last executing test programs: 12m9.11357068s ago: executing program 32 (id=103): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6bf}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) (async, rerun: 32) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) (async) creat(&(0x7f00000000c0)='./file0\x00', 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd']) 10m51.159328556s ago: executing program 33 (id=1505): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x60006d0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0xa0d4, 0x2080) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f00000000c0)=""/86) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) close_range(r4, r1, 0x0) 8m51.740531056s ago: executing program 34 (id=3434): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0xb0000, 0x0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x141040, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'macvtap0\x00', 0x0}) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_TTL={0x5, 0x3, 0xeb}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44014}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x168401, 0x0) write$tun(r4, &(0x7f00000003c0)=ANY=[], 0xfce) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, 0x0, r0, 0x0, 0x46) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x0, '\x00', r5, r1, 0x4, 0x5, 0x2}, 0x50) close(r0) 7m59.348174163s ago: executing program 35 (id=4094): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x9d}, 0x18) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000080)=0x6, 0x4) 4m20.482253483s ago: executing program 36 (id=6721): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) pwrite64(r0, &(0x7f0000000880)='u', 0xf7d, 0x83) connect$unix(r0, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e) socket$kcm(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000058000000000000000095000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_init() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r5, 0x0, 0x88000cc, 0x0) write$eventfd(r4, &(0x7f0000000240), 0xffffff14) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @remote}}) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x891c, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) 2m2.14028467s ago: executing program 37 (id=8750): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f00000003c0)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000580)='$\x00\x19y\x01\xff\xb4\x9e\x95oQE\xc9\x1f|\bZ\xf44\x7f)\x03c\x9a\x85\x01V\xb8p+\x84\xfb\xe6?\x88\xe9\x98Y\x0e\xd5P\xa2\xcc\x01*\xcd%v!\x82\xf1\xaaB\x04-\x88\xeb-q8\x03\xadO\xa0F\xc5Z\x0f\xee\x94\xfcy\xa5\xa4L\xa1\xd7g\x9d\xd2m5r\xef\xe1\xd1\x87\x1aM\xa6\xa8\xa2\xef\xb0\x9e\xa9d\xee\xacl\x9c\xcb\x03\x17\xbbG\x15\xba3\xa5r<]T\xc6R\x03\xee#\x0f\x88\xc4\xd3\x02\xd1 @\r\x1cc\xe4|\x13H\xc2\x1fq\x88\xdd\x98\xe1~\xb0\xedK\x17x\v\x9b\xaa\xb4\a\xb6\x8b\x9e*=\x8f\x05\x8b\x88\xc9\x12\xa6\x8fs\x98\xf1\xfe\xcdX\xce,AD\xd2v\xf4\xe5\xd3\xf3\xf1TY\x1c\x8a\x98\xf8\xcf6\xc3>]l\xdaQ\xac\n{)\xc9\x95\xb4\x12j}8\x03\xba&\xe8p\xe8\xf0\xa4\xa6e\xbc\xef\x93%/x\x19\xaa\xb5\x97\x98A\\\x91\x9a \xa8\xf8a\xd8\x97\x1eR\xaf\xc8\x9f', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r3, @ANYBLOB='\b\x00'], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 1m33.331957879s ago: executing program 38 (id=9120): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0xfffefffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000100000"], 0x0, 0xfa50, 0x0, 0x0, 0x0, 0x48}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 1m30.336207466s ago: executing program 39 (id=9145): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000003c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r4}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r6, &(0x7f0000000240), 0xfffffecc) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0xb, &(0x7f0000ffa000/0x1000)=nil) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) chdir(0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a", 0xd7}], 0x1}, 0x894) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") 1m24.651905897s ago: executing program 40 (id=9189): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x1ffffffffffffffd}, 0x18) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x4000011, 0xffffffffffffffff, 0x3) gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fcntl$lock(r7, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x7fffffffffffffff, 0x5}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r8, 0x4b72, &(0x7f0000000700)={0x1, 0x80, 0x0, 0x4, 0x11, "0060930000efa4890200"}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r9}, 0x18) setfsgid(0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000004c40)={@remote}, 0x14) 1m22.196312541s ago: executing program 41 (id=9204): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x80800) r1 = socket$inet_smc(0x2b, 0x1, 0x0) socket(0x1, 0x5, 0x0) r2 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(r2, 0x38c5, 0x2000000, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='macvlan0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x30, 