd_printk_skb: 1456 callbacks suppressed [ 792.466042][ T29] audit: type=1400 audit(1738267458.404:142815): avc: denied { sys_module } for pid=31991 comm="syz.8.8931" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 792.493706][ T29] audit: type=1400 audit(1738267458.404:142816): avc: denied { module_request } for pid=31991 comm="syz.8.8931" kmod="syztnl1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 792.535827][T31942] bridge_slave_1: entered allmulticast mode [ 792.545477][T31942] bridge_slave_1: entered promiscuous mode [ 792.616451][T32003] audit: audit_backlog=65 > audit_backlog_limit=64 [ 792.622991][T32003] audit: audit_lost=275 audit_rate_limit=0 audit_backlog_limit=64 [ 792.631200][T32003] audit: backlog limit exceeded [ 792.639445][T29604] audit: audit_backlog=65 > audit_backlog_limit=64 [ 792.646156][T29604] audit: audit_lost=276 audit_rate_limit=0 audit_backlog_limit=64 [ 792.654009][T29604] audit: backlog limit exceeded [ 792.667880][ T29] audit: type=1400 audit(1738267458.424:142817): avc: denied { prog_load } for pid=31997 comm="syz.6.8932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 792.671856][T31942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.687291][ T29] audit: type=1400 audit(1738267458.424:142818): avc: denied { bpf } for pid=31997 comm="syz.6.8932" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 792.781223][T32007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8936'. [ 792.795459][T31942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 792.884345][T31942] team0: Port device team_slave_0 added [ 792.897908][T32011] FAULT_INJECTION: forcing a failure. [ 792.897908][T32011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 792.911050][T32011] CPU: 1 UID: 0 PID: 32011 Comm: syz.6.8937 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 792.911082][T32011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 792.911094][T32011] Call Trace: [ 792.911171][T32011] [ 792.911181][T32011] dump_stack_lvl+0xf2/0x150 [ 792.911248][T32011] dump_stack+0x15/0x1a [ 792.911270][T32011] should_fail_ex+0x24a/0x260 [ 792.911309][T32011] should_fail+0xb/0x10 [ 792.911338][T32011] should_fail_usercopy+0x1a/0x20 [ 792.911437][T32011] _copy_from_user+0x1c/0xa0 [ 792.911462][T32011] kstrtouint_from_user+0x76/0xe0 [ 792.911502][T32011] ? 0xffffffff81000000 [ 792.911530][T32011] ? selinux_file_permission+0x22a/0x360 [ 792.911561][T32011] proc_fail_nth_write+0x4f/0x150 [ 792.911592][T32011] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 792.911678][T32011] vfs_write+0x27d/0x920 [ 792.911704][T32011] ksys_write+0xe8/0x1b0 [ 792.911731][T32011] __x64_sys_write+0x42/0x50 [ 792.911783][T32011] x64_sys_call+0x287e/0x2dc0 [ 792.911839][T32011] do_syscall_64+0xc9/0x1c0 [ 792.911875][T32011] ? clear_bhb_loop+0x55/0xb0 [ 792.911910][T32011] ? clear_bhb_loop+0x55/0xb0 [ 792.911944][T32011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.911984][T32011] RIP: 0033:0x7f841ee3b85f [ 792.912054][T32011] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 792.912077][T32011] RSP: 002b:00007f841d486030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 792.912100][T32011] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f841ee3b85f [ 792.912119][T32011] RDX: 0000000000000001 RSI: 00007f841d4860a0 RDI: 0000000000000003 [ 792.912132][T32011] RBP: 00007f841d486090 R08: 0000000000000000 R09: 000000000000001c [ 792.912144][T32011] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 792.912156][T32011] R13: 0000000000000000 R14: 00007f841f056080 R15: 00007ffc9cba5988 [ 792.912174][T32011] [ 792.930229][T31942] team0: Port device team_slave_1 added [ 793.330916][T32013] lo speed is unknown, defaulting to 1000 [ 793.464430][T31942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.471506][T31942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.497496][T31942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.692496][T31942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.699516][T31942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.725535][T31942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 793.746444][T32022] netlink: 'syz.8.8940': attribute