last executing test programs: 10m33.243438192s ago: executing program 4 (id=1383): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) 10m33.177254515s ago: executing program 4 (id=1386): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0), 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 10m32.908740986s ago: executing program 4 (id=1387): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) 10m32.697749385s ago: executing program 4 (id=1389): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000001c00)=0x8000000, &(0x7f0000000200)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000dc0)='./bus\x00', 0x21081e, &(0x7f0000000080), 0x1, 0x51d, &(0x7f0000000200)="$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") r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@local, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x20}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r8}, 0x10) fallocate(r4, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0xc, r4, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x24000840) 10m32.336180631s ago: executing program 4 (id=1393): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000380)={'pim6reg1\x00', @broadcast}) 10m32.054340483s ago: executing program 4 (id=1396): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x64, 0x12, 0x0, 0x70bd26, 0x25dfdbfc, {0x8, 0x6, 0xa, 0x1, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x6], [0x400, 0x9, 0x8, 0x9], 0x0, [0x1, 0x3]}, 0x4, 0xb}, [@INET_DIAG_REQ_BYTECODE={0x15, 0x1, "f102dcf29effae15cd649e6a6437eb61af"}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x72, &(0x7f0000000000)=""/114}, 0x94) 10m32.053949683s ago: executing program 32 (id=1396): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x64, 0x12, 0x0, 0x70bd26, 0x25dfdbfc, {0x8, 0x6, 0xa, 0x1, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x6], [0x400, 0x9, 0x8, 0x9], 0x0, [0x1, 0x3]}, 0x4, 0xb}, [@INET_DIAG_REQ_BYTECODE={0x15, 0x1, "f102dcf29effae15cd649e6a6437eb61af"}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x72, &(0x7f0000000000)=""/114}, 0x94) 2m20.383238541s ago: executing program 5 (id=7696): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r2, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x9, 0x8}) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000640)={0x60, 0x6, &(0x7f0000c35000/0x2000)=nil, &(0x7f000082e000/0x4000)=nil, 0xbbc1, &(0x7f0000000400)=[{0x80b9, 0x1, 0xbc}, {0x4468000000000, 0x5}, {0xd2fd, 0x2, 0x5}, {0x2, 0x8, 0x3}], 0x4, 0x9, 0x1c, 0x4, 0x0, 0x40}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac1414bbac1414aa4e214001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5001000f0e39948750bba40090780001"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xc, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x83) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x44010) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546266df9fbb755447a0ff32acb32fc4b9c54b7fa15f82a9848478df5354f7158ece711c634aead9f427b8a3e580b3bd0920814473069f285753c945e0baa9072f76c542acf2986649075a243126f6d736b8bfa9a88672388eaa7902fc6c9a3c1b2781d", 0xc5}], 0x1}}], 0x1, 0x20000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x412600, 0x0) recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/248, 0xf8}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/109, 0x6d}], 0x1}, 0x8}], 0x2, 0x100, 0x0) 2m20.323308244s ago: executing program 5 (id=7698): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timerfd_create(0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, &(0x7f0000000040)) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e20, 0x33c5, @empty, 0xffffffff}}, 0x0, 0xfffc}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x4000, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) open_tree(0xffffffffffffff9c, &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x88801) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1b0000001a00895436dff9ce32a4e79480029ec4eea6dd56e22e57", 0x1b}], 0x1}, 0x0) syz_read_part_table(0x1058, &(0x7f0000001080)="$eJzsz7GpAkEUBdA7O58vG9mCTViIghVYhKkGNmMXJlZgNyIrs+JiBWpwTvDgvnlcmPBVf8n5P8mqtlTu47KMs2bRvcVLTdeW5Rmzb2MY+sPUVafjsrv2x1abPrPX83Cr7WabZN7yetltTh/6JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8tEcAAAD//6rFDAs=") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x76eab42beba6fa74, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00'}, 0x10) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000200), &(0x7f00000003c0)=r7}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r6, &(0x7f0000000140), &(0x7f0000000240)=""/154}, 0x20) 2m20.085409694s ago: executing program 5 (id=7703): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000010140)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x100008, &(0x7f00000003c0)={[{@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x5, 0x441, &(0x7f00000011c0)="$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") preadv(0xffffffffffffffff, 0x0, 0x0, 0xf0, 0xd215) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/fscreate\x00') lseek(r1, 0xbad1, 0x4) sendto$inet6(r1, 0x0, 0x0, 0xdc8c5, &(0x7f0000000080)={0xa, 0x6e20, 0x5, @loopback, 0x80000000}, 0x1c) r2 = socket$key(0xf, 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000001880)={0x0, 0x8, 0x5, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000001c80)={r4, 0x5e4, 0x0, [0x3ff, 0x1, 0xfffffffffffffffb, 0xd35, 0x5000000], [0x2, 0x4387e7e, 0xc, 0x9, 0xe, 0xd9a, 0xc9, 0x4, 0x5, 0x8, 0x9, 0xfffffffffffffff7, 0xffffffffffffff68, 0x4, 0x5, 0x1, 0x10, 0x38, 0x8000, 0x0, 0x9f, 0x7, 0x1, 0xdfa2, 0x3, 0x6, 0x8, 0x61b9, 0xb, 0x2, 0xd, 0x8, 0x5, 0x1, 0x7, 0xfffffffffffffff9, 0x3, 0x7fff, 0xe7d9, 0x216, 0x1, 0xffffffff, 0x1, 0x10, 0x0, 0xbc9c, 0x4, 0x9, 0x10, 0x100, 0x3, 0x9604, 0x2, 0x2, 0x6, 0x8, 0x8143, 0xf2, 0x1, 0xc, 0x3, 0x9, 0x10001, 0x3ff, 0x2c, 0x80000000, 0xfabf, 0xeb5, 0x0, 0x28, 0x4, 0x276, 0x7, 0xfffffffffffffeff, 0xffffffffffffa270, 0x9, 0x200, 0xffff, 0x20000000, 0x6, 0x4, 0x10, 0x81, 0x6, 0x3, 0x3, 0x1, 0x9, 0x5, 0xb1b0, 0xffffffffffffffff, 0x110, 0x3, 0x5d3, 0xfffffffffffffff3, 0x6caf, 0x5, 0x7, 0x7, 0x4, 0xe, 0x4, 0x4f59, 0x39, 0x0, 0x4, 0xd4, 0xfffffffffffffff2, 0x6, 0x8, 0x5, 0x9, 0x3, 0xe, 0xecb, 0x8000000000000000, 0xb8e2, 0x8000000000000001, 0x1, 0x9e5, 0x1]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x8, 0x3, 0x0, 0x2, 0x0, 0x70bd26, 0x25dfdbff}, 0x10}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) r5 = socket(0x10, 0x3, 0x0) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) 2m19.957020229s ago: executing program 5 (id=7706): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000380)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "008000", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0x4e23, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 2m19.95622543s ago: executing program 5 (id=7707): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c00000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3000000000200007800c00018008001440000000000800084000000000080006400000000005000500020000000500010006"], 0x6c}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r3 = open(&(0x7f0000000040)='./file2\x00', 0x4440, 0x4) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000000c0)={0x0, 0x1, 0x6, 0x1, 0x10b, &(0x7f0000000840)="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"}) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES64=r3, @ANYRES64=r2], 0xfa, 0x6a4, &(0x7f0000002a00)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0xfffffc71) pread64(r2, &(0x7f0000002240)=""/237, 0xed, 0x619) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000380)={0xfffffff9, 0x0, 0x3d, 0x1ff, 0x18, "65d86e659025b0f6705c979877d789497f8007"}) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r5, 0x0, 0x2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 2m19.867354103s ago: executing program 5 (id=7710): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) listen(r0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4(r0, 0x0, 0x0, 0x80800) 2m5.276552002s ago: executing program 33 (id=7710): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) listen(r0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4(r0, 0x0, 0x0, 0x80800) 27.164581399s ago: executing program 0 (id=9054): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc) 26.944660609s ago: executing program 0 (id=9058): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timerfd_create(0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, &(0x7f0000000040)) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e20, 0x33c5, @empty, 0xffffffff}}, 0x0, 0xfffc}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x4000, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) open_tree(0xffffffffffffff9c, &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x88801) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1b0000001a00895436dff9ce32a4e79480029ec4eea6dd56e22e57", 0x1b}], 0x1}, 0x0) syz_read_part_table(0x1058, &(0x7f0000001080)="$eJzsz7GpAkEUBdA7O58vG9mCTViIghVYhKkGNmMXJlZgNyIrs+JiBWpwTvDgvnlcmPBVf8n5P8mqtlTu47KMs2bRvcVLTdeW5Rmzb2MY+sPUVafjsrv2x1abPrPX83Cr7WabZN7yetltTh/6JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8tEcAAAD//6rFDAs=") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x76eab42beba6fa74, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00'}, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000200), &(0x7f00000003c0)=r8}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r7, &(0x7f0000000140), &(0x7f0000000240)=""/154}, 0x20) 26.335400855s ago: executing program 0 (id=9063): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) dup(r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000002240)={r5, 0x5, 0x10, 0xf1}, &(0x7f00000001c0)=0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7ffff000) 24.425138588s ago: executing program 0 (id=9077): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x4, [@restrict={0x2, 0x0, 0x0, 0xb, 0x2}, @datasec={0x4, 0x5, 0x0, 0xf, 0x1, [{0x4, 0x0, 0x1}, {0x3, 0x7, 0x6}, {0x4, 0x81a3, 0x7}, {0x3, 0x7, 0xc}, {0x3, 0xb7, 0xe5}], '\v'}, @typedef={0xc}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x65, 0x0, 0x1c, 0x4}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x3}, @ptr={0x1, 0x0, 0x0, 0x2, 0x4}, @enum={0xd, 0x3, 0x0, 0x6, 0x4, [{0xd, 0x1}, {0xc, 0x4}, {0xc, 0x9}]}, @fwd={0xe}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xd, 0x3}, {0xa, 0x5}, {0x1, 0x2}]}]}, {0x0, [0x5f, 0x61]}}, &(0x7f0000000cc0)=""/231, 0xfc, 0xe7, 0x0, 0x10, 0x10000}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1e000000fdffffff030000000200000080800400", @ANYRES32=r1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000002000000deffffff0a01000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000088000000"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x3, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='ext4_es_insert_delayed_block\x00', r3, 0x0, 0x7}, 0x18) shmdt(0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) stat(&(0x7f0000000200)='./bus\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r6, 0x400454ce, r8) write$binfmt_register(r7, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) 23.952355428s ago: executing program 0 (id=9085): r0 = socket(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x2}, 0x18) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 20.732950396s ago: executing program 0 (id=9122): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359c", 0x2}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c00040000000000000000030300"/43, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 20.718428307s ago: executing program 34 (id=9122): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359c", 0x2}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c00040000000000000000030300"/43, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 5.841550678s ago: executing program 1 (id=9288): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newtfilter={0xa4, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x5, 0x6, 0x6, 0x5, 0x400, 0x2, 0x1, 0xc, [{0x8, 0x9df8, 0x5, 0xfffffffe}, {0xfff, 0xabac, 0x5d9, 0x6}, {0x7365, 0x200, 0x2, 0x3}, {0xaa2, 0x80000000, 0xc06f, 0x8001}, {0x9, 0x8001, 0x80, 0x7ff}, {0x10c00, 0x23e, 0x10000, 0x2}]}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0xfffffff7}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x1000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) close_range(r6, 0xffffffffffffffff, 0x0) 2.734126752s ago: executing program 6 (id=9315): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r1, 0x0, 0xfffe}, 0x38) 2.685469165s ago: executing program 3 (id=9316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 2.56217662s ago: executing program 3 (id=9318): sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000801) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x58}, 0x28) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r3, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x6f6) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r8, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 2.386783207s ago: executing program 6 (id=9319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a010200000000000000000200000009000200"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 2.30930421s ago: executing program 6 (id=9320): socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0xe1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r6}}], 0x20, 0x2400e044}, 0x0) 1.709718496s ago: executing program 3 (id=9326): getpid() prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r0, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0xa000200) semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) unshare(0x20060400) io_setup(0x2, &(0x7f0000000580)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_clone(0x48020000, 0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex@De', 0x0) 1.508375385s ago: executing program 2 (id=9328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1.423961809s ago: executing program 2 (id=9330): r0 = io_uring_setup(0x484, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000640), 0x0) 1.411796839s ago: executing program 7 (id=9331): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) accept(0xffffffffffffffff, 0x0, 0x0) 1.370163691s ago: executing program 7 (id=9332): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000000f00000007"], 0x50) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0xee00, 0x0) r1 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x873e, 0x3180, 0x8000, 0x40}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c0001800600060006"], 0x24}}, 0x10) 1.341090612s ago: executing program 2 (id=9333): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x9}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, r1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) close(r2) 1.340557342s ago: executing program 6 (id=9334): r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) uname(&(0x7f0000000680)=""/119) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x200003, 0x0, {0xa, 0x4e21, 0x3, @private2={0xfc, 0x2, '\x00', 0x2}, 0x1814b150}}}, 0x3a) close(r1) sendmmsg$inet(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xc00e, &(0x7f0000000200)=[{&(0x7f0000000000)="d80000001e0081064e81f782db44b9040202080006007c09e8fe08a10a0015c00200142603600e120d000d0024000000a8000e001100014003478800036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e1d360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ccfccbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) unshare(0x2c060000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002b2000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0xfffffffffffffee8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) unshare(0x2c020400) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0xc, [@volatile={0xd}, @var={0xa, 0x0, 0x0, 0xe, 0x3, 0x1}, @union={0x2, 0x3, 0x0, 0x5, 0x1, 0x4, [{0x1, 0x0, 0x5435}, {0x2, 0x5, 0x7}, {0x4, 0x0, 0x505b}]}, @var={0x2, 0x0, 0x0, 0xe, 0x5}, @struct={0xb, 0x2, 0x0, 0x4, 0x1, 0xc, [{0x10, 0x3, 0x40000}, {0x3, 0x1, 0x1}]}, @var={0xa, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x2e, 0x61, 0x61, 0x2e, 0x0, 0x5f, 0x61, 0x5f, 0x30, 0x0]}}, &(0x7f0000000480)=""/106, 0xb4, 0x6a, 0x1, 0x1ff, 0x10000}, 0x28) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a500000050000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 1.270752566s ago: executing program 6 (id=9335): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) dup(r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000002240)={r5, 0x5, 0x10, 0xf1}, &(0x7f00000001c0)=0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) socket(0x1, 0x4, 0xffffffe1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) 1.092872853s ago: executing program 2 (id=9336): sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000801) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x58}, 0x28) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r3, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x6f6) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r8, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 1.092655053s ago: executing program 1 (id=9292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1.066620814s ago: executing program 1 (id=9337): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000013050000000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a5108"], 0x44}}, 0x28081) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c250000000000202020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[0x1b94]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x18) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c00040000000000000000030300"/43, @ANYRES32=0x0], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000280)={0x0, 0xd}, &(0x7f00000003c0)=0xc) unshare(0x60000600) 1.030019016s ago: executing program 3 (id=9338): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x4, [@restrict={0x2, 0x0, 0x0, 0xb, 0x2}, @datasec={0x4, 0x5, 0x0, 0xf, 0x1, [{0x4, 0x0, 0x1}, {0x3, 0x7, 0x6}, {0x4, 0x81a3, 0x7}, {0x3, 0x7, 0xc}, {0x3, 0xb7, 0xe5}], '\v'}, @typedef={0xc}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x65, 0x0, 0x1c, 0x4}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x3}, @ptr={0x1, 0x0, 0x0, 0x2, 0x4}, @enum={0xd, 0x3, 