last executing test programs: 9m26.325810399s ago: executing program 32 (id=56): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000003140)={0x0, 0x60, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xa}, 0x94) 9m25.182262502s ago: executing program 33 (id=72): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80040, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xa, 0x4000000007}, 0x8781, 0x2000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0xffff, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc0}}}}}}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000feffffffffffffff0951000001000000090000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000100014000e"], 0x104}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xf}, @ldst={0x3, 0x2, 0x6, 0x5, 0x2, 0x1, 0x1}], &(0x7f0000000000)='syzkaller\x00', 0x13, 0x0, 0x0, 0x41100, 0x56c775bf5ff54ff3, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x299ec}, 0x94) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0xac9e892802875905, @perf_bp={0x0, 0x5}, 0x0, 0x80000001, 0x0, 0x0, 0x1, 0x624, 0x9, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r3}, 0x3d) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x40, 0x7800, 0x2, 0x6, {{0x1f, 0x4, 0x0, 0x5, 0x7c, 0x67, 0x0, 0x4, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @generic={0x83, 0xf, "0175b54150736b42a0555c39d8"}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @noop, @ssrr={0x89, 0x23, 0x10, [@local, @empty, @empty, @rand_addr=0x64010101, @empty, @multicast2, @remote, @remote]}, @generic={0x82, 0xa, "76c3ee8dd37e68cd"}, @generic={0x7, 0xd, "5c2b6b44d7226cddc0b467"}, @timestamp_prespec={0x44, 0x14, 0x80, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7ff}, {@rand_addr=0x64010101, 0x9}]}]}}}}}) r5 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 9m21.406851074s ago: executing program 34 (id=102): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0xa00004, &(0x7f0000000000)=ANY=[], 0x5, 0x80a, &(0x7f0000000b80)="$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") 9m21.201481308s ago: executing program 35 (id=105): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x58cb}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000001500)=@tcp}, 0x20) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2ecdac547792d1b2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r1, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000300)=[0x0], &(0x7f00000004c0)=[0x0], 0x0, 0xd, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x31, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m20.212169317s ago: executing program 36 (id=117): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r1, &(0x7f00000063c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/194, 0xc2}, 0x9}], 0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x2}, 0x18) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r4, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES16=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@private2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x18, 0x19}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r7 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1010012, &(0x7f0000000080), 0x3, 0x4e2, &(0x7f0000000dc0)="$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") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) fcntl$addseals(r7, 0x409, 0xe) 9m19.857438744s ago: executing program 37 (id=119): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x0) 9m10.672334451s ago: executing program 38 (id=246): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000029a9907d806d2900010000001c0012000c0001"], 0x3c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a80000000060a0b040000000000000000020000004c00048048000180080001006f7366003c00028005000200040000000800034000000001080001400000001408000340000000010500020006000000080003400000000108000340000000010900010073797a30000000000900020073797a320000"], 0xa8}, 0x1, 0x0, 0x0, 0x40050}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x40, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, {0xfffffffc}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0100009fdd8600000000000088a8600081"], 0x3a) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r11, 0x0, 0xfffffffffffffffd}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x1, 0x8, &(0x7f0000002a40)=[{&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4099, 0x1003}, {&(0x7f0000001880)=""/107, 0x6b}, {&(0x7f0000000500)=""/193, 0xc1}, {&(0x7f00000003c0)=""/18, 0x12}, {&(0x7f0000000700)=""/148, 0x94}, {&(0x7f0000002840)=""/245, 0xf5}, {&(0x7f0000002940)=""/226, 0xe2}], 0x9, 0x1d, 0x0, {0x0, r12}}) syz_io_uring_setup(0x4d2e, &(0x7f0000001900)={0x0, 0x8de, 0x2000, 0x408003, 0x157}, &(0x7f0000000040), &(0x7f0000000800)) 9m1.122367695s ago: executing program 39 (id=431): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049dd) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000010000000000000300000008000000f30000007f00000004"], 0x58) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000008000000095000000000000008c91370c1d5861cf4e149719068d9cee9ec81f906eb5899597edca9601000000000000008c15f27a4999e6cdfc02"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @random="b40007350060"}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, &(0x7f0000000040)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) rt_sigaction(0xe, 0x0, 0x0, 0x8, &(0x7f0000000200)) 9m0.802390161s ago: executing program 40 (id=436): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x80000000000007}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') 8m59.84139601s ago: executing program 41 (id=450): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='tlb_flush\x00', r0}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x10007ffffffff}, 0x18) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1a, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffe}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x9, &(0x7f0000000040)=[{0x6, 0xe, 0x2, 0x4}, {0x4, 0x8, 0x10, 0x4}, {0x0, 0x80, 0xfd, 0x8}, {0x0, 0x7, 0x80, 0x1}, {0x3, 0x2b, 0x7, 0x3}, {0x27, 0x1, 0x1, 0x9}, {0x9, 0x4, 0x32, 0x8000}, {0x6, 0x0, 0x7, 0x4}, {0xd, 0x3, 0xfe, 0x9}]}) 8m52.174406357s ago: executing program 42 (id=533): socket$inet(0x2, 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x19, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000a40)='rpcgss_update_slack\x00', r2, 0x0, 0x1ffffffffffffff9}, 0x18) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = eventfd(0x4) r6 = eventfd(0x3ff) r7 = dup2(r0, r0) r8 = dup3(r2, r3, 0x80000) io_submit(0x0, 0x3, &(0x7f0000000500)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x101, r4, &(0x7f0000000880)="fb971f2a3bb4c0ffee313f28980a6fb96814d292f9b2e49dbd083dd22d907ebe5b6f90998584e487c2211e789903db2474546eee892e787f68a66004975ef1210c2d77ea9819fd0dd8d409e71d24de0e6b350a30881931c6dbda2b86f2efb3a1144c08184cd15dbaac24c00052b63dfe82d7c5057e58786d70689ad1b0b7cb91d87d01523b308da71d74aa7974e56690c789bb98ee5db1e7b9d404f9e4a1e923516b3c865b84f48baa10b89a87570827ce64dc971647906f8e07528456a5a36a1568545d076b2d6ea75ff78c8822efaad1303938740485f86427a42611e3b979067396fd3356e2abf7d817e874e5624582294b42", 0xf4, 0x3, 0x0, 0x3, r5}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x2, r3, &(0x7f0000000480)="4eea44d378c83ec3dd5e6434faf0adcdc465a8faffbfb92ff3421c2cff887433d529df58a650de0d2fd834059a2d56da6c8335d297c6c490b859d0037f7b0becfb7c0eaac105aab10e87165765360b21c516869e2cc5f739a1310745ecbbad452fe881031b", 0x65, 0xfffffffffffffffd, 0x0, 0x2, r6}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x0, r7, &(0x7f0000000600)="d9f4f3b4387c0667ba4d21e4a177d51518a6ae4cb975703e78afea6b552dcd223cef86031430269c99e9fd5cd8d138ffba4da72038b603c4aa95ad379f3f4923514531b0f91646cb734de0696ebc1974f4751db39e94daecfdec658705230df89f3260fc8ab870d617fad1dbd383a7fea343ec7ecb4489604a1ddaf0c67b1ac1efd72336d956eee4db3c9de76a59bd429df68d0cbd4e387d7a3a6a1a", 0x9c, 0x6, 0x0, 0x2, r8}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r9, 0x0, 0x29, 0x0, 0x57) 8m50.092476098s ago: executing program 43 (id=549): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r2, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000080)={r4, 0x1, 0x6}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCXONC(r5, 0x540a, 0x2) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r5, 0x5441, 0xb3d) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x7fffffff}, 0x0, 0x0) 8m49.338516952s ago: executing program 44 (id=562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 8m46.633446384s ago: executing program 45 (id=574): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0xfffffffffffffff8}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) umount2(0x0, 0x4) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r1, 0x407, 0x8) symlinkat(0x0, 0xffffffffffffff9c, 0x0) 8m42.928156205s ago: executing program 46 (id=614): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000a80)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05072bbd7000ffdbdf250100000018000180140002006c6f000000000000000000000000000008000280"], 0x34}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) 8m42.624444151s ago: executing program 47 (id=623): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000001000)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat(r0, &(0x7f00000002c0)='./file0\x00', 0x800, 0xb) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$getownex(r4, 0x10, &(0x7f00000019c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x2, 0x9, 0xffa4, 0xc00, 0x5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x24, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff6da, 0x0, 0x0, 0x0, 0x400}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_fd={0x18, 0xa}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @alu={0x4, 0x0, 0x6, 0x7, 0x9, 0xfffffffffffffffe}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0xa, 0xa, 0x7, 0xfffffffffffffff0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000380)='syzkaller\x00', 0x2, 0xd8, &(0x7f00000004c0)=""/216, 0x41000, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x5, 0x7, 0x0, 0x9a2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r1, r3, r3, r1, r1, r3], 0x0, 0x10, 0x8}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_mr_cache\x00') sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0xc804) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r9], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) recvmsg(0xffffffffffffffff, 0x0, 0x10000) 8m41.002385742s ago: executing program 48 (id=636): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80005, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xff}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcc, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18000, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="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", @ANYRESOCT], 0x8, 0x2f6, &(0x7f0000000880)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x50, 0x3, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0xa, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44040}, 0x20000040) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x80000000002, 0x1) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r8, 0xc0f85403, 0x0) 8m40.344872895s ago: executing program 49 (id=646): io_uring_setup(0x75c0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) writev(0xffffffffffffffff, &(0x7f0000001100)=[{0x0}], 0x1) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) 8m32.898442739s ago: executing program 50 (id=739): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYRESDEC=r1], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) 8m31.906432558s ago: executing program 51 (id=758): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x0) 8m29.478401634s ago: executing program 52 (id=781): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x10, &(0x7f0000000540)=ANY=[], 0xfd, 0x299, &(0x7f00000024c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x86606, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000340), 0xa}, 0xc02, 0x0, 0x0, 0x3, 0x4, 0x4}, 0x0, 0x1, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffdd) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r7, @ANYBLOB="265dadc4d5f03fb1ccaffa402d1533a06180ad01219c08f732580f52b2eece96f74d177baaf748a56748cc979a0add6a21d11a7d019433145bf69e985b7e0059acfab63eede1170acebb87caa02b1a4954ba7e8ef8fc6ead639710e181bea40411c36744927882468a408db783ed62136bf267018645bb6256efdedf3517b9ca9ac3cb1c5fdf3bdd28caa86a291ea3322032283532413ea5a6c97553c876f5da9daa97a6e6a87c7946bcb9231c6f53526d6ea7f4f3c0e9d03a217098ee3a40f13dc5a9c3998f485c3e30d0971e657a7938ad0776aa2588", @ANYBLOB="0040110028000200"/21, @ANYBLOB="358742"], 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x20040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r5}, 0x18) r9 = socket(0x79, 0x2, 0x6) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) r11 = dup3(r10, r9, 0x80000) ioctl$VT_RESIZE(r10, 0x5609, &(0x7f00000024c0)={0x69, 0x8, 0x3}) ioctl$PIO_FONT(r11, 0x4b61, &(0x7f0000002540)="c7c5007f86f253a69223b8") bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002780)={@ifindex, 0x31, 0x0, 0x5, &(0x7f0000002680)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000026c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002700)=[0x0], &(0x7f0000002740)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x1}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000380)=@assoc_value={r12, 0x2}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYBLOB, @ANYRESOCT=0x0], 0x50}, 0x1, 0xba01}, 0x0) 8m28.994574034s ago: executing program 53 (id=784): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca", 0xe}, {&(0x7f0000000500)="e98314d58ce4b24ee137cea9c243c233bfa2f5fee778bbfc11a66c5fc8d3e63588056401261b11905fabd4af", 0x2c}], 0x2) 8m26.394839164s ago: executing program 54 (id=812): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000001bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x8, @local, 0xb}, 0x1c, 0x0}}], 0x1, 0x2400c884) 8m26.016510371s ago: executing program 55 (id=816): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000011000000000000000c850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)={0x3, 0x0, @c}, 0x29, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffe, r6, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r8, 0x1, 0x0, 0x100000, {{}, {}, {0x0, 0x19, {0x1, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x1004) r9 = add_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r5, r6, r9, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd60f4b90600483a01fc010000000000000000000000000000ff0200000000000000000000000000010200"], 0x0) r11 = memfd_create(&(0x7f0000000440)='\b\x83F\xd8\b\xb3~u\xa5\xdc\xfdy\xf6c\r;\xfcO\x92\x06\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2v)\xcc\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^/\x13*\xd4Vx\xc2\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8O`2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!\xe3^\xc3\xd5$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80\xfcl]\xe9\xca\xd3\xc9\xa3\x9e\x9cJ\x05\xf1\xa2\xa0\xc4:\x00\x00\x00\xe0\xff\xff\a\x00\x00\x00\x00\x00\x00\x00\x10\x8b~\x8a\r\a\r\xfe\xb1\x0fZt\xc9%83\x00\x00i\xc5jZ\xda\aG\xbd\xc8\"\xfc/\xe3\xa6\b\x96\xf7q\xc0\xd0\xde\xbfw\x89w\xb4\xc6\xcc\xf8\x9c\x8d\x03\xe8\xb5\x04\xc9P\"]W\xeb+7\xc7\xa4\xde\x80!L\x11knp\x9ebBM?\xd3@kHq\xec\xf0\xeb\xd4U\xb2 \xb3\x9c\xe7\xaf\xcf\xfc\x83\xf4\x1e\x10\xcaa\x9d?\xb2\xbc\xa6\xaa*g\xdf1\xa5\b\xaaM,nhJZR\xab\xb8k\x9c\a7\'Zk\xae\xc1\x95c@m\x89.Z\xca\x8d\xa6]*\x8f\x1fJ\x17\xee\xc4VVs_|{\xa1\xbc\xcd\xf4\x8b\xf9\xe4\xadO\xbaW?\'', 0x7) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r0) sendmsg$IPVS_CMD_NEW_DEST(r7, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="04002dbd7000fbdbdf25050000002400018008000500000000000800090027000000060002002a15000008000b007369700008000600ff0000001c0002800800050006000000060002004e200000060002004e2100001400028008000700ff0f000006000e004e200000e7d9837334afa901e7a3e9db59d34c45c21ff479e900026a69a969f9083e875fc30b73472dcad53d7612"], 0x70}, 0x1, 0x0, 0x0, 0x4000014}, 0x440d0) pipe2(&(0x7f0000000680)={0xffffffffffffffff}, 0x8c080) splice(r13, 0x0, r11, 0x0, 0x4, 0x4) sendmsg$NFT_MSG_GETSET(r13, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000a0a01010000000000000000030000044c0012803c0001800900010068617368000000002c000280080007400000000108000440000000070800064000000005080001400000000c08000700000080010c0001800800010064757000"], 0x60}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000) 8m9.786587663s ago: executing program 56 (id=1062): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 8m2.058567762s ago: executing program 57 (id=1232): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16], 0x50) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0xfffe, 0x4, @remote, 0x9}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 5m30.14224351s ago: executing program 58 (id=3508): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x1, 0x0, 0x800000, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x7, &(0x7f00000031c0)={0x1, 0x1, 0x8002, 0x8}) 3m48.716629966s ago: executing program 0 (id=5265): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) io_getevents(r1, 0x4, 0x0, &(0x7f00000019c0), 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_dev$vcsn(&(0x7f00000001c0), 0x1, 0x658080) capset(&(0x7f0000000200)={0x19980330, r2}, &(0x7f00000004c0)={0x1ff, 0x1, 0x3, 0x7f, 0x7, 0x2}) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000a00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f0000000600)={r7, 0xbd63, 0x5}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000080)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$eJzs3c9vFdUeAPDv3P6gpbzXQl7ee7iQJsZAorS0gCHGBWwNafBH3Lix0oJIgYbWaNGEkuDGxLgxxsSVC/G/UCJbVrpy4caVISFqWJp4zdzOlP6Y2x+X207T+XySS2fOmeGc4fLtOXPuOXMDqKzB9I9axMGImE4i+pP5xbzOyDIHF4579OdH59NXEvX6a78nkWRp+fFJ9rMvO7knIn78IYkDHavLnZm7cXl8amryerY/PHtlenhm7sbRS1fGL05enLw6+sLoqZMnTp4aOdbSdd0sSDt7+933+z8Ze/Obr/5KRr79ZSyJ0/FyduDS62iXwRhs/Jskq7P6TrW7sJJ0ZP9Plr7FSWeJFWJT8vevKyL+F/3REY/fvP74+JVSKwdsqXoSUQcqKhH/UFF5PyC/t195H1wrpVcCbIeHZxYGAFbHf+fC2GD0NMYG9j5KYumwThIRrY3MLbcvIu7fG7t94d7Y7diicTig2PytiPh/UfwnjfgfiJ4YaMR/bVn8p/2Cc9nPNP3VFstfOVQs/mH7LMR/z5rxH03i/60l8f92i+UPPt58p3dZ/Pe2ekkAAAAAAABQWXfPRMTzRZ//1xbn/0TB/J++iDjdhvIHV+yv/vy/9qANxQAFHp6JeKlw/m8tn/070JFt/asxH6AruXBpavJYRPw7Io5E1550f2SNMo5+euDLZnmD2fy//JWWfz+bC5jV40HnnuXnTIzPjj/pdQMRD29FPFU4/zdZbP+TgvY//X0wvcEyDjx751yzvPXjH9gq9a8jDhe2/4+fWpGs/XyO4UZ/YDjvFaz29Ieffdes/Fbj3yMm4Mml7f/eteN/IFn6vJ6ZzZdxfK6z3iyv1f5/d/J645Ez3VnaB+Ozs9dHIrqTsx1p6rL00c3XGXajPB7yeEnj/8gza4//FfX/eyNifsXfnfyxfE1x7r9/9/3arD76/1CeNP4nNtX+b35j9M7A983K31j7f6LR1h/JUoz/wYIv8jDtXp5eEI6dRVnbXV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2A1qEbEvktrQ4natNjQU0RcR/4m9talrM7PPXbj23tWJNK/x/f+1/Jt++xf2k/z7/weW7I+u2D8eEfsj4vOO3sb+0PlrUxNlXzwAAAAAAAAAAAAAAAAAAADsEH1N1v+nfusou3bAlussuwJAaQri/6cy6gFsP+0/VJf4h+oS/1Bd4h+qq8X472p3PYDtp/2H6hL/UF3iHwAAAAAAdpX9h+7+nETE/Iu9jVeqO8szvwd2t1rZFQBK4xE/UF2m/kB1uccHknXye5qetN6Za5k+/wQnAwAAAAAAAAAAAEDlHD5o/T9UlfX/UF3W/0N15ev/D5VcD2D7uccHYp2V/IXr/9c9CwAAAAAAAAAAAABop5m5G5fHp6Ymr9t4Y2dUox0b6Tu7kYPr9frNxrEtlbVnB1zpjtrIp8LvlPqs2MjX+m3srNJ+JQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACv8EwAA//8IGSKz") r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1e1) r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x3ffff) sendfile(r9, r8, 0x0, 0x7ffff000) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000600)={{}, {r10, r11+10000000}}, &(0x7f0000000640)) 3m48.222661505s ago: executing program 0 (id=5271): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0) 3m48.109815628s ago: executing program 0 (id=5272): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900, 0x4064}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r4) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0xf34) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000400)={0x2, 0x4e22, @private=0xa010104}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0xfffffffffffffdae}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) r6 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYRES8=r3, @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT=r6], 