type 4 has an invalid length. [ 793.755680][T32027] loop6: detected capacity change from 0 to 164 [ 793.863443][T32033] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8940'. [ 793.872489][T32033] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8940'. [ 793.885410][T32024] rock: directory entry would overflow storage [ 793.891617][T32024] rock: sig=0x4f50, size=4, remaining=3 [ 793.897421][T32024] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 794.004971][T32045] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8946'. [ 794.108361][T31942] hsr_slave_0: entered promiscuous mode [ 794.136419][T31942] hsr_slave_1: entered promiscuous mode [ 794.142667][T31942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 794.205240][T31942] Cannot create hsr debugfs directory [ 794.211078][T32051] netem: change failed [ 794.312993][T32056] loop6: detected capacity change from 0 to 512 [ 794.393536][T32056] EXT4-fs (loop6): too many log groups per flexible block group [ 794.401256][T32056] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 794.431903][T32056] EXT4-fs (loop6): mount failed [ 794.493216][T31942] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.550729][T31942] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.588033][T32053] loop7: detected capacity change from 0 to 8192 [ 794.611337][T31942] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.702294][T31942] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.811769][T31942] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 794.864797][T31942] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 794.881003][T32079] loop8: detected capacity change from 0 to 164 [ 794.900751][T31942] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 794.934610][T31942] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 794.976186][T32084] rock: directory entry would overflow storage [ 794.982492][T32084] rock: sig=0x4f50, size=4, remaining=3 [ 794.988136][T32084] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 795.267669][T32089] loop8: detected capacity change from 0 to 1024 [ 795.339156][T32093] FAULT_INJECTION: forcing a failure. [ 795.339156][T32093] name failslab, interval 1, probability 0, space 0, times 0 [ 795.351895][T32093] CPU: 0 UID: 0 PID: 32093 Comm: syz.6.8963 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 795.351926][T32093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 795.351941][T32093] Call Trace: [ 795.351947][T32093] [ 795.351954][T32093] dump_stack_lvl+0xf2/0x150 [ 795.351986][T32093] dump_stack+0x15/0x1a [ 795.352010][T32093] should_fail_ex+0x24a/0x260 [ 795.352050][T32093] should_failslab+0x8f/0xb0 [ 795.352081][T32093] kmem_cache_alloc_noprof+0x52/0x320 [ 795.352129][T32093] ? vm_area_alloc+0x2c/0x130 [ 795.352157][T32093] vm_area_alloc+0x2c/0x130 [ 795.352178][T32093] do_brk_flags+0x22c/0x750 [ 795.352221][T32093] __se_sys_brk+0x70d/0x8b0 [ 795.352257][T32093] __x64_sys_brk+0x1f/0x30 [ 795.352284][T32093] x64_sys_call+0x2cb6/0x2dc0 [ 795.352312][T32093] do_syscall_64+0xc9/0x1c0 [ 795.352344][T32093] ? clear_bhb_loop+0x55/0xb0 [ 795.352375][T32093] ? clear_bhb_loop+0x55/0xb0 [ 795.352406][T32093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.352435][T32093] RIP: 0033:0x7f841ee3cda9 [ 795.352452][T32093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 795.352472][T32093] RSP: 002b:00007f841d4a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000000c [ 795.352493][T32093] RAX: ffffffffffffffda RBX: 00007f841f055fa0 RCX: 00007f841ee3cda9 [ 795.352512][T32093] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020ffc004 [ 795.352526][T32093] RBP: 00007f841d4a7090 R08: 0000000000000000 R09: 0000000000000000 [ 795.352540][T32093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 795.352553][T32093] R13: 0000000000000000 R14: 00007f841f055fa0 R15: 00007ffc9cba5988 [ 795.352569][T32093] [ 795.430814][T31942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.553797][T31942] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.568152][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.575359][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.592419][T32089] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 