0x0, 0x6, 0x4, [{0xd, 0x1}, {0xc, 0x4}, {0xc, 0x9}]}, @fwd={0xe}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xd, 0x3}, {0xa, 0x5}, {0x1, 0x2}]}]}, {0x0, [0x5f, 0x61]}}, &(0x7f0000000cc0)=""/231, 0xfc, 0xe7, 0x0, 0x10, 0x10000}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1e000000fdffffff030000000200000080800400", @ANYRES32=r1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000002000000deffffff0a01000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000088000000"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x3, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='ext4_es_insert_delayed_block\x00', r3, 0x0, 0x7}, 0x18) shmdt(0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) stat(&(0x7f0000000200)='./bus\x00', &(0x7f0000000a00)) write$binfmt_register(r7, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) 1.010551066s ago: executing program 7 (id=9339): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newtfilter={0xa4, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x5, 0x6, 0x6, 0x5, 0x400, 0x2, 0x1, 0xc, [{0x8, 0x9df8, 0x5, 0xfffffffe}, {0xfff, 0xabac, 0x5d9, 0x6}, {0x7365, 0x200, 0x2, 0x3}, {0xaa2, 0x80000000, 0xc06f, 0x8001}, {0x9, 0x8001, 0x80, 0x7ff}, {0x10c00, 0x23e, 0x10000, 0x2}]}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0xfffffff7}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x1000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) close_range(r6, 0xffffffffffffffff, 0x0) 937.297449ms ago: executing program 1 (id=9340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a31000000000800044000000000090001007379"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 900.721411ms ago: executing program 7 (id=9341): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) accept(0xffffffffffffffff, 0x0, 0x0) 854.454394ms ago: executing program 1 (id=9342): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000013050000000000000000000007000000", @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a5108"], 0x44}}, 0x28081) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c250000000000202020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r1, 0x0, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[0x1b94]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x18) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c00040000000000000000030300"/43, @ANYRES32=0x0], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000280)={0x0, 0xd}, &(0x7f00000003c0)=0xc) unshare(0x60000600) 848.131934ms ago: executing program 7 (id=9343): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x4, [@restrict={0x2, 0x0, 0x0, 0xb, 0x2}, @datasec={0x4, 0x5, 0x0, 0xf, 0x1, [{0x4, 0x0, 0x1}, {0x3, 0x7, 0x6}, {0x4, 0x81a3, 0x7}, {0x3, 0x7, 0xc}, {0x3, 0xb7, 0xe5}], '\v'}, @typedef={0xc}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x65, 0x0, 0x1c, 0x4}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x3}, @ptr={0x1, 0x0, 0x0, 0x2, 0x4}, @enum={0xd, 0x3, 0x0, 0x6, 0x4, [{0xd, 0x1}, {0xc, 0x4}, {0xc, 0x9}]}, @fwd={0xe}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xd, 0x3}, {0xa, 0x5}, {0x1, 0x2}]}]}, {0x0, [0x5f, 0x61]}}, &(0x7f0000000cc0)=""/231, 0xfc, 0xe7, 0x0, 0x10, 0x10000}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1e000000fdffffff030000000200000080800400", @ANYRES32=r1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000002000000deffffff0a01000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000088000000"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x3, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='ext4_es_insert_delayed_block\x00', r3, 0x0, 0x7}, 0x18) shmdt(0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) stat(&(0x7f0000000200)='./bus\x00', &(0x7f0000000a00)) write$binfmt_register(r7, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) 781.326546ms ago: executing program 3 (id=9344): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x1a00404, &(0x7f0000000080)={[{@noblock_validity}, {@grpquota}]}, 0x1, 0xbb9, &(0x7f00000017c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0xcd) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 627.508323ms ago: executing program 7 (id=9345): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500001000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fchown(r2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x783}, 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x1000211a, 0x2000, 0x0, 0x306}, &(0x7f0000000340), &(0x7f0000000280)) setns(r7, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 296.742777ms ago: executing program 2 (id=9346): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x9}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, r1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) close(r2) 199.994331ms ago: executing program 6 (id=9347): socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) io_setup(0x3fe, &(0x7f00000001c0)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0xe1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r5}}], 0x20, 0x2400e044}, 0x0) 150.048214ms ago: executing program 2 (id=9348): getpid() prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r0, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0xa000200) semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) unshare(0x20060400) io_setup(0x2, &(0x7f0000000580)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_clone(0x48020000, 0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex@De', 0x0) 4.54743ms ago: executing program 3 (id=9349): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000013050000000000000000000007000000", @ANYRES32=r1], 0x44}}, 0x28081) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$can_bcm(0x1d, 0x2, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[0x1b94]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x18) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c00040000000000000000030300"/43, @ANYRES32=0x0], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000280)={0x0, 0xd}, &(0x7f00000003c0)=0xc) unshare(0x60000600) 0s ago: executing program 1 (id=9350): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r4}, 0x10) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x1000414, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES8], 0x6, 0x801, &(0x7f0000001540)="$eJzs3U1oHOcZAOB3FMmW5WBMWtxgbGfspOCAo6xWiVKRQ7JZjeRJpF2xuyo2paQmloOwnAS7obUviSkkbWkpPfXQQ5prbr21FFrooc2p0Bx66S2QU0mhf6QNBZXZH1mytZL8n9TPI6SZnXm/+d5vtJp3RtLOBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQSXWqVBpLYjavLZxI+6tONepzm6zvbe836ybrPLuu34ik+Izh4fjkH51lX7yyel/x5Ugc6Dw6EMPFZDgu7d639+kvDA702m+S0I06vM24JOLNIqmzp5aXF89fdzcxfN1Nbp/v/+q6m/x7pfg6k9XyZuRzlZkszZv1dHJiovT48elmOp3PZs2TzVY2l1YbWaVVb6RHq4+mY5OT42k2erK+UJuZqsxmvYVPPVYulSbS50fns0qjWa89/nw0q8fz2dm8NtOOKZe+FUXMU8UT8YW8lbayylyanllaXhzfKtUiaGyjFfd1nj8HHtn70esf/n1psXhC9ttI0n1ilsfGyuWxiScnn3yqVBosl8rrF5SuEqsRMRBRRNyWJy2fI7f2AA43YaBb/2M28qjFQpyIdIOPoajGVDSiHnPF4z8NXRPR1av/X378r3/YrN+19b9X5R+8snp/tOv/oc6jQ/3q/4a53smPC3ExLsXZOBXLsRyLcf6uZ7TFx8DNbiFZ++g/90dELfJoRj3ymItKzEQWaXdJGpMxERNRihfjeExHM9KYjjxmI4tmnIxmtCJrP6Oq0YgsKtGKejQijaNRjUcjjbGYjMkYjzSyGI2TUY+FqMVMTEWlvZUzsdTe7+NXZblvV/zy5T9+9E4xvxo0tsngk+Jkrgj62yZjH4jyddT/lZXifOHqCPX/HrBjs5W34SgON2alV/8BAACA/1tJ+7fvxfX/UBxsz03ns9nX7nZaAAAAwC3U/sv/gWIyVMwdjKS4/i9tEPnBHc8NAAAAuDWS9mvskogYiYc6c2diKd6MxdjolwARsfdOpwgAAADcpPbf/w8Vk5GIN9oLerdL6XP9DwAAAHzefLffPfY/7N1jtzm/M/n1UEQMJZfnTzySnKsUcZVz93XadSdfXd1ia3p/sqe7kfZkYvDS7iQiBqvZgaR398v/7uxMP25/3T+42rzfvf6TRqNIYFfR90YJxOYJtB/FD+JwJ+bw6fZkd7fJYNLpZWQ6n81Gq/XZp9u3RCw+W6+/svTtiKL379Xm9iRxZml5cfSlV5dPt3fG5aL55XPdGygmEYPbzWWluwfiYAzv6M6uHfFQ+4UY3X5HOv2W1n4DBjptBjYff7K2z7fiSCfmyEhnOtJb0+lzuOhzbPTpsahU9gy0shOt11fWjL7Iosh6deRDa0f+093bHPlb8XAn5uGjD3cmG2RRXpfFK1dlsbS8WF67/7e3L7adxTuH3zjxr9/Vk2x8qyzGryOLlfsirs4C4G45077rT6cKFZNd7br76UpHUf87dXdnr+7u6rXcxrH2n1d6WT3L6LVfU90Ho1fde9VtYPXAuL3qvhKdI/rRTszRzvnE4P5uXKfSdupKaYMj+mtLr/2+e0R/4r2f/Ozrh97/ebvftdVtG1l0jujvxaOdmO4kHvhtnxpbjPmHq5VkrD36d4sW7/bttzlbTtqnGN8891rsu3Dx0mNL5069vPjy4ivl8vhE6YlS6cly72RiqH3GsEmmANy7tn6Pnb4RvTqTPFFcVQ+v2ejp9ddzD6z+S8FovBSvxnKcjmPtVxtExEMb9zuy5t8Qjm1x1XoldiyObXFteSW2fG1sEn1ix9cM7ks/bk8+uQ3fDAC4Q45sUYeTOPJ+N7TfGUJyrN919zV1tKjlV10dR/9avpGv3M6dAQD3iKzxcTLSejtpNPL5F8cmJ8cqreP3p4169YW0kU/NZGlea2WN6vFKbSZL5xv1Vr3a+8XxVNZMmwvz8/VGK52uN9IYaOYn2u/8nnbf+r2ZzVVqrbzanJ/NKs0srdZrrUq1lU7lzWo6v/DcbN48njXajZvzWTWfzquVVl6vpc36QqOajaZpM8vWBOZTWa2VT+fFbC2db+RzlcbliJhdmMvSqaxZbeTzrXpng72+8tp0vTHX3uzotcP/y53e3wDwWXDh4qWzp5aXF8/f2MyftxN8t8cIAKynSgMAAAAAAAAAAAAAwGffhYuXzg7H8uL5vb0XAhRLb+IVgdc3szNuexf37EzxjfwMpHFjMwfvvzXb+cYzz5ztF/PcGw8e3952uj8pg7HlS13f3hOx4xc/6ix5tn/wd7o/f7dmj30QETfQfCXZYNWnK52ZdYeJHXf+yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1/pfAAAA//+iNle9") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r0, r6, 0x25, 0xd, @void}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x110, 0x140, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x6}}, @common=@unspec=@connbytes={{0x38}, {[], 0x3}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0xa}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r9, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202) syz_clone(0x220000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r10, 0x8983, &(0x7f0000000780)={0x6, 'ip_vti0\x00', {}, 0x4}) kernel console output (not intermixed with test programs): N 0 to HW filter on device team0 [ 731.589483][T19321] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.596620][T19321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.630660][T28152] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 731.641315][T28152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 731.744607][T19321] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.751914][T19321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.974710][T28152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.219391][T28152] veth0_vlan: entered promiscuous mode [ 732.232856][T28152] veth1_vlan: entered promiscuous mode [ 732.283817][T28152] veth0_macvtap: entered promiscuous mode [ 732.313108][T28152] veth1_macvtap: entered promiscuous mode [ 732.354429][T28152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.391788][T28152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.428200][T19365] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.441889][T19365] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.504929][T19365] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.523510][T19365] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.583310][T28257] ip6t_srh: unknown srh match flags 4000 [ 732.632868][T28259] netlink: 'syz.1.8517': attribute type 4 has an invalid length. [ 732.640793][T28259] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8517'. [ 732.677726][T28263] netlink: 'syz.2.8518': attribute type 10 has an invalid length. [ 732.705868][T28263] team0: Port device dummy0 added [ 732.755413][T28265] syz_tun: entered allmulticast mode [ 732.769784][T28265] syz_tun: left allmulticast mode [ 732.969194][T28273] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 733.506865][T28286] lo speed is unknown, defaulting to 1000 [ 733.667746][T28291] netlink: 'syz.0.8526': attribute type 10 has an invalid length. [ 733.717319][T28292] netlink: 'syz.0.8526': attribute type 10 has an invalid length. [ 733.747065][T28291] team0: Port device dummy0 added [ 733.753439][T28292] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 733.764008][T28292] team0: Failed to send options change via netlink (err -105) [ 733.771652][T28292] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 733.790224][T28292] team0: Port device dummy0 removed [ 733.798146][T28292] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 733.847257][T28294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.865891][T28294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.125389][T28296] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 734.166148][T28299] netlink: 'syz.1.8530': attribute type 4 has an invalid length. [ 734.173994][T28299] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8530'. [ 734.336900][T28308] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8532'. [ 734.360991][T28303] lo speed is unknown, defaulting to 1000 [ 734.389466][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 734.389483][ T29] audit: type=1326 audit(1764201265.204:55937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28311 comm="syz.2.8533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322961f749 code=0x7ffc0000 [ 734.443690][T28315] 9pnet_fd: Insufficient options for proto=fd [ 734.456535][ T29] audit: type=1400 audit(1764201265.225:55938): avc: denied { ioctl } for pid=28295 comm="syz.6.8528" path="socket:[124546]" dev="sockfs" ino=124546 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 734.481595][ T29] audit: type=1400 audit(1764201265.225:55939): avc: denied { write } for pid=28295 comm="syz.6.8528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 734.499479][T28302] loop6: detected capacity change from 0 to 512 [ 734.501334][ T29] audit: type=1326 audit(1764201265.246:55940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28311 comm="syz.2.8533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322961f749 code=0x7ffc0000 [ 734.516615][T28302] journal_path: Non-blockdev passed as './bus' [ 734.530984][ T29] audit: type=1326 audit(1764201265.246:55941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28311 comm="syz.2.8533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f322961f749 code=0x7ffc0000 [ 734.537152][T28302] EXT4-fs: error: could not find journal device path [ 734.567524][ T29] audit: type=1326 audit(1764201265.246:55942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28311 comm="syz.2.8533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322961f749 code=0x7ffc0000 [ 734.591176][ T29] audit: type=1326 audit(1764201265.246:55943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28311 comm="syz.2.8533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322961f749 code=0x7ffc0000 [ 734.614807][ T29] audit: type=1326 audit(1764201265.246:55944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28311 comm="syz.2.8533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f322961f749 code=0x7ffc0000 [ 734.638481][ T29] audit: type=1326 audit(1764201265.246:55945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28311 comm="syz.2.8533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322961f749 code=0x7ffc0000 [ 734.662130][ T29] audit: type=1326 audit(1764201265.246:55946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28311 comm="syz.2.8533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f322961f749 code=0x7ffc0000 [ 734.930022][T28321] FAULT_INJECTION: forcing a failure. [ 734.930022][T28321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.943193][T28321] CPU: 0 UID: 0 PID: 28321 Comm: syz.6.8537 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 734.943229][T28321] Tainted: [W]=WARN [ 734.943235][T28321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 734.943247][T28321] Call Trace: [ 734.943253][T28321] [ 734.943260][T28321] __dump_stack+0x1d/0x30 [ 734.943344][T28321] dump_stack_lvl+0xe8/0x140 [ 734.943369][T28321] dump_stack+0x15/0x1b [ 734.943397][T28321] should_fail_ex+0x265/0x280 [ 734.943423][T28321] should_fail+0xb/0x20 [ 734.943437][T28321] should_fail_usercopy+0x1a/0x20 [ 734.943455][T28321] _copy_from_user+0x1c/0xb0 [ 734.943554][T28321] do_sys_poll+0x149/0xbd0 [ 734.943591][T28321] ? selinux_file_open+0x2df/0x330 [ 734.943655][T28321] __se_sys_poll+0xdd/0x200 [ 734.943752][T28321] __x64_sys_poll+0x43/0x50 [ 734.943857][T28321] x64_sys_call+0x27d6/0x3000 [ 734.943883][T28321] do_syscall_64+0xd2/0x200 [ 734.943996][T28321] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 734.944029][T28321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.944052][T28321] RIP: 0033:0x7fb96bcef749 [ 734.944075][T28321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.944094][T28321] RSP: 002b:00007fb96a74f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 734.944154][T28321] RAX: ffffffffffffffda RBX: 00007fb96bf45fa0 RCX: 00007fb96bcef749 [ 734.944169][T28321] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 734.944184][T28321] RBP: 00007fb96a74f090 R08: 0000000000000000 R09: 0000000000000000 [ 734.944207][T28321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.944221][T28321] R13: 00007fb96bf46038 R14: 00007fb96bf45fa0 R15: 00007ffccdc44168 [ 734.944244][T28321] [ 735.221151][T28327] netlink: 'syz.1.8539': attribute type 10 has an invalid length. [ 735.238539][T28327] team0: Port device dummy0 added [ 735.267994][T28327] netlink: 'syz.1.8539': attribute type 10 has an invalid length. [ 735.293891][T28327] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 735.342087][T28327] team0: Failed to send options change via netlink (err -105) [ 735.397637][T28327] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 735.432284][T28327] team0: Port device dummy0 removed [ 735.467318][T28327] .