0x2, 0x6, 0x0, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x2000e041) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000a0601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe050003"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) connect$inet(r1, &(0x7f0000000000)={0x2, 0x2, @remote}, 0x10) 1m13.733230799s ago: executing program 42 (id=9223): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) 1m2.811406622s ago: executing program 43 (id=9262): socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x1ffffffffffffffd}, 0x18) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x4000011, 0xffffffffffffffff, 0x3) gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x7fffffffffffffff, 0x5}) 1m1.671077459s ago: executing program 44 (id=9273): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x80800) r1 = socket$inet_smc(0x2b, 0x1, 0x0) socket(0x1, 0x5, 0x0) r2 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(r2, 0x38c5, 0x2000000, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='macvlan0\x00', 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x30, 0x2, 0x6, 0x0, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x2000e041) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000a0601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe050003"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) connect$inet(r1, &(0x7f0000000000)={0x2, 0x2, @remote}, 0x10) 58.328980871s ago: executing program 45 (id=9296): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=@delchain={0x34, 0x2c, 0xe31, 0x40000, 0x2000, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0x6, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 50.907261225s ago: executing program 0 (id=9472): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0x522, 0x4) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x40) 50.853728887s ago: executing program 0 (id=9473): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000020000008d"], 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000004340)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x3}], 0x1, 0x40010001, 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffec00000000000000000000000000010ff020000000000000000000000000001"], 0x340a) (async) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) (async) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r9 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r8}, 0x8) close(r9) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) getpeername$packet(r9, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24}, 0xc, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB="c0100000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf25010000000800030003000000080002000300000024000680050002000600000008000700", @ANYRES32=r10, @ANYBLOB="080006001200000008000600110000002000018014000400fc0000000000000000000000000000010600010002000000080004000b0000002c000680080003000000000008000600110000000800060000000000060001000200000008000600040000000c000680080006001300000005000500070000000800030000000000050005000c000000"], 0xc0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004002) (async) bpf$LINK_DETACH(0x22, 0x0, 0x0) (async) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$LINK_DETACH(0x22, 0x0, 0x0) 50.743231982s ago: executing program 0 (id=9474): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000200)={@mcast1}, 0x14) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xe}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6000318e00383a00fe880000030000000000000000000001ff0200"/53], 0x0) 50.742466982s ago: executing program 0 (id=9475): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000043c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x97a3}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040884) 50.721856283s ago: executing program 0 (id=9476): r0 = socket$tipc(0x1e, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$getflags(r1, 0x3) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0xffffffffffffffff, 0x0) 50.708203864s ago: executing program 0 (id=9477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 50.217612174s ago: executing program 1 (id=9480): r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) finit_module(r0, &(0x7f0000000000)='\x00', 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1, 0x0, 0x20000000f}, 0x18) r2 = socket(0x8000000010, 0x2, 0xfffffcf0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc", 0x93) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r3, &(0x7f0000000000)="0c85", 0x2, 0x40810, &(0x7f0000000340)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x6}}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x40) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000040)={r9, 0x101, 0x786}, 0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000280)={r9, 0x2, 0x7ea, 0xc, 0x0, 0x945a}, &(0x7f00000002c0)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={r9, 0x68, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e21, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, @in={0x2, 