0xb4}}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0180000000000b00000004000000400001"], 0x54}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r7], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) sync_file_range(r9, 0x0, 0x0, 0x0) 3m46.987993219s ago: executing program 0 (id=5277): mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r1}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r3 = timerfd_create(0x7, 0x80800) timerfd_settime(r3, 0x3, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r3, &(0x7f0000000000)) openat$cgroup_int(r2, &(0x7f0000000080)='blkio.reset_stats\x00', 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) fchdir(r5) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x800, 0x0) syz_open_procfs(r4, &(0x7f0000000280)='maps\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000062000002000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x4e, 0x0, 0xffffffffffffffff, 0x3000000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x5) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344}, 0x9, 0x99) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=r8, @ANYBLOB="d00200092b096ef5b055e7273515aec54b1f0ddec3ebc22d56ee128a6cf360dc3f43caa3000000000000"], 0x0) 3m46.918670161s ago: executing program 0 (id=5281): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000240)={0x1d, r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffff001}, 0x18) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000000600)="6721d3984d16b7970d5656b539085cb7b85591aecc293d2d425b4e8ff3d3c00cad26ad550336c707086e44b906422fdedaf87fb78277717d7554d27fad1269abf23ba40e3a625b0b527d4ef26c20f7c9743870a45710f6f3afb664325c342676d523374ed09633b98d4d370be638a12bf2ce3ff7de361b0ad94a5f48d06bcbdf23291bf30539e06ad2d5a7e6ba868c96c5284939859ad49d714cab81584326c106db4d4cf919417da5f709bcb24e28401dc5f1e419553a2100a2e67d15aa3e6536727e8078", 0xc5, r4) socket$can_raw(0x1d, 0x3, 0x1) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r7, 0x0, 0x5}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r9, 0x400, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) r10 = socket$netlink(0x10, 0x3, 0x10) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) r11 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r11, 0x0) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r12, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0xa, 0x1ff, @udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40d0}, 0x4040010) syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) socket$inet6(0xa, 0x3, 0x5) r13 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000020f54f1c1f5e17eb115b4c3a58dcfd6ff704eb75ee3f3e1c3e7fbde6da59d0612d434b0b5c64a3791f5d5d120d9ba0e14487f6d2557686bab1332d5fd329971c59ae1a84aef5"], 0x50) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000640000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r14}, 0x18) 3m46.274950603s ago: executing program 0 (id=5292): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='generic_add_lease\x00', r1}, 0xfffffd99) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80400, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x325) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000068000106000000000000000002000000000000000c000880050005000000000008000500", @ANYRES32=0x0, @ANYRESDEC=r2], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000180)=0x5, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = epoll_create1(0x0) signalfd4(r5, &(0x7f0000000100)={[0xfffffffffffffff7]}, 0x8, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r9}, &(0x7f0000000000), 0x0}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r9, &(0x7f0000000040)={0xe0000000}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000140)={0xa0000001}) epoll_wait(r8, &(0x7f0000000280)=[{}], 0x1, 0x4000005) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x9d, &(0x7f0000000300)='trans=rdma,') openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x30801) 3m46.238855724s ago: executing program 59 (id=5292): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='generic_add_lease\x00', r1}, 0xfffffd99) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80400, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x325) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000068000106000000000000000002000000000000000c000880050005000000000008000500", @ANYRES32=0x0, @ANYRESDEC=r2], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000180)=0x5, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = epoll_create1(0x0) signalfd4(r5, &(0x7f0000000100)={[0xfffffffffffffff7]}, 0x8, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r9}, &(0x7f0000000000), 0x0}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r9, &(0x7f0000000040)={0xe0000000}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000140)={0xa0000001}) epoll_wait(r8, &(0x7f0000000280)=[{}], 0x1, 0x4000005) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x9d, &(0x7f0000000300)='trans=rdma,') openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x30801) 2m57.589231828s ago: executing program 9 (id=6146): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]}) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="5c00ffff0000", 0x6, 0x0, 0x0, 0x2}]) 2m57.51388136s ago: executing program 9 (id=6150): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000090603000000000000800000000000000900020073797a31000000000500010007000000100007800c"], 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000050) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) 2m57.51348214s ago: executing program 9 (id=6151): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]}) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="5c00ffff0000", 0x6, 0x0, 0x0, 0x2}]) (fail_nth: 1) 2m57.177792616s ago: executing program 9 (id=6159): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='qgroup_meta_free_all_pertrans\x00', r0, 0x0, 0x8a}, 0x18) openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/fscreate\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r3, 0xffffffffffffffff, 0x2b, 0x0, @void}, 0x10) write$selinux_attr(r1, &(0x7f00000001c0)='system_u:object_r:usbtty_device_t:s0\x00', 0x25) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x10000) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000700)={0x10, "b6852715b0be4f377431f817db23f514f4a3d921ec163c5246d4949516ddcb490d8086871504dd609df6d7125618ae75d073758dcbb8cf8e993d79cb10a26348dd3a934c0756a3a0fb2daf154a527d1bb2daac7632168fd861b5f46776a6c8753a93a23d4186edb850d59b7de214b73e74d5746bc93f2567c931e59a0bb42b108ff4657ad9b008d3717006e1bbd28adabc1605da1268ebbc01e6470523fd18333ebac401b9cdd005f512cb676766c89fcf7031c7efd0c633876484a07d97815573f6d00bf5ea78c924b40a0ba6000467b836c7061848bb72133077f3667ab3e9e0b0ee426a945513c7428445f18ab203fa5e80ae41eb4513c08658fe30b5f8d0d9703f8928fc5fa27f2b6f8c0197a8f3f628657bdbad6f4f5204bf4ad51ffa20c29146f01f53faac1c625321390fbf153806df26493f6616ae0d1214e21004313652c87844da7c9f799419e01079feb46ffa6b162410fb0c42516797e3034300b6bfe88cc49b2558e6e03e8006daac2703a5042624b03066d88e66d830b7aecd8d3756347a0af99c85f2e31fdcc34c180ec1075cc920b6ef5252d764ff6d9294529adfe68d6640e01a1a4e1512841ba35d17df56c419b38d9b5da1d6ade10960200bf8addf061d1407e947b0cb4928bdb8117e292e29306e8137378d422cedca227290a0a99db2ad0ce70a5bef27931d567366cad3d4ec1752ea88472f1dd458"}) socket$packet(0x11, 0x3, 0x300) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000100)="83823786edc5bab95ad9a2856af19ad4dae4fcc118696d92b6dc916958", 0x1d}, {&(0x7f0000000200)="0413", 0x2}], 0x2, 0x0, 0x0, 0x900}, 0x60) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000480)={@mcast2={0xff, 0x5}, @private0, @loopback, 0x800000, 0xa, 0x0, 0x500, 0x7ffffffe, 0x140192}) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x20002, 0x0) ioctl$sock_qrtr_TIOCINQ(r7, 0x541b, &(0x7f00000002c0)) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) socket(0x15, 0xa, 0x8) 2m56.99800929s ago: executing program 9 (id=6161): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001340)) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000040)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x1b4}, &(0x7f0000000100), &(0x7f0000000140)) 2m54.437681589s ago: executing program 9 (id=6199): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 2m54.435927809s ago: executing program 60 (id=6199): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 2m14.490662546s ago: executing program 5 (id=7201): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x1, 0x20}, 0xc) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000002700)={0x8, 0x2, 0x0, 0xfffffff8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000005c0)={0x2, 0x0, 0xfff, 0xfffffff8}, 0x10) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)='`', 0x1}], 0x1}}], 0x1, 0x40081) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xfffff2e9}}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7}, 0x9c) 2m14.348945949s ago: executing program 5 (id=7210): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00D'], 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x2f5, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m14.29720678s ago: executing program 5 (id=7215): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2m14.164955763s ago: executing program 5 (id=7220): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0\x00', 0x18000, &(0x7f0000002480)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="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", @ANYBLOB="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"/328, @ANYRES32=0x0], 0x8, 0x2fd, &(0x7f0000000b40)="$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") syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f000001fa80), 0x0, 0x3f) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2m14.063447244s ago: executing program 5 (id=7226): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="020304000100090104006bd6"], 0x1043) 2m13.818427919s ago: executing program 5 (id=7237): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x8, 0x2c, 0x1, @remote, @local, {[@routing={0x2c, 0x0, 0x0, 0x1}]}}}}}, 0x0) 2m13.796600659s ago: executing program 61 (id=7237): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x8, 0x2c, 0x1, @remote, @local, {[@routing={0x2c, 0x0, 0x0, 0x1}]}}}}}, 0x0) 1m17.118245008s ago: executing program 8 (id=9239): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18110000", @ANYBLOB="0000000000000000b702000000002d00850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @remote, @void, {@llc={0x8864, {@snap={0x0, 0x0, '~', "3fab95", 0x892f}}}}}, 0x0) 1m16.953754472s ago: executing program 8 (id=9242): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0xa) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000000540)="f6b4ff270e6532b2d40765f9e8b460bd68b7e03a08d842e54efc234e21b4fec0541e98608bd3070ff700079b3dc0d7520e7351a1b4266e018855fc4819c097783f98064577274ff947328e4fa0ac578dfad9dba45afb427b80a1b4825dc8e8f06667f93a3d429d004d1933f47ac6e2d5d8b1e58d4eb92fa0a5c5b87b800712e299d0c714c78406947586a02fb600029a4daeb3efe7cba41f2d2d6626f63c7c7f0271cbac55d23e0afc639d9810", 0xfe6d621e554cffe6, 0xd63a66976f7dfbe0, 0x0, 0x0) 1m16.923615942s ago: executing program 8 (id=9244): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x6, 0xdd, 0x9}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xf, 0x0, 0x0}, 0x94) 1m16.876972754s ago: executing program 8 (id=9249): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x111509e, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x39218d5, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0) 1m16.792529745s ago: executing program 8 (id=9251): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x800}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x80000000000725) 1m16.273236695s ago: executing program 8 (id=9267): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0xc7, 0x0, &(0x7f00000000c0)="4d350a56a7bc74f8e9be2c1fc6b8590afd6f1dd0cf4762f72aae129a3603c71d9b813433f9f431b688bee7c2873eb6cfec9997ad55119427828d6e744a09d409d9cf8c47c68fa0a7cba7f23a392b73633d62a606b49ecf4884ef4edcda5a7ad6b0d27e0a8504ebfabc73b3fea0c0354869f46f7ca04f882d2d4d9fb6e27d22ac390383cb8cd746864f83e39380357181fa2857a7cef1b7b95c6407af9566802212f6bd9b8c22ce36ccaf140b4d4eef21095c89726a089f8b7af623d08adfa444056fa899dfed6d", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x55}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000180), 0x0}, 0x20) timer_create(0x3, &(0x7f0000000200)={0x0, 0x33, 0x2}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = semget$private(0x0, 0x7, 0x9531f8656e521bfd) semop(r0, &(0x7f0000000180)=[{0x4, 0x4, 0x1000}], 0x1) 1m16.232852066s ago: executing program 62 (id=9267): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0xc7, 0x0, &(0x7f00000000c0)="4d350a56a7bc74f8e9be2c1fc6b8590afd6f1dd0cf4762f72aae129a3603c71d9b813433f9f431b688bee7c2873eb6cfec9997ad55119427828d6e744a09d409d9cf8c47c68fa0a7cba7f23a392b73633d62a606b49ecf4884ef4edcda5a7ad6b0d27e0a8504ebfabc73b3fea0c0354869f46f7ca04f882d2d4d9fb6e27d22ac390383cb8cd746864f83e39380357181fa2857a7cef1b7b95c6407af9566802212f6bd9b8c22ce36ccaf140b4d4eef21095c89726a089f8b7af623d08adfa444056fa899dfed6d", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x55}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000180), 0x0}, 0x20) timer_create(0x3, &(0x7f0000000200)={0x0, 0x33, 0x2}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = semget$private(0x0, 0x7, 0x9531f8656e521bfd) semop(r0, &(0x7f0000000180)=[{0x4, 0x4, 0x1000}], 0x1) 1m14.053487278s ago: executing program 3 (id=9321): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 1m14.003173269s ago: executing program 3 (id=9323): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, r1, 0x909, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_MODES={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}, @ETHTOOL_A_WOL_MODES={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8880) 1m13.965191789s ago: executing program 3 (id=9324): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b12050200000000240012800b00010069703667726500001400028008000100", @ANYRES32=r2, @ANYBLOB="0800050003"], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4a3c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004) 1m13.94404236s ago: executing program 3 (id=9325): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') stat(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000380)) 1m13.893415221s ago: executing program 3 (id=9327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000040a050000000000000000000a0000050900010073797a0e7608"], 0x2c}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000800) 1m13.314547642s ago: executing program 3 (id=9347): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x3}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x2, 0x100, @val=0x80}}}}}}}, 0x0) 1m13.266703993s ago: executing program 63 (id=9347): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x3}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x2, 0x100, @val=0x80}}}}}}}, 0x0) 4.18988954s ago: executing program 7 (id=11881): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000140)=0x7, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.127430641s ago: executing program 7 (id=11885): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x1, 0x20}, 0xc) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000005c0)={0x2, 0x0, 0xfff, 0xfffffff8}, 0x10) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)='`', 0x1}], 0x1}}], 0x1, 0x40081) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xfffff2e9}}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7}, 0x9c) 4.094406832s ago: executing program 7 (id=11888): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x15, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7}, 0x0, 0x4, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000600000004000000000000840200000000000000000000010500000020002000000000000000000b02000000006100302e00"], 0x0, 0x46}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0x20000000000003c3, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlink(0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) write$vga_arbiter(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="746172676574205043493a05"], 0x13) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r8, 0x0, 0xfffffffffffffffc}, 0x18) 3.536131772s ago: executing program 7 (id=11894): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000300)=0x7, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.501150283s ago: executing program 7 (id=11896): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) 3.342578536s ago: executing program 7 (id=11901): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYBLOB="0000e8ffffff6ee7a2"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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") write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3ffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.956967283s ago: executing program 6 (id=11921): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x810082, &(0x7f0000000040)=ANY=[@ANYBLOB="756e695f786c6174653d312c726f6469722c757466383d302c73686f72746e616d653d77696e6e742c757466383d302c757466383d312c756e695f786c6174653d302c696f636861727365743d63703433372c756e695f786c6174653d302c6572726f72733d72656d6f756e742d726f2c757466383d312c757466383d312c73686f72746e616d653d77696e39352c6e66733d6e6f7374616c655f726f2c756e695f786c6174653d312c73686f72746e616d653d77696e39352c646973636172642c004338cb8631b26441e86414f461975e105d02960776fcb7ddfd80b96c1b2ffd13d5cc37784797dbc9e26b7c39310b49940995ce6e6ce1c218890b59506de99e2dd234abcde0be50d3de656741fee78f74e94ee73bd6d7162f0d2a8275e0a6125615ce223c21fe303d561d81b2681dce1c0b7061c5a347b2040e7b6c9210507527467dad005f3e38c47d4daa9d76c69f51ffeb2f81123fe54df14c6c02413e51ba63c35f11"], 0x0, 0x2b9, &(0x7f0000000280)="$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") r0 = socket(0x10, 0x3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[], 0x50}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 1.608209949s ago: executing program 1 (id=11929): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80040, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xa, 0x4000000007}, 0x8781, 0x2000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0xffff, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc0}}}}}}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000feffffffffffffff0951000001000000090000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000100014000e"], 0x104}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r3}, 0x3d) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r5 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000004240002000c0002800500010a0000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1.59628366s ago: executing program 6 (id=11930): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3b6, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x6c4, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) read(r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x1, 0x80000000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x800000009) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents(r5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300a8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffff800, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00'}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r6, {}, {0x0, 0x9}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.379715294s ago: executing program 4 (id=11933): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000f00)=0x196, 0x4) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x2, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.157134958s ago: executing program 4 (id=11935): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x20000000000001dd, &(0x7f0000000100)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2000, 0x0, 0x0, 0x40f00, 0x2, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='jbd2_run_stats\x00', r2, 0x0, 0x4}, 0x18) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) 978.204242ms ago: executing program 4 (id=11938): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{r0}, &(0x7f00000009c0), &(0x7f0000000a00)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 