`: (slave dummy0): Enslaving as an active interface with an up link [ 735.538429][T28323] lo speed is unknown, defaulting to 1000 [ 735.744964][T28339] pim6reg: entered allmulticast mode [ 735.751114][T28339] pim6reg: left allmulticast mode [ 735.876449][T28348] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8545'. [ 735.907794][T28348] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28348 comm=syz.6.8545 [ 736.035514][T28354] ip6t_srh: unknown srh match flags 4000 [ 736.290377][T28359] lo speed is unknown, defaulting to 1000 [ 736.316685][T28360] lo speed is unknown, defaulting to 1000 [ 736.662294][T28363] netlink: 'syz.6.8550': attribute type 4 has an invalid length. [ 736.670198][T28363] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8550'. [ 736.702031][T28358] lo speed is unknown, defaulting to 1000 [ 737.088088][T28374] loop6: detected capacity change from 0 to 764 [ 737.148069][T28371] Symlink component flag not implemented [ 737.170582][T28371] Symlink component flag not implemented (116) [ 737.251748][T28374] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.327157][T28374] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.478016][T28374] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.891891][T28389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8557'. [ 737.907375][T28374] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.970131][T28389] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28389 comm=syz.1.8557 [ 737.998526][T19331] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.010713][T19331] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.023111][T19331] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.036021][T19331] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.048183][T28398] pim6reg: entered allmulticast mode [ 738.055977][T28398] pim6reg: left allmulticast mode [ 738.092420][T28402] netlink: 'syz.6.8562': attribute type 4 has an invalid length. [ 738.100370][T28402] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8562'. [ 738.137186][T28404] pim6reg: entered allmulticast mode [ 738.143582][T28404] pim6reg: left allmulticast mode [ 738.161068][T28406] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 738.258840][T28415] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 738.270703][T28408] netlink: 'syz.1.8565': attribute type 13 has an invalid length. [ 738.374402][T28429] netlink: 'syz.3.8573': attribute type 4 has an invalid length. [ 738.382451][T28429] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8573'. [ 739.725350][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 739.725391][ T29] audit: type=1326 audit(1764201270.539:56218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28441 comm="syz.1.8578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc296b65e7 code=0x7ffc0000 [ 739.755170][ T29] audit: type=1326 audit(1764201270.539:56219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28441 comm="syz.1.8578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc2965b829 code=0x7ffc0000 [ 739.778809][ T29] audit: type=1326 audit(1764201270.539:56220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28441 comm="syz.1.8578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc296b65e7 code=0x7ffc0000 [ 739.802475][ T29] audit: type=1326 audit(1764201270.539:56221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28441 comm="syz.1.8578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc2965b829 code=0x7ffc0000 [ 739.826054][ T29] audit: type=1326 audit(1764201270.539:56222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28441 comm="syz.1.8578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc296b65e7 code=0x7ffc0000 [ 739.849645][ T29] audit: type=1326 audit(1764201270.539:56223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28441 comm="syz.1.8578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc2965b829 code=0x7ffc0000 [ 739.873777][ T29] audit: type=1326 audit(1764201270.539:56224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28441 comm="syz.1.8578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc296b65e7 code=0x7ffc0000 [ 739.897316][ T29] audit: type=1326 audit(1764201270.539:56225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28441 comm="syz.1.8578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc2965b829 code=0x7ffc0000 [ 739.920929][ T29] audit: type=1326 audit(1764201270.539:56226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28441 comm="syz.1.8578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc296b65e7 code=0x7ffc0000 [ 739.944526][ T29] audit: type=1326 audit(1764201270.539:56227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28441 comm="syz.1.8578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc2965b829 code=0x7ffc0000 [ 739.970799][T28447] 9pnet_fd: Insufficient options for proto=fd [ 740.032008][T28457] netlink: 'syz.2.8584': attribute type 10 has an invalid length. [ 740.088010][T28463] netlink: 'syz.2.8584': attribute type 10 has an invalid length. [ 740.113171][T28466] netlink: 'syz.1.8587': attribute type 4 has an invalid length. [ 740.121171][T28466] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8587'. [ 740.135173][T28468] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 740.160635][T28463] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 740.170774][T28463] team0: Port device dummy0 removed [ 740.179105][T28463] .`: (slave dummy0): Enslaving as an active interface with an up link [ 740.219783][T28475] netlink: 'syz.1.8589': attribute type 13 has an invalid length. [ 740.282718][T28480] pim6reg: entered allmulticast mode [ 740.298756][T28480] pim6reg: left allmulticast mode [ 741.188033][T28502] netlink: 'syz.6.8600': attribute type 4 has an invalid length. [ 741.195920][T28502] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8600'. [ 741.269704][T28511] xt_CT: You must specify a L4 protocol and not use inversions on it [ 741.271091][T28506] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 741.412077][T28531] netlink: 'syz.6.8613': attribute type 4 has an invalid length. [ 741.419910][T28531] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8613'. [ 742.166440][T28569] netlink: 'syz.2.8625': attribute type 4 has an invalid length. [ 742.174378][T28569] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8625'. [ 742.456232][T28580] ip6t_srh: unknown srh match flags 4000 [ 742.521532][T28582] netlink: 'syz.1.8630': attribute type 13 has an invalid length. [ 742.762468][T28589] lo speed is unknown, defaulting to 1000 [ 743.173666][T28602] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 743.318495][T28607] xt_hashlimit: size too large, truncated to 1048576 [ 743.336716][T28609] ip6t_srh: unknown srh match flags 4000 [ 743.360467][T28610] netlink: 822 bytes leftover after parsing attributes in process `syz.3.8640'. [ 743.793684][T28630] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28630 comm=syz.0.8648 [ 744.349292][T28648] ip6t_srh: unknown srh match flags 4000 [ 744.391015][T28648] loop6: detected capacity change from 0 to 8192 [ 744.463730][T28648] loop6: p1 p2 p3 p4 [ 744.464924][T28653] xt_hashlimit: size too large, truncated to 1048576 [ 744.467871][T28648] loop6: p1 size 196608 extends beyond EOD, truncated [ 744.580544][T28650] lo speed is unknown, defaulting to 1000 [ 744.630625][T28651] lo speed is unknown, defaulting to 1000 [ 744.771118][T28656] netlink: 822 bytes leftover after parsing attributes in process `syz.2.8656'. [ 744.815355][T28648] loop6: p2 start 164919041 is beyond EOD, truncated [ 744.822184][T28648] loop6: p3 size 66846464 extends beyond EOD, truncated [ 744.889860][T28648] loop6: p4 size 37048832 extends beyond EOD, truncated [ 744.929718][ T29] kauditd_printk_skb: 509 callbacks suppressed [ 744.929733][ T29] audit: type=1326 audit(1764201276.285:56737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28647 comm="syz.6.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fb96bcede3a code=0x7ffc0000 [ 745.117033][ T29] audit: type=1326 audit(1764201276.316:56738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28647 comm="syz.6.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fb96bceecc7 code=0x7ffc0000 [ 745.140920][ T29] audit: type=1326 audit(1764201276.316:56739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28647 comm="syz.6.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fb96bcede3a code=0x7ffc0000 [ 745.164671][ T29] audit: type=1326 audit(1764201276.316:56740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28647 comm="syz.6.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fb96bcede3a code=0x7ffc0000 [ 745.188573][ T29] audit: type=1326 audit(1764201276.316:56741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28647 comm="syz.6.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fb96bceecc7 code=0x7ffc0000 [ 745.212513][ T29] audit: type=1326 audit(1764201276.316:56742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28647 comm="syz.6.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fb96bcede3a code=0x7ffc0000 [ 745.236348][ T29] audit: type=1326 audit(1764201276.337:56743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28647 comm="syz.6.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fb96bceecc7 code=0x7ffc0000 [ 745.260045][ T29] audit: type=1326 audit(1764201276.337:56744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28647 comm="syz.6.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fb96bcede3a code=0x7ffc0000 [ 745.283673][ T29] audit: type=1326 audit(1764201276.337:56745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28647 comm="syz.6.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fb96bcede3a code=0x7ffc0000 [ 745.294151][T28671] lo speed is unknown, defaulting to 1000 [ 745.307391][ T29] audit: type=1326 audit(1764201276.337:56746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28647 comm="syz.6.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fb96bcede3a code=0x7ffc0000 [ 745.389928][T28670] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8659'. [ 745.423972][T28673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8661'. [ 745.437357][T28674] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28674 comm=syz.6.8659 [ 745.569026][T28680] loop6: detected capacity change from 0 to 4096 [ 745.583596][T28680] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 746.197859][T28693] pim6reg: entered allmulticast mode [ 746.247967][T28693] pim6reg: left allmulticast mode [ 746.370744][T26394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.387286][T28695] xt_hashlimit: size too large, truncated to 1048576 [ 746.487650][T28697] netlink: 822 bytes leftover after parsing attributes in process `syz.3.8668'. [ 746.567108][T28704] loop6: detected capacity change from 0 to 1024 [ 746.579843][T28704] EXT4-fs: Ignoring removed orlov option [ 746.596586][T28704] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 746.790519][T28714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8674'. [ 747.120574][T28724] ip6t_srh: unknown srh match flags 4000 [ 747.265834][T28727] pim6reg: entered allmulticast mode [ 747.275550][T28727] pim6reg: left allmulticast mode [ 747.398004][T28725] lo speed is unknown, defaulting to 1000 [ 747.483904][T28729] ip6t_srh: unknown srh match flags 4000 [ 747.557536][T26394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.693203][T28738] loop6: detected capacity change from 0 to 1024 [ 747.707143][T28738] EXT4-fs: Ignoring removed orlov option [ 747.760865][T28740] netlink: 'syz.1.8684': attribute type 13 has an invalid length. [ 748.155130][T28745] lo speed is unknown, defaulting to 1000 [ 748.255889][T28738] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 748.472797][T28749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8686'. [ 748.499093][T26394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.584692][T28756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8689'. [ 748.631304][T28756] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28756 comm=syz.3.8689 [ 748.681886][T28764] ip6t_srh: unknown srh match flags 4000 [ 748.740607][T28773] loop0: detected capacity change from 0 to 512 [ 748.809963][T28773] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.8692: inode has both inline data and extents flags [ 748.929700][T28773] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.8692: couldn't read orphan inode 15 (err -117) [ 748.948335][T28773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 749.021348][T28766] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 1057052516 > max in inode 18 [ 749.085211][T28783] lo speed is unknown, defaulting to 1000 [ 749.177029][T28152] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.330001][T28788] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 749.710524][T28793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8702'. [ 749.763008][ T29] kauditd_printk_skb: 462 callbacks suppressed [ 749.763023][ T29] audit: type=1326 audit(1764201281.358:57209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28794 comm="syz.0.8703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 749.823296][ T29] audit: type=1326 audit(1764201281.389:57210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28794 comm="syz.0.8703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 749.846998][ T29] audit: type=1326 audit(1764201281.389:57211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28794 comm="syz.0.8703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 749.870639][ T29] audit: type=1326 audit(1764201281.389:57212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28794 comm="syz.0.8703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 749.894335][ T29] audit: type=1326 audit(1764201281.389:57213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28794 comm="syz.0.8703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 749.917961][ T29] audit: type=1326 audit(1764201281.389:57214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28794 comm="syz.0.8703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 749.941597][ T29] audit: type=1326 audit(1764201281.389:57215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28794 comm="syz.0.8703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 749.965365][ T29] audit: type=1326 audit(1764201281.389:57216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28794 comm="syz.0.8703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 749.988970][ T29] audit: type=1326 audit(1764201281.389:57217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28794 comm="syz.0.8703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 750.012514][ T29] audit: type=1326 audit(1764201281.389:57218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28794 comm="syz.0.8703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 750.124133][T28804] netlink: 'syz.3.8706': attribute type 10 has an invalid length. [ 750.142610][T28804] .`: (slave dummy0): Releasing backup interface [ 750.152374][T28804] dummy0: left promiscuous mode [ 750.159888][T28804] netlink: 'syz.3.8706': attribute type 10 has an invalid length. [ 750.170340][T28804] dummy0: entered promiscuous mode [ 750.176076][T28804] .`: (slave dummy0): Enslaving as an active interface with an up link [ 750.187163][T28804] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8706'. [ 750.297585][T28807] lo speed is unknown, defaulting to 1000 [ 750.315943][T28809] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 750.398015][T28814] netlink: 'syz.1.8710': attribute type 4 has an invalid length. [ 750.405876][T28814] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8710'. [ 750.970332][T28828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8714'. [ 751.339167][T28838] 9pnet: Could not find request transport: fd0x0000000000000006 [ 751.409375][T28843] xt_hashlimit: size too large, truncated to 1048576 [ 751.459235][T28845] netlink: 822 bytes leftover after parsing attributes in process `syz.3.8719'. [ 751.941811][T28841] lo speed is unknown, defaulting to 1000 [ 752.152398][T28865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8726'. [ 752.310511][T28849] lo speed is unknown, defaulting to 1000 [ 752.521144][T28872] lo speed is unknown, defaulting to 1000 [ 752.723582][T28879] lo speed is unknown, defaulting to 1000 [ 753.011780][T28889] netlink: 'syz.1.8733': attribute type 13 has an invalid length. [ 753.207630][T28895] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 753.337166][T28901] 9pnet_fd: Insufficient options for proto=fd [ 753.401190][T28903] ip6t_srh: unknown srh match flags 4000 [ 753.563715][T28909] pim6reg: entered allmulticast mode [ 753.584797][T28909] pim6reg: left allmulticast mode [ 753.622865][T28913] netlink: 'syz.0.8744': attribute type 13 has an invalid length. [ 753.686664][T28919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8748'. [ 753.860813][T28923] 9pnet_fd: Insufficient options for proto=fd [ 753.879221][T28924] lo speed is unknown, defaulting to 1000 [ 753.923376][T28928] ip6t_srh: unknown srh match flags 4000 [ 754.121980][T28934] 9pnet: Could not find request transport: fd0x0000000000000003 [ 754.252990][T28942] pim6reg: entered allmulticast mode [ 754.260343][T28942] pim6reg: left allmulticast mode [ 754.328944][T28944] netlink: 'syz.3.8758': attribute type 13 has an invalid length. [ 754.383870][T28947] pim6reg: entered allmulticast mode [ 754.399996][T28947] pim6reg: left allmulticast mode [ 754.440144][T28948] lo speed is unknown, defaulting to 1000 [ 754.555855][T28957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8763'. [ 754.605942][ T29] kauditd_printk_skb: 479 callbacks suppressed [ 754.605967][ T29] audit: type=1326 audit(1764201286.441:57698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28959 comm="syz.0.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 754.613582][T28960] loop0: detected capacity change from 0 to 1024 [ 754.644664][T28958] 9pnet_fd: Insufficient options for proto=fd [ 754.652765][T28960] EXT4-fs: Ignoring removed orlov option [ 754.677235][T28960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 754.680750][T28962] ip6t_srh: unknown srh match flags 4000 [ 754.696153][ T29] audit: type=1326 audit(1764201286.441:57699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28959 comm="syz.0.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 754.719820][ T29] audit: type=1326 audit(1764201286.441:57700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28959 comm="syz.0.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 754.743487][ T29] audit: type=1326 audit(1764201286.441:57701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28959 comm="syz.0.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f80d084f783 code=0x7ffc0000 [ 754.766989][ T29] audit: type=1326 audit(1764201286.441:57702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28959 comm="syz.0.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f80d084e1ff code=0x7ffc0000 [ 754.790525][ T29] audit: type=1326 audit(1764201286.441:57703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28959 comm="syz.0.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f80d084f7d7 code=0x7ffc0000 [ 754.814077][ T29] audit: type=1326 audit(1764201286.451:57704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28959 comm="syz.0.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f80d084df90 code=0x7ffc0000 [ 754.837838][ T29] audit: type=1326 audit(1764201286.451:57705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28959 comm="syz.0.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f80d084f34b code=0x7ffc0000 [ 754.861380][ T29] audit: type=1326 audit(1764201286.493:57706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28959 comm="syz.0.