0x4e22, @broadcast}]}, &(0x7f0000000380)=0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5f, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) fdatasync(r10) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r5, 0x1) splice(r5, 0x0, r4, 0x0, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 49.319525712s ago: executing program 1 (id=9487): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000043c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x97a3}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040884) 49.318871152s ago: executing program 1 (id=9488): mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x3009}, {r0, 0x11}], 0x2, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x4}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) 48.462159079s ago: executing program 1 (id=9490): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') setns(r3, 0x0) ioprio_set$pid(0x1, 0x0, 0x13215c981a990cbe) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r4 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1005e2, 0x2, 0x0, 0x0, 0x2, 0x1000000}, 0xffffffffffffffff, 0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0xffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001ccb140418110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9204, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x800000000000009, 0x0, 0x0, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) close_range(r9, 0xffffffffffffffff, 0x0) lseek(r6, 0x10001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r5}, 0x18) r11 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) 48.347266563s ago: executing program 8 (id=9492): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@minixdf}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x470, &(0x7f0000000780)="$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") r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = dup3(r1, r0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) socket$unix(0x1, 0x5, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20000600}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x2c004000) 48.329208594s ago: executing program 1 (id=9493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x40080) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$getflags(r1, 0x3) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0xffffffffffffffff, 0x0) 48.271906717s ago: executing program 1 (id=9494): r0 = syz_io_uring_setup(0x1684, &(0x7f0000000140)={0x0, 0xaee2, 0x100, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 48.271399467s ago: executing program 8 (id=9495): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0xca3d, 0x1, 0xfffffffc, 0x224}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, 0x0, 0x0, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r8) socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x401}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xd, 0xfffffffffffffff8, 0x2, 0x8001, 0x8000059, 0x3ff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffe0, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4008800) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) 48.057137535s ago: executing program 8 (id=9496): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4100, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x1c1002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRES32=0x0], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 47.998266058s ago: executing program 2 (id=9498): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x40044c4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020200020d00000000000000000000000200080008000000fd00000000000000020001000000000000001d00000000a0030006000000000002002f7570e7f9cb648b0000000000000300050000000000020000000000000000000000000000000100140000000600"], 0x68}, 0x1, 0x7}, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r2 = memfd_secret(0x80000) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) fchown(r2, 0x0, r3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r3}}, './file0\x00'}) r4 = getegid() getgroups(0x7, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, r3, r4]) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4040001, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup2(r6, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/reserved_size', 0x101900, 0x141) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r7) sendmsg$IPVS_CMD_DEL_DEST(r8, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000826bd7000fddbdf250708000008000400050000001c000280060037b20b000000081f080000010000080008000800fe20506bf29a5afb4eca546dda27dd10670677438d0b684fb784e81efbde3ae88c87547dd36eaefd90"], 0x38}, 0x1, 0x0, 0x0, 0x2400c080}, 0x1) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r10, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r12, @ANYBLOB="010025bd7000fcdbdf2501"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 47.921701551s ago: executing program 2 (id=9499): socket$vsock_stream(0x28, 0x1, 0x0) r0 = semget$private(0x0, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0), 