795.611728][T32089] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 795.624198][T32089] EXT4-fs (loop8): This should not happen!! Data will be lost [ 795.624198][T32089] [ 795.633905][T32089] EXT4-fs (loop8): Total free blocks count 0 [ 795.639932][T32089] EXT4-fs (loop8): Free/Dirty block details [ 795.641042][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.645817][T32089] EXT4-fs (loop8): free_blocks=0 [ 795.645833][T32089] EXT4-fs (loop8): dirty_blocks=0 [ 795.652883][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.657883][T32089] EXT4-fs (loop8): Block reservation details [ 795.676129][T32089] EXT4-fs (loop8): i_reserved_data_blocks=0 [ 795.920915][T32108] RDS: rds_bind could not find a transport for ::ffff:172.30.0.7, load rds_tcp or rds_rdma? [ 796.099716][T32116] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 796.106297][T32116] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 796.113918][T32116] vhci_hcd vhci_hcd.0: Device attached [ 796.139217][T31942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.170619][T32121] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(6) [ 796.177169][T32121] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 796.184890][T32121] vhci_hcd vhci_hcd.0: Device attached [ 796.194921][T32119] loop7: detected capacity change from 0 to 164 [ 796.215195][T32116] loop8: detected capacity change from 0 to 1024 [ 796.255577][T32116] EXT4-fs: Ignoring removed nomblk_io_submit option [ 796.350336][T32116] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c119, mo2=0002] [ 796.358815][ T3373] usb 17-1: new high-speed USB device number 33 using vhci_hcd [ 796.369245][T32133] rock: directory entry would overflow storage [ 796.375411][T32133] rock: sig=0x4f50, size=4, remaining=3 [ 796.381206][T32133] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 796.381672][T32116] System zones: 0-1, 3-12 [ 796.410561][T32116] EXT4-fs mount: 6 callbacks suppressed [ 796.410603][T32116] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 796.467098][ T7216] vhci_hcd: vhci_device speed not set [ 796.620028][T32116] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(14) [ 796.626711][T32116] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 796.634427][T32116] vhci_hcd vhci_hcd.0: Device attached [ 796.676736][T32146] vhci_hcd: connection closed [ 796.677830][ T563] vhci_hcd: stop threads [ 796.681880][T32117] vhci_hcd: connection reset by peer [ 796.682521][ T563] vhci_hcd: release socket [ 796.682534][ T563] vhci_hcd: disconnect device [ 796.686917][T32123] vhci_hcd: connection closed [ 796.731361][ T563] vhci_hcd: stop threads [ 796.740561][ T563] vhci_hcd: release socket [ 796.744983][ T563] vhci_hcd: disconnect device [ 796.799671][ T563] vhci_hcd: stop threads [ 796.803941][ T563] vhci_hcd: release socket [ 796.808503][ T563] vhci_hcd: disconnect device [ 796.938346][T32159] loop6: detected capacity change from 0 to 512 [ 796.961323][T32159] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #15: comm syz.6.8978: casefold flag without casefold feature [ 796.978462][T32159] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.8978: couldn't read orphan inode 15 (err -117) [ 796.993599][T32159] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 797.013371][T32159] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8978'. [ 797.022941][T32159] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 797.031829][T32159] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (79) [ 797.139273][T31000] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.264634][T29604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.380417][T32173] netlink: 'syz.6.8983': attribute type 4 has an invalid length. [ 797.397634][T32173] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8983'. [ 797.406888][T32173] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8983'. [ 797.467624][ T29] kauditd_printk_skb: 1091 callbacks suppressed [ 797.467641][ T29] audit: type=1400 audit(1738267463.414:143910): avc: denied { map_read map_write } for pid=32174 comm="syz.7.8984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 