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f80d084e3aa code=0x7ffc0000 [ 754.884869][ T29] audit: type=1326 audit(1764201286.493:57707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28959 comm="syz.0.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f80d084e3aa code=0x7ffc0000 [ 755.051569][T28152] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.092023][T28974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8769'. [ 755.398321][T28979] netlink: 'syz.1.8771': attribute type 4 has an invalid length. [ 755.406199][T28979] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8771'. [ 755.423951][T28982] 9pnet: Could not find request transport: fd0x0000000000000003 [ 755.458114][T28992] 9pnet_fd: Insufficient options for proto=fd [ 755.492758][T28995] netlink: 'syz.1.8776': attribute type 4 has an invalid length. [ 755.500587][T28995] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8776'. [ 755.515524][T29000] ip6t_srh: unknown srh match flags 4000 [ 755.530604][T29002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8779'. [ 755.704739][T29013] xt_hashlimit: size too large, truncated to 1048576 [ 755.797776][T29015] netlink: 822 bytes leftover after parsing attributes in process `syz.6.8783'. [ 755.952989][T29025] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 755.984957][T29028] ip6t_srh: unknown srh match flags 4000 [ 756.044041][T29028] loop6: detected capacity change from 0 to 8192 [ 756.104509][T29035] 9pnet: Could not find request transport: fd0x0000000000000003 [ 756.133615][T29038] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 756.159946][T29028] loop6: p1 p2 p3 p4 [ 756.164010][T29028] loop6: p1 size 196608 extends beyond EOD, truncated [ 756.171578][T29028] loop6: p2 start 164919041 is beyond EOD, truncated [ 756.178383][T29028] loop6: p3 size 66846464 extends beyond EOD, truncated [ 756.185788][T29028] loop6: p4 size 37048832 extends beyond EOD, truncated [ 756.295545][T29044] lo speed is unknown, defaulting to 1000 [ 756.499287][T29052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8796'. [ 756.575222][T29057] netlink: 'syz.0.8798': attribute type 13 has an invalid length. [ 756.638820][T29046] lo speed is unknown, defaulting to 1000 [ 757.061463][T29067] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 757.099391][T29072] ip6t_srh: unknown srh match flags 4000 [ 757.241750][T29078] pim6reg: entered allmulticast mode [ 757.247871][T29078] pim6reg: left allmulticast mode [ 757.323926][T29085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8807'. [ 757.366634][T29082] lo speed is unknown, defaulting to 1000 [ 758.085961][T29101] FAULT_INJECTION: forcing a failure. [ 758.085961][T29101] name failslab, interval 1, probability 0, space 0, times 0 [ 758.098874][T29101] CPU: 1 UID: 0 PID: 29101 Comm: syz.0.8812 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 758.098909][T29101] Tainted: [W]=WARN [ 758.098916][T29101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 758.098987][T29101] Call Trace: [ 758.098997][T29101] [ 758.099013][T29101] __dump_stack+0x1d/0x30 [ 758.099041][T29101] dump_stack_lvl+0xe8/0x140 [ 758.099115][T29101] dump_stack+0x15/0x1b [ 758.099133][T29101] should_fail_ex+0x265/0x280 [ 758.099152][T29101] should_failslab+0x8c/0xb0 [ 758.099185][T29101] kmem_cache_alloc_noprof+0x50/0x480 [ 758.099283][T29101] ? copy_fs_struct+0x31/0x110 [ 758.099317][T29101] copy_fs_struct+0x31/0x110 [ 758.099416][T29101] ksys_unshare+0x2c6/0x6d0 [ 758.099457][T29101] ? ksys_write+0x192/0x1a0 [ 758.099536][T29101] __x64_sys_unshare+0x1f/0x30 [ 758.099572][T29101] x64_sys_call+0x2915/0x3000 [ 758.099627][T29101] do_syscall_64+0xd2/0x200 [ 758.099669][T29101] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 758.099705][T29101] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 758.099827][T29101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.099852][T29101] RIP: 0033:0x7f80d084f749 [ 758.099871][T29101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 758.099895][T29101] RSP: 002b:00007f80cf26d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 758.099920][T29101] RAX: ffffffffffffffda RBX: 00007f80d0aa6180 RCX: 00007f80d084f749 [ 758.099936][T29101] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000680 [ 758.099957][T29101] RBP: 00007f80cf26d090 R08: 0000000000000000 R09: 0000000000000000 [ 758.099970][T29101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 758.099982][T29101] R13: 00007f80d0aa6218 R14: 00007f80d0aa6180 R15: 00007fff2c240a38 [ 758.100000][T29101] [ 758.503518][T29103] netlink: 'syz.3.8813': attribute type 13 has an invalid length. [ 758.768393][T29110] ip6t_srh: unknown srh match flags 4000 [ 758.848091][T29114] lo speed is unknown, defaulting to 1000 [ 758.873709][T29116] pim6reg: entered allmulticast mode [ 758.888060][T29116] pim6reg: left allmulticast mode [ 759.144756][T29134] ip6t_srh: unknown srh match flags 4000 [ 759.209509][T29117] lo speed is unknown, defaulting to 1000 [ 759.251612][T29134] loop6: detected capacity change from 0 to 8192 [ 759.316223][T29134] loop6: p1 p2 p3 p4 [ 759.320305][T29134] loop6: p1 size 196608 extends beyond EOD, truncated [ 759.327887][T29134] loop6: p2 start 164919041 is beyond EOD, truncated [ 759.334668][T29134] loop6: p3 size 66846464 extends beyond EOD, truncated [ 759.342833][T29134] loop6: p4 size 37048832 extends beyond EOD, truncated [ 759.469319][ T29] kauditd_printk_skb: 607 callbacks suppressed [ 759.469337][ T29] audit: type=1326 audit(1764201291.556:58315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29139 comm="syz.0.8826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 759.499150][ T29] audit: type=1326 audit(1764201291.556:58316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29139 comm="syz.0.8826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 759.522771][ T29] audit: type=1326 audit(1764201291.556:58317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29139 comm="syz.0.8826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 759.540763][T29145] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8828'. [ 759.547817][T29140] netlink: 'syz.0.8826': attribute type 13 has an invalid length. [ 759.586934][ T29] audit: type=1326 audit(1764201291.629:58318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29139 comm="syz.0.8826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 759.610627][ T29] audit: type=1326 audit(1764201291.629:58319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29139 comm="syz.0.8826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 759.634389][ T29] audit: type=1326 audit(1764201291.629:58320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29139 comm="syz.0.8826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 759.658129][ T29] audit: type=1326 audit(1764201291.629:58321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29139 comm="syz.0.8826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 759.681887][ T29] audit: type=1326 audit(1764201291.629:58322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29139 comm="syz.0.8826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 759.705630][ T29] audit: type=1326 audit(1764201291.629:58323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29139 comm="syz.0.8826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 759.729269][ T29] audit: type=1326 audit(1764201291.629:58324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29139 comm="syz.0.8826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 759.806209][T29150] pim6reg: entered allmulticast mode [ 759.840014][T29150] pim6reg: left allmulticast mode [ 759.845340][T29155] ip6t_srh: unknown srh match flags 4000 [ 760.049467][T29151] lo speed is unknown, defaulting to 1000 [ 760.121078][T29178] netlink: 'syz.0.8841': attribute type 13 has an invalid length. [ 760.186262][T29181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8839'. [ 760.195907][T29173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8839'. [ 760.473113][T29202] lo speed is unknown, defaulting to 1000 [ 760.528946][T29211] netlink: 'syz.3.8853': attribute type 13 has an invalid length. [ 760.600140][T29213] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8854'. [ 760.609270][T29213] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8854'. [ 760.857053][T29225] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 760.968673][T29240] xt_hashlimit: size too large, truncated to 1048576 [ 761.062163][T29243] netlink: 822 bytes leftover after parsing attributes in process `syz.1.8865'. [ 761.130048][T29247] xt_hashlimit: size too large, truncated to 1048576 [ 761.183029][T29248] netlink: 822 bytes leftover after parsing attributes in process `syz.2.8867'. [ 761.347457][T29265] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 761.409286][T29273] ip6t_srh: unknown srh match flags 4000 [ 761.457988][T29282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8880'. [ 761.507595][T29288] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 761.674149][T29302] lo speed is unknown, defaulting to 1000 [ 761.767823][T29307] xt_hashlimit: size too large, truncated to 1048576 [ 761.816913][T29311] netlink: 822 bytes leftover after parsing attributes in process `syz.3.8889'. [ 762.175447][T29317] ip6t_srh: unknown srh match flags 4000 [ 762.259736][T29320] ip6t_srh: unknown srh match flags 4000 [ 762.402609][T29320] loop0: detected capacity change from 0 to 8192 [ 762.486937][T29320] loop0: p1 p2 p3 p4 [ 762.491112][T29320] loop0: p1 size 196608 extends beyond EOD, truncated [ 762.525106][T29320] loop0: p2 start 164919041 is beyond EOD, truncated [ 762.531962][T29320] loop0: p3 size 66846464 extends beyond EOD, truncated [ 762.564163][T29320] loop0: p4 size 37048832 extends beyond EOD, truncated [ 762.752077][T29342] xt_hashlimit: size too large, truncated to 1048576 [ 762.818127][T29350] netlink: 822 bytes leftover after parsing attributes in process `syz.6.8902'. [ 762.884561][T29335] lo speed is unknown, defaulting to 1000 [ 762.942202][T29359] netlink: 'syz.1.8906': attribute type 13 has an invalid length. [ 763.186987][T29335] chnl_net:caif_netlink_parms(): no params data found [ 763.280019][T29335] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.287220][T29335] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.304684][T29335] bridge_slave_0: entered allmulticast mode [ 763.311436][T29335] bridge_slave_0: entered promiscuous mode [ 763.373464][T29392] netlink: 'syz.2.8915': attribute type 10 has an invalid length. [ 763.401728][T29382] lo speed is unknown, defaulting to 1000 [ 763.402824][T29335] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.414714][T29335] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.429369][T29335] bridge_slave_1: entered allmulticast mode [ 763.435995][T29335] bridge_slave_1: entered promiscuous mode [ 763.452228][T29392] .`: (slave dummy0): Releasing backup interface [ 763.462259][T29392] team0: Port device dummy0 added [ 763.515476][T29335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.537031][T29392] netlink: 'syz.2.8915': attribute type 10 has an invalid length. [ 763.551075][T19328] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.562962][T29398] netlink: 'syz.6.8917': attribute type 13 has an invalid length. [ 763.576533][T29335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.627904][T29392] team0: Port device dummy0 removed [ 763.652302][T29392] .`: (slave dummy0): Enslaving as an active interface with an up link [ 763.671714][T19328] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.695014][T29335] team0: Port device team_slave_0 added [ 763.718405][T29335] team0: Port device team_slave_1 added [ 763.738432][T19328] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.782131][T29335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.789142][T29335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.815247][T29335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.832958][T29409] xt_hashlimit: size too large, truncated to 1048576 [ 763.841047][T29335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.848175][T29335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.874159][T29335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.944208][T19328] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.987092][T29410] pim6reg: entered allmulticast mode [ 764.032399][T29408] pim6reg: left allmulticast mode [ 764.057767][T29335] hsr_slave_0: entered promiscuous mode [ 764.068638][T29335] hsr_slave_1: entered promiscuous mode [ 764.074862][T29335] debugfs: 'hsr0' already exists in 'hsr' [ 764.080679][T29335] Cannot create hsr debugfs directory [ 764.221462][T19328] bridge_slave_1: left allmulticast mode [ 764.227163][T19328] bridge_slave_1: left promiscuous mode [ 764.232991][T19328] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.243391][ T29] kauditd_printk_skb: 795 callbacks suppressed [ 764.243467][ T29] audit: type=1326 audit(1764201296.566:59120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29430 comm="syz.0.8927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 764.276867][T29431] netlink: 'syz.0.8927': attribute type 13 has an invalid length. [ 764.290196][ T29] audit: type=1326 audit(1764201296.597:59121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29430 comm="syz.0.8927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 764.313894][ T29] audit: type=1326 audit(1764201296.597:59122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29430 comm="syz.0.8927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 764.337525][ T29] audit: type=1326 audit(1764201296.597:59123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29430 comm="syz.0.8927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 764.361264][ T29] audit: type=1326 audit(1764201296.597:59124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29430 comm="syz.0.8927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 764.384775][ T29] audit: type=1326 audit(1764201296.597:59125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29430 comm="syz.0.8927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 764.408577][ T29] audit: type=1326 audit(1764201296.597:59126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29430 comm="syz.0.8927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 764.432071][ T29] audit: type=1326 audit(1764201296.597:59127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29430 comm="syz.0.8927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 764.455711][ T29] audit: type=1326 audit(1764201296.597:59128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29430 comm="syz.0.8927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 764.479380][ T29] audit: type=1326 audit(1764201296.597:59129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29430 comm="syz.0.8927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 764.503428][T19328] bridge_slave_0: left allmulticast mode [ 764.509491][T19328] bridge_slave_0: left promiscuous mode [ 764.515264][T19328] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.583552][T29442] netlink: 'syz.0.8930': attribute type 28 has an invalid length. [ 764.591472][T29442] netlink: 'syz.0.8930': attribute type 4 has an invalid length. [ 764.599754][T29442] netlink: 'syz.0.8930': attribute type 2 has an invalid length. [ 764.607623][T29442] netlink: 'syz.0.8930': attribute type 8 has an invalid length. [ 764.657956][T19328] bridge0 (unregistering): left promiscuous mode [ 764.766690][T19328] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.783776][T19328] bond_slave_0: left promiscuous mode [ 764.797016][T19328] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.806233][T19328] bond_slave_1: left promiscuous mode [ 764.813483][T19328] .` (unregistering): (slave dummy0): Releasing backup interface [ 764.822098][T19328] dummy0: left promiscuous mode [ 764.827850][T19328] .