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000190c0)}, &(0x7f0000000000)=0x10) getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000340)={0xfffffffffffffffc, 0xffffffffffffffff, 'id1\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0xd2020, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYRES8], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000001140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095", @ANYRESHEX=r2], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x67, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000001240)='fsi_slave_init\x00', r4}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mbind(&(0x7f00006f4000/0x1000)=nil, 0x1000, 0x3, 0x0, 0x1ffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000340)={0x103, [0x404, 0x3], 0x2000}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) semop(r0, &(0x7f0000000040)=[{0x1, 0x101}, {0x1}], 0x2) 47.096429207s ago: executing program 2 (id=9500): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4113, 0x1011}], 0x1, 0xf0, 0xa) (fail_nth: 2) 46.731393822s ago: executing program 2 (id=9501): mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x3009}, {r0, 0x11}], 0x2, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x4}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) 45.928942246s ago: executing program 2 (id=9502): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x40080) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$getflags(r1, 0x3) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0xffffffffffffffff, 0x0) 45.894249977s ago: executing program 2 (id=9503): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@oldalloc}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB="c32c52e0a2776462606edd81bb05323f5c6dfd9f03b329ec83973e024a3d8df440a07d2c2adb084984d01f70a9f761cbb3584d5089774f0dde02ff0aa103ebdeb7395e17966d3b156b6807e06acde04c185af45b29dc12b8e82f8fc1a8cbf4ff3a20"], 0xb, 0x0, &(0x7f0000000000)) 44.823808972s ago: executing program 8 (id=9504): mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x3009}, {r0, 0x11}], 0x2, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x58) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x4}, 0x18) add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r7 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PID={0x8, 0x1c, r7}]}, 0x24}}, 0x0) 43.960386949s ago: executing program 8 (id=9505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x40080) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$getflags(r1, 0x3) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0xffffffffffffffff, 0x0) 43.910106102s ago: executing program 8 (id=9506): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x48000, 0x88) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x298000, 0x0) renameat(r1, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x6, 0x4, 0xfffffffc, 0x6, 0x94, 0x4}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000180)={@desc={0x1, 0x0, @desc2}}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0xfff, 0x7f}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000240)={r2, 0x9410}, 0x8) syz_emit_ethernet(0x244, &(0x7f0000000280)={@random="f29e7881fcaa", @local, @void, {@ipv6={0x86dd, @dccp_packet={0xc, 0x6, "da07e4", 0x20e, 0x21, 0x1, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, {[@srh={0x0, 0xa, 0x4, 0x5, 0x9, 0x58, 0x8, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast1]}, @dstopts={0x32, 0x9, '\x00', [@ra={0x5, 0x2, 0x8001}, @hao={0xc9, 0x10, @private1}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}, @jumbo={0xc2, 0x4, 0x63}, @enc_lim={0x4, 0x1, 0x1}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @jumbo={0xc2, 0x4, 0x7fffffff}, @pad1]}, @routing={0x84, 0xc, 0x1, 0x5, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x11}, @private1={0xfc, 0x1, '\x00', 0x1}, @private2]}, @hopopts={0x1, 0x15, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x22, 0x8, [0x8f, 0x1ff, 0xb0, 0x2]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0xc0}, @enc_lim={0x4, 0x1, 0x87}, @generic={0x40, 0x5f, "f2d47653e33c9de31a761d97a2a98d872e4512c3be97aa4d6150c464cc836ff5a405f65955397c3acfe67404199f0b2f07f6395d0b12a960b17c6f3477e6b131f8d01c6513ac293f079604a37996e8afc7e61c611f8d6e527a6767de1f445c"}, @jumbo={0xc2, 0x4, 0x7}]}], {{0x4e24, 0x4e23, 0x4, 0x1, 0x7, 0x0, 0x0, 0x9, 0x1, "f87427", 0x9, "a75347"}, "f9b32c7eaf2efbb8e3599b84c7b9dd49129d480a6e15f97f92985fd1386614c8cc5f124c88024a4f08a1f304feb8"}}}}}}, &(0x7f0000000500)={0x1, 0x1, [0x5c6, 0x7f3, 0x265, 0x516]}) syz_emit_ethernet(0xd2, &(0x7f0000000540)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@llc_tr={0x11, {@llc={0xf0, 0x4, "b7", "c3cf896bbc4b011f31089c89fe14222320e658d2f015f0cfd5541fcc4fb734ff10f6c76795996e663bdd78e7b6ce0f84b80b3e84b103a11bc0dd13c8ea83509e1f9b7312f42a207f3f1b91d5015eab0391a10c49727f37d6df0437d8e0828deef6177641522aa9cf9ff164d06ff778988f04cb47df343f873007ac891a34c4eb086b97e4486e722e805135037c2f62532aea17e1ac41304003731f9828a8e96e8582c29b293e77a1a25f813c1c975b252724e86c0401d6496fc2153dd90f3fa712"}}}}}, &(0x7f0000000640)={0x1, 