854.774614ms ago: executing program 4 (id=11939): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x9, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 752.994846ms ago: executing program 6 (id=11941): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) unshare(0x22020400) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000200)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0xf4ffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$selinux_validatetrans(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6175646974645f657865635f743a7330207378737465f4fa94027574f18afcc6685e99f04f6d5f753a6f626a6563745f723a667573655f6465766963655f743a73302030303030303030303030303030303030303030392073"], 0x79) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 575.756379ms ago: executing program 2 (id=11942): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000001c0)=0x7f, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000140)=0x7, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 567.179309ms ago: executing program 1 (id=11943): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x3a, 0x1, 0x8, 0x0, 0x0, 0x5, 0x9284, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x2}, 0x1320, 0x1, 0xf2, 0x8, 0x0, 0x800000, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x12) socket$inet_tcp(0x2, 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) perf_event_open$cgroup(&(0x7f00000000c0)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3832, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x1800000000000000, 0x8}, 0x12ac9, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 490.569671ms ago: executing program 2 (id=11944): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYBLOB="0000e8ffffff6ee7a2"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$eJzs3T9rc2UUAPBzkzSNOqSIiyJ4QQen0rq6NEoFsZMSQR002BYkCYUWAlYwduoncPR7+BFcXPwGgqvg1g6VKzf33ia16R/65k3h7e83nd7nnvOc3KckU06+eXPY3z1I4uTsz2i1kqhtxVacJ7EWtaj8FI0AAF4c51kW/2QPyWzUFt8NALAMxed/4bF7AQCW47Mvvvyks7Oz/WmatuL19umom0TE8HTULdY7+/FdDGIvNqIdFxHZpSL+6OOd7WikubV4ZzgedfPM4de/l/U7f0dM8jejHWvz8zfTwmX+y1V3aXT2V6o/2vHa/Pz3/p8fw3F0m/Hu2zP9r0c7/vg2DmIQu5HnTvN/3EzTD7Ofz374Kt8mz09q0V2d3DeV1Zd0JAAAAAAAAAAAAAAAAAAAAAAAPAHraZoU43sm83vyS5P5OaNu/WKyvp5WZuf7jKv5QElVqJgPlEU5omecxS/VfJ2NNE2z8sZpfiPeaPhhAQAAAAAAAAAAAAAAAAAAAMgdfX/c7w0Ge4cLCappANXX+h9aZ2vmyltx3O/Vby64ev+9ZqcN5L3eenM0GrGgx3JX8FLez8Irr04P9/MogupgFrrXqx8URY/7vbRcqh5yv5fctVerOrhfZ5ea8ayNZZN/iYvs6pm2Llu9mtVc0NNovjJ36d8sy+5X5/2/ijMqrySTERv3232lDOa+wDxoXT+L324ueONbRn0hbzwAAAAAAAAAAAAAAAAAAMA10y/9zlk8uTW19tyaAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAlm/7+fxW0IuLqlWvBuEy+7Z4yaMbh0SO/RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6A/wIAAP//4ipOSw==") write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3ffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 441.268842ms ago: executing program 6 (id=11945): syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_EXE_FILE(0x42, 0xd, 0xffffffffffffffff) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c8c970736045776c5000000000000000000000800a2715207"], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 395.138223ms ago: executing program 6 (id=11946): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, 0xca, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) 382.864943ms ago: executing program 4 (id=11947): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x20000000000001dd, &(0x7f0000000100)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2000, 0x0, 0x0, 0x40f00, 0x2, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='jbd2_run_stats\x00', r2, 0x0, 0x4}, 0x18) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) 370.124643ms ago: executing program 2 (id=11948): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 286.816225ms ago: executing program 2 (id=11949): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, 0x0, 0x0}, 0x20) 286.671265ms ago: executing program 6 (id=11950): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3b6, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x6c4, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) read(r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x1, 0x80000000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x800000009) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents(r5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300a8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffff800, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00'}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r6, {}, {0x0, 0x9}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 277.537505ms ago: executing program 2 (id=11951): syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x333}, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000001c0)="b700001806005abeef4ba0d5984462732834d1", 0x13}, {&(0x7f0000000140)="37a8a6c41ef711513a5554633f6ecf", 0xf}, {&(0x7f0000000440)="0000000b9c", 0x5}], 0x4) 272.489235ms ago: executing program 4 (id=11952): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80040, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xa, 0x4000000007}, 0x8781, 0x2000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0xffff, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc0}}}}}}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000feffffffffffffff0951000001000000090000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000100014000e"], 0x104}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r3}, 0x3d) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r5 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000004240002000c0002800500010a0000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 229.583606ms ago: executing program 1 (id=11953): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000001c0)=0x7f, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000140)=0x7, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 155.695217ms ago: executing program 2 (id=11954): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) unshare(0x22020400) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000200)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0xf4ffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$selinux_validatetrans(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6175646974645f657865635f743a7330207378737465f4fa94027574f18afcc6685e99f04f6d5f753a6f626a6563745f723a667573655f6465766963655f743a73302030303030303030303030303030303030303030392073"], 0x79) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 105.345178ms ago: executing program 1 (id=11955): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x4100}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca400000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) 530.3µs ago: executing program 1 (id=11956): syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_EXE_FILE(0x42, 0xd, 0xffffffffffffffff) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c8c970736045776c5000000000000000000000800a2715207"], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 0s ago: executing program 1 (id=11957): syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x2814800, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf05964ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406d1207663506b632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000a40)='./file1\x00', 0x2) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc2}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): 57825][T27862] FAT-fs (loop8): Directory bread(block 65) failed [ 528.071625][T27862] FAT-fs (loop8): Directory bread(block 66) failed [ 528.100838][T27862] FAT-fs (loop8): Directory bread(block 67) failed [ 528.114654][T27862] FAT-fs (loop8): Directory bread(block 68) failed [ 528.129915][T27862] FAT-fs (loop8): Directory bread(block 69) failed [ 528.146432][T27862] FAT-fs (loop8): Directory bread(block 70) failed [ 528.161295][T27862] FAT-fs (loop8): Directory bread(block 71) failed [ 528.177891][T27862] FAT-fs (loop8): Directory bread(block 72) failed [ 528.194492][T27862] FAT-fs (loop8): Directory bread(block 73) failed [ 528.337231][T27893] lo speed is unknown, defaulting to 1000 [ 528.417968][T27897] loop3: detected capacity change from 0 to 128 [ 528.811885][T27918] loop3: detected capacity change from 0 to 32768 [ 528.819420][T27945] netem: change failed [ 528.866983][T27955] loop2: detected capacity change from 0 to 7 [ 528.874454][T27955] loop2: [ 528.938478][T27965] loop3: detected capacity change from 0 to 128 [ 529.137171][T27991] lo speed is unknown, defaulting to 1000 [ 529.797206][T28029] IPv6: NLM_F_CREATE should be specified when creating new route [ 530.030702][ T29] audit: type=1326 audit(2000000195.975:50358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27994 comm="syz.3.9104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6b1beec9 code=0x7fc00000 [ 530.054434][ T29] audit: type=1326 audit(2000000195.975:50359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27994 comm="syz.3.9104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efe6b1beec9 code=0x7fc00000 [ 530.413652][T28102] loop3: detected capacity change from 0 to 256 [ 530.427200][T28102] FAT-fs (loop3): Directory bread(block 64) failed [ 530.435330][T28102] FAT-fs (loop3): Directory bread(block 65) failed [ 530.442127][T28102] FAT-fs (loop3): Directory bread(block 66) failed [ 530.449964][T28102] FAT-fs (loop3): Directory bread(block 67) failed [ 530.456540][T28102] FAT-fs (loop3): Directory bread(block 68) failed [ 530.463176][T28102] FAT-fs (loop3): Directory bread(block 69) failed [ 530.470691][T28102] FAT-fs (loop3): Directory bread(block 70) failed [ 530.478365][T28102] FAT-fs (loop3): Directory bread(block 71) failed [ 530.484994][T28102] FAT-fs (loop3): Directory bread(block 72) failed [ 530.494951][T28102] FAT-fs (loop3): Directory bread(block 73) failed [ 530.525933][T28102] syz.3.9153: attempt to access beyond end of device [ 530.525933][T28102] loop3: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 530.541289][T28102] syz.3.9153: attempt to access beyond end of device [ 530.541289][T28102] loop3: rw=2051, sector=1288, nr_sectors = 32 limit=256 [ 530.560603][T28102] syz.3.9153: attempt to access beyond end of device [ 530.560603][T28102] loop3: rw=2051, sector=1352, nr_sectors = 32 limit=256 [ 530.576475][T28102] syz.3.9153: attempt to access beyond end of device [ 530.576475][T28102] loop3: rw=2051, sector=1416, nr_sectors = 32 limit=256 [ 530.593914][T28102] syz.3.9153: attempt to access beyond end of device [ 530.593914][T28102] loop3: rw=2051, sector=1448, nr_sectors = 32 limit=256 [ 530.611299][T28107] syz.3.9153: attempt to access beyond end of device [ 530.611299][T28107] loop3: rw=2051, sector=1256, nr_sectors = 32 limit=256 [ 530.626214][T28107] syz.3.9153: attempt to access beyond end of device [ 530.626214][T28107] loop3: rw=2051, sector=1320, nr_sectors = 32 limit=256 [ 530.645218][T28107] syz.3.9153: attempt to access beyond end of device [ 530.645218][T28107] loop3: rw=2051, sector=1384, nr_sectors = 32 limit=256 [ 530.680225][T28115] __nla_validate_parse: 7 callbacks suppressed [ 530.680296][T28115] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9159'. [ 530.749883][T28130] loop2: detected capacity change from 0 to 7 [ 530.833923][ T29] audit: type=1400 audit(2000000196.826:50360): avc: denied { unmount } for pid=27498 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 530.912790][T28149] ip6gre1: entered allmulticast mode [ 531.557446][T28208] loop2: detected capacity change from 0 to 128 [ 531.725119][T28228] 9pnet_fd: Insufficient options for proto=fd [ 531.742017][T28204] loop8: detected capacity change from 0 to 32768 [ 531.924543][T28262] loop8: detected capacity change from 0 to 128 [ 532.099061][T28277] loop3: detected capacity change from 0 to 512 [ 532.106253][T28277] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 532.126415][T28277] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 532.144529][T28277] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 532.163206][T28277] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 532.270943][T28285] loop7: detected capacity change from 0 to 136 [ 532.289451][T28285] rock: directory entry would overflow storage [ 532.295851][T28285] rock: sig=0x4f50, size=4, remaining=3 [ 532.301526][T28285] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 532.468353][T28302] loop7: detected capacity change from 0 to 256 [ 532.483409][T28302] FAT-fs (loop7): Directory bread(block 64) failed [ 532.497457][T28302] FAT-fs (loop7): Directory bread(block 65) failed [ 532.504550][T28302] FAT-fs (loop7): Directory bread(block 66) failed [ 532.511240][T28302] FAT-fs (loop7): Directory bread(block 67) failed [ 532.519720][T28302] FAT-fs (loop7): Directory bread(block 68) failed [ 532.526682][T28302] FAT-fs (loop7): Directory bread(block 69) failed [ 532.533396][T28302] FAT-fs (loop7): Directory bread(block 70) failed [ 532.540933][T28302] FAT-fs (loop7): Directory bread(block 71) failed [ 532.547743][T28302] FAT-fs (loop7): Directory bread(block 72) failed [ 532.554575][T28302] FAT-fs (loop7): Directory bread(block 73) failed [ 532.585686][T28302] syz.7.9247: attempt to access beyond end of device [ 532.585686][T28302] loop7: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 532.613279][T28302] syz.7.9247: attempt to access beyond end of device [ 532.613279][T28302] loop7: rw=2051, sector=1288, nr_sectors = 32 limit=256 [ 532.861603][T28320] loop3: detected capacity change from 0 to 32768 [ 533.005060][T28335] loop3: detected capacity change from 0 to 164 [ 533.074053][ T4726] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.120140][ T4726] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.178467][ T4726] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.232441][ T4726] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.316545][ T4726] bridge_slave_1: left allmulticast mode [ 533.322257][ T4726] bridge_slave_1: left promiscuous mode [ 533.328272][ T4726] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.338070][ T4726] bridge_slave_0: left allmulticast mode [ 533.344511][ T4726] bridge_slave_0: left promiscuous mode [ 533.350288][ T4726] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.602314][ T4726] team0: Port device bond0 removed [ 533.609276][ T4726] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.620489][ T4726] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.630102][ T4726] bond0 (unregistering): Released all slaves [ 533.649991][T28347] lo speed is unknown, defaulting to 1000 [ 533.769264][ T4726] hsr_slave_0: left promiscuous mode [ 533.783895][ T4726] hsr_slave_1: left promiscuous mode [ 533.790824][ T4726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.798254][ T4726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.806211][ T4726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.813882][ T4726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.826721][ T4726] veth1_macvtap: left promiscuous mode [ 533.833157][ T4726] veth0_macvtap: left promiscuous mode [ 533.840863][ T4726] veth1_vlan: left promiscuous mode [ 533.920648][ T4726] team0 (unregistering): Port device team_slave_1 removed [ 533.935354][ T4726] team0 (unregistering): Port device team_slave_0 removed [ 534.029288][T28383] loop2: detected capacity change from 0 to 256 [ 534.059277][T28347] chnl_net:caif_netlink_parms(): no params data found [ 534.077935][T28383] FAT-fs (loop2): Directory bread(block 64) failed [ 534.097448][T28383] FAT-fs (loop2): Directory bread(block 65) failed [ 534.129978][T28383] FAT-fs (loop2): Directory bread(block 66) failed [ 534.150895][T28383] FAT-fs (loop2): Directory bread(block 67) failed [ 534.176158][T28383] FAT-fs (loop2): Directory bread(block 68) failed [ 534.186994][T28383] FAT-fs (loop2): Directory bread(block 69) failed [ 534.202271][T28383] FAT-fs (loop2): Directory bread(block 70) failed [ 534.212904][T28389] loop3: detected capacity change from 0 to 8192 [ 534.215450][T28383] FAT-fs (loop2): Directory bread(block 71) failed [ 534.234594][T28383] FAT-fs (loop2): Directory bread(block 72) failed [ 534.243312][T28347] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.243591][T28389] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 534.250430][T28347] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.268105][T28383] FAT-fs (loop2): Directory bread(block 73) failed [ 534.280355][T28347] bridge_slave_0: entered allmulticast mode [ 534.287044][T28347] bridge_slave_0: entered promiscuous mode [ 534.295602][T28347] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.302675][T28347] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.312464][T28389] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 534.321293][T28389] FAT-fs (loop3): Filesystem has been set read-only [ 534.328141][T28347] bridge_slave_1: entered allmulticast mode [ 534.334992][T28347] bridge_slave_1: entered promiscuous mode [ 534.341166][T28389] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 534.350018][T28389] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 534.358969][T28389] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 534.368163][T28389] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 534.377365][T28389] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 534.386206][T28389] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 534.395060][T28389] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 534.403900][T28389] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 534.412827][T28389] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 534.425131][T28347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.452661][T28347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.509336][T28347] team0: Port device team_slave_0 added [ 534.610367][T28347] team0: Port device team_slave_1 added [ 534.629683][T28347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.636663][T28347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.662773][T28347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.685992][T28347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.693031][T28347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.719119][T28347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.753931][T28347] hsr_slave_0: entered promiscuous mode [ 534.760205][T28347] hsr_slave_1: entered promiscuous mode [ 534.767094][T28347] debugfs: 'hsr0' already exists in 'hsr' [ 534.772905][T28347] Cannot create hsr debugfs directory [ 535.037977][T28434] loop2: detected capacity change from 0 to 7 [ 535.044557][T28434] loop2: [ 535.109034][T28442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 535.150796][T28347] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 535.163412][T28347] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 535.172992][T28347] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 535.190375][T28347] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 535.259143][T28347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.276517][T28347] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.287062][ T4731] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.294183][ T4731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.321417][ T4726] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.329039][ T4726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.416267][T28347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.577773][T28347] veth0_vlan: entered promiscuous mode [ 535.587510][T28347] veth1_vlan: entered promiscuous mode [ 535.609833][T28347] veth0_macvtap: entered promiscuous mode [ 535.617438][T28347] veth1_macvtap: entered promiscuous mode [ 535.630963][T28347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.639874][T28347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.654693][ T4731] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.681653][ T4731] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.713596][ T29] audit: type=1326 audit(2000000201.949:50361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28525 comm="syz.7.9337" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4fb49eec9 code=0x0 [ 535.721464][ T4730] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.751865][ T4730] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.771136][ T29] audit: type=1400 audit(2000000202.001:50362): avc: denied { mount } for pid=28529 comm="syz.4.9269" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 535.807269][ T29] audit: type=1400 audit(2000000202.043:50363): avc: denied { unmount } for pid=28347 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 535.838885][T28528] loop7: detected capacity change from 0 to 8192 [ 535.877874][T28536] support for the xor transformation has been removed. [ 535.877955][T28528] loop7: p1 p2 p3 p4 [ 535.890389][T28528] loop7: p3 start 331777 is beyond EOD, truncated [ 535.896923][T28528] loop7: p4 size 262144 extends beyond EOD, truncated [ 536.000596][ T29] audit: type=1326 audit(2000000202.243:50364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28456 comm="syz.2.9315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28616ceec9 code=0x7fc00000 [ 536.254580][T28565] lo speed is unknown, defaulting to 1000 [ 536.388810][T28597] netlink: 59 bytes leftover after parsing attributes in process `syz.2.9365'. [ 536.432128][T28565] chnl_net:caif_netlink_parms(): no params data found [ 536.520443][T28565] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.527570][T28565] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.550452][T28565] bridge_slave_0: entered allmulticast mode [ 536.557690][T28565] bridge_slave_0: entered promiscuous mode [ 536.564854][T28565] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.572398][T28565] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.579856][T28565] bridge_slave_1: entered allmulticast mode [ 536.586395][T28565] bridge_slave_1: entered promiscuous mode [ 536.634731][T28565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.643807][T28628] netlink: 67 bytes leftover after parsing attributes in process `syz.2.9378'. [ 536.654611][T28565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.683863][T28565] team0: Port device team_slave_0 added [ 536.690964][T28565] team0: Port device team_slave_1 added [ 536.720837][T28635] loop7: detected capacity change from 0 to 128 [ 536.730785][T28634] loop2: detected capacity change from 0 to 7 [ 536.735049][T28635] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 536.738488][T28565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.745011][T28635] FAT-fs (loop7): Filesystem has been set read-only [ 536.751926][T28565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.784570][T28565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.796442][T28565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.803564][T28565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.829623][T28565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.923695][T28652] netlink: 67 bytes leftover after parsing attributes in process `syz.6.9388'. [ 536.935765][T28565] hsr_slave_0: entered promiscuous mode [ 536.968084][T28565] hsr_slave_1: entered promiscuous mode [ 536.986583][T28565] debugfs: 'hsr0' already exists in 'hsr' [ 536.992420][T28565] Cannot create hsr debugfs directory [ 537.052160][T28673] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9400'. [ 537.100262][T28680] netlink: 67 bytes leftover after parsing attributes in process `syz.7.9402'. [ 537.111664][T28682] loop4: detected capacity change from 0 to 256 [ 537.118406][T28682] vfat: Bad value for 'dmask' [ 537.170306][ T29] audit: type=1400 audit(2000000203.471:50365): avc: denied { nlmsg_write } for pid=28683 comm="syz.7.9404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 537.242426][T28693] loop7: detected capacity change from 0 to 256 [ 537.318293][T28702] tmpfs: Bad value for 'mpol' [ 537.344991][T28705] netem: change failed [ 537.365694][T28707] loop7: detected capacity change from 0 to 164 [ 537.373027][T28707] Unable to read rock-ridge attributes [ 537.379779][T28707] Unable to read rock-ridge attributes [ 537.393826][T28707] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 537.405310][T28565] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 537.416586][T28565] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 537.435341][T28565] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 537.456065][T28565] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 537.514148][T28565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.529586][T28565] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.539760][ T4730] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.546972][ T4730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.560329][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.567681][ T4721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.612168][T28726] lo speed is unknown, defaulting to 1000 [ 537.676744][T28731] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.684032][T28731] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.722248][T28731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.733114][T28731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.782136][ T4721] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.791570][ T4721] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.812252][T28565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.823944][ T4721] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.840524][ T3560] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.961431][T28565] veth0_vlan: entered promiscuous mode [ 537.972426][T28565] veth1_vlan: entered promiscuous mode [ 537.995749][T28565] veth0_macvtap: entered promiscuous mode [ 538.007886][T28565] veth1_macvtap: entered promiscuous mode [ 538.021461][T28565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.033698][T28565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.053447][ T3560] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.069990][ T3560] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.077058][T28759] netlink: 67 bytes leftover after parsing attributes in process `syz.2.9431'. [ 538.094511][ T3560] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.108385][ T3560] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.136176][ T29] audit: type=1326 audit(2000000204.489:50366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28701 comm="syz.6.9413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b281eec9 code=0x7fc00000 [ 538.178315][T28767] 9pnet_fd: Insufficient options for proto=fd [ 538.361927][T28797] loop4: detected capacity change from 0 to 512 [ 538.373509][T28801] 9pnet_fd: Insufficient options for proto=fd [ 538.425317][T28806] netlink: 59 bytes leftover after parsing attributes in process `syz.1.9450'. [ 538.464502][T28814] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=28814 comm=syz.1.9453 [ 538.641581][T28844] loop4: detected capacity change from 0 to 736 [ 538.684224][T28851] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=28851 comm=syz.4.9470 [ 538.820239][T28872] loop2: detected capacity change from 0 to 7 [ 538.835619][T28875] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=28875 comm=syz.1.9482 [ 539.024000][T28900] loop2: detected capacity change from 0 to 7 [ 539.126851][T28917] loop2: detected capacity change from 0 to 512 [ 539.342142][T28960] loop7: detected capacity change from 0 to 128 [ 539.359601][T28960] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 539.378023][T28960] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 539.408575][T28970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9528'. [ 539.658733][T29002] loop4: detected capacity change from 0 to 1764 [ 539.866082][T29003] lo speed is unknown, defaulting to 1000 [ 539.892458][T29022] : renamed from veth0_vlan (while UP) [ 540.021377][T29003] chnl_net:caif_netlink_parms(): no params data found [ 540.068147][T29003] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.075418][T29003] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.083105][T29003] bridge_slave_0: entered allmulticast mode [ 540.090006][T29003] bridge_slave_0: entered promiscuous mode [ 540.097145][T29003] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.104313][T29003] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.111887][T29003] bridge_slave_1: entered allmulticast mode [ 540.119061][T29003] bridge_slave_1: entered promiscuous mode [ 540.143948][T29003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.156768][ T3560] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.171317][T29003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.199558][ T3560] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.212277][T29003] team0: Port device team_slave_0 added [ 540.219523][T29003] team0: Port device team_slave_1 added [ 540.242911][T29003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.249941][T29003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.268326][T29051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9562'. [ 540.276211][T29003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.298009][T29003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.304982][T29003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.322058][ T29] audit: type=1326 audit(2000000206.789:50367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28987 comm="syz.1.9539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8be81eec9 code=0x7fc00000 [ 540.331038][T29003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.384900][ T3560] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.424486][T29003] hsr_slave_0: entered promiscuous mode [ 540.434891][T29003] hsr_slave_1: entered promiscuous mode [ 540.449990][T29003] debugfs: 'hsr0' already exists in 'hsr' [ 540.455856][T29003] Cannot create hsr debugfs directory [ 540.471017][ T3560] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.650347][ T3560] bridge_slave_1: left allmulticast mode [ 540.656166][ T3560] bridge_slave_1: left promiscuous mode [ 540.661948][ T3560] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.676270][T29080] loop1: detected capacity change from 0 to 8192 [ 540.696712][ T3560] bridge_slave_0: left allmulticast mode [ 540.702409][ T3560] bridge_slave_0: left promiscuous mode [ 540.708256][ T3560] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.722135][T29082] loop7: detected capacity change from 0 to 8192 [ 540.856582][T29107] netlink: 'syz.7.9584': attribute type 1 has an invalid length. [ 541.031982][ T3560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.042422][ T3560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.053501][ T3560] bond0 (unregistering): Released all slaves [ 541.093234][T29107] 8021q: adding VLAN 0 to HW filter on device bond1 [ 541.112932][T29109] bond1 (unregistering): Released all slaves [ 541.203975][ T3560] hsr_slave_0: left promiscuous mode [ 541.214111][ T3560] hsr_slave_1: left promiscuous mode [ 541.231905][ T3560] veth1_macvtap: left promiscuous mode [ 541.239472][ T3560] veth0_macvtap: left promiscuous mode [ 541.245174][ T3560] veth1_vlan: left promiscuous mode [ 541.253507][ T3560] veth0_vlan: left promiscuous mode [ 541.317353][ T3560] ------------[ cut here ]------------ [ 541.322930][ T3560] ida_free called for id=574 which is not allocated. [ 541.330800][ T3560] WARNING: CPU: 1 PID: 3560 at lib/idr.c:592 ida_free+0x1e2/0x240 [ 541.338908][ T3560] Modules linked in: [ 541.342839][ T3560] CPU: 1 UID: 0 PID: 3560 Comm: kworker/u8:12 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 541.354662][ T3560] Tainted: [W]=WARN [ 541.358468][ T3560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 541.368911][ T3560] Workqueue: netns cleanup_net [ 541.373953][ T3560] RIP: 0010:ida_free+0x1e2/0x240 [ 541.378941][ T3560] Code: 05 e8 52 51 f3 fb 48 89 e7 e8 4a a0 0e fc 48 8b 3c 24 48 89 de e8 be 8d 06 00 90 48 c7 c7 5c 48 52 86 89 ee e8 6f af bd fb 90 <0f> 0b 90 90 eb 2a e8 23 51 f3 fb eb 0f e8 1c 51 f3 fb 31 f6 48 89 [ 541.398952][ T3560] RSP: 0018:ffffc90002e0b8d0 EFLAGS: 00010246 [ 541.405189][ T3560] RAX: 27bfb791f166a600 RBX: 0000000000000246 RCX: ffff88811a000000 [ 541.413286][ T3560] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 541.421308][ T3560] RBP: 000000000000023e R08: 0001c90002e0b74f R09: 0000000000000000 [ 541.429329][ T3560] R10: 00000000ffffffff R11: 0000000000000000 R12: 000000000000023e [ 541.437598][ T3560] R13: ffffffffffffff00 R14: ffff8881003ac000 R15: 000000000000023e [ 541.445684][ T3560] FS: 0000000000000000(0000) GS:ffff8882aef37000(0000) knlGS:0000000000000000 [ 541.454695][ T3560] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 541.461342][ T3560] CR2: 00007f5a80225f98 CR3: 00000001349e6000 CR4: 00000000003506f0 [ 541.469485][ T3560] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 541.477513][ T3560] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 541.485519][ T3560] Call Trace: [ 541.488880][ T3560] [ 541.491820][ T3560] pde_put+0x48/0x120 [ 541.495889][ T3560] remove_proc_subtree+0x2cd/0x3a0 [ 541.501057][ T3560] proc_remove+0x41/0x60 [ 541.505474][ T3560] snmp6_unregister_dev+0x6b/0xa0 [ 541.510559][ T3560] addrconf_ifdown+0x100/0xf30 [ 541.515335][ T3560] ? __nf_tables_flowtable_event+0x4b5/0x540 [ 541.521508][ T3560] ? tls_dev_event+0x3d7/0x910 [ 541.526341][ T3560] addrconf_notify+0x222/0x930 [ 541.531248][ T3560] ? __pfx_addrconf_notify+0x10/0x10 [ 541.536614][ T3560] raw_notifier_call_chain+0x6c/0x1b0 [ 541.541996][ T3560] ? call_netdevice_notifiers_info+0x9c/0x100 [ 541.548327][ T3560] call_netdevice_notifiers_info+0xae/0x100 [ 541.554462][ T3560] unregister_netdevice_many_notify+0xda9/0x15d0 [ 541.560846][ T3560] default_device_exit_batch+0x50c/0x560 [ 541.566550][ T3560] ? __pfx_default_device_exit_batch+0x10/0x10 [ 541.572892][ T3560] ops_undo_list+0x2bd/0x410 [ 541.577562][ T3560] cleanup_net+0x2f4/0x4f0 [ 541.581989][ T3560] process_scheduled_works+0x4cb/0x9d0 [ 541.587536][ T3560] worker_thread+0x582/0x770 [ 541.592282][ T3560] kthread+0x489/0x510 [ 541.596645][ T3560] ? finish_task_switch+0xad/0x2b0 [ 541.601806][ T3560] ? __pfx_worker_thread+0x10/0x10 [ 541.607009][ T3560] ? __pfx_kthread+0x10/0x10 [ 541.611796][ T3560] ret_from_fork+0x11f/0x1b0 [ 541.616441][ T3560] ? __pfx_kthread+0x10/0x10 [ 541.621169][ T3560] ret_from_fork_asm+0x1a/0x30 [ 541.626370][ T3560] [ 541.629396][ T3560] ---[ end trace 0000000000000000 ]--- [ 541.653096][ T3560] team0 (unregistering): Port device team_slave_1 removed [ 541.664305][ T3560] team0 (unregistering): Port device team_slave_0 removed [ 541.739660][T29152] bond1: entered allmulticast mode [ 541.778816][T29162] loop1: detected capacity change from 0 to 256 [ 541.812505][T29162] FAT-fs (loop1): Directory bread(block 64) failed [ 541.832488][T29162] FAT-fs (loop1): Directory bread(block 65) failed [ 541.839384][T29162] FAT-fs (loop1): Directory bread(block 66) failed [ 541.845976][T29162] FAT-fs (loop1): Directory bread(block 67) failed [ 541.852598][T29162] FAT-fs (loop1): Directory bread(block 68) failed [ 541.853187][T29176] loop4: detected capacity change from 0 to 512 [ 541.859555][T29162] FAT-fs (loop1): Directory bread(block 69) failed [ 541.872515][T29162] FAT-fs (loop1): Directory bread(block 70) failed [ 541.879103][T29162] FAT-fs (loop1): Directory bread(block 71) failed [ 541.885673][T29162] FAT-fs (loop1): Directory bread(block 72) failed [ 541.892261][T29162] FAT-fs (loop1): Directory bread(block 73) failed [ 541.914925][T29162] bio_check_eod: 569 callbacks suppressed [ 541.914946][T29162] syz.1.9608: attempt to access beyond end of device [ 541.914946][T29162] loop1: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 541.941271][T29162] syz.1.9608: attempt to access beyond end of device [ 541.941271][T29162] loop1: rw=2051, sector=1288, nr_sectors = 32 limit=256 [ 541.958364][T29162] syz.1.9608: attempt to access beyond end of device [ 541.958364][T29162] loop1: rw=2051, sector=1352, nr_sectors = 32 limit=256 [ 541.973227][T29162] syz.1.9608: attempt to access beyond end of device [ 541.973227][T29162] loop1: rw=2051, sector=1384, nr_sectors = 32 limit=256 [ 542.004738][T29190] loop2: detected capacity change from 0 to 7 [ 542.016186][T29003] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 542.024217][ T4721] kworker/u8:19: attempt to access beyond end of device [ 542.024217][ T4721] loop1: rw=1, sector=1256, nr_sectors = 32 limit=256 [ 542.039300][ T4721] kworker/u8:19: attempt to access beyond end of device [ 542.039300][ T4721] loop1: rw=1, sector=1320, nr_sectors = 32 limit=256 [ 542.045344][T29003] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 542.075565][T29003] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 542.091569][T29003] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 542.119224][T29206] loop4: detected capacity change from 0 to 512 [ 542.207364][T29003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.221742][T29003] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.254496][T29003] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 542.265019][T29003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 542.369501][T29003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.589978][ T3560] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.597132][ T3560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.618421][T29209] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9627'. [ 542.621702][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.634538][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.663583][T29235] loop2: detected capacity change from 0 to 7 [ 542.694323][T29209] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9627'. [ 542.728374][T29003] veth0_vlan: entered promiscuous mode [ 542.739748][T29003] veth1_vlan: entered promiscuous mode [ 542.757821][T29003] veth0_macvtap: entered promiscuous mode [ 542.765681][T29003] veth1_macvtap: entered promiscuous mode [ 542.775184][T29248] loop7: detected capacity change from 0 to 512 [ 542.807248][T29003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.826740][T29003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.841192][ T4721] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.858096][ T4721] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.918588][ T4721] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.935382][ T4721] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.032437][T29285] loop1: detected capacity change from 0 to 128 [ 543.040037][T29285] vfat: Bad value for 'errors' [ 543.055547][T29285] loop1: detected capacity change from 0 to 2048 [ 543.068560][T29285] FAT-fs (loop1): bogus sectors per cluster 248 [ 543.075225][T29285] FAT-fs (loop1): Can't find a valid FAT filesystem [ 543.111446][T29296] loop1: detected capacity change from 0 to 256 [ 543.129454][ T29] audit: type=1400 audit(2000000209.739:50368): avc: denied { mounton } for pid=29297 comm="syz.6.9660" path="/proc/10/cgroup" dev="proc" ino=123802 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 543.247098][T29319] tmpfs: Unsupported parameter 'huge' [ 543.829003][T29350] support for the xor transformation has been removed. [ 543.885644][ T29] audit: type=1400 audit(2000000210.526:50369): avc: denied { getopt } for pid=29361 comm="syz.7.9688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 543.909404][T29362] 9p: Unknown uid 00000000004294967295 [ 544.044832][T29379] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9696'. [ 544.305509][T29422] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9716'. [ 544.400424][T29438] loop1: detected capacity change from 0 to 256 [ 544.421365][T29438] FAT-fs (loop1): Directory bread(block 64) failed [ 544.428287][T29438] FAT-fs (loop1): Directory bread(block 65) failed [ 544.435398][T29438] FAT-fs (loop1): Directory bread(block 66) failed [ 544.442603][T29438] FAT-fs (loop1): Directory bread(block 67) failed [ 544.449179][T29438] FAT-fs (loop1): Directory bread(block 68) failed [ 544.457851][T29438] FAT-fs (loop1): Directory bread(block 69) failed [ 544.465593][T29438] FAT-fs (loop1): Directory bread(block 70) failed [ 544.473746][T29438] FAT-fs (loop1): Directory bread(block 71) failed [ 544.480336][T29438] FAT-fs (loop1): Directory bread(block 72) failed [ 544.481722][T29446] loop6: detected capacity change from 0 to 2048 [ 