797.574048][ T29] audit: type=1326 audit(1738267463.414:143911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32176 comm="syz.8.8982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd83ccda9 code=0x7ffc0000 [ 797.597865][ T29] audit: type=1326 audit(1738267463.414:143912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32176 comm="syz.8.8982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bd83ccda9 code=0x7ffc0000 [ 797.621580][ T29] audit: type=1326 audit(1738267463.414:143913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32176 comm="syz.8.8982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd83ccda9 code=0x7ffc0000 [ 797.645255][ T29] audit: type=1326 audit(1738267463.414:143914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32176 comm="syz.8.8982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f7bd83ccda9 code=0x7ffc0000 [ 797.668931][ T29] audit: type=1326 audit(1738267463.414:143915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32176 comm="syz.8.8982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd83ccda9 code=0x7ffc0000 [ 797.692738][ T29] audit: type=1400 audit(1738267463.444:143916): avc: denied { prog_load } for pid=32174 comm="syz.7.8984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 797.712198][ T29] audit: type=1400 audit(1738267463.444:143917): avc: denied { bpf } for pid=32174 comm="syz.7.8984" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 797.733122][ T29] audit: type=1400 audit(1738267463.444:143918): avc: denied { read write } for pid=29604 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 797.757878][ T29] audit: type=1400 audit(1738267463.444:143919): avc: denied { open } for pid=29604 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 797.915274][T32195] loop7: detected capacity change from 0 to 8192 [ 797.956383][T32195] FAULT_INJECTION: forcing a failure. [ 797.956383][T32195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.969544][T32195] CPU: 0 UID: 0 PID: 32195 Comm: syz.7.8988 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 797.969571][T32195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 797.969586][T32195] Call Trace: [ 797.969593][T32195] [ 797.969602][T32195] dump_stack_lvl+0xf2/0x150 [ 797.969699][T32195] dump_stack+0x15/0x1a [ 797.969722][T32195] should_fail_ex+0x24a/0x260 [ 797.969753][T32195] should_fail+0xb/0x10 [ 797.969780][T32195] should_fail_usercopy+0x1a/0x20 [ 797.969817][T32195] strncpy_from_user+0x25/0x210 [ 797.969862][T32195] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 797.969970][T32195] ? getname_flags+0x81/0x3b0 [ 797.970006][T32195] getname_flags+0xb0/0x3b0 [ 797.970043][T32195] __x64_sys_rename+0x33/0x70 [ 797.970076][T32195] x64_sys_call+0x2b1c/0x2dc0 [ 797.970156][T32195] do_syscall_64+0xc9/0x1c0 [ 797.970191][T32195] ? clear_bhb_loop+0x55/0xb0 [ 797.970225][T32195] ? clear_bhb_loop+0x55/0xb0 [ 797.970258][T32195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.970285][T32195] RIP: 0033:0x7ffa1ddfcda9 [ 797.970381][T32195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 797.970407][T32195] RSP: 002b:00007ffa1c467038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 797.970429][T32195] RAX: ffffffffffffffda RBX: 00007ffa1e015fa0 RCX: 00007ffa1ddfcda9 [ 797.970441][T32195] RDX: 0000000000000000 RSI: 0000000020001300 RDI: 0000000020000040 [ 797.970497][T32195] RBP: 00007ffa1c467090 R08: 0000000000000000 R09: 0000000000000000 [ 797.970560][T32195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.970573][T32195] R13: 0000000000000000 R14: 00007ffa1e015fa0 R15: 00007ffc0988f098 [ 797.970593][T32195] [ 798.206614][ T28] bridge_slave_1: left allmulticast mode [ 798.212301][ T28] bridge_slave_1: left promiscuous mode [ 798.218101][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.276705][ T28] bridge_slave_0: left allmulticast mode [ 798.282527][ T28] bridge_slave_0: left promiscuous mode [ 798.288709][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.397596][T32170] lo speed is unknown, defaulting to 1000 [ 798.500995][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 798.527894][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 