0x4, [0x448, 0xfa8, 0x58, 0xea]}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x88, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fff}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000080}, 0x2000000) r4 = openat$cgroup_ro(r1, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xc4, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000a40)={r2, 0x9}, 0x8) r6 = syz_open_dev$usbmon(&(0x7f0000000b00), 0xfffffffffffffff7, 0x145000) fstat(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) mount$9p_fd(0x0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x200040, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_uid={'access', 0x3d, r7}}], [{@euid_eq={'euid', 0x3d, r8}}, {@hash}, {@obj_user={'obj_user', 0x3d, '+/!'}}, {@fsuuid={'fsuuid', 0x3d, {[0x69, 0x61, 0x36, 0x32, 0x31, 0x33, 0x36, 0x38], 0x2d, [0x66, 0x33, 0x38, 0x66], 0x2d, [0x33, 0x31, 0x38, 0x31], 0x2d, [0x31, 0x61, 0x36, 0x32], 0x2d, [0x0, 0x30, 0x31, 0x65, 0x38, 0x38, 0x65, 0x35]}}}]}}) setreuid(r7, r7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000d80)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000dc0)=@mpls_newroute={0xd4, 0x18, 0x200, 0x70bd2d, 0x25dfdbfc, {0x1c, 0x20, 0x80, 0x7c, 0x0, 0x4, 0xfe, 0x2}, [@RTA_VIA={0x14, 0x12, {0x26, "887fc74c3a7de987f80cc3f128fd"}}, @RTA_VIA={0x14, 0x12, {0x27, "64c22b84ab947beaca410495a9ef"}}, @RTA_MULTIPATH={0xc, 0x9, {0x200, 0x0, 0x2, r9}}, @RTA_NEWDST={0x84, 0x13, [{0xeb3, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x7d6d}, {0x4}, {0x6, 0x0, 0x1}, {0xfc962}, {0x2}, {0x1, 0x0, 0x1}, {0x4}, {0x6, 0x0, 0x1}, {0x8001}, {0x4, 0x0, 0x1}, {0xffffd, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x400, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x2}, {0xfff16, 0x0, 0x1}, {0x2}, {0x40}, {0x3f, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x2}, {0xff}, {0x6, 0x0, 0x1}, {0x1000, 0x0, 0x1}, {0x7ff}, {0x9}, {0x4}, {0xc, 0x0, 0x1}, {0x4}, {0x5, 0x0, 0x1}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x44001}, 0x20004050) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000f40)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000f80), &(0x7f0000000fc0)=0xc) r10 = socket$igmp6(0xa, 0x3, 0x2) accept$inet6(r10, &(0x7f0000001000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000001040)=0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001080)={'vcan0\x00'}) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f00000010c0)) r11 = syz_open_dev$evdev(&(0x7f0000001100), 0x100000000, 0x200000) setsockopt$inet6_MCAST_JOIN_GROUP(r11, 0x29, 0x2a, &(0x7f0000001140)={0x5, {{0xa, 0x4e24, 0x6, @empty, 0x5}}}, 0x88) 36.635742799s ago: executing program 46 (id=9454): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='timerslack_ns\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="c8", 0x1}], 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0xc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="61124c00000000006113300000000000bf300000000000002500070007ffffffbd0201000000000095002000000000006916320000000000bf6700000000000004070000b964b01a4607feff00200000540700000ee60090bf050000000000000c5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f055af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6901fcecc8158f0200000000c8fb735fd552bdc268694aeb0763f65e439ec1120843e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3abd5dedd3f7d2cf5834f2af97787f696649a46e17e090000000000000045eac1720e83b7838e3eede14308d582685e1becd6f35154bcb400000000000000000000008129277dc467148670ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbfea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f14c3f2ed6c64ec90000022d600000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca51c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233ba3d4ce26ed703dcb9fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c17d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be6910023a26faea764fae160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7beecaaa61e7a726571df5cf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da046c7aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ce27e134548032a307871cea4c89d4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b8748d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b25055e786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc136464025013665b1cf26a863a5cb3e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a56c4f3f265a09628878040000000000000017b68afd95d4abd79286692439ee7acca2adc3d83d72b1b778e30c2bf2efbbcd054cf51f5705eb0faa8a0d9f18135cb1d8d567c3436fa697b72c5035d98b9e4f7f3379c0b3339debc78352b2e65299223d7ef2bd540e78167a3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586331eb5995d2288a167b7c6b20b32116b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22db669560d296287c13c92070000ee7553eb2df17a39542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c887081c8d320642389f5f0c42dba0ff75a257310f2d92cb1d1e16468949f5675262ee6609cf26ae4a8f5eac0ebf318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0f72c4a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1a706ec201eedfa5fbdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee8072d1f88cb781e4cdb04af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98c5a471f3521956f8da6a4ccf2071095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5a071ba22251e2de8bac16e79da9c2444d52facb7ab49420900000000000000f888a94365b99b72796fde1b922fc9ae09b526efca65faf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837be14d6a483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c79c846e403910bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be0000fdde69c350e59f11f1d26a4d04d8c8b2c4a4d23ee931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f647e1f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680faa8cf38dbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705113a5ce1c99193886d6008d3565b00000000000000000000000000000000001c260fc175785ca04e31790f542c0f17b6599e93134792eae9878638b299e1d2b38d367be0d5c99d179c6bde265caebbae48bae74338f9d4f12f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r0, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r5, 0x0, 0x401}, 0x11) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000140)=0x6, 0x12) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback, 0x8000}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000003c0)={r7, 0xfff9, 0x2, 0x0, 0xe, 0x2}, &(0x7f0000000400)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={r7, 0x5c, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}, @in={0x2, 0x4e24, @private=0xa010101}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00', 0x1}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000000c0)=0x10) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f0000000340)={'filter\x00', 0x0, 0x0, 0x0, [0x2, 0x0, 0x0, 0x5, 0x8000, 0x8001]}, &(0x7f0000000240)=0x78) lsm_get_self_attr(0x65, 0x0, &(0x7f00000010c0)=0x20, 0x0) 35.622465072s ago: executing program 47 (id=9477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 33.149361167s ago: executing program 48 (id=9494): r0 = syz_io_uring_setup(0x1684, &(0x7f0000000140)={0x0, 0xaee2, 0x100, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 30.603026724s ago: executing program 49 (id=9503): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@oldalloc}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB="c32c52e0a2776462606edd81bb05323f5c6dfd9f03b329ec83973e024a3d8df440a07d2c2adb084984d01f70a9f761cbb3584d5089774f0dde02ff0aa103ebdeb7395e17966d3b156b6807e06acde04c185af45b29dc12b8e82f8fc1a8cbf4ff3a20"], 0xb, 0x0, &(0x7f0000000000)) 28.262305224s ago: executing program 50 (id=9506): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x48000, 0x88) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x298000, 0x0) renameat(r1, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x6, 0x4, 0xfffffffc, 0x6, 0x94, 0x4}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000180)={@desc={0x1, 0x0, @desc2}}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0xfff, 0x7f}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000240)={r2, 0x9410}, 0x8) syz_emit_ethernet(0x244, &(0x7f0000000280)={@random="f29e7881fcaa", @local, @void, {@ipv6={0x86dd, @dccp_packet={0xc, 0x6, "da07e4", 0x20e, 0x21, 0x1, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, {[@srh={0x0, 0xa, 0x4, 0x5, 0x9, 0x58, 0x8, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast1]}, @dstopts={0x32, 0x9, '\x00', [@ra={0x5, 0x2, 0x8001}, @hao={0xc9, 0x10, @private1}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}, @jumbo={0xc2, 0x4, 0x63}, @enc_lim={0x4, 0x1, 0x1}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @jumbo={0xc2, 0x4, 0x7fffffff}, @pad1]}, @routing={0x84, 0xc, 0x1, 0x5, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x11}, @private1={0xfc, 0x1, '\x00', 0x1}, @private2]}, @hopopts={0x1, 0x15, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x22, 0x8, [0x8f, 0x1ff, 0xb0, 0x2]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0xc0}, @enc_lim={0x4, 0x1, 0x87}, @generic={0x40, 0x5f, "f2d47653e33c9de31a761d97a2a98d872e4512c3be97aa4d6150c464cc836ff5a405f65955397c3acfe67404199f0b2f07f6395d0b12a960b17c6f3477e6b131f8d01c6513ac293f079604a37996e8afc7e61c611f8d6e527a6767de1f445c"}, @jumbo={0xc2, 0x4, 0x7}]}], {{0x4e24, 0x4e23, 0x4, 0x1, 0x7, 0x0, 0x0, 0x9, 0x1, "f87427", 0x9, "a75347"}, "f9b32c7eaf2efbb8e3599b84c7b9dd49129d480a6e15f97f92985fd1386614c8cc5f124c88024a4f08a1f304feb8"}}}}}}, &(0x7f0000000500)={0x1, 0x1, [0x5c6, 0x7f3, 0x265, 0x516]}) syz_emit_ethernet(0xd2, &(0x7f0000000540)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@llc_tr={0x11, {@llc={0xf0, 0x4, "b7", "c3cf896bbc4b011f31089c89fe14222320e658d2f015f0cfd5541fcc4fb734ff10f6c76795996e663bdd78e7b6ce0f84b80b3e84b103a11bc0dd13c8ea83509e1f9b7312f42a207f3f1b91d5015eab0391a10c49727f37d6df0437d8e0828deef6177641522aa9cf9ff164d06ff778988f04cb47df343f873007ac891a34c4eb086b97e4486e722e805135037c2f62532aea17e1ac41304003731f9828a8e96e8582c29b293e77a1a25f813c1c975b252724e86c0401d6496fc2153dd90f3fa712"}}}}}, &(0x7f0000000640)={0x1, 0x4, [0x448, 0xfa8, 0x58, 0xea]}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x88, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fff}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000080}, 0x2000000) r4 = openat$cgroup_ro(r1, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xc4, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000a40)={r2, 0x9}, 0x8) r6 = syz_open_dev$usbmon(&(0x7f0000000b00), 0xfffffffffffffff7, 0x145000) fstat(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) mount$9p_fd(0x0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x200040, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_uid={'access', 0x3d, r7}}], [{@euid_eq={'euid', 0x3d, r8}}, {@hash}, {@obj_user={'obj_user', 0x3d, '+/!'}}, {@fsuuid={'fsuuid', 0x3d, {[0x69, 0x61, 0x36, 0x32, 0x31, 0x33, 0x36, 0x38], 0x2d, [0x66, 0x33, 0x38, 0x66], 0x2d, [0x33, 0x31, 0x38, 0x31], 0x2d, [0x31, 0x61, 0x36, 0x32], 0x2d, [0x0, 0x30, 0x31, 0x65, 0x38, 0x38, 0x65, 0x35]}}}]}}) setreuid(r7, r7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000d80)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000dc0)=@mpls_newroute={0xd4, 0x18, 0x200, 0x70bd2d, 0x25dfdbfc, {0x1c, 0x20, 0x80, 0x7c, 0x0, 0x4, 0xfe, 0x2}, [@RTA_VIA={0x14, 0x12, {0x26, "887fc74c3a7de987f80cc3f128fd"}}, @RTA_VIA={0x14, 0x12, {0x27, "64c22b84ab947beaca410495a9ef"}}, @RTA_MULTIPATH={0xc, 0x9, {0x200, 0x0, 0x2, r9}}, @RTA_NEWDST={0x84, 0x13, [{0xeb3, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x7d6d}, {0x4}, {0x6, 0x0, 0x1}, {0xfc962}, {0x2}, {0x1, 0x0, 0x1}, {0x4}, {0x6, 0x0, 0x1}, {0x8001}, {0x4, 0x0, 0x1}, {0xffffd, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x400, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x2}, {0xfff16, 0x0, 0x1}, {0x2}, {0x40}, {0x3f, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x2}, {0xff}, {0x6, 0x0, 0x1}, {0x1000, 0x0, 0x1}, {0x7ff}, {0x9}, {0x4}, {0xc, 0x0, 0x1}, {0x4}, {0x5, 0x0, 0x1}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x44001}, 0x20004050) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000f40)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000f80), &(0x7f0000000fc0)=0xc) r10 = socket$igmp6(0xa, 0x3, 0x2) accept$inet6(r10, &(0x7f0000001000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000001040)=0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001080)={'vcan0\x00'}) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f00000010c0)) r11 = syz_open_dev$evdev(&(0x7f0000001100), 0x100000000, 0x200000) setsockopt$inet6_MCAST_JOIN_GROUP(r11, 0x29, 0x2a, &(0x7f0000001140)={0x5, {{0xa, 0x4e24, 0x6, @empty, 0x5}}}, 0x88) 28.240152804s ago: executing program 7 (id=9513): listen(0xffffffffffffffff, 0x100000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB="00f7006f81bff4d4539a50000400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x5) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000580)=ANY=[@ANYRESDEC], 0x1, 0x369, &(0x7f0000000700)="$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") bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001280), 0xb47}, 0x38) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f00000000c0), 0x20000000}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r5}, &(0x7f00000008c0), &(0x7f0000000880)=r6}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0xf0, 0x8, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1d}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0xa0, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x58, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x168}}, 0x4814) write$selinux_access(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f683a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 27.738574416s ago: executing program 7 (id=9515): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f0000000600)=0x4) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r3, 0x5, &(0x7f0000000080)={0x1, 0x1, 0x0, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x30, 0xf, &(0x7f0000000380)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0x8}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x3}, @map_fd={0x18, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8a63}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000480)='GPL\x00', 0x40, 0x75, &(0x7f00000004c0)=""/117, 0x40f00, 0x10, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000680)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0x2, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000700)=[0xffffffffffffffff, 0x1, r3], &(0x7f0000000800)=[{0x1, 0x1, 0x6, 0x2}, {0x5, 0x4, 0x5, 0xa}, {0x5, 0x5, 0x5, 0x8}], 0x10, 0x1}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00fd583bf43affffff0000"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0014000004000000000000000000000000000000000000000000b13a7b511c"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) fsopen(&(0x7f0000000400)='autofs\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000001380), 0x1, 0x20442) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x81ff, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x4001084) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r5, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b00"/12], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r7}, 0x18) 26.891564842s ago: executing program 7 (id=9518): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x41, &(0x7f00000002c0)=""/65, 0x41100, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x0, 0xd, 0x4, 0x9}, 0x10, 0x22610, r0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='percpu_destroy_chunk\x00', r2, 0x0, 0x2}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r3, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r2, @ANYBLOB, @ANYRES64=r5], 0x20) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r7 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYRES32=r0, @ANYBLOB="0e00000010000000", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r7, @ANYBLOB, @ANYRES64=r5], 0x20) 26.817333175s ago: executing program 7 (id=9519): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000200)=@v3={0x3000000, [{0x6, 0x2d}, {0x8, 0x4}]}, 0x18, 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000000000001400000018000180140002006e657464657673696d3000000000000008000a002d0e000008000700090000000800090000000000080002"], 0x4c}}, 0x0) syz_clone3(&(0x7f00000008c0)={0x100000000, 0x0, 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) clock_getres(0x7, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) 26.636311652s ago: executing program 7 (id=9522): socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x4000011, 0xffffffffffffffff, 0x3) gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() 26.259470819s ago: executing program 7 (id=9524): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) 26.259102678s ago: executing program 51 (id=9524): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) 23.022639656s ago: executing program 5 (id=9549): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 22.726279718s ago: executing program 5 (id=9551): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x3700c}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x48}}, 0x0) socket$inet(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x3700c}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x48}}, 0x0) (async) 22.421030621s ago: executing program 5 (id=9554): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1], 0x44}}, 0x0) 22.307221506s ago: executing program 5 (id=9555): ioprio_set$pid(0x2, 0xffffffffffffffff, 0x6004) 22.2034769s ago: executing program 5 (id=9556): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040800}, 0x40080) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$getflags(r2, 0x3) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0xffffffffffffffff, 0x0) 22.19909086s ago: executing program 5 (id=9557): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) 20.887743966s ago: executing program 6 (id=9573): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x74}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) 20.840289118s ago: executing program 6 (id=9574): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async, rerun: 32) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='cgroup\x00') (rerun: 32) lseek(r2, 0xffffff60, 0x1) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x4000004, 0x4, 0x5, 0x2, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000280)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0) (async) syz_emit_ethernet(0x2e, &(0x7f0000000440)=ANY=[], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) removexattr(0x0, 0x0) (async, rerun: 64) r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xc2d3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffa38fdef8, 0xcc5b}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) (rerun: 64) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r10}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_tid_address(0x0) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r11}, 0x10) (async) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2014c00, &(0x7f0000000040)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}]}, 0x1, 0x4ec, &(0x7f0000001a00)="$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") 20.746466152s ago: executing program 6 (id=9576): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4100, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x1c1002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRES32=0x0], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 19.799577112s ago: executing program 4 (id=9583): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="14"], &(0x7f0000001300), 0x600) 19.791907792s ago: executing program 4 (id=9584): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x74}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) 19.539447122s ago: executing program 4 (id=9585): io_uring_setup(0x1d48, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="09000000060000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32], 0x20}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="8b330000000000000000050000000c00990040000000000000003b6959b4e3c25babff3bf4758feb50c06a7b182002da92e741cb70765ecbcbab6722815ebcaf5e6f252bf75af1dea2"], 0x