544.486956][T29438] FAT-fs (loop1): Directory bread(block 73) failed [ 544.495425][T29446] FAT-fs (loop6): bogus sectors per cluster 248 [ 544.506287][T29446] FAT-fs (loop6): Can't find a valid FAT filesystem [ 544.522326][T29438] syz.1.9725: attempt to access beyond end of device [ 544.522326][T29438] loop1: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 544.549021][T29438] syz.1.9725: attempt to access beyond end of device [ 544.549021][T29438] loop1: rw=2051, sector=1288, nr_sectors = 32 limit=256 [ 544.557287][T29451] ip6gre1: entered allmulticast mode [ 544.578902][T29438] syz.1.9725: attempt to access beyond end of device [ 544.578902][T29438] loop1: rw=2051, sector=1320, nr_sectors = 32 limit=256 [ 544.610224][ T3560] kworker/u8:12: attempt to access beyond end of device [ 544.610224][ T3560] loop1: rw=1, sector=1256, nr_sectors = 32 limit=256 [ 544.651314][ T29] audit: type=1326 audit(2000000211.335:50370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29353 comm="syz.4.9686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a817deec9 code=0x7fc00000 [ 544.731489][T29475] cgroup: name respecified [ 544.820162][T29491] tmpfs: Bad value for 'mpol' [ 545.003923][T29517] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9758'. [ 545.125769][T29529] loop1: detected capacity change from 0 to 256 [ 545.142060][T29529] FAT-fs (loop1): Directory bread(block 64) failed [ 545.148905][T29529] FAT-fs (loop1): Directory bread(block 65) failed [ 545.157195][T29529] FAT-fs (loop1): Directory bread(block 66) failed [ 545.163944][T29529] FAT-fs (loop1): Directory bread(block 67) failed [ 545.170645][T29529] FAT-fs (loop1): Directory bread(block 68) failed [ 545.178249][T29529] FAT-fs (loop1): Directory bread(block 69) failed [ 545.185025][T29529] FAT-fs (loop1): Directory bread(block 70) failed [ 545.191648][T29529] FAT-fs (loop1): Directory bread(block 71) failed [ 545.198459][T29529] FAT-fs (loop1): Directory bread(block 72) failed [ 545.205118][T29529] FAT-fs (loop1): Directory bread(block 73) failed [ 545.317948][T29544] loop2: detected capacity change from 0 to 128 [ 545.329471][T29544] FAT-fs (loop2): bogus number of FAT structure [ 545.335790][T29544] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 545.345048][T29544] FAT-fs (loop2): Can't find a valid FAT filesystem [ 545.399369][T29553] loop2: detected capacity change from 0 to 256 [ 545.501185][T29563] serio: Serial port ttyS3 [ 545.629581][T29561] lo speed is unknown, defaulting to 1000 [ 545.642949][ T29] audit: type=1326 audit(2000000212.374:50371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29494 comm="syz.4.9750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a817deec9 code=0x7fc00000 [ 545.666634][ T29] audit: type=1326 audit(2000000212.374:50372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29494 comm="syz.4.9750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5a817deec9 code=0x7fc00000 [ 545.690343][ T29] audit: type=1326 audit(2000000212.374:50373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29494 comm="syz.4.9750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a817deec9 code=0x7fc00000 [ 545.824568][T29561] chnl_net:caif_netlink_parms(): no params data found [ 545.870871][T29594] tmpfs: Bad value for 'mpol' [ 545.915164][T29561] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.922444][T29561] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.931142][T29561] bridge_slave_0: entered allmulticast mode [ 545.937936][T29561] bridge_slave_0: entered promiscuous mode [ 545.945395][T29561] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.952467][T29561] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.959794][T29561] bridge_slave_1: entered allmulticast mode [ 545.966596][T29561] bridge_slave_1: entered promiscuous mode [ 545.992573][T29613] cgroup: name respecified [ 545.999235][T29561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.010530][T29561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.054380][T29561] team0: Port device team_slave_0 added [ 546.065690][ T29] audit: type=1400 audit(2000000212.815:50374): avc: denied { bind } for pid=29620 comm="syz.4.9801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 546.085620][ T29] audit: type=1400 audit(2000000212.815:50375): avc: denied { node_bind } for pid=29620 comm="syz.4.9801" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 546.098355][T29561] team0: Port device team_slave_1 added [ 546.106545][ T29] audit: type=1400 audit(2000000212.815:50376): avc: denied { connect } for pid=29620 comm="syz.4.9801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 546.167795][T29561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.174927][T29561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.201076][T29561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.213952][T29561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.221079][T29561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.247241][T29561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.281179][T29561] hsr_slave_0: entered promiscuous mode [ 546.288116][T29561] hsr_slave_1: entered promiscuous mode [ 546.294201][T29561] debugfs: 'hsr0' already exists in 'hsr' [ 546.300100][T29561] Cannot create hsr debugfs directory [ 546.389714][T29561] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.416777][T29561] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.445351][T29648] tmpfs: Bad value for 'mpol' [ 546.463776][T29561] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.509297][T29656] loop1: detected capacity change from 0 to 736 [ 546.529946][T29561] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.597902][T29561] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 546.607724][T29561] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 546.616857][T29561] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 546.626521][T29561] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 546.668259][T29561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.670663][T29676] tmpfs: Bad value for 'mpol' [ 546.684723][T29561] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.696748][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.703880][ T4721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.716358][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.723497][ T4721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.816615][T29561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.892466][T29704] tmpfs: Bad value for 'mpol' [ 546.961214][T29561] veth0_vlan: entered promiscuous mode [ 546.970649][T29561] veth1_vlan: entered promiscuous mode [ 547.012558][T29561] veth0_macvtap: entered promiscuous mode [ 547.041419][T29561] veth1_macvtap: entered promiscuous mode [ 547.054674][T29729] tmpfs: Bad value for 'mpol' [ 547.067587][T29561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.099906][T29561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.124605][ T4731] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.150217][ T4731] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.186845][ T4731] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.215760][ T4731] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.255683][T29756] tmpfs: Bad value for 'mpol' [ 547.426087][T29787] loop1: detected capacity change from 0 to 128 [ 547.433343][T29787] FAT-fs (loop1): bogus number of FAT structure [ 547.439704][T29787] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 547.448984][T29787] FAT-fs (loop1): Can't find a valid FAT filesystem [ 547.478991][T29791] tmpfs: Bad value for 'mpol' [ 547.573075][T29803] loop2: detected capacity change from 0 to 7 [ 547.676467][T29819] tmpfs: Bad value for 'mpol' [ 547.738392][T29827] loop7: detected capacity change from 0 to 256 [ 547.776515][T29827] FAT-fs (loop7): Directory bread(block 64) failed [ 547.784158][T29834] loop2: detected capacity change from 0 to 7 [ 547.790335][T29827] FAT-fs (loop7): Directory bread(block 65) failed [ 547.801524][T29827] FAT-fs (loop7): Directory bread(block 66) failed [ 547.808614][T29827] FAT-fs (loop7): Directory bread(block 67) failed [ 547.815428][T29827] FAT-fs (loop7): Directory bread(block 68) failed [ 547.822235][T29827] FAT-fs (loop7): Directory bread(block 69) failed [ 547.829270][T29827] FAT-fs (loop7): Directory bread(block 70) failed [ 547.835902][T29827] FAT-fs (loop7): Directory bread(block 71) failed [ 547.843142][T29827] FAT-fs (loop7): Directory bread(block 72) failed [ 547.859747][T29827] FAT-fs (loop7): Directory bread(block 73) failed [ 547.909308][T29827] bio_check_eod: 72 callbacks suppressed [ 547.909329][T29827] syz.7.9890: attempt to access beyond end of device [ 547.909329][T29827] loop7: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 547.938938][T29849] tmpfs: Bad value for 'mpol' [ 547.980238][T29856] loop4: detected capacity change from 0 to 128 [ 547.987363][ T4726] kworker/u8:24: attempt to access beyond end of device [ 547.987363][ T4726] loop7: rw=1, sector=1256, nr_sectors = 16 limit=256 [ 548.005210][T29856] FAT-fs (loop4): bogus number of FAT structure [ 548.011589][T29856] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 548.020733][T29856] FAT-fs (loop4): Can't find a valid FAT filesystem [ 548.075771][T29867] loop2: detected capacity change from 0 to 7 [ 548.123356][T29874] loop7: detected capacity change from 0 to 736 [ 548.127790][T29875] loop6: detected capacity change from 0 to 128 [ 548.146139][T29875] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 548.162965][T29875] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 548.175383][T29879] tmpfs: Bad value for 'mpol' [ 548.215795][ T29] audit: type=1400 audit(2000000215.072:50377): avc: denied { mount } for pid=29881 comm="syz.4.9914" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 548.254551][T29882] VFS: Mount too revealing [ 548.345555][T29895] loop2: detected capacity change from 0 to 7 [ 549.062930][T29970] loop2: detected capacity change from 0 to 7 [ 549.099958][T29978] netem: change failed [ 549.343451][T29992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9960'. [ 549.378586][T29992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9960'. [ 549.425310][T30002] loop1: detected capacity change from 0 to 256 [ 549.439090][T30002] FAT-fs (loop1): Directory bread(block 64) failed [ 549.448495][T30002] FAT-fs (loop1): Directory bread(block 65) failed [ 549.455250][T30002] FAT-fs (loop1): Directory bread(block 66) failed [ 549.470373][T30002] FAT-fs (loop1): Directory bread(block 67) failed [ 549.486092][T30002] FAT-fs (loop1): Directory bread(block 68) failed [ 549.494601][T30002] FAT-fs (loop1): Directory bread(block 69) failed [ 549.503317][T30002] FAT-fs (loop1): Directory bread(block 70) failed [ 549.510389][T30002] FAT-fs (loop1): Directory bread(block 71) failed [ 549.530096][T30002] FAT-fs (loop1): Directory bread(block 72) failed [ 549.542722][T30002] FAT-fs (loop1): Directory bread(block 73) failed [ 549.553215][T30014] netem: change failed [ 549.668424][T30025] loop2: detected capacity change from 0 to 7 [ 549.754630][T30037] loop2: detected capacity change from 0 to 256 [ 549.761481][T30037] FAT-fs (loop2): bogus sectors per cluster 0 [ 549.767703][T30037] FAT-fs (loop2): Can't find a valid FAT filesystem [ 549.831497][ T29] audit: type=1400 audit(2000000216.773:50378): avc: denied { unmount } for pid=29003 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 549.899154][T30057] cgroup: No subsys list or none specified [ 549.934464][T30064] netlink: 'syz.6.9995': attribute type 3 has an invalid length. [ 550.390839][T30095] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10008'. [ 550.416820][T30097] netlink: 'syz.1.10009': attribute type 3 has an invalid length. [ 550.469740][T30107] all: renamed from veth0_to_team (while UP) [ 550.962637][T30156] loop2: detected capacity change from 0 to 256 [ 550.976615][T30156] FAT-fs (loop2): Directory bread(block 64) failed [ 550.985001][T30156] FAT-fs (loop2): Directory bread(block 65) failed [ 550.991575][T30156] FAT-fs (loop2): Directory bread(block 66) failed [ 550.998208][T30156] FAT-fs (loop2): Directory bread(block 67) failed [ 551.004912][T30156] FAT-fs (loop2): Directory bread(block 68) failed [ 551.011464][T30156] FAT-fs (loop2): Directory bread(block 69) failed [ 551.018034][T30156] FAT-fs (loop2): Directory bread(block 70) failed [ 551.024777][T30156] FAT-fs (loop2): Directory bread(block 71) failed [ 551.031364][T30156] FAT-fs (loop2): Directory bread(block 72) failed [ 551.038100][T30156] FAT-fs (loop2): Directory bread(block 73) failed [ 551.055724][T30156] syz.2.10038: attempt to access beyond end of device [ 551.055724][T30156] loop2: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 551.070238][T30156] syz.2.10038: attempt to access beyond end of device [ 551.070238][T30156] loop2: rw=2051, sector=1288, nr_sectors = 32 limit=256 [ 551.084966][T30156] syz.2.10038: attempt to access beyond end of device [ 551.084966][T30156] loop2: rw=2051, sector=1352, nr_sectors = 32 limit=256 [ 551.099631][T30156] syz.2.10038: attempt to access beyond end of device [ 551.099631][T30156] loop2: rw=2051, sector=1416, nr_sectors = 32 limit=256 [ 551.113522][T30156] syz.2.10038: attempt to access beyond end of device [ 551.113522][T30156] loop2: rw=2051, sector=1448, nr_sectors = 32 limit=256 [ 551.138902][ T3560] kworker/u8:12: attempt to access beyond end of device [ 551.138902][ T3560] loop2: rw=1, sector=1256, nr_sectors = 32 limit=256 [ 551.152785][ T3560] kworker/u8:12: attempt to access beyond end of device [ 551.152785][ T3560] loop2: rw=1, sector=1320, nr_sectors = 32 limit=256 [ 551.166538][ T3560] kworker/u8:12: attempt to access beyond end of device [ 551.166538][ T3560] loop2: rw=1, sector=1384, nr_sectors = 32 limit=256 [ 551.340169][T30175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10046'. [ 551.350184][T30175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10046'. [ 551.756243][T30202] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.763347][T30202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.828535][T30212] loop7: detected capacity change from 0 to 256 [ 551.860788][T30212] FAT-fs (loop7): Directory bread(block 64) failed [ 551.868074][T30212] FAT-fs (loop7): Directory bread(block 65) failed [ 551.876995][T30212] FAT-fs (loop7): Directory bread(block 66) failed [ 551.892394][T30212] FAT-fs (loop7): Directory bread(block 67) failed [ 551.899725][T30212] FAT-fs (loop7): Directory bread(block 68) failed [ 551.908989][T30212] FAT-fs (loop7): Directory bread(block 69) failed [ 551.915721][T30212] FAT-fs (loop7): Directory bread(block 70) failed [ 551.922740][T30212] FAT-fs (loop7): Directory bread(block 71) failed [ 551.931037][T30212] FAT-fs (loop7): Directory bread(block 72) failed [ 551.936090][T30224] netem: change failed [ 551.938778][T30212] FAT-fs (loop7): Directory bread(block 73) failed [ 552.030685][ T29] audit: type=1400 audit(2000000219.072:50379): avc: denied { ioctl } for pid=30237 comm="syz.7.10076" path="socket:[127362]" dev="sockfs" ino=127362 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 552.130056][ T29] audit: type=1326 audit(2000000219.187:50380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30250 comm="syz.7.10082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fb49eec9 code=0x7ffc0000 [ 552.153871][ T29] audit: type=1326 audit(2000000219.187:50381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30250 comm="syz.7.10082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fb49eec9 code=0x7ffc0000 [ 552.180555][ T29] audit: type=1326 audit(2000000219.219:50382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30250 comm="syz.7.10082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff4fb49eec9 code=0x7ffc0000 [ 552.204300][ T29] audit: type=1326 audit(2000000219.219:50383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30250 comm="syz.7.10082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fb49eec9 code=0x7ffc0000 [ 552.228051][T30255] loop1: detected capacity change from 0 to 256 [ 552.228404][ T29] audit: type=1326 audit(2000000219.219:50384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30250 comm="syz.7.10082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fb49eec9 code=0x7ffc0000 [ 552.258189][ T29] audit: type=1326 audit(2000000219.219:50385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30250 comm="syz.7.10082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff4fb49eec9 code=0x7ffc0000 [ 552.282243][ T29] audit: type=1326 audit(2000000219.219:50386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30250 comm="syz.7.10082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fb49eec9 code=0x7ffc0000 [ 552.297244][T30255] FAT-fs (loop1): Directory bread(block 64) failed [ 552.314468][T30255] FAT-fs (loop1): Directory bread(block 65) failed [ 552.321371][T30255] FAT-fs (loop1): Directory bread(block 66) failed [ 552.330055][T30255] FAT-fs (loop1): Directory bread(block 67) failed [ 552.337301][T30255] FAT-fs (loop1): Directory bread(block 68) failed [ 552.343911][T30255] FAT-fs (loop1): Directory bread(block 69) failed [ 552.350614][T30255] FAT-fs (loop1): Directory bread(block 70) failed [ 552.357280][T30255] FAT-fs (loop1): Directory bread(block 71) failed [ 552.363881][T30255] FAT-fs (loop1): Directory bread(block 72) failed [ 552.370684][T30255] FAT-fs (loop1): Directory bread(block 73) failed [ 552.766103][T30290] loop7: detected capacity change from 0 to 256 [ 552.795672][T30290] FAT-fs (loop7): Directory bread(block 64) failed [ 552.802223][T30290] FAT-fs (loop7): Directory bread(block 65) failed [ 552.823205][T30290] FAT-fs (loop7): Directory bread(block 66) failed [ 552.846266][T30290] FAT-fs (loop7): Directory bread(block 67) failed [ 552.866295][T30290] FAT-fs (loop7): Directory bread(block 68) failed [ 552.890966][T30290] FAT-fs (loop7): Directory bread(block 69) failed [ 552.899917][T30290] FAT-fs (loop7): Directory bread(block 70) failed [ 552.909356][T30290] FAT-fs (loop7): Directory bread(block 71) failed [ 552.916896][T30306] netlink: 'syz.4.10108': attribute type 4 has an invalid length. [ 552.931218][T30290] FAT-fs (loop7): Directory bread(block 72) failed [ 552.938736][T30290] FAT-fs (loop7): Directory bread(block 73) failed [ 553.044954][T30316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10112'. [ 553.118996][T30319] sch_tbf: burst 14 is lower than device lo mtu (18) ! [ 553.381089][T30341] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 553.392091][T30341] sch_tbf: burst 14 is lower than device lo mtu (65550) ! [ 553.439001][T30352] loop2: detected capacity change from 0 to 7 [ 553.572650][T30376] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 553.580899][T30376] sch_tbf: burst 14 is lower than device lo mtu (65550) ! [ 553.615872][T30382] loop2: detected capacity change from 0 to 7 [ 553.656831][T30387] netlink: 'syz.4.10145': attribute type 4 has an invalid length. [ 553.666299][T30387] netlink: 'syz.4.10145': attribute type 4 has an invalid length. [ 553.778255][T30401] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 553.791842][T30401] sch_tbf: burst 14 is lower than device lo mtu (65550) ! [ 553.879192][T30416] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10158'. [ 553.938295][T30425] loop6: detected capacity change from 0 to 512 [ 553.971222][T30431] loop2: detected capacity change from 0 to 7 [ 554.569397][T30451] netlink: 'syz.4.10174': attribute type 4 has an invalid length. [ 555.125451][T30496] netlink: 'syz.1.10195': attribute type 4 has an invalid length. [ 555.138393][T30498] netlink: 'syz.6.10196': attribute type 4 has an invalid length. [ 555.380359][T30524] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10208'. [ 555.644188][T30553] netlink: 68 bytes leftover after parsing attributes in process `syz.6.10222'. [ 555.766011][T30569] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10228'. [ 555.766805][T30571] loop7: detected capacity change from 0 to 164 [ 555.909299][T30592] tmpfs: Bad value for 'mpol' [ 555.952116][T30597] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10241'. [ 556.078140][T30611] loop2: detected capacity change from 0 to 7 [ 556.355661][T30637] loop2: detected capacity change from 0 to 7 [ 556.458580][T30654] netlink: 'syz.7.10267': attribute type 4 has an invalid length. [ 556.540907][T30664] loop2: detected capacity change from 0 to 7 [ 556.699235][T30688] netlink: 43 bytes leftover after parsing attributes in process `syz.2.10282'. [ 556.709116][T30691] loop2: detected capacity change from 0 to 7 [ 556.734833][T30693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10284'. [ 556.745824][T30693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10284'. [ 556.759757][T30695] netlink: 36 bytes leftover after parsing attributes in process `syz.7.10285'. [ 556.894663][T30721] loop2: detected capacity change from 0 to 7 [ 556.906245][T30723] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10298'. [ 556.916016][T30723] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10298'. [ 556.988789][T30735] netlink: 'syz.6.10303': attribute type 4 has an invalid length. [ 557.138099][T30765] loop7: detected capacity change from 0 to 256 [ 557.154689][T30765] FAT-fs (loop7): Directory bread(block 64) failed [ 557.161401][T30765] FAT-fs (loop7): Directory bread(block 65) failed [ 557.168050][T30765] FAT-fs (loop7): Directory bread(block 66) failed [ 557.174589][T30765] FAT-fs (loop7): Directory bread(block 67) failed [ 557.181176][T30765] FAT-fs (loop7): Directory bread(block 68) failed [ 557.187758][T30765] FAT-fs (loop7): Directory bread(block 69) failed [ 557.194378][T30765] FAT-fs (loop7): Directory bread(block 70) failed [ 557.201007][T30765] FAT-fs (loop7): Directory bread(block 71) failed [ 557.207590][T30765] FAT-fs (loop7): Directory bread(block 72) failed [ 557.214157][T30765] FAT-fs (loop7): Directory bread(block 73) failed [ 557.266974][T30779] loop4: detected capacity change from 0 to 512 [ 557.282092][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 557.282110][ T29] audit: type=1400 audit(2000000224.594:50390): avc: denied { remount } for pid=30778 comm="syz.4.10324" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 557.473052][ T29] audit: type=1400 audit(2000000224.794:50391): avc: denied { read } for pid=30807 comm="syz.1.10337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 557.705799][ T29] audit: type=1400 audit(2000000225.035:50392): avc: denied { create } for pid=30833 comm="syz.7.10348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 557.938317][T30865] sch_tbf: burst 14 is lower than device lo mtu (18) ! [ 558.478243][T30919] loop2: detected capacity change from 0 to 7 [ 558.796623][T30948] netlink: 'syz.4.10398': attribute type 4 has an invalid length. [ 558.879373][T30959] sch_tbf: burst 14 is lower than device lo mtu (18) ! [ 559.000289][T30976] netlink: 'syz.1.10413': attribute type 4 has an invalid length. [ 559.172936][T31002] netlink: 'syz.6.10426': attribute type 4 has an invalid length. [ 559.262595][T31014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.287588][T31014] team0: Port device bond0 added [ 559.405123][T31032] netlink: 'syz.4.10440': attribute type 4 has an invalid length. [ 559.433956][T31037] netem: invalid attributes len -17 [ 559.439215][T31037] netem: change failed [ 559.653966][T31058] netlink: 'syz.7.10452': attribute type 4 has an invalid length. [ 559.819405][T31073] ip6gre2: entered allmulticast mode [ 559.828411][T31072] sch_tbf: burst 14 is lower than device lo mtu (18) ! [ 559.886669][T31062] netlink: 'syz.7.10454': attribute type 12 has an invalid length. [ 559.895231][T31062] netlink: 'syz.7.10454': attribute type 29 has an invalid length. [ 560.080738][T31097] ip6gre1: entered allmulticast mode [ 561.259512][T31179] loop2: detected capacity change from 0 to 7 [ 561.322448][T31191] sch_tbf: burst 14 is lower than device lo mtu (18) ! [ 561.431367][T31207] loop2: detected capacity change from 0 to 7 [ 561.456717][T31209] __nla_validate_parse: 2 callbacks suppressed [ 561.456737][T31209] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10522'. [ 561.472679][T31209] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10522'. [ 561.624927][T31231] netlink: 60 bytes leftover after parsing attributes in process `syz.6.10533'. [ 561.642106][T31231] netlink: 60 bytes leftover after parsing attributes in process `syz.6.10533'. [ 561.848892][ T29] audit: type=1400 audit(2000000229.381:50393): avc: denied { map } for pid=31248 comm="syz.7.10540" path="socket:[130500]" dev="sockfs" ino=130500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 561.872914][ T29] audit: type=1400 audit(2000000229.381:50394): avc: denied { read accept } for pid=31248 comm="syz.7.10540" path="socket:[130500]" dev="sockfs" ino=130500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 562.031594][T31262] netlink: 60 bytes leftover after parsing attributes in process `syz.7.10546'. [ 562.041339][T31262] netlink: 60 bytes leftover after parsing attributes in process `syz.7.10546'. [ 562.067761][T31264] sch_tbf: burst 14 is lower than device lo mtu (18) ! [ 562.217417][T31284] netlink: 60 bytes leftover after parsing attributes in process `syz.7.10557'. [ 562.235301][T31284] netlink: 60 bytes leftover after parsing attributes in process `syz.7.10557'. [ 562.389486][T31316] ip6gre1: entered allmulticast mode [ 563.247604][T31397] netlink: 'syz.2.10605': attribute type 17 has an invalid length. [ 563.300316][T31397] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 563.880053][T31486] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.129363][T31523] sch_tbf: burst 14 is lower than device lo mtu (18) ! [ 564.156207][T31527] loop6: detected capacity change from 0 to 512 [ 564.297353][T31552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10679'. [ 564.315714][T31552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10679'. [ 564.587558][T12998] kernel write not supported for file /827/gid_map (pid: 12998 comm: kworker/1:8) [ 565.068223][T31635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 565.336747][T31673] 9pnet_fd: Insufficient options for proto=fd [ 565.514478][T31703] 9pnet_fd: Insufficient options for proto=fd [ 565.945138][T31731] loop2: detected capacity change from 0 to 7 [ 565.951825][T31731] loop2: [ 565.970318][T31733] tmpfs: Bad value for 'mpol' [ 566.169409][T31756] tmpfs: Bad value for 'mpol' [ 566.234890][T31765] loop2: detected capacity change from 0 to 7 [ 566.241271][T31765] loop2: [ 567.567053][T31904] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10843'. [ 567.578255][T31904] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10843'. [ 568.217225][T31954] tmpfs: Bad value for 'mpol' [ 568.323862][T31961] loop4: detected capacity change from 0 to 8192 [ 568.918330][T32004] loop2: detected capacity change from 0 to 256 [ 570.277653][T32118] loop4: detected capacity change from 0 to 256 [ 570.506346][T32163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.516975][T32163] team0: Port device bond0 added [ 571.802959][T32226] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10993'. [ 571.814605][T32226] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10993'. [ 571.830612][T32229] loop4: detected capacity change from 0 to 256 [ 571.881364][ T29] audit: type=1400 audit(2000000239.911:50395): avc: denied { search } for pid=32236 comm="syz.4.10998" name="/" dev="configfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 571.904103][ T29] audit: type=1400 audit(2000000239.911:50396): avc: denied { setattr } for pid=32236 comm="syz.4.10998" name="/" dev="configfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 571.926824][ T29] audit: type=1400 audit(2000000239.911:50397): avc: denied { mounton } for pid=32237 comm="syz.7.10999" path="/426/file0" dev="tmpfs" ino=2202 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 572.687904][ T4731] bridge_slave_1: left allmulticast mode [ 572.693816][ T4731] bridge_slave_1: left promiscuous mode [ 572.699738][ T4731] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.716357][ T4731] bridge_slave_0: left allmulticast mode [ 572.722318][ T4731] bridge_slave_0: left promiscuous mode [ 572.728102][ T4731] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.402652][ T4731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.415587][ T4731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.426140][ T4731] bond0 (unregistering): Released all slaves [ 573.558677][ T4731] hsr_slave_0: left promiscuous mode [ 573.583562][ T4731] hsr_slave_1: left promiscuous mode [ 573.611453][ T4731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.618930][ T4731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.631814][ T4731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.639367][ T4731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.664847][ T4731] veth1_macvtap: left promiscuous mode [ 573.677532][ T4731] veth0_macvtap: left promiscuous mode [ 573.689135][ T4731] veth1_vlan: left promiscuous mode [ 573.694926][ T4731] veth0_vlan: left promiscuous mode [ 573.990968][ T4731] team0 (unregistering): Port device team_slave_1 removed [ 574.057849][ T4731] team0 (unregistering): Port device team_slave_0 removed [ 574.108224][T32371] loop4: detected capacity change from 0 to 512 [ 574.141613][T32371] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 574.222511][T32368] lo speed is unknown, defaulting to 1000 [ 574.410840][T32393] loop7: detected capacity change from 0 to 256 [ 574.509265][T32407] sch_tbf: burst 14 is lower than device lo mtu (18) ! [ 575.356626][T32445] sch_tbf: burst 14 is lower than device lo mtu (18) ! [ 575.561551][ T29] audit: type=1326 audit(2000000243.785:50398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32431 comm="syz.6.11088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79cad15d67 code=0x7fc00000 [ 576.249640][T32484] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 576.271436][T32486] sch_tbf: burst 14 is lower than device lo mtu (18) ! [ 576.481135][T32499] loop7: detected capacity change from 0 to 1024 [ 576.488060][T32499] EXT4-fs: Ignoring removed nomblk_io_submit option [ 576.496413][T32499] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 576.504644][T32499] System zones: 0-1, 3-36 [ 576.509930][T32499] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.578472][T27498] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.663224][ T29] audit: type=1326 audit(2000000244.940:50399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32516 comm="syz.6.11124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79cad1eec9 code=0x7ffc0000 [ 576.703305][ T29] audit: type=1326 audit(2000000244.961:50400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32516 comm="syz.6.11124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f79cad1eec9 code=0x7ffc0000 [ 576.727126][ T29] audit: type=1326 audit(2000000244.961:50401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32516 comm="syz.6.11124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79cad1eec9 code=0x7ffc0000 [ 576.751084][ T29] audit: type=1326 audit(2000000244.961:50402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32516 comm="syz.6.11124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79cad1eec9 code=0x7ffc0000 [ 577.591455][T32543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11133'. [ 577.716523][T32558] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 577.755612][T32564] netdevsim netdevsim6: Direct firmware load for ./file0/file1 failed with error -2 [ 577.947701][T32589] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 577.955510][T32589] sch_tbf: burst 14 is lower than device lo mtu (18) ! [ 578.195368][T32607] lo speed is unknown, defaulting to 1000 [ 578.686899][T32640] sch_tbf: burst 14 is lower than device lo mtu (18) ! [ 578.867664][T32654] netlink: 'syz.7.11183': attribute type 17 has an invalid length. [ 578.895144][T32654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.904581][T32654] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.918880][T32654] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 579.055085][T32662] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 579.127595][T32670] loop4: detected capacity change from 0 to 256 [ 579.724865][T32695] hub 6-0:1.0: USB hub found [ 579.730374][T32695] hub 6-0:1.0: 8 ports detected [ 579.741235][T32688] netdevsim netdevsim6: Direct firmware load for ./file0/file1 failed with error -2 [ 579.865205][T32711] netlink: 'syz.6.11209': attribute type 17 has an invalid length. [ 579.873655][T32712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11198'. [ 579.882830][T32712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11198'. [ 579.897906][T32711] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 579.917639][ T29] audit: type=1326 audit(2000000248.352:50403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32683 comm="syz.2.11198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cf28eec9 code=0x7ffc0000 [ 579.941394][ T29] audit: type=1326 audit(2000000248.352:50404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32683 comm="syz.2.11198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cf28eec9 code=0x7ffc0000 [ 580.030671][ T29] audit: type=1326 audit(2000000248.478:50405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32721 comm="syz.6.11214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79cad1eec9 code=0x7ffc0000 [ 580.054687][ T29] audit: type=1326 audit(2000000248.478:50406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32721 comm="syz.6.11214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79cad1eec9 code=0x7ffc0000 [ 580.079056][ T29] audit: type=1326 audit(2000000248.478:50407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32721 comm="syz.6.11214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79cad1eec9 code=0x7ffc0000 [ 580.102894][ T29] audit: type=1326 audit(2000000248.478:50408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32721 comm="syz.6.11214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79cad1eec9 code=0x7ffc0000 [ 580.409084][T32745] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11220'. [ 580.418148][T32745] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11220'. [ 580.600771][T32751] netlink: 'syz.6.11223': attribute type 17 has an invalid length. [ 580.662394][T32751] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 580.909854][ T315] hub 6-0:1.0: USB hub found [ 580.922484][ T315] hub 6-0:1.0: 8 ports detected [ 581.037141][ T334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11233'. [ 581.046183][ T334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11233'. [ 581.942776][ T402] loop2: detected capacity change from 0 to 256 [ 582.013803][ T402] hub 9-0:1.0: USB hub found [ 582.019207][ T402] hub 9-0:1.0: 8 ports detected [ 582.044850][ T417] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 582.117830][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 582.117858][ T29] audit: type=1326 audit(2000000250.662:50448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=425 comm="syz.2.11285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cf28eec9 code=0x7ffc0000 [ 582.163295][ T427] loop4: detected capacity change from 0 to 1024 [ 582.166092][ T29] audit: type=1326 audit(2000000250.662:50449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=424 comm="syz.1.11286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8be81eec9 code=0x7ffc0000 [ 582.182156][ T430] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 582.193278][ T29] audit: type=1326 audit(2000000250.662:50450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=424 comm="syz.1.11286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8be81eec9 code=0x7ffc0000 [ 582.226474][ T29] audit: type=1326 audit(2000000250.662:50451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=424 comm="syz.1.11286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8be81eec9 code=0x7ffc0000 [ 582.250143][ T29] audit: type=1326 audit(2000000250.672:50452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=424 comm="syz.1.11286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe8be81eec9 code=0x7ffc0000 [ 582.273639][ T29] audit: type=1326 audit(2000000250.672:50453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=424 comm="syz.1.11286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8be81eec9 code=0x7ffc0000 [ 582.274272][ T427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.297648][ T29] audit: type=1326 audit(2000000250.672:50454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=424 comm="syz.1.11286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8be81eec9 code=0x7ffc0000 [ 582.333279][ T29] audit: type=1326 audit(2000000250.672:50455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=424 comm="syz.1.11286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fe8be81eec9 code=0x7ffc0000 [ 582.356804][ T29] audit: type=1326 audit(2000000250.672:50456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=424 comm="syz.1.11286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8be81eec9 code=0x7ffc0000 [ 582.358756][ T427] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.11284: Allocating blocks 449-513 which overlap fs metadata [ 582.380465][ T29] audit: type=1326 audit(2000000250.672:50457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=424 comm="syz.1.11286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8be81eec9 code=0x7ffc0000 [ 582.419309][ T441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11284'. [ 582.428861][ T441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.436478][ T441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.444725][ T441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.452382][ T441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.666961][ T423] EXT4-fs (loop4): pa ffff8881072de850: logic 48, phys. 177, len 21 [ 582.675322][ T423] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 582.910570][T28347] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.043105][ T456] loop4: detected capacity change from 0 to 256 [ 583.046085][ T451] loop7: detected capacity change from 0 to 512 [ 583.065960][ T451] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.080477][ T451] ext4 filesystem being mounted at /495/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 583.085542][ T456] hub 9-0:1.0: USB hub found [ 583.095674][ T456] hub 9-0:1.0: 8 ports detected [ 583.216614][T27498] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.373682][ T463] loop4: detected capacity change from 0 to 512 [ 583.410054][ T463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.425677][ T463] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 583.513342][ T499] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11311'. [ 583.710880][T28347] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.811052][ T508] lo speed is unknown, defaulting to 1000 [ 584.717817][ T533] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11319'. [ 584.759961][ T533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.767461][ T533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.784793][ T537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11324'. [ 584.797220][ T533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.804726][ T533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.933546][ T556] loop4: detected capacity change from 0 to 256 [ 585.032301][ T556] hub 9-0:1.0: USB hub found [ 585.043427][ T556] hub 9-0:1.0: 8 ports detected [ 585.242284][ T577] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 585.350287][ T591] loop2: detected capacity change from 0 to 256 [ 585.365848][ T591] hub 9-0:1.0: USB hub found [ 585.370814][ T591] hub 9-0:1.0: 8 ports detected [ 585.450468][ T605] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 585.488682][ T609] netdevsim netdevsim2: Direct firmware load for ./file0/file1 failed with error -2 [ 585.507969][ T609] loop2: detected capacity change from 0 to 512 [ 585.518838][ T609] EXT4-fs (loop2): orphan cleanup on readonly fs [ 585.525825][ T609] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.11355: invalid block [ 585.546796][ T609] EXT4-fs (loop2): Remounting filesystem read-only [ 585.553744][ T609] EXT4-fs (loop2): 2 truncates cleaned up [ 585.560155][ T609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 585.604753][ T622] loop4: detected capacity change from 0 to 256 [ 585.611659][T29561] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.661832][ T626] loop2: detected capacity change from 0 to 256 [ 585.699273][ T626] hub 9-0:1.0: USB hub found [ 585.706633][ T626] hub 9-0:1.0: 8 ports detected [ 585.764723][ T645] netdevsim netdevsim4: Direct firmware load for ./file0/file1 failed with error -2 [ 585.774268][ T650] loop2: detected capacity change from 0 to 256 [ 585.778533][ T645] loop4: detected capacity change from 0 to 512 [ 585.804112][ T645] EXT4-fs (loop4): orphan cleanup on readonly fs [ 585.822292][ T645] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.11371: invalid block [ 585.841382][ T645] EXT4-fs (loop4): Remounting filesystem read-only [ 585.848650][ T645] EXT4-fs (loop4): 2 truncates cleaned up [ 585.854931][ T645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 585.871570][ T662] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11370'. [ 585.880604][ T662] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11370'. [ 585.914131][T28347] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.035700][ T664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11378'. [ 586.044815][ T664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11378'. [ 586.892056][ T696] lo speed is unknown, defaulting to 1000 [ 587.347857][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 587.347877][ T29] audit: type=1326 audit(2000000256.100:50539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=703 comm="syz.7.11394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fb49eec9 code=0x7ffc0000 [ 587.377616][ T29] audit: type=1326 audit(2000000256.111:50540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=703 comm="syz.7.11394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fb49eec9 code=0x7ffc0000 [ 587.401208][ T29] audit: type=1326 audit(2000000256.111:50541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=703 comm="syz.7.11394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7ff4fb49eec9 code=0x7ffc0000 [ 587.424973][ T29] audit: type=1326 audit(2000000256.111:50542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=703 comm="syz.7.11394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fb49eec9 code=0x7ffc0000 [ 587.448630][ T29] audit: type=1326 audit(2000000256.111:50543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=703 comm="syz.7.11394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fb49eec9 code=0x7ffc0000 [ 587.478293][ T701] loop2: detected capacity change from 0 to 1024 [ 587.485348][ T701] EXT4-fs: Ignoring removed nomblk_io_submit option [ 587.543980][ T701] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 587.552222][ T701] System zones: 0-1, 3-36 [ 587.557681][ T701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 587.560997][ T710] netlink: 'syz.7.11395': attribute type 1 has an invalid length. [ 587.572248][ T29] audit: type=1326 audit(2000000256.373:50544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=706 comm="syz.7.11395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fb49eec9 code=0x7ffc0000 [ 587.578441][ T710] netlink: 'syz.7.11395': attribute type 2 has an invalid length. [ 587.602073][ T29] audit: type=1326 audit(2000000256.373:50545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=706 comm="syz.7.11395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff4fb4a0de7 code=0x7ffc0000 [ 587.610943][ T710] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11395'. [ 587.633376][ T29] audit: type=1326 audit(2000000256.373:50546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=706 comm="syz.7.11395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff4fb4a0d5c code=0x7ffc0000 [ 587.665717][ T29] audit: type=1326 audit(2000000256.373:50547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=706 comm="syz.7.11395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff4fb4a0c94 code=0x7ffc0000 [ 587.689202][ T29] audit: type=1326 audit(2000000256.373:50548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=706 comm="syz.7.11395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff4fb4a0c94 code=0x7ffc0000 [ 587.790424][T29561] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.895857][ T732] loop2: detected capacity change from 0 to 256 [ 587.909464][ T722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11400'. [ 587.918663][ T722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11400'. [ 587.943467][ T732] hub 9-0:1.0: USB hub found [ 587.948255][ T732] hub 9-0:1.0: 8 ports detected [ 588.096372][ T760] hub 6-0:1.0: USB hub found [ 588.101142][ T760] hub 6-0:1.0: 8 ports detected [ 588.163289][ T768] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11419'. [ 588.209774][ T772] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11415'. [ 588.218889][ T772] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11415'. [ 588.230008][ T760] netlink: 44 bytes leftover after parsing attributes in process `syz.7.11415'. [ 588.328852][ T782] netlink: 'syz.6.11424': attribute type 1 has an invalid length. [ 588.336841][ T782] netlink: 'syz.6.11424': attribute type 2 has an invalid length. [ 588.345137][ T782] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11424'. [ 588.358234][ T782] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.401708][ T782] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.432147][ T780] loop7: detected capacity change from 0 to 512 [ 588.449433][ T782] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.459065][ T780] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.472709][ T780] ext4 filesystem being mounted at /519/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 588.506129][ T782] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.572687][ T4740] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.582961][T27498] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.597517][ T4740] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.605943][ T4740] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.614676][ T4740] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.818536][ T814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11430'. [ 588.827575][ T814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11430'. [ 588.840730][ T815] netlink: 'syz.4.11437': attribute type 17 has an invalid length. [ 588.896574][ T819] netlink: 'syz.6.11439': attribute type 1 has an invalid length. [ 588.904528][ T819] netlink: 'syz.6.11439': attribute type 2 has an invalid length. [ 588.913616][ T815] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 588.930660][ T819] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.965420][ T824] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 588.981078][ T819] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.038211][ T819] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.095257][ T819] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.737331][ T855] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 590.058821][ T880] hub 8-0:1.0: USB hub found [ 590.063519][ T880] hub 8-0:1.0: 8 ports detected [ 590.974039][ T918] loop4: detected capacity change from 0 to 1024 [ 591.004148][ T918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.039172][ T918] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.11479: Allocating blocks 449-513 which overlap fs metadata [ 591.110904][ T917] EXT4-fs (loop4): pa ffff888107238e70: logic 48, phys. 177, len 21 [ 591.119067][ T917] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 591.142492][T28347] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.196879][ T934] loop4: detected capacity change from 0 to 256 [ 591.785272][ T59] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.796772][ T4726] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.809677][ T59] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.821145][ T59] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.863204][ T952] sch_tbf: burst 14 is lower than device lo mtu (18) ! [ 591.917780][ T960] loop7: detected capacity change from 0 to 256 [ 592.086772][ T971] netlink: 'syz.4.11500': attribute type 1 has an invalid length. [ 592.095152][ T971] netlink: 'syz.4.11500': attribute type 2 has an invalid length. [ 592.121608][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 592.121626][ T29] audit: type=1326 audit(2000000261.160:50658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=970 comm="syz.4.11500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a817deec9 code=0x7ffc0000 [ 592.159623][ T29] audit: type=1326 audit(2000000261.202:50659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=970 comm="syz.4.11500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5a817deec9 code=0x7ffc0000 [ 592.189308][ T971] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.268204][ T971] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.325671][ T971] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.383004][ T971] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.444713][ T4730] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.467464][ T4730] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.484382][ T29] audit: type=1326 audit(2000000261.549:50660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=970 comm="syz.4.11500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a817deec9 code=0x7ffc0000 [ 592.522907][ T4730] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.531221][ T4730] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.544645][ T29] audit: type=1326 audit(2000000261.580:50661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=970 comm="syz.4.11500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a817deec9 code=0x7ffc0000 [ 592.569628][ T29] audit: type=1326 audit(2000000261.612:50662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=946 comm="syz.2.11489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cf28eec9 code=0x7fc00000 [ 592.629709][ T983] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 592.638136][ T983] sch_tbf: burst 14 is lower than device lo mtu (65550) ! [ 592.692793][ T989] loop4: detected capacity change from 0 to 256 [ 592.706374][ T989] hub 9-0:1.0: USB hub found [ 592.711219][ T989] hub 9-0:1.0: 8 ports detected [ 592.836300][ T29] audit: type=1326 audit(2000000261.916:50663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1001 comm="syz.1.11506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8be81eec9 code=0x7ffc0000 [ 592.859985][ T29] audit: type=1326 audit(2000000261.916:50664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1001 comm="syz.1.11506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8be81eec9 code=0x7ffc0000 [ 592.883680][ T29] audit: type=1326 audit(2000000261.916:50665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1001 comm="syz.1.11506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8be81eec9 code=0x7ffc0000 [ 592.907282][ T29] audit: type=1326 audit(2000000261.916:50666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1001 comm="syz.1.11506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8be81eec9 code=0x7ffc0000 [ 592.931173][ T29] audit: type=1326 audit(2000000261.916:50667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1001 comm="syz.1.11506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe8be81eec9 code=0x7ffc0000 [ 593.009288][ T1008] netlink: 'syz.4.11515': attribute type 1 has an invalid length. [ 593.017170][ T1008] netlink: 'syz.4.11515': attribute type 2 has an invalid length. [ 593.030936][ T1009] __nla_validate_parse: 7 callbacks suppressed [ 593.031046][ T1009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11514'. [ 593.057777][ T1012] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.066911][ T1008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11515'. [ 593.081790][ T1009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.089278][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.113992][ T1009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.121444][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.155888][ T1012] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.167747][ T1015] sch_tbf: burst 14 is lower than device lo mtu (18) ! [ 593.276285][ T1012] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.343715][ T1012] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.373844][ T1018] loop7: detected capacity change from 0 to 1024 [ 593.380781][ T1018] EXT4-fs: Ignoring removed nomblk_io_submit option [ 593.390884][ T1018] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 593.399044][ T1018] System zones: 0-1, 3-36 [ 593.404352][ T1018] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.525946][ T1026] loop2: detected capacity change from 0 to 256 [ 593.537662][ T1026] hub 9-0:1.0: USB hub found [ 593.542894][ T1026] hub 9-0:1.0: 8 ports detected [ 594.053074][T27498] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.620095][ T1049] loop2: detected capacity change from 0 to 512 [ 594.630444][ T1049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.654007][ T1049] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 594.763527][T29561] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.608347][ T1081] loop2: detected capacity change from 0 to 256 [ 595.845030][ T1104] loop7: detected capacity change from 0 to 256 [ 595.930306][ T1114] loop7: detected capacity change from 0 to 512 [ 595.938251][ T1114] EXT4-fs (loop7): orphan cleanup on readonly fs [ 595.945048][ T1114] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.11556: invalid block [ 595.958037][ T1114] EXT4-fs (loop7): Remounting filesystem read-only [ 595.964876][ T1114] EXT4-fs (loop7): 2 truncates cleaned up [ 595.971253][ T1114] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 595.994652][T27498] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.075519][ T4726] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.086950][ T4726] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.095568][ T4726] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.106494][ T4726] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.118416][ T1129] hub 8-0:1.0: USB hub found [ 596.123264][ T1129] hub 8-0:1.0: 8 ports detected [ 596.217059][ T1140] loop7: detected capacity change from 0 to 256 [ 596.343380][ T1152] netlink: 'syz.7.11571': attribute type 1 has an invalid length. [ 596.351352][ T1152] netlink: 'syz.7.11571': attribute type 2 has an invalid length. [ 596.359366][ T1152] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11571'. [ 596.526810][ T1154] hub 8-0:1.0: USB hub found [ 596.531576][ T1154] hub 8-0:1.0: 8 ports detected [ 596.652707][ T1156] hub 6-0:1.0: USB hub found [ 596.663917][ T1156] hub 6-0:1.0: 8 ports detected [ 596.778484][ T1178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11573'. [ 596.787627][ T1178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11573'. [ 596.898921][ T1191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11586'. [ 596.912975][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 596.912991][ T29] audit: type=1326 audit(2000000266.200:50803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1187 comm="syz.7.11584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fb49eec9 code=0x7ffc0000 [ 596.942930][ T29] audit: type=1326 audit(2000000266.200:50804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1187 comm="syz.7.11584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff4fb4a0de7 code=0x7ffc0000 [ 596.966538][ T29] audit: type=1326 audit(2000000266.200:50805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1187 comm="syz.7.11584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff4fb4a0d5c code=0x7ffc0000 [ 596.990625][ T29] audit: type=1326 audit(2000000266.200:50806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1187 comm="syz.7.11584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff4fb4a0c94 code=0x7ffc0000 [ 597.002113][ T1188] netlink: 'syz.7.11584': attribute type 1 has an invalid length. [ 597.014440][ T29] audit: type=1326 audit(2000000266.200:50807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1187 comm="syz.7.11584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff4fb4a0c94 code=0x7ffc0000 [ 597.022318][ T1188] netlink: 'syz.7.11584': attribute type 2 has an invalid length. [ 597.046008][ T29] audit: type=1326 audit(2000000266.200:50808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1187 comm="syz.7.11584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff4fb49db2a code=0x7ffc0000 [ 597.128019][ T29] audit: type=1326 audit(2000000266.210:50809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1187 comm="syz.7.11584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fb49eec9 code=0x7ffc0000 [ 597.151890][ T29] audit: type=1326 audit(2000000266.210:50810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1187 comm="syz.7.11584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fb49eec9 code=0x7ffc0000 [ 597.175509][ T29] audit: type=1326 audit(2000000266.284:50811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1187 comm="syz.7.11584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff4fb49eec9 code=0x7ffc0000 [ 597.199080][ T29] audit: type=1326 audit(2000000266.284:50812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1187 comm="syz.7.11584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fb49eec9 code=0x7ffc0000 [ 597.204566][ T1188] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11584'. [ 597.382356][ T1225] loop2: detected capacity change from 0 to 256 [ 597.483099][ T1235] hub 8-0:1.0: USB hub found [ 597.491215][ T1235] hub 8-0:1.0: 8 ports detected [ 597.584921][ T1255] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11616'. [ 597.757942][ T1275] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11622'. [ 597.767078][ T1275] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11622'. [ 597.900916][ T1300] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11631'. [ 598.063363][ T1308] loop4: detected capacity change from 0 to 512 [ 598.088589][ T1308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.101295][ T1308] ext4 filesystem being mounted at /505/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 598.128063][T28347] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.212860][ T1313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11635'. [ 598.221899][ T1313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11635'. [ 598.248230][ T1315] loop4: detected capacity change from 0 to 256 [ 598.297211][ T1318] loop4: detected capacity change from 0 to 512 [ 598.305241][ T1318] EXT4-fs (loop4): orphan cleanup on readonly fs [ 598.312146][ T1318] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.11637: invalid block [ 598.325235][ T1318] EXT4-fs (loop4): Remounting filesystem read-only [ 598.331841][ T1318] EXT4-fs (loop4): 2 truncates cleaned up [ 598.338218][ T1318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 598.363491][T28347] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.426988][ T1331] loop7: detected capacity change from 0 to 256 [ 598.438161][ T1331] hub 9-0:1.0: USB hub found [ 598.442881][ T1331] hub 9-0:1.0: 8 ports detected [ 598.532775][ T1342] loop4: detected capacity change from 0 to 256 [ 598.542536][ T1343] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11646'. [ 598.551583][ T1343] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11646'. [ 598.654744][ T1353] hub 8-0:1.0: USB hub found [ 598.661198][ T1353] hub 8-0:1.0: 8 ports detected [ 598.675745][ T1360] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11653'. [ 598.724962][ T1362] loop2: detected capacity change from 0 to 512 [ 598.760191][ T1362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.777585][ T1362] ext4 filesystem being mounted at /315/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 598.833705][T29561] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.881982][ T1383] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11660'. [ 598.891138][ T1383] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11660'. [ 598.987566][ T1396] hub 8-0:1.0: USB hub found [ 598.993183][ T1396] hub 8-0:1.0: 8 ports detected [ 599.182108][ T1411] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11678'. [ 