` (unregistering): Released all slaves [ 764.846325][T29424] lo speed is unknown, defaulting to 1000 [ 764.982736][T29455] __nla_validate_parse: 9 callbacks suppressed [ 764.982817][T29455] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 765.021083][T19328] hsr_slave_0: left promiscuous mode [ 765.032930][T19328] hsr_slave_1: left promiscuous mode [ 765.042861][T19328] veth1_macvtap: left promiscuous mode [ 765.049380][T19328] veth0_macvtap: left promiscuous mode [ 765.055048][T19328] veth1_vlan: left promiscuous mode [ 765.060818][T19328] veth0_vlan: left promiscuous mode [ 765.081108][T29461] loop6: detected capacity change from 0 to 512 [ 765.102348][T29461] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 765.117927][T29461] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 765.252542][T26394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.273992][T29459] lo speed is unknown, defaulting to 1000 [ 765.284834][T29470] syz_tun: entered allmulticast mode [ 765.303411][T29470] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8940'. [ 765.331245][T29470] syz_tun (unregistering): left allmulticast mode [ 765.373021][T29467] lo speed is unknown, defaulting to 1000 [ 765.385320][T29472] lo speed is unknown, defaulting to 1000 [ 765.578625][T29482] FAULT_INJECTION: forcing a failure. [ 765.578625][T29482] name failslab, interval 1, probability 0, space 0, times 0 [ 765.591369][T29482] CPU: 1 UID: 0 PID: 29482 Comm: syz.6.8943 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 765.591462][T29482] Tainted: [W]=WARN [ 765.591471][T29482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 765.591503][T29482] Call Trace: [ 765.591511][T29482] [ 765.591520][T29482] __dump_stack+0x1d/0x30 [ 765.591567][T29482] dump_stack_lvl+0xe8/0x140 [ 765.591662][T29482] dump_stack+0x15/0x1b [ 765.591683][T29482] should_fail_ex+0x265/0x280 [ 765.591708][T29482] should_failslab+0x8c/0xb0 [ 765.591744][T29482] __kmalloc_noprof+0xa5/0x570 [ 765.591861][T29482] ? blk_rq_map_user_iov+0x23e/0x1520 [ 765.591890][T29482] blk_rq_map_user_iov+0x23e/0x1520 [ 765.591932][T29482] ? __blk_mq_alloc_requests+0xd86/0xe30 [ 765.592031][T29482] blk_rq_map_user_io+0x18f/0x260 [ 765.592051][T29482] ? __rcu_read_unlock+0x4f/0x70 [ 765.592086][T29482] ? sg_link_reserve+0x117/0x140 [ 765.592146][T29482] sg_common_write+0xb06/0xc30 [ 765.592189][T29482] sg_write+0x6b5/0x750 [ 765.592239][T29482] vfs_writev+0x406/0x8b0 [ 765.592271][T29482] ? __pfx_sg_write+0x10/0x10 [ 765.592380][T29482] do_writev+0xe7/0x210 [ 765.592411][T29482] __x64_sys_writev+0x45/0x50 [ 765.592442][T29482] x64_sys_call+0x1e9a/0x3000 [ 765.592528][T29482] do_syscall_64+0xd2/0x200 [ 765.592548][T29482] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 765.592574][T29482] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 765.592627][T29482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.592671][T29482] RIP: 0033:0x7fb96bcef749 [ 765.592690][T29482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.592723][T29482] RSP: 002b:00007fb96a74f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 765.592758][T29482] RAX: ffffffffffffffda RBX: 00007fb96bf45fa0 RCX: 00007fb96bcef749 [ 765.592837][T29482] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000003 [ 765.592853][T29482] RBP: 00007fb96a74f090 R08: 0000000000000000 R09: 0000000000000000 [ 765.592868][T29482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.592953][T29482] R13: 00007fb96bf46038 R14: 00007fb96bf45fa0 R15: 00007ffccdc44168 [ 765.592976][T29482] [ 765.817128][T29480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8942'. [ 765.826132][T29480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8942'. [ 765.849269][T19328] IPVS: stop unused estimator thread 0... [ 765.890617][T29335] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 765.903298][T29335] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 765.912943][T29335] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 765.924649][T29335] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 765.936526][T29489] ip6t_srh: unknown srh match flags 4000 [ 766.077310][T29335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.101027][T29335] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.111241][T19331] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.118356][T19331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.131320][T19365] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.138510][T19365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.249591][T29335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.374484][T29335] veth0_vlan: entered promiscuous mode [ 766.392927][T29335] veth1_vlan: entered promiscuous mode [ 766.422161][T29335] veth0_macvtap: entered promiscuous mode [ 766.439774][T29335] veth1_macvtap: entered promiscuous mode [ 766.452190][T29335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 766.482474][T29335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 766.505885][T29522] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 766.514340][T19331] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.526747][T19328] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.539142][T19328] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.642419][T19328] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.693267][T29531] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8953'. [ 766.715341][T29531] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8953'. [ 766.841725][T29538] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 767.070976][T29545] ip6t_srh: unknown srh match flags 4000 [ 767.081718][T29537] lo speed is unknown, defaulting to 1000 [ 767.267130][T29545] loop3: detected capacity change from 0 to 8192 [ 767.332602][T29545] loop3: p1 p2 p3 p4 [ 767.336795][T29545] loop3: p1 size 196608 extends beyond EOD, truncated [ 767.344479][T29545] loop3: p2 start 164919041 is beyond EOD, truncated [ 767.351300][T29545] loop3: p3 size 66846464 extends beyond EOD, truncated [ 767.380529][T29545] loop3: p4 size 37048832 extends beyond EOD, truncated [ 767.745546][T29587] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 768.535850][T29607] netlink: 'syz.0.8980': attribute type 10 has an invalid length. [ 768.546608][T29607] bond0: (slave dummy0): Releasing backup interface [ 768.556880][T29607] team0: Port device dummy0 added [ 768.578184][T29607] netlink: 'syz.0.8980': attribute type 10 has an invalid length. [ 768.611351][T29607] team0: Port device dummy0 removed [ 768.774334][T29607] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 768.835897][T29621] ip6t_srh: unknown srh match flags 4000 [ 768.960272][T29630] pim6reg: entered allmulticast mode [ 768.973538][T29621] loop3: detected capacity change from 0 to 8192 [ 768.984842][T29628] loop0: detected capacity change from 0 to 4096 [ 768.994165][T29630] pim6reg: left allmulticast mode [ 769.002492][T29628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 769.018354][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 769.018370][ T29] audit: type=1400 audit(1764201301.586:59515): avc: denied { mount } for pid=29627 comm="syz.0.8988" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 769.047761][T29621] loop3: p1 p2 p3 p4 [ 769.051847][T29621] loop3: p1 size 196608 extends beyond EOD, truncated [ 769.060215][ T29] audit: type=1400 audit(1764201301.618:59516): avc: denied { prog_run } for pid=29627 comm="syz.0.8988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 769.090033][T29621] loop3: p2 start 164919041 is beyond EOD, truncated [ 769.096858][T29621] loop3: p3 size 66846464 extends beyond EOD, truncated [ 769.126580][ T29] audit: type=1400 audit(1764201301.649:59517): avc: denied { add_name } for pid=29627 comm="syz.0.8988" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 769.147619][ T29] audit: type=1400 audit(1764201301.649:59518): avc: denied { create } for pid=29627 comm="syz.0.8988" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 769.168113][ T29] audit: type=1400 audit(1764201301.649:59519): avc: denied { read write } for pid=29627 comm="syz.0.8988" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 769.171709][T29621] loop3: p4 size 37048832 extends beyond EOD, [ 769.191010][ T29] audit: type=1400 audit(1764201301.649:59520): avc: denied { open } for pid=29627 comm="syz.0.8988" path="/87/file1/file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 769.197242][T29621] truncated [ 769.341905][ T29] audit: type=1400 audit(1764201301.796:59521): avc: denied { mounton } for pid=29627 comm="syz.0.8988" path="/87/file1" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 769.364845][ T29] audit: type=1326 audit(1764201301.817:59522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29620 comm="syz.3.8985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f600a0ede3a code=0x7ffc0000 [ 769.388699][ T29] audit: type=1326 audit(1764201301.817:59523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29620 comm="syz.3.8985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f600a0eecc7 code=0x7ffc0000 [ 769.412369][ T29] audit: type=1326 audit(1764201301.817:59524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29620 comm="syz.3.8985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f600a0ede3a code=0x7ffc0000 [ 769.497413][T29649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8993'. [ 769.540580][ T36] hid-generic 0007:0005:0004.0001: unknown main item tag 0x0 [ 769.548083][ T36] hid-generic 0007:0005:0004.0001: unknown main item tag 0x0 [ 769.555621][ T36] hid-generic 0007:0005:0004.0001: unknown main item tag 0x0 [ 769.563146][ T36] hid-generic 0007:0005:0004.0001: unknown main item tag 0x0 [ 769.570602][ T36] hid-generic 0007:0005:0004.0001: unknown main item tag 0x0 [ 769.578096][ T36] hid-generic 0007:0005:0004.0001: unknown main item tag 0x0 [ 769.585611][ T36] hid-generic 0007:0005:0004.0001: unknown main item tag 0x0 [ 769.593061][ T36] hid-generic 0007:0005:0004.0001: unknown main item tag 0x0 [ 769.601453][ T36] hid-generic 0007:0005:0004.0001: unknown main item tag 0x0 [ 769.608894][ T36] hid-generic 0007:0005:0004.0001: unknown main item tag 0x0 [ 769.636875][ T36] hid-generic 0007:0005:0004.0001: hidraw0: HID v0.05 Device [syz0] on syz1 [ 769.841870][T29663] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 769.962820][T29671] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9002'. [ 770.007955][T28152] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.038973][T29675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9004'. [ 770.097710][T29675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9004'. [ 770.168360][T29683] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 770.327794][T29694] ip6t_srh: unknown srh match flags 4000 [ 770.412047][T29694] loop6: detected capacity change from 0 to 8192 [ 770.476447][T29692] lo speed is unknown, defaulting to 1000 [ 770.505888][T29694] loop6: p1 p2 p3 p4 [ 770.510105][T29694] loop6: p1 size 196608 extends beyond EOD, truncated [ 770.523215][T29694] loop6: p2 start 164919041 is beyond EOD, truncated [ 770.529930][T29694] loop6: p3 size 66846464 extends beyond EOD, truncated [ 770.562917][T29694] loop6: p4 size 37048832 extends beyond EOD, truncated [ 770.637279][T29703] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 770.637279][T29703] program syz.6.9013 not setting count and/or reply_len properly [ 770.793725][T29713] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.815974][T29715] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 770.876800][T29713] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.904012][T29720] pim6reg: entered allmulticast mode [ 770.914805][T29713] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.930999][T29720] pim6reg: left allmulticast mode [ 771.128128][T29713] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.181163][T29708] lo speed is unknown, defaulting to 1000 [ 771.205466][T29728] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 771.255111][T19331] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.291068][T19331] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.319897][T19331] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.342580][T29734] lo speed is unknown, defaulting to 1000 [ 771.368136][T19331] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.542606][T29745] random: crng reseeded on system resumption [ 771.700681][T29750] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 771.897139][T29743] lo speed is unknown, defaulting to 1000 [ 772.005866][T29760] lo speed is unknown, defaulting to 1000 [ 772.240842][T29765] ip6t_srh: unknown srh match flags 4000 [ 772.273865][T29761] lo speed is unknown, defaulting to 1000 [ 772.357390][T29765] loop3: detected capacity change from 0 to 8192 [ 772.407885][T29765] loop3: p1 p2 p3 p4 [ 772.411980][T29765] loop3: p1 size 196608 extends beyond EOD, truncated [ 772.436396][T29765] loop3: p2 start 164919041 is beyond EOD, truncated [ 772.443150][T29765] loop3: p3 size 66846464 extends beyond EOD, truncated [ 772.499723][T29771] loop6: detected capacity change from 0 to 4096 [ 772.503724][T29765] loop3: p4 size 37048832 extends beyond EOD, truncated [ 772.531975][T29771] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 772.547312][T29774] loop0: detected capacity change from 0 to 764 [ 772.569370][T29774] Symlink component flag not implemented [ 772.575447][T29774] Symlink component flag not implemented (116) [ 772.732068][T29774] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.751746][T29779] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 772.798203][T29783] pim6reg: entered allmulticast mode [ 772.806260][T29783] pim6reg: left allmulticast mode [ 772.836309][T29774] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.889946][T26394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.926388][T29774] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.126789][T29774] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.160841][T29801] ip6t_srh: unknown srh match flags 4000 [ 773.186105][T29802] lo speed is unknown, defaulting to 1000 [ 773.336506][T19331] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.363262][T19331] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.420210][T19331] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.437150][T19331] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.597994][T29806] loop0: detected capacity change from 0 to 4096 [ 773.619937][T29806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 773.989091][ T29] kauditd_printk_skb: 581 callbacks suppressed [ 773.989109][ T29] audit: type=1400 audit(1764201306.806:60104): avc: denied { name_bind } for pid=29810 comm="syz.3.9050" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 774.017404][ T29] audit: type=1400 audit(1764201306.806:60105): avc: denied { node_bind } for pid=29810 comm="syz.3.9050" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 774.044163][T29811] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 774.085081][ T29] audit: type=1400 audit(1764201306.859:60106): avc: denied { firmware_load } for pid=29810 comm=77DEA305FF07 path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 774.110205][ T29] audit: type=1400 audit(1764201306.890:60107): avc: denied { create } for pid=29813 comm="syz.6.9051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 774.261957][ T29] audit: type=1400 audit(1764201307.079:60108): avc: denied { write } for pid=29818 comm="syz.3.9052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 774.270834][T29817] lo speed is unknown, defaulting to 1000 [ 774.291910][T29819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9052'. [ 774.369815][T29819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9052'. [ 774.443812][T28152] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.623946][ T29] audit: type=1326 audit(1764201307.457:60109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29829 comm="syz.0.9058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 774.647651][ T29] audit: type=1326 audit(1764201307.457:60110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29829 comm="syz.0.9058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 774.671341][ T29] audit: type=1326 audit(1764201307.457:60111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29829 comm="syz.0.9058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 774.694923][ T29] audit: type=1326 audit(1764201307.457:60112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29829 comm="syz.0.9058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 774.718538][ T29] audit: type=1326 audit(1764201307.457:60113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29829 comm="syz.0.9058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d084f749 code=0x7ffc0000 [ 774.735797][T29830] ip6t_srh: unknown srh match flags 4000 [ 775.044610][T29837] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.164977][T29830] loop0: detected capacity change from 0 to 8192 [ 775.184896][T29837] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.197021][T29830] loop0: p1 p2 p3 p4 [ 775.204333][T29830] loop0: p1 size 196608 extends beyond EOD, truncated [ 775.212510][T29830] loop0: p2 start 164919041 is beyond EOD, truncated [ 775.219282][T29830] loop0: p3 size 66846464 extends beyond EOD, truncated [ 775.229860][T29830] loop0: p4 size 37048832 extends beyond EOD, truncated [ 775.284182][T29837] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.311807][T29851] loop0: detected capacity change from 0 to 1024 [ 775.318826][T29851] EXT4-fs: Ignoring removed orlov option [ 775.341046][T29851] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 775.379866][T29837] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.768461][T29866] ip6t_srh: unknown srh match flags 4000 [ 775.812993][T29866] loop6: detected capacity change from 0 to 8192 [ 775.841489][T29868] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 775.854347][T29866] loop6: p1 p2 p3 p4 [ 775.858478][T29866] loop6: p1 size 196608 extends beyond EOD, truncated [ 775.870064][T29866] loop6: p2 start 164919041 is beyond EOD, truncated [ 775.876945][T29866] loop6: p3 size 66846464 extends beyond EOD, truncated [ 775.885341][T29866] loop6: p4 size 37048832 extends beyond EOD, truncated [ 775.892975][T29871] syz_tun: entered allmulticast mode [ 775.912163][T29871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9071'. [ 775.923998][T29871] syz_tun (unregistering): left allmulticast mode [ 776.342647][T29881] xt_hashlimit: size too large, truncated to 1048576 [ 776.570531][T29883] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9074'. [ 776.706485][T29885] lo speed is unknown, defaulting to 1000 [ 777.082070][T19336] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.118045][T19336] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.174985][T28152] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.194055][T19336] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.298619][T19336] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.371776][T29895] lo speed is unknown, defaulting to 1000 [ 777.474300][T29901] loop0: detected capacity change from 0 to 512 [ 777.501914][T29901] EXT4-fs (loop0): orphan cleanup on readonly fs [ 777.513034][T29901] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.9077: bad orphan inode 13 [ 777.535705][T29901] ext4_test_bit(bit=12, block=18) = 1 [ 777.541159][T29901] is_bad_inode(inode)=0 [ 777.545363][T29901] NEXT_ORPHAN(inode)=2130706432 [ 777.550251][T29901] max_ino=32 [ 777.553455][T29901] i_nlink=1 [ 777.571824][T29901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 777.645982][T28152] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 12 [ 777.671017][T28152] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 12 [ 777.756158][T29915] loop6: detected capacity change from 0 to 764 [ 777.790342][T29917] loop6: detected capacity change from 0 to 764 [ 777.798780][T29917] Symlink component flag not implemented [ 777.804746][T29917] Symlink component flag not implemented (116) [ 777.814531][T29917] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.873619][T29917] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.930842][T29917] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.031442][T29917] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.055615][T29921] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 778.085377][T19328] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.101782][T19328] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.110744][T19328] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.123163][T19328] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.169505][T29925] ip6t_srh: unknown srh match flags 4000 [ 778.255290][T29925] loop6: detected capacity change from 0 to 8192 [ 778.285938][T29933] pim6reg: entered allmulticast mode [ 778.292720][T29933] pim6reg: left allmulticast mode [ 778.310871][T29925] loop6: p1 p2 p3 p4 [ 778.319225][T29925] loop6: p1 size 196608 extends beyond EOD, truncated [ 778.330992][T29925] loop6: p2 start 164919041 is beyond EOD, truncated [ 778.337722][T29925] loop6: p3 size 66846464 extends beyond EOD, truncated [ 778.347480][T29925] loop6: p4 size 37048832 extends beyond EOD, truncated [ 778.356220][T29939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9095'. [ 778.449413][T29945] loop6: detected capacity change from 0 to 764 [ 778.721834][T29962] netlink: 822 bytes leftover after parsing attributes in process `syz.6.9103'. [ 778.973897][ T29] kauditd_printk_skb: 329 callbacks suppressed [ 778.973915][ T29] audit: type=1400 audit(1764201312.037:60443): avc: denied { write } for pid=29953 comm="syz.3.9101" lport=42866 faddr=::ffff:10.1.1.0 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 779.982887][T29984] loop3: detected capacity change from 0 to 1024 [ 779.989674][T29984] EXT4-fs: Ignoring removed orlov option [ 780.000865][T29982] loop6: detected capacity change from 0 to 764 [ 780.073284][T29984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 780.086641][ T29] audit: type=1400 audit(1764201313.203:60444): avc: denied { mount } for pid=29983 comm="syz.3.9111" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 780.111624][T29993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9115'. [ 780.120732][ T29] audit: type=1400 audit(1764201313.234:60445): avc: denied { add_name } for pid=29983 comm="syz.3.9111" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 780.141574][ T29] audit: type=1400 audit(1764201313.234:60446): avc: denied { create } for pid=29983 comm="syz.3.9111" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 780.161901][ T29] audit: type=1400 audit(1764201313.234:60447): avc: denied { read write open } for pid=29983 comm="syz.3.9111" path="/40/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 780.188562][T19328] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.216184][T29993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9115'. [ 780.283481][T19328] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.333195][ T29] audit: type=1326 audit(1764201313.465:60448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29998 comm="syz.6.9117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96bcef749 code=0x7ffc0000 [ 780.357128][ T29] audit: type=1326 audit(1764201313.465:60449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29998 comm="syz.6.9117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96bcef749 code=0x7ffc0000 [ 780.381043][ T29] audit: type=1326 audit(1764201313.465:60450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29998 comm="syz.6.9117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb96bcef749 code=0x7ffc0000 [ 780.404734][ T29] audit: type=1326 audit(1764201313.465:60451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29998 comm="syz.6.9117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96bcef749 code=0x7ffc0000 [ 780.428555][ T29] audit: type=1326 audit(1764201313.465:60452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29998 comm="syz.6.9117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96bcef749 code=0x7ffc0000 [ 780.520710][T19328] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.588051][T19328] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.679979][T19328] bridge_slave_1: left allmulticast mode [ 780.685729][T19328] bridge_slave_1: left promiscuous mode [ 780.691408][T19328] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.729326][T19328] bridge_slave_0: left allmulticast mode [ 780.735036][T19328] bridge_slave_0: left promiscuous mode [ 780.740823][T19328] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.824801][T29335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.998438][T19328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 781.018442][T19328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 781.078277][T19328] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 781.091593][T19328] bond0 (unregistering): Released all slaves [ 781.207715][T30015] lo speed is unknown, defaulting to 1000 [ 781.227608][T30029] ip6t_srh: unknown srh match flags 4000 [ 781.242470][T30007] lo speed is unknown, defaulting to 1000 [ 781.265299][T19328] hsr_slave_0: left promiscuous mode [ 781.272022][T30033] xt_hashlimit: size too large, truncated to 1048576 [ 781.376244][T19328] hsr_slave_1: left promiscuous mode [ 781.414842][T19328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 781.422302][T19328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.460457][T19328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 781.468121][T19328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.491488][T19328] veth1_macvtap: left promiscuous mode [ 781.503559][T19328] veth0_macvtap: left promiscuous mode [ 781.514683][T19328] veth1_vlan: left promiscuous mode [ 781.525761][T19328] veth0_vlan: left promiscuous mode [ 781.745393][T19328] team0 (unregistering): Port device team_slave_1 removed [ 781.863253][T19328] team0 (unregistering): Port device team_slave_0 removed [ 781.965684][T30038] netlink: 822 bytes leftover after parsing attributes in process `syz.2.9127'. [ 781.995211][T30043] lo speed is unknown, defaulting to 1000 [ 782.141358][T30048] ip6t_srh: unknown srh match flags 4000 [ 782.164630][T30015] chnl_net:caif_netlink_parms(): no params data found [ 782.180085][T30050] lo speed is unknown, defaulting to 1000 [ 782.312184][T30015] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.319443][T30015] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.328460][T30015] bridge_slave_0: entered allmulticast mode [ 782.335265][T30015] bridge_slave_0: entered promiscuous mode [ 782.362275][T30015] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.369476][T30015] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.385584][T30015] bridge_slave_1: entered allmulticast mode [ 782.392200][T30015] bridge_slave_1: entered promiscuous mode [ 782.477498][T30015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.513768][T30015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.520323][T30060] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 782.578201][T30015] team0: Port device team_slave_0 added [ 782.595926][T30015] team0: Port device team_slave_1 added [ 782.656583][T30015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.663630][T30015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.689840][T30015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.748364][T30015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.755476][T30015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.781907][T30015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.892921][T30061] lo speed is unknown, defaulting to 1000 [ 782.942124][T30015] hsr_slave_0: entered promiscuous mode [ 782.957517][T30015] hsr_slave_1: entered promiscuous mode [ 782.975841][T30015] debugfs: 'hsr0' already exists in 'hsr' [ 782.981605][T30015] Cannot create hsr debugfs directory [ 782.997256][T30070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9136'. [ 783.112884][T30076] ip6t_srh: unknown srh match flags 4000 [ 783.262051][T30082] syz_tun: entered allmulticast mode [ 783.268601][T30076] loop3: detected capacity change from 0 to 8192 [ 783.280974][T30082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9141'. [ 783.306082][T30015] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 783.320185][T30076] loop3: p1 p2 p3 p4 [ 783.325138][T30076] loop3: p1 size 196608 extends beyond EOD, truncated [ 783.325771][T30082] syz_tun (unregistering): left allmulticast mode [ 783.338933][T30076] loop3: p2 start 164919041 is beyond EOD, truncated [ 783.345679][T30076] loop3: p3 size 66846464 extends beyond EOD, truncated [ 783.353515][T30082] syz_tun (unregistering): left promiscuous mode [ 783.363155][T30015] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 783.370115][T30076] loop3: p4 size 37048832 extends beyond EOD, truncated [ 783.380639][T30015] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 783.392745][T30015] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 783.513304][T30015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.540573][T30015] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.570278][T19328] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.577416][T19328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.588120][T19328] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.595239][T19328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.662640][T30015] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 783.673338][T30015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 783.719672][T30098] lo speed is unknown, defaulting to 1000 [ 783.747766][T30100] pim6reg: entered allmulticast mode [ 783.757334][T30104] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.768823][T30100] pim6reg: left allmulticast mode [ 783.815874][T30015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 783.825910][T30104] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.872773][T30104] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.924303][T30104] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.953232][T30115] loop3: detected capacity change from 0 to 4096 [ 783.978601][T30115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 784.000998][T19365] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.028353][T19365] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.038923][T19365] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.067312][ T29] kauditd_printk_skb: 616 callbacks suppressed [ 784.067331][ T29] audit: type=1400 audit(1764201317.383:61069): avc: denied { read write } for pid=30113 comm="syz.3.9145" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 784.096497][ T29] audit: type=1400 audit(1764201317.383:61070): avc: denied { open } for pid=30113 comm="syz.3.9145" path="/45/file1/file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 784.123213][T30015] veth0_vlan: entered promiscuous mode [ 784.133828][T30015] veth1_vlan: entered promiscuous mode [ 784.141864][T19331] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.179386][T30015] veth0_macvtap: entered promiscuous mode [ 784.200062][ T29] audit: type=1326 audit(1764201317.467:61071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30126 comm="syz.2.9147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322961f749 code=0x7ffc0000 [ 784.223832][ T29] audit: type=1326 audit(1764201317.467:61072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30126 comm="syz.2.9147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322961f749 code=0x7ffc0000 [ 784.247590][ T29] audit: type=1326 audit(1764201317.467:61073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30126 comm="syz.2.9147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f322961f749 code=0x7ffc0000 [ 784.271461][ T29] audit: type=1326 audit(1764201317.467:61074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30126 comm="syz.2.9147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322961f749 code=0x7ffc0000 [ 784.295331][ T29] audit: type=1326 audit(1764201317.467:61075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30126 comm="syz.2.9147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f322961f749 code=0x7ffc0000 [ 784.319249][ T29] audit: type=1326 audit(1764201317.467:61076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30126 comm="syz.2.9147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322961f749 code=0x7ffc0000 [ 784.343029][ T29] audit: type=1326 audit(1764201317.467:61077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30126 comm="syz.2.9147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f322961f749 code=0x7ffc0000 [ 784.366784][ T29] audit: type=1326 audit(1764201317.477:61078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30126 comm="syz.2.9147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322961f749 code=0x7ffc0000 [ 784.454897][T30015] veth1_macvtap: entered promiscuous mode [ 784.467437][T30015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 784.481943][T30015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 784.518134][T30132] lo speed is unknown, defaulting to 1000 [ 784.567039][T19328] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.577100][T19328] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.591143][T19328] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.600172][T19328] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.685680][T29335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.842879][T30142] lo speed is unknown, defaulting to 1000 [ 785.014747][T30145] ip6t_srh: unknown srh match flags 4000 [ 785.074643][T30143] lo speed is unknown, defaulting to 1000 [ 785.156247][T30145] loop7: detected capacity change from 0 to 8192 [ 785.199762][T30151] loop3: detected capacity change from 0 to 764 [ 785.207443][T30145] loop7: p1 p2 p3 p4 [ 785.216298][T30145] loop7: p1 size 196608 extends beyond EOD, truncated [ 785.238946][T30145] loop7: p2 start 164919041 is beyond EOD, truncated [ 785.245704][T30145] loop7: p3 size 66846464 extends beyond EOD, truncated [ 785.252929][T30145] loop7: p4 size 37048832 extends beyond EOD, truncated [ 785.289328][T30151] Symlink component flag not implemented [ 785.305350][T30151] Symlink component flag not implemented (116) [ 785.347014][T30151] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.425735][T30151] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.567180][T30151] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.581532][ T4780] IPVS: starting estimator thread 0... [ 785.603833][T30161] loop6: detected capacity change from 0 to 764 [ 785.624359][T30161] Symlink component flag not implemented [ 785.630555][T30161] Symlink component flag not implemented (116) [ 785.635025][T30151] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.669996][T30164] IPVS: using max 1872 ests per chain, 93600 per kthread [ 785.688027][T30161] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.722592][T19328] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.749053][T19328] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.766449][T19328] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.783589][T19328] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.794138][T30161] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.852797][T30161] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.891010][T30161] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.944642][T19328] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.964519][T19328] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.993693][T19328] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.012181][T19328] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.065938][T30177] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 786.428652][T30178] lo speed is unknown, defaulting to 1000 [ 786.648262][T30199] loop7: detected capacity change from 0 to 1024 [ 786.655139][T30199] EXT4-fs: Ignoring removed orlov option [ 786.666851][T30199] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 786.677242][T30196] lo speed is unknown, defaulting to 1000 [ 786.879936][T30015] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.917955][T30208] syz_tun: entered allmulticast mode [ 786.959852][T30208] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9172'. [ 786.972044][T30208] syz_tun (unregistering): left allmulticast mode [ 787.110722][T30209] lo speed is unknown, defaulting to 1000 [ 787.410737][T30219] syz_tun: entered allmulticast mode [ 787.431958][T30223] lo: entered allmulticast mode [ 787.440497][T30219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9175'. [ 787.469114][T30219] syz_tun (unregistering): left allmulticast mode [ 787.480968][T30223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9177'. [ 787.503957][T30233] pim6reg: entered allmulticast mode [ 787.526091][T30233] pim6reg: left allmulticast mode [ 787.674063][T30243] ip6t_srh: unknown srh match flags 4000 [ 787.873951][T30251] lo: entered allmulticast mode [ 787.886835][T30243] loop3: detected capacity change from 0 to 8192 [ 787.902315][T30249] ip6t_srh: unknown srh match flags 4000 [ 787.923177][T30251] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9185'. [ 787.941408][T30243] loop3: p1 p2 p3 p4 [ 787.948977][T30243] loop3: p1 size 196608 extends beyond EOD, truncated [ 788.002382][T30249] loop7: detected capacity change from 0 to 8192 [ 788.023632][T30243] loop3: p2 start 164919041 is beyond EOD, truncated [ 788.030518][T30243] loop3: p3 size 66846464 extends beyond EOD, truncated [ 788.040026][T30256] loop6: detected capacity change from 0 to 1024 [ 788.046848][T30249] loop7: p1 p2 p3 p4 [ 788.051280][T30249] loop7: p1 size 196608 extends beyond EOD, truncated [ 788.058471][T30243] loop3: p4 size 37048832 extends beyond EOD, truncated [ 788.063139][T30249] loop7: p2 start 164919041 is beyond EOD, truncated [ 788.072176][T30249] loop7: p3 size 66846464 extends beyond EOD, truncated [ 788.084322][T30256] EXT4-fs: Ignoring removed orlov option [ 788.107021][T30249] loop7: p4 size 37048832 extends beyond EOD, truncated [ 788.118452][T30256] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 788.442401][T30265] loop7: detected capacity change from 0 to 4096 [ 788.461273][T30265] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 788.472613][T30264] lo speed is unknown, defaulting to 1000 [ 788.889695][ T29] kauditd_printk_skb: 531 callbacks suppressed [ 788.889710][ T29] audit: type=1326 audit(1764201322.456:61610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30290 comm="syz.1.9197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc296bf749 code=0x7ffc0000 [ 788.926425][T30292] ip6t_srh: unknown srh match flags 4000 [ 788.998604][ T29] audit: type=1326 audit(1764201322.487:61611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30290 comm="syz.1.9197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fcc296bf749 code=0x7ffc0000 [ 789.022365][ T29] audit: type=1326 audit(1764201322.487:61612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30290 comm="syz.1.9197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc296bf749 code=0x7ffc0000 [ 789.046062][ T29] audit: type=1326 audit(1764201322.487:61613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30290 comm="syz.1.9197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc296bf749 code=0x7ffc0000 [ 789.058555][T30295] lo: entered allmulticast mode [ 789.069650][ T29] audit: type=1326 audit(1764201322.487:61614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30290 comm="syz.1.9197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc296bf749 code=0x7ffc0000 [ 789.098590][ T29] audit: type=1326 audit(1764201322.487:61615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30290 comm="syz.1.9197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc296bf749 code=0x7ffc0000 [ 789.122342][ T29] audit: type=1326 audit(1764201322.487:61616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30290 comm="syz.1.9197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc296bf749 code=0x7ffc0000 [ 789.146018][ T29] audit: type=1326 audit(1764201322.487:61617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30290 comm="syz.1.9197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fcc296bf749 code=0x7ffc0000 [ 789.169636][ T29] audit: type=1326 audit(1764201322.487:61618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30290 comm="syz.1.9197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc296bf749 code=0x7ffc0000 [ 789.193377][ T29] audit: type=1326 audit(1764201322.487:61619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30290 comm="syz.1.9197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fcc296bf749 code=0x7ffc0000 [ 789.294363][T26394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.313827][T30302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9198'. [ 789.334067][T30015] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.432951][T30308] loop6: detected capacity change from 0 to 764 [ 789.458628][T30308] Symlink component flag not implemented [ 789.464730][T30308] Symlink component flag not implemented (116) [ 789.487036][T30308] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.525198][T30318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9205'. [ 789.575896][T30308] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.686101][T30335] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 789.695941][T30308] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.765624][T30339] ip6t_srh: unknown srh match flags 4000 [ 789.773574][T30308] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.850145][T19340] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.861493][T30339] loop3: detected capacity change from 0 to 8192 [ 789.864879][T19340] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.888030][T30339] loop3: p1 p2 p3 p4 [ 789.906842][T19340] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.906970][T30339] loop3: p1 size 196608 extends beyond EOD, truncated [ 789.926804][T30342] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=30342 comm=)C1͝DA+ [ 789.940151][T30339] loop3: p2 start 164919041 is beyond EOD, truncated [ 789.940305][T19340] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.946935][T30339] loop3: p3 size 66846464 extends beyond EOD, truncated [ 789.962750][T30339] loop3: p4 size 37048832 extends beyond EOD, truncated [ 790.087781][T30349] lo speed is unknown, defaulting to 1000 [ 790.145114][T30359] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9213'. [ 790.235043][T30364] loop3: detected capacity change from 0 to 1024 [ 790.256297][T30364] EXT4-fs: Ignoring removed orlov option [ 790.274253][T30364] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 790.584237][T30373] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 790.656041][T30346] lo speed is unknown, defaulting to 1000 [ 790.890505][T30381] loop6: detected capacity change from 0 to 764 [ 790.916880][T30381] Symlink component flag not implemented [ 790.929454][T30381] Symlink component flag not implemented (116) [ 790.936615][T29335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.968461][T30381] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.010581][T30383] ip6t_srh: unknown srh match flags 4000 [ 791.060974][T30381] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.071799][T30385] ip6t_srh: unknown srh match flags 4000 [ 791.090146][T30383] loop7: detected capacity change from 0 to 8192 [ 791.125985][T30383] loop7: p1 p2 p3 p4 [ 791.135290][T30383] loop7: p1 size 196608 extends beyond EOD, truncated [ 791.143091][T30381] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.162184][T30383] loop7: p2 start 164919041 is beyond EOD, truncated [ 791.169041][T30383] loop7: p3 size 66846464 extends beyond EOD, truncated [ 791.183993][T30385] loop3: detected capacity change from 0 to 8192 [ 791.208106][T30383] loop7: p4 size 37048832 extends beyond EOD, truncated [ 791.216293][T30381] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.227131][T30385] loop3: p1 p2 p3 p4 [ 791.234928][T30385] loop3: p1 size 196608 extends beyond EOD, truncated [ 791.250182][T30385] loop3: p2 start 164919041 is beyond EOD, truncated [ 791.257231][T30385] loop3: p3 size 66846464 extends beyond EOD, truncated [ 791.266440][T30385] loop3: p4 size 37048832 extends beyond EOD, truncated [ 791.563185][T30407] lo speed is unknown, defaulting to 1000 [ 791.792399][T30410] lo speed is unknown, defaulting to 1000 [ 792.344408][T30417] lo speed is unknown, defaulting to 1000 [ 792.763732][T30433] ip6t_srh: unknown srh match flags 4000 [ 792.805579][T30433] loop3: detected capacity change from 0 to 8192 [ 792.848997][T30433] loop3: p1 p2 p3 p4 [ 792.853292][T30433] loop3: p1 size 196608 extends beyond EOD, truncated [ 792.860784][T30433] loop3: p2 start 164919041 is beyond EOD, truncated [ 792.867514][T30433] loop3: p3 size 66846464 extends beyond EOD, truncated [ 792.879630][T30433] loop3: p4 size 37048832 extends beyond EOD, truncated [ 792.961981][T30435] pim6reg: entered allmulticast mode [ 792.997348][T30439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9243'. [ 793.038897][T30441] netlink: 660 bytes leftover after parsing attributes in process `syz.3.9244'. [ 793.049457][T30441] tap0: tun_chr_ioctl cmd 1074025675 [ 793.054768][T30441] tap0: persist enabled [ 793.059196][T30441] tap0: tun_chr_ioctl cmd 1074025675 [ 793.064567][T30441] tap0: persist enabled [ 793.093269][T30443] ip6t_srh: unknown srh match flags 4000 [ 793.216228][T30448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9247'. [ 793.399602][T30464] pim6reg: entered allmulticast mode [ 793.442294][T30468] netlink: 'syz.7.9254': attribute type 13 has an invalid length. [ 793.464559][T19365] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.491541][T19365] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.511794][T30469] lo speed is unknown, defaulting to 1000 [ 793.519670][T19365] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.573489][T19365] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.643749][T30474] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 793.669637][ T29] kauditd_printk_skb: 3368 callbacks suppressed [ 793.669661][ T29] audit: type=1400 audit(1764201327.476:64985): avc: denied { firmware_load } for pid=30470 comm=77DEA305FF07 path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 793.970577][T30475] lo speed is unknown, defaulting to 1000 [ 794.025401][T30493] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9261'. [ 794.082976][ T29] audit: type=1326 audit(1764201327.907:64986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30494 comm="syz.7.9262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d8acf749 code=0x7ffc0000 [ 794.106717][ T29] audit: type=1326 audit(1764201327.907:64987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30494 comm="syz.7.9262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d8acf749 code=0x7ffc0000 [ 794.270838][T30501] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 794.286068][ T29] audit: type=1326 audit(1764201327.907:64988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30494 comm="syz.7.9262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fc1d8acf749 code=0x7ffc0000 [ 794.309728][ T29] audit: type=1326 audit(1764201327.907:64989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30494 comm="syz.7.9262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d8acf749 code=0x7ffc0000 [ 794.333474][ T29] audit: type=1326 audit(1764201327.907:64990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30494 comm="syz.7.9262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d8acf749 code=0x7ffc0000 [ 794.372313][T30503] loop7: detected capacity change from 0 to 4096 [ 794.384964][T30503] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 794.426412][ T29] audit: type=1400 audit(1764201328.253:64991): avc: denied { mount } for pid=30502 comm="syz.7.9266" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 794.449133][ T29] audit: type=1400 audit(1764201328.295:64992): avc: denied { add_name } for pid=30502 comm="syz.7.9266" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 794.470108][ T29] audit: type=1400 audit(1764201328.295:64993): avc: denied { create } for pid=30502 comm="syz.7.9266" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 794.556968][T30512] 9pnet_fd: Insufficient options for proto=fd [ 794.562272][ T29] audit: type=1400 audit(1764201328.337:64994): avc: denied { read write } for pid=30502 comm="syz.7.9266" name="file2" dev="loop7" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 794.722551][T30517] netlink: 'syz.3.9271': attribute type 13 has an invalid length. [ 794.787878][T30519] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 794.902402][T30526] loop3: detected capacity change from 0 to 764 [ 794.937786][T30526] Symlink component flag not implemented [ 794.946250][T30526] Symlink component flag not implemented (116) [ 794.983223][T30523] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.070193][T30523] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.364329][T30523] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.404308][T30015] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.420333][T30536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9277'. [ 795.430746][T30536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9277'. [ 795.449182][T30523] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.489956][T30538] ip6t_srh: unknown srh match flags 4000 [ 795.522586][T19321] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.535611][T19321] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.557467][T19321] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.603921][T19336] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.653646][T30544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9280'. [ 795.776212][T30558] loop6: detected capacity change from 0 to 764 [ 795.805044][T30562] lo: entered allmulticast mode [ 795.831142][T30558] Symlink component flag not implemented [ 795.855459][T30558] Symlink component flag not implemented (116) [ 795.880317][T30558] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.968680][T30579] loop7: detected capacity change from 0 to 764 [ 795.985878][T30568] Symlink component flag not implemented [ 795.991975][T30568] Symlink component flag not implemented (116) [ 796.002167][T30558] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.040449][T30568] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.159504][T30568] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.201553][T30558] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.303972][T30568] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.376584][T30558] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.441434][T30568] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.522122][T30582] lo speed is unknown, defaulting to 1000 [ 796.528078][T19365] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.553224][T19365] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.572744][T19365] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.604850][T19365] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.626310][T19321] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.674236][T30599] ip6t_srh: unknown srh match flags 4000 [ 796.681020][T19321] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.707866][T30582] chnl_net:caif_netlink_parms(): no params data found [ 796.813413][T30599] loop7: detected capacity change from 0 to 8192 [ 796.825981][T30596] lo speed is unknown, defaulting to 1000 [ 796.848480][T30603] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.857845][T30599] loop7: p1 p2 p3 p4 [ 796.862329][T30599] loop7: p1 size 196608 extends beyond EOD, truncated [ 796.870079][T19321] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.872871][T30599] loop7: p2 start 164919041 is beyond EOD, truncated [ 796.886708][T30599] loop7: p3 size 66846464 extends beyond EOD, truncated [ 796.903032][T30582] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.910170][T30582] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.917470][T30582] bridge_slave_0: entered allmulticast mode [ 796.917813][T30599] loop7: p4 size 37048832 extends beyond EOD, truncated [ 796.923985][T30582] bridge_slave_0: entered promiscuous mode [ 796.938666][T30603] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.952246][T30582] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.959358][T30582] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.966746][T30582] bridge_slave_1: entered allmulticast mode [ 796.974086][T30582] bridge_slave_1: entered promiscuous mode [ 796.995179][T19321] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.012422][T30611] loop7: detected capacity change from 0 to 764 [ 797.013161][T30603] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.033349][T30582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.044640][T30582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.075302][T30582] team0: Port device team_slave_0 added [ 797.082524][T30582] team0: Port device team_slave_1 added [ 797.094610][T30603] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.126142][T30582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.133136][T30582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.159229][T30582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.181269][T30582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.188309][T30582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.214328][T30582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.232078][T19328] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.240801][T19321] bridge_slave_1: left allmulticast mode [ 797.246514][T19321] bridge_slave_1: left promiscuous mode [ 797.252460][T19321] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.260784][T19321] bridge_slave_0: left allmulticast mode [ 797.266442][T19321] bridge_slave_0: left promiscuous mode [ 797.272236][T19321] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.306294][T19321] ip6gretap0 (unregistering): left promiscuous mode [ 797.457211][T19321] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 797.467612][T19321] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 797.478330][T19321] .` (unregistering): (slave dummy0): Releasing backup interface [ 797.488023][T19321] .` (unregistering): Released all slaves [ 797.517529][T30623] lo: entered allmulticast mode [ 797.523984][T19336] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.557109][T19336] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.581391][T19321] hsr_slave_0: left promiscuous mode [ 797.590683][T19321] hsr_slave_1: left promiscuous mode [ 797.724175][T19321] veth1_macvtap: left promiscuous mode [ 797.729904][T19321] veth0_macvtap: left promiscuous mode [ 797.735664][T19321] veth1_vlan: left promiscuous mode [ 797.741045][T19321] veth0_vlan: left promiscuous mode [ 797.855226][T19321] team0 (unregistering): Port device team_slave_1 removed [ 797.878475][T19321] team0 (unregistering): Port device team_slave_0 removed [ 797.949019][T19321] lo (unregistering): left allmulticast mode [ 797.975229][T19336] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.991734][T30634] lo speed is unknown, defaulting to 1000 [ 797.997454][T19336] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.997500][T19336] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.044850][T30582] hsr_slave_0: entered promiscuous mode [ 798.057258][T30582] hsr_slave_1: entered promiscuous mode [ 798.072994][T30582] debugfs: 'hsr0' already exists in 'hsr' [ 798.078823][T30582] Cannot create hsr debugfs directory [ 798.101792][T19336] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.124329][T19336] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.143866][T30640] __nla_validate_parse: 4 callbacks suppressed [ 798.143886][T30640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9305'. [ 798.174785][T30640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9305'. [ 798.230548][T30644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9307'. [ 798.241630][T30644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9307'. [ 798.254788][T19321] IPVS: stop unused estimator thread 0... [ 798.485031][T30657] loop3: detected capacity change from 0 to 512 [ 798.527539][T30657] EXT4-fs (loop3): orphan cleanup on readonly fs [ 798.549374][T30657] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.9312: bad orphan inode 13 [ 798.566412][ T29] kauditd_printk_skb: 478 callbacks suppressed [ 798.566567][ T29] audit: type=1326 audit(1764201332.518:65473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30654 comm="syz.3.9312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600a0ef749 code=0x7ffc0000 [ 798.591205][T30657] ext4_test_bit(bit=12, block=18) = 1 [ 798.596472][ T29] audit: type=1326 audit(1764201332.518:65474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30654 comm="syz.3.9312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f600a0ef749 code=0x7ffc0000 [ 798.601780][T30657] is_bad_inode(inode)=0 [ 798.626313][ T29] audit: type=1326 audit(1764201332.518:65475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30654 