798.554643][ T28] bond0 (unregistering): Released all slaves [ 798.629771][T32212] loop7: detected capacity change from 0 to 512 [ 798.663379][T32212] EXT4-fs: Ignoring removed oldalloc option [ 798.692754][T32212] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.8993: Parent and EA inode have the same ino 15 [ 798.735400][ T28] hsr_slave_0: left promiscuous mode [ 798.738475][T32212] EXT4-fs (loop7): Remounting filesystem read-only [ 798.747323][T32212] EXT4-fs warning (device loop7): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 798.757447][ T28] hsr_slave_1: left promiscuous mode [ 798.766431][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 798.773616][T32212] EXT4-fs (loop7): 1 orphan inode deleted [ 798.779926][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 798.788124][T32212] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 798.802978][T32212] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 798.823691][T32212] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.895047][ T28] team0 (unregistering): Port device team_slave_1 removed [ 798.921706][ T28] team0 (unregistering): Port device team_slave_0 removed [ 799.122739][T32170] chnl_net:caif_netlink_parms(): no params data found [ 799.351453][T32170] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.358672][T32170] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.404360][T32170] bridge_slave_0: entered allmulticast mode [ 799.434064][T32170] bridge_slave_0: entered promiscuous mode [ 799.493726][T32170] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.500995][T32170] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.524880][T32170] bridge_slave_1: entered allmulticast mode [ 799.552264][T32170] bridge_slave_1: entered promiscuous mode [ 799.604280][T32245] loop7: detected capacity change from 0 to 256 [ 799.651238][T32170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.663866][T32241] loop6: detected capacity change from 0 to 8192 [ 799.685167][T32247] loop3: detected capacity change from 0 to 512 [ 799.701765][T32247] EXT4-fs: Ignoring removed oldalloc option [ 799.715289][T32170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.762557][T32247] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.9005: Parent and EA inode have the same ino 15 [ 799.825070][T32170] team0: Port device team_slave_0 added [ 799.837822][T32247] EXT4-fs (loop3): Remounting filesystem read-only [ 799.844706][T32247] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 799.882707][T32170] team0: Port device team_slave_1 added [ 799.891508][T31000] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 799.899181][T31000] FAT-fs (loop6): Filesystem has been set read-only [ 799.926911][T32247] EXT4-fs (loop3): 1 orphan inode deleted [ 799.935187][T31000] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 799.946962][T32247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 799.984430][T32247] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 799.993950][T32170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.000988][T32170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.027190][T32170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.041042][T32247] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 800.054848][T32170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.061971][T32170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.087969][T32170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.213847][T32170] hsr_slave_0: entered promiscuous mode [ 800.222693][T32170] hsr_slave_1: entered promiscuous mode [ 800.229742][T32170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 800.237544][T32170] Cannot create hsr debugfs directory [ 800.256144][T32262] netlink: 'syz.3.9011': attribute type 4 has an invalid length. [ 800.464793][T32268] loop3: detected capacity change from 0 to 512 [ 800.492749][T32268] EXT4-fs: Ignoring removed oldalloc option [ 800.537757][T32268] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.9015: Parent and EA inode have the same ino 15 [ 800.553212][T32268] EXT4-fs (loop3): Remounting filesystem read-only [ 