599.309105][ T1423] loop2: detected capacity change from 0 to 1024 [ 599.337796][ T1423] EXT4-fs: Ignoring removed nomblk_io_submit option [ 599.359920][ T1423] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 599.385428][ T1423] System zones: 0-1, 3-36 [ 599.392088][ T1418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11681'. [ 599.414334][ T1423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.055398][T29561] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.300821][ T1487] hub 6-0:1.0: USB hub found [ 600.307744][ T1487] hub 6-0:1.0: 8 ports detected [ 600.545461][ T1520] loop7: detected capacity change from 0 to 1024 [ 600.558625][ T1520] EXT4-fs: Ignoring removed nomblk_io_submit option [ 600.567922][ T1520] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 600.607556][ T1520] System zones: 0-1, 3-36 [ 600.615974][ T1520] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.630056][ T1529] loop4: detected capacity change from 0 to 256 [ 600.630289][ T1530] loop2: detected capacity change from 0 to 256 [ 600.650347][ T1529] hub 9-0:1.0: USB hub found [ 600.655241][ T1529] hub 9-0:1.0: 8 ports detected [ 601.361095][ T1596] loop4: detected capacity change from 0 to 1024 [ 601.368087][ T1596] EXT4-fs: Ignoring removed nomblk_io_submit option [ 601.434643][ T1596] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 601.442917][ T1596] System zones: 0-1, 3-36 [ 601.508060][T27498] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.536163][ T1596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.582103][ T1603] loop2: detected capacity change from 0 to 256 [ 601.642059][ T1603] hub 9-0:1.0: USB hub found [ 601.669638][ T1603] hub 9-0:1.0: 8 ports detected [ 601.838404][ T1636] loop2: detected capacity change from 0 to 256 [ 601.849182][ T1636] hub 9-0:1.0: USB hub found [ 601.853893][ T1636] hub 9-0:1.0: 8 ports detected [ 601.995560][T28347] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.041286][ T1657] hub 8-0:1.0: USB hub found [ 602.046121][ T1657] hub 8-0:1.0: 8 ports detected [ 602.124254][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 602.124273][ T29] audit: type=1326 audit(2000000271.659:50854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1671 comm="syz.4.11781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a817deec9 code=0x7ffc0000 [ 602.127342][ T1673] netlink: 'syz.4.11781': attribute type 1 has an invalid length. [ 602.130492][ T29] audit: type=1326 audit(2000000271.659:50855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1671 comm="syz.4.11781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a817e0de7 code=0x7ffc0000 [ 602.154076][ T1673] netlink: 'syz.4.11781': attribute type 2 has an invalid length. [ 602.161941][ T29] audit: type=1326 audit(2000000271.669:50856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1671 comm="syz.4.11781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5a817e0d5c code=0x7ffc0000 [ 602.168847][ T29] audit: type=1326 audit(2000000271.669:50857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1671 comm="syz.4.11781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5a817e0c94 code=0x7ffc0000 [ 602.240948][ T29] audit: type=1326 audit(2000000271.669:50858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1671 comm="syz.4.11781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5a817e0c94 code=0x7ffc0000 [ 602.264546][ T29] audit: type=1326 audit(2000000271.669:50859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1671 comm="syz.4.11781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5a817ddb2a code=0x7ffc0000 [ 602.288050][ T29] audit: type=1326 audit(2000000271.669:50860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1671 comm="syz.4.11781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a817deec9 code=0x7ffc0000 [ 602.311765][ T29] audit: type=1326 audit(2000000271.669:50861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1671 comm="syz.4.11781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a817deec9 code=0x7ffc0000 [ 602.335666][ T29] audit: type=1326 audit(2000000271.669:50862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1671 comm="syz.4.11781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a817deec9 code=0x7ffc0000 [ 602.359215][ T29] audit: type=1326 audit(2000000271.669:50863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1671 comm="syz.4.11781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a817deec9 code=0x7ffc0000 [ 602.384194][ T1674] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.422352][ T1674] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.478632][ T1674] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.541287][ T1674] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.597446][ T4726] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.629317][ T4726] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.645600][ T4726] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.665888][ T4726] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.682132][ T1699] loop7: detected capacity change from 0 to 256 [ 602.709830][ T1699] hub 9-0:1.0: USB hub found [ 602.714649][ T1699] hub 9-0:1.0: 8 ports detected [ 602.826906][ T1724] netlink: 'syz.2.11805': attribute type 1 has an invalid length. [ 602.834798][ T1724] netlink: 'syz.2.11805': attribute type 2 has an invalid length. [ 602.845047][ T1724] __nla_validate_parse: 16 callbacks suppressed [ 602.845077][ T1724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11805'. [ 602.885063][ T1724] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.932982][ T1724] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.989270][ T1724] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.032310][ T1724] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.069847][ T1756] netlink: 36 bytes leftover after parsing attributes in process `syz.6.11820'. [ 603.096417][ T4721] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.109292][ T4721] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.124850][ T4721] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.146343][ T4721] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.265579][ T1781] loop2: detected capacity change from 0 to 256 [ 603.276936][ T1781] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11831'. [ 603.806404][ T1793] netlink: 'syz.7.11835': attribute type 1 has an invalid length. [ 603.814645][ T1793] netlink: 'syz.7.11835': attribute type 2 has an invalid length. [ 603.835707][ T1795] loop4: detected capacity change from 0 to 256 [ 603.843184][ T1793] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11835'. [ 604.034819][ T1796] debugfs: 'netdev@ffff88810acca550' already exists in 'ref_tracker' [ 604.219959][ T1835] netlink: 'syz.6.11856': attribute type 1 has an invalid length. [ 604.227845][ T1835] netlink: 'syz.6.11856': attribute type 2 has an invalid length. [ 604.233264][ T1839] loop4: detected capacity change from 0 to 256 [ 604.237308][ T1835] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11856'. [ 604.259535][ T1839] hub 9-0:1.0: USB hub found [ 604.264750][ T1839] hub 9-0:1.0: 8 ports detected [ 604.285035][ T1835] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.346197][ T1835] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.411478][ T1835] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.471435][ T1851] loop7: detected capacity change from 0 to 1024 [ 604.478350][ T1851] EXT4-fs: Ignoring removed nomblk_io_submit option [ 604.554490][ T1851] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 604.562837][ T1851] System zones: 0-1, 3-36 [ 604.649745][ T1851] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.854589][ T1835] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.921403][ T4740] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.946766][ T4726] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.971715][ T1872] hub 8-0:1.0: USB hub found [ 604.978620][ T4726] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.995477][ T1872] hub 8-0:1.0: 8 ports detected [ 605.004873][ T4726] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.070566][T27498] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.348166][ T1920] netlink: 'syz.4.11887': attribute type 1 has an invalid length. [ 605.356190][ T1920] netlink: 'syz.4.11887': attribute type 2 has an invalid length. [ 605.364840][ T1920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11887'. [ 605.417265][ T1920] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.832565][ T1920] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.860496][ T1932] lo speed is unknown, defaulting to 1000 [ 605.879870][ T1920] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.944969][ T1920] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.006451][ T1947] loop7: detected capacity change from 0 to 256 [ 606.024233][ T1947] hub 9-0:1.0: USB hub found [ 606.028982][ T1947] hub 9-0:1.0: 8 ports detected [ 606.275583][ T1956] lo speed is unknown, defaulting to 1000 [ 606.378733][ T1956] chnl_net:caif_netlink_parms(): no params data found [ 606.463867][ T1956] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.471076][ T1956] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.495600][ T1956] bridge_slave_0: entered allmulticast mode [ 606.509539][ T1956] bridge_slave_0: entered promiscuous mode [ 606.532612][ T1956] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.539976][ T1956] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.573341][ T1956] bridge_slave_1: entered allmulticast mode [ 606.586878][ T1956] bridge_slave_1: entered promiscuous mode [ 606.619995][ T1956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.640504][ T1956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.690199][ T1956] team0: Port device team_slave_0 added [ 606.697341][ T1956] team0: Port device team_slave_1 added [ 606.719410][ T1991] lo speed is unknown, defaulting to 1000 [ 606.725961][ T1956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.732963][ T1956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.758991][ T1956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.799736][ T1993] lo speed is unknown, defaulting to 1000 [ 606.831809][ T1956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.838907][ T1956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.864887][ T1956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.930860][ T1956] hsr_slave_0: entered promiscuous mode [ 606.949408][ T1956] hsr_slave_1: entered promiscuous mode [ 606.967869][ T1956] debugfs: 'hsr0' already exists in 'hsr' [ 606.973811][ T1956] Cannot create hsr debugfs directory [ 606.983401][ T2004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11919'. [ 607.227310][ T4721] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.247198][ T4721] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.280032][ T4721] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.316152][ T4721] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.333528][ T1956] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 607.352597][ T1956] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 607.367510][ T1956] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 607.387090][ T1956] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 607.541547][ T1956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.590036][ T1956] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.632302][ T4726] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.639499][ T4726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.709132][ T4726] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.716321][ T4726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.758950][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 607.758965][ T29] audit: type=1326 audit(2000000277.580:50952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.1.11929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8be81eec9 code=0x7ffc0000 [ 607.765159][ T2032] netlink: 'syz.1.11929': attribute type 1 has an invalid length. [ 607.765178][ T2032] netlink: 'syz.1.11929': attribute type 2 has an invalid length. [ 607.860787][ T2037] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.867696][ T2032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11929'. [ 607.887351][ T29] audit: type=1326 audit(2000000277.580:50953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.1.11929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8be820de7 code=0x7ffc0000 [ 607.911036][ T29] audit: type=1326 audit(2000000277.580:50954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.1.11929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe8be820d5c code=0x7ffc0000 [ 607.934696][ T29] audit: type=1326 audit(2000000277.580:50955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.1.11929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe8be820c94 code=0x7ffc0000 [ 607.958586][ T29] audit: type=1326 audit(2000000277.580:50956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.1.11929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe8be820c94 code=0x7ffc0000 [ 607.982695][ T29] audit: type=1326 audit(2000000277.580:50957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.1.11929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe8be81db2a code=0x7ffc0000 [ 608.006304][ T29] audit: type=1326 audit(2000000277.591:50958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.1.11929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8be81eec9 code=0x7ffc0000 [ 608.011854][ T2045] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11930'. [ 608.030256][ T29] audit: type=1326 audit(2000000277.591:50959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.1.11929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8be81eec9 code=0x7ffc0000 [ 608.030354][ T29] audit: type=1326 audit(2000000277.591:50960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.1.11929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8be81eec9 code=0x7ffc0000 [ 608.030390][ T29] audit: type=1326 audit(2000000277.591:50961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.1.11929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe8be81eec9 code=0x7ffc0000 [ 608.130296][ T1956] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 608.141062][ T1956] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 608.233659][ T2037] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.341068][ T2037] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.424320][ T2037] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.489232][ T1956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.520375][ T2063] lo speed is unknown, defaulting to 1000 [ 608.642543][ T4721] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.667036][ T4726] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.704087][ T4726] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.733069][ T4726] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.862879][ T2086] loop2: detected capacity change from 0 to 256 [ 608.906692][ T2086] hub 9-0:1.0: USB hub found [ 608.923578][ T2086] hub 9-0:1.0: 8 ports detected [ 609.040818][ T1956] veth0_vlan: entered promiscuous mode [ 609.088247][ T1956] veth1_vlan: entered promiscuous mode [ 609.106969][ T2106] netlink: 'syz.4.11952': attribute type 1 has an invalid length. [ 609.114842][ T2106] netlink: 'syz.4.11952': attribute type 2 has an invalid length. [ 609.132107][ T1956] veth0_macvtap: entered promiscuous mode [ 609.146063][ T1956] veth1_macvtap: entered promiscuous mode [ 609.164353][ T2111] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.182549][ T2106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11952'. [ 609.184205][ T2115] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11950'. [ 609.211300][ T1956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.232994][ T1956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.245649][ T4740] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.256816][ T2111] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.260781][ T2114] hub 8-0:1.0: USB hub found [ 609.275656][ T2114] hub 8-0:1.0: 8 ports detected [ 609.290266][ T4740] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.323656][ T4740] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.339562][ T2122] ================================================================== [ 609.348065][ T2122] BUG: KCSAN: data-race in memcpy_and_pad / release_task [ 609.355115][ T2122] [ 609.357515][ T2122] write to 0xffff888119b004c8 of 8 bytes by task 4726 on cpu 0: [ 609.365150][ T2122] release_task+0x6f9/0xb60 [ 609.370554][ T2122] wait_consider_task+0x114a/0x1660 [ 609.375776][ T2122] __do_wait+0x34a/0x510 [ 609.380056][ T2122] do_wait+0xb7/0x250 [ 609.384063][ T2122] kernel_wait+0x51/0xc0 [ 609.388330][ T2122] call_usermodehelper_exec_work+0x9c/0x160 [ 609.394258][ T2122] process_scheduled_works+0x4cb/0x9d0 [ 609.399908][ T2122] worker_thread+0x582/0x770 [ 609.404547][ T2122] kthread+0x489/0x510 [ 609.408635][ T2122] ret_from_fork+0x11f/0x1b0 [ 609.413246][ T2122] ret_from_fork_asm+0x1a/0x30 [ 609.418112][ T2122] [ 609.420442][ T2122] read to 0xffff888119b00000 of 3264 bytes by task 2122 on cpu 1: [ 609.428262][ T2122] memcpy_and_pad+0x48/0x80 [ 609.432898][ T2122] arch_dup_task_struct+0x2c/0x40 [ 609.437944][ T2122] dup_task_struct+0x83/0x6a0 [ 609.442647][ T2122] copy_process+0x399/0x2000 [ 609.447613][ T2122] kernel_clone+0x16c/0x5c0 [ 609.452134][ T2122] __se_sys_clone3+0x1c2/0x200 [ 609.456919][ T2122] __x64_sys_clone3+0x31/0x40 [ 609.461614][ T2122] x64_sys_call+0x1fc9/0x3000 [ 609.466305][ T2122] do_syscall_64+0xd2/0x200 [ 609.470843][ T2122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.476766][ T2122] [ 609.479090][ T2122] Reported by Kernel Concurrency Sanitizer on: [ 609.485248][ T2122] CPU: 1 UID: 0 PID: 2122 Comm: syz.1.11957 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 609.496646][ T2122] Tainted: [W]=WARN [ 609.500466][ T2122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 609.510554][ T2122] ================================================================== [ 609.585097][ T2111] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.605437][ T4721] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.701440][ T2111] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.798275][ T3560] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.809076][ T4730] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.821212][ T3560] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.832804][ T4730] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.712675][ T4730] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.756931][ T4730] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.794731][ T4730] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.842353][ T4730] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.901791][ T4730] bridge_slave_1: left allmulticast mode [ 611.907592][ T4730] bridge_slave_1: left promiscuous mode [ 611.913417][ T4730] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.921279][ T4730] bridge_slave_0: left allmulticast mode [ 611.926974][ T4730] bridge_slave_0: left promiscuous mode [ 611.932672][ T4730] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.136969][ T4730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.147189][ T4730] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.156826][ T4730] bond0 (unregistering): Released all slaves [ 612.221038][ T4730] hsr_slave_0: left promiscuous mode [ 612.226851][ T4730] hsr_slave_1: left promiscuous mode [ 612.232953][ T4730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.240375][ T4730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.247960][ T4730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.255398][ T4730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.265756][ T4730] veth1_macvtap: left promiscuous mode [ 612.271306][ T4730] veth0_macvtap: left promiscuous mode [ 612.276880][ T4730] veth1_vlan: left promiscuous mode [ 612.282227][ T4730] veth0_vlan: left promiscuous mode [ 612.348656][ T4730] team0 (unregistering): Port device team_slave_1 removed [ 612.358444][ T4730] team0 (unregistering): Port device team_slave_0 removed