comm="syz.3.9312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600a0ef749 code=0x7ffc0000 [ 798.630699][T30657] NEXT_ORPHAN(inode)=2130706432 [ 798.630725][T30657] max_ino=32 [ 798.630734][T30657] i_nlink=1 [ 798.631487][T30657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 798.654368][ T29] audit: type=1326 audit(1764201332.518:65476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30654 comm="syz.3.9312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f600a0ef749 code=0x7ffc0000 [ 798.701750][ T29] audit: type=1326 audit(1764201332.518:65477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30654 comm="syz.3.9312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600a0ef749 code=0x7ffc0000 [ 798.725367][ T29] audit: type=1326 audit(1764201332.518:65478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30654 comm="syz.3.9312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600a0ef749 code=0x7ffc0000 [ 798.749057][ T29] audit: type=1326 audit(1764201332.518:65479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30654 comm="syz.3.9312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f600a0ef749 code=0x7ffc0000 [ 798.753842][T30647] lo speed is unknown, defaulting to 1000 [ 798.772704][ T29] audit: type=1326 audit(1764201332.518:65480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30654 comm="syz.3.9312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600a0ef749 code=0x7ffc0000 [ 798.772734][ T29] audit: type=1326 audit(1764201332.518:65481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30654 comm="syz.3.9312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600a0ef749 code=0x7ffc0000 [ 798.825646][ T29] audit: type=1326 audit(1764201332.518:65482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30654 comm="syz.3.9312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f600a0ef749 code=0x7ffc0000 [ 798.886319][T30582] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 798.897729][T30582] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 798.909965][T29335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.922497][T19321] bridge_slave_1: left allmulticast mode [ 798.928339][T19321] bridge_slave_1: left promiscuous mode [ 798.934175][T19321] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.943246][T19321] bridge_slave_0: left allmulticast mode [ 798.943255][T30673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9316'. [ 798.948964][T19321] bridge_slave_0: left promiscuous mode [ 798.949065][T19321] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.006253][T30673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9316'. [ 799.034752][T19321] team0: Port device geneve1 removed [ 799.093096][T19321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 799.115676][T19321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 799.139905][T19321] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 799.162114][T19321] bond0 (unregistering): Released all slaves [ 799.188097][T19321] bond1 (unregistering): Released all slaves [ 799.214017][T30682] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9319'. [ 799.225016][T19321] bond2 (unregistering): Released all slaves [ 799.233029][T30682] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9319'. [ 799.246496][T19321] bond3 (unregistering): Released all slaves [ 799.272648][T19321] bond4 (unregistering): Released all slaves [ 799.417696][T30582] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 799.427487][T30582] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 799.465288][T19321] hsr_slave_0: left promiscuous mode [ 799.471496][T19321] hsr_slave_1: left promiscuous mode [ 799.534328][T19321] team0 (unregistering): Port device team_slave_1 removed [ 799.556371][T19321] team0 (unregistering): Port device team_slave_0 removed [ 799.631968][T30582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 799.648110][T30582] 8021q: adding VLAN 0 to HW filter on device team0 [ 799.657593][T19328] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.664742][T19328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 799.677250][T19328] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.684421][T19328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 799.718323][T30582] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 799.728766][T30582] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 799.880755][T19321] IPVS: stop unused estimator thread 0... [ 799.918099][T30582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 799.963337][T30714] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9327'. [ 799.982353][T30714] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9327'. [ 800.248798][T30582] veth0_vlan: entered promiscuous mode [ 800.268908][T30734] netlink: 'syz.6.9334': attribute type 13 has an invalid length. [ 800.273044][T30582] veth1_vlan: entered promiscuous mode [ 800.307663][T30582] veth0_macvtap: entered promiscuous mode [ 800.326984][T30582] veth1_macvtap: entered promiscuous mode [ 800.344911][T30582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 800.355837][T30582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 800.369367][T19336] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.425555][T19336] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.444078][T19336] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.474874][T19336] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.500190][T30740] loop6: detected capacity change from 0 to 1024 [ 800.517028][T30740] EXT4-fs: Ignoring removed orlov option [ 800.552542][T30740] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 800.662463][T30756] loop3: detected capacity change from 0 to 512 [ 800.674576][T30756] EXT4-fs (loop3): orphan cleanup on readonly fs [ 800.683551][T30756] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.9338: bad orphan inode 13 [ 800.694733][T30756] ext4_test_bit(bit=12, block=18) = 1 [ 800.700238][T30756] is_bad_inode(inode)=0 [ 800.704432][T30756] NEXT_ORPHAN(inode)=2130706432 [ 800.709282][T30756] max_ino=32 [ 800.712486][T30756] i_nlink=1 [ 800.717816][T30756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 800.818885][T29335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 800.847871][T30770] loop7: detected capacity change from 0 to 512 [ 800.874682][T30770] EXT4-fs (loop7): orphan cleanup on readonly fs [ 800.881045][T30773] loop3: detected capacity change from 0 to 4096 [ 800.888691][T30770] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.9343: bad orphan inode 13 [ 800.899376][T30770] ext4_test_bit(bit=12, block=18) = 1 [ 800.900320][T30773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 800.904834][T30770] is_bad_inode(inode)=0 [ 800.921439][T30770] NEXT_ORPHAN(inode)=2130706432 [ 800.926370][T30770] max_ino=32 [ 800.929580][T30770] i_nlink=1 [ 800.933370][T30770] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 800.972625][T30015] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.396538][T26394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.637297][T29335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.684176][T30790] loop1: detected capacity change from 0 to 764 [ 801.756471][T30790] Symlink component flag not implemented [ 801.797219][T30790] Symlink component flag not implemented (116) [ 801.869866][T30790] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.997947][T29335] ================================================================== [ 802.006086][T29335] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 802.013693][T29335] [ 802.016031][T29335] read-write to 0xffff888237c25ee8 of 1 bytes by task 30787 on cpu 0: [ 802.024283][T29335] folio_add_lru+0xa5/0x1f0 [ 802.028813][T29335] shmem_get_folio_gfp+0x7ab/0xd60 [ 802.033967][T29335] shmem_write_begin+0xa8/0x190 [ 802.038842][T29335] generic_perform_write+0x184/0x490 [ 802.044162][T29335] shmem_file_write_iter+0xc5/0xf0 [ 802.049307][T29335] __kernel_write_iter+0x2d6/0x540 [ 802.054441][T29335] dump_user_range+0x61e/0x8f0 [ 802.059239][T29335] elf_core_dump+0x1de7/0x1f80 [ 802.064034][T29335] coredump_write+0xb12/0xe30 [ 802.068742][T29335] vfs_coredump+0x143a/0x20d0 [ 802.073456][T29335] get_signal+0xd84/0xf70 [ 802.077814][T29335] arch_do_signal_or_restart+0x96/0x440 [ 802.083391][T29335] irqentry_exit_to_user_mode+0x5b/0xa0 [ 802.089010][T29335] irqentry_exit+0x12/0x50 [ 802.093715][T29335] asm_exc_page_fault+0x26/0x30 [ 802.098576][T29335] [ 802.100904][T29335] read to 0xffff888237c25ee8 of 1 bytes by task 29335 on cpu 1: [ 802.108541][T29335] __lru_add_drain_all+0x17e/0x450 [ 802.113667][T29335] lru_add_drain_all+0x10/0x20 [ 802.118442][T29335] invalidate_bdev+0x47/0x70 [ 802.123038][T29335] ext4_put_super+0x624/0x7d0 [ 802.127759][T29335] generic_shutdown_super+0xe6/0x210 [ 802.133056][T29335] kill_block_super+0x2a/0x70 [ 802.137754][T29335] ext4_kill_sb+0x42/0x80 [ 802.142090][T29335] deactivate_locked_super+0x75/0x1c0 [ 802.147470][T29335] deactivate_super+0x97/0xa0 [ 802.152153][T29335] cleanup_mnt+0x269/0x2e0 [ 802.156611][T29335] __cleanup_mnt+0x19/0x20 [ 802.161084][T29335] task_work_run+0x131/0x1a0 [ 802.165710][T29335] exit_to_user_mode_loop+0xed/0x110 [ 802.171009][T29335] do_syscall_64+0x1d6/0x200 [ 802.175609][T29335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.181512][T29335] [ 802.183835][T29335] value changed: 0x0a -> 0x0d [ 802.188506][T29335] [ 802.190832][T29335] Reported by Kernel Concurrency Sanitizer on: [ 802.196985][T29335] CPU: 1 UID: 0 PID: 29335 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 802.208541][T29335] Tainted: [W]=WARN [ 802.212343][T29335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 802.222402][T29335] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 802.937116][T19365] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.001822][T19365] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.048089][T19365] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.105062][T19365] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.164694][T19365] bridge_slave_1: left allmulticast mode [ 803.170476][T19365] bridge_slave_1: left promiscuous mode [ 803.176181][T19365] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.184109][T19365] bridge_slave_0: left allmulticast mode [ 803.189834][T19365] bridge_slave_0: left promiscuous mode [ 803.195591][T19365] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.259437][T19365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 803.269463][T19365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 803.279049][T19365] bond0 (unregistering): Released all slaves [ 803.345249][T19365] hsr_slave_0: left promiscuous mode [ 803.351056][T19365] hsr_slave_1: left promiscuous mode [ 803.356668][T19365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 803.364079][T19365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.371655][T19365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 803.379147][T19365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.389662][T19365] veth1_macvtap: left promiscuous mode [ 803.395159][T19365] veth0_macvtap: left promiscuous mode [ 803.400745][T19365] veth1_vlan: left promiscuous mode [ 803.405958][T19365] veth0_vlan: left promiscuous mode [ 803.444899][T19365] pim6reg (unregistering): left allmulticast mode [ 803.479111][T19365] team0 (unregistering): Port device team_slave_1 removed [ 803.488704][T19365] team0 (unregistering): Port device team_slave_0 removed [ 803.519558][T19365] lo (unregistering): left allmulticast mode [ 803.754075][T19365] IPVS: stop unused estimator thread 0... [ 803.839486][T19365] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.876377][T19365] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.933091][T19365] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.971257][T19365] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.021809][T19365] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.047658][T19365] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.104835][T19365] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.161768][T19365] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.242096][T19365] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.254830][T30790] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.285755][T19365] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.299230][T30790] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.333561][T19365] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.372554][T30790] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.408887][T19365] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.432733][T19321] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.444553][T19346] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.456346][T19346] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.468676][T19346] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.496442][T19365] bridge_slave_1: left allmulticast mode [ 804.502209][T19365] bridge_slave_1: left promiscuous mode [ 804.508037][T19365] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.515785][T19365] bridge_slave_0: left allmulticast mode [ 804.521426][T19365] bridge_slave_0: left promiscuous mode [ 804.527218][T19365] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.535973][T19365] bridge_slave_1: left allmulticast mode [ 804.541706][T19365] bridge_slave_1: left promiscuous mode [ 804.547488][T19365] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.555259][T19365] bridge_slave_0: left allmulticast mode [ 804.561108][T19365] bridge_slave_0: left promiscuous mode [ 804.566752][T19365] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.733573][T19365] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.743026][T19365] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.752474][T19365] .` (unregistering): (slave dummy0): Releasing backup interface [ 804.761424][T19365] .` (unregistering): Released all slaves [ 804.857310][T19365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.867201][T19365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.876591][T19365] bond0 (unregistering): Released all slaves [ 804.886591][T19365] ip6gretap0 (unregistering): left promiscuous mode [ 804.908111][T19365] bridge0 (unregistering): left promiscuous mode [ 804.980924][T19365] .` (unregistering): (slave dummy0): Releasing backup interface [ 804.989709][T19365] .` (unregistering): Released all slaves [ 805.044474][T19365] hsr_slave_0: left promiscuous mode [ 805.050176][T19365] hsr_slave_1: left promiscuous mode [ 805.055754][T19365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 805.063125][T19365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 805.070760][T19365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 805.078168][T19365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 805.087422][T19365] hsr_slave_0: left promiscuous mode [ 805.093084][T19365] hsr_slave_1: left promiscuous mode [ 805.098818][T19365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 805.106311][T19365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 805.113828][T19365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 805.121277][T19365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 805.130216][T19365] hsr_slave_0: left promiscuous mode [ 805.135829][T19365] hsr_slave_1: left promiscuous mode [ 805.146087][T19365] veth0_macvtap: left promiscuous mode [ 805.151770][T19365] veth1_vlan: left promiscuous mode [ 805.156997][T19365] veth0_vlan: left promiscuous mode [ 805.162681][T19365] veth1_macvtap: left promiscuous mode [ 805.168181][T19365] veth0_macvtap: left promiscuous mode [ 805.173911][T19365] veth1_vlan: left promiscuous mode [ 805.179370][T19365] veth0_vlan: left promiscuous mode [ 805.185055][T19365] veth1_macvtap: left promiscuous mode [ 805.190553][T19365] veth0_macvtap: left promiscuous mode [ 805.196047][T19365] veth1_vlan: left promiscuous mode [ 805.201373][T19365] veth0_vlan: left promiscuous mode [ 805.329515][T19365] team0 (unregistering): Port device team_slave_1 removed [ 805.339888][T19365] team0 (unregistering): Port device team_slave_0 removed [ 805.369845][T19365] lo (unregistering): left allmulticast mode [ 805.377539][T19365] pim6reg (unregistering): left allmulticast mode [ 805.407592][T19365] team0 (unregistering): Port device team_slave_1 removed [ 805.417235][T19365] team0 (unregistering): Port device team_slave_0 removed [ 805.448210][T19365] lo (unregistering): left allmulticast mode [ 805.463927][T19365] pim6reg (unregistering): left allmulticast mode [ 805.522752][T19365] lo (unregistering): left allmulticast mode [ 806.223490][T19365] IPVS: stop unused estimator thread 0... [ 806.229817][T19365] IPVS: stop unused estimator thread 0... [ 808.200841][T19336] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.284136][T19336] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.322152][T19336] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.379631][T19336] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.448277][T19336] bridge_slave_1: left allmulticast mode [ 808.453967][T19336] bridge_slave_1: left promiscuous mode [ 808.459683][T19336] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.467618][T19336] bridge_slave_0: left allmulticast mode [ 808.473377][T19336] bridge_slave_0: left promiscuous mode [ 808.479022][T19336] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.551792][T19336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 808.561512][T19336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 808.571160][T19336] bond0 (unregistering): Released all slaves [ 808.629048][T19336] hsr_slave_0: left promiscuous mode [ 808.634649][T19336] hsr_slave_1: left promiscuous mode [ 808.640312][T19336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.647753][T19336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 808.655250][T19336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.662701][T19336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 808.672494][T19336] veth1_macvtap: left promiscuous mode [ 808.678183][T19336] veth0_macvtap: left promiscuous mode [ 808.683715][T19336] veth1_vlan: left promiscuous mode [ 808.688967][T19336] veth0_vlan: left promiscuous mode [ 808.749096][T19336] team0 (unregistering): Port device team_slave_1 removed [ 808.759157][T19336] team0 (unregistering): Port device team_slave_0 removed