800.559900][T32268] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 800.570139][T32268] EXT4-fs (loop3): 1 orphan inode deleted [ 800.576340][T32268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 800.589268][T32268] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 800.600773][T32268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 800.736997][T32281] FAULT_INJECTION: forcing a failure. [ 800.736997][T32281] name failslab, interval 1, probability 0, space 0, times 0 [ 800.749692][T32281] CPU: 0 UID: 0 PID: 32281 Comm: syz.8.9017 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 800.749723][T32281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 800.749796][T32281] Call Trace: [ 800.749804][T32281] [ 800.749813][T32281] dump_stack_lvl+0xf2/0x150 [ 800.749846][T32281] dump_stack+0x15/0x1a [ 800.749872][T32281] should_fail_ex+0x24a/0x260 [ 800.749962][T32281] should_failslab+0x8f/0xb0 [ 800.749992][T32281] kmem_cache_alloc_node_noprof+0x59/0x320 [ 800.750033][T32281] ? __alloc_skb+0x10b/0x310 [ 800.750076][T32281] __alloc_skb+0x10b/0x310 [ 800.750103][T32281] netlink_alloc_large_skb+0xad/0xe0 [ 800.750144][T32281] netlink_sendmsg+0x3b4/0x6e0 [ 800.750173][T32281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 800.750301][T32281] __sock_sendmsg+0x140/0x180 [ 800.750327][T32281] ____sys_sendmsg+0x312/0x410 [ 800.750414][T32281] __sys_sendmsg+0x19d/0x230 [ 800.750460][T32281] __x64_sys_sendmsg+0x46/0x50 [ 800.750560][T32281] x64_sys_call+0x2734/0x2dc0 [ 800.750670][T32281] do_syscall_64+0xc9/0x1c0 [ 800.750716][T32281] ? clear_bhb_loop+0x55/0xb0 [ 800.750750][T32281] ? clear_bhb_loop+0x55/0xb0 [ 800.750783][T32281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.750810][T32281] RIP: 0033:0x7f7bd83ccda9 [ 800.750883][T32281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 800.750905][T32281] RSP: 002b:00007f7bd6a37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 800.750951][T32281] RAX: ffffffffffffffda RBX: 00007f7bd85e5fa0 RCX: 00007f7bd83ccda9 [ 800.750966][T32281] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 800.751033][T32281] RBP: 00007f7bd6a37090 R08: 0000000000000000 R09: 0000000000000000 [ 800.751045][T32281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.751065][T32281] R13: 0000000000000000 R14: 00007f7bd85e5fa0 R15: 00007fffc69fcc58 [ 800.751086][T32281] [ 801.025426][T32170] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 801.062577][T32170] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 801.100385][T32170] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 801.138314][T32170] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 801.214653][T32288] loop3: detected capacity change from 0 to 8192 [ 801.242517][T32299] netlink: 'syz.8.9024': attribute type 4 has an invalid length. [ 801.300564][T32269] lo speed is unknown, defaulting to 1000 [ 801.361829][T32301] ================================================================== [ 801.369947][T32301] BUG: KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers [ 801.378480][T32301] [ 801.380812][T32301] write to 0xffff88811e5e1398 of 8 bytes by task 32288 on cpu 1: [ 801.388537][T32301] sync_mapping_buffers+0x159/0x7c0 [ 801.393756][T32301] fat_file_fsync+0xa7/0x100 [ 801.398375][T32301] vfs_fsync_range+0x116/0x130 [ 801.403162][T32301] generic_file_write_iter+0x1c3/0x310 [ 801.408640][T32301] iter_file_splice_write+0x5f1/0x980 [ 801.410587][T32170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.414013][T32301] direct_splice_actor+0x160/0x2c0 [ 801.425730][T32301] splice_direct_to_actor+0x302/0x670 [ 801.431116][T32301] do_splice_direct+0xd7/0x150 [ 801.435890][T32301] do_sendfile+0x398/0x660 [ 801.440332][T32301] __x64_sys_sendfile64+0x110/0x150 [ 801.445566][T32301] x64_sys_call+0xfbd/0x2dc0 [ 801.450185][T32301] do_syscall_64+0xc9/0x1c0 [ 801.454722][T32301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.460647][T32301] [ 801.462977][T32301] read to 0xffff88811e5e1398 of 8 bytes by task 32301 on cpu 0: [ 801.470634][T32301] mark_buffer_dirty_inode+0x96/0x1c0 [ 801.476031][T32301] fat16_ent_put+0x4f/0x60 [ 801.480462][T32301] fat_ent_write+0x66/0xe0 [ 801.484894][T32301] fat_chain_add+0x15f/0x400 [ 801.489500][T32301] fat_get_block+0x46b/0x5e0 [ 801.494112][T32301] __block_write_begin_int+0x417/0xfa0 [ 801.495850][T32170] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.499576][T32301] cont_write_begin+0x546/0x860 [ 801.499608][T32301] fat_write_begin+0x51/0xe0 [ 801.515639][T32301] generic_perform_write+0x1a8/0x4a0 [ 801.520946][T32301] __generic_file_write_iter+0xa1/0x120 [ 801.526530][T32301] generic_file_write_iter+0x8f/0x310 [ 801.531918][T32301] vfs_write+0x77b/0x920 [ 801.536199][T32301] ksys_write+0xe8/0x1b0 [ 801.540469][T32301] __x64_sys_write+0x42/0x50 [ 801.545083][T32301] x64_sys_call+0x287e/0x2dc0 [ 801.549779][T32301] do_syscall_64+0xc9/0x1c0 [ 801.554301][T32301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.560229][T32301] [ 801.562602][T32301] value changed: 0xffff88811e45fb08 -> 0x0000000000000000 [ 801.569726][T32301] [ 801.572055][T32301] Reported by Kernel Concurrency Sanitizer on: [ 801.578205][T32301] CPU: 0 UID: 0 PID: 32301 Comm: syz.3.9022 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 801.588627][T32301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 801.598701][T32301] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 801.609781][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.616904][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.640310][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.647565][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.706621][ T3373] vhci_hcd: vhci_device speed not set [ 802.271691][T28085] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.328978][T28085] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.409167][T28085] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.469378][T28085] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.544667][T28085] bridge_slave_1: left allmulticast mode [ 802.550488][T28085] bridge_slave_1: left promiscuous mode [ 802.556275][T28085] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.567269][T28085] bridge_slave_0: left allmulticast mode [ 802.572922][T28085] bridge_slave_0: left promiscuous mode [ 802.578629][T28085] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.678826][T28085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 802.691800][T28085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 802.709378][T28085] bond0 (unregistering): Released all slaves [ 802.822842][T28085] hsr_slave_0: left promiscuous mode [ 802.832860][T28085] hsr_slave_1: left promiscuous mode [ 802.839106][T28085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 802.846715][T28085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 802.858931][T28085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 802.866731][T28085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 802.880435][T28085] veth1_macvtap: left promiscuous mode [ 802.885936][T28085] veth0_macvtap: left promiscuous mode [ 802.891589][T28085] veth1_vlan: left promiscuous mode [ 802.899792][T28085] veth0_vlan: left promiscuous mode [ 802.986990][T28085] team0 (unregistering): Port device team_slave_1 removed [ 802.997414][T28085] team0 (unregistering): Port device team_slave_0 removed [ 803.744039][T28085] bridge_slave_1: left allmulticast mode [ 803.749800][T28085] bridge_slave_1: left promiscuous mode [ 803.755415][T28085] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.766550][T28085] bridge_slave_0: left allmulticast mode [ 803.772216][T28085] bridge_slave_0: left promiscuous mode [ 803.777939][T28085] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.859339][T28085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 803.871740][T28085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 803.881573][T28085] bond0 (unregistering): Released all slaves [ 803.973303][T28085] hsr_slave_0: left promiscuous mode [ 803.982768][T28085] hsr_slave_1: left promiscuous mode [ 803.988701][T28085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.996451][T28085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 804.058167][T28085] team0 (unregistering): Port device team_slave_1 removed [ 804.072906][T28085] team0 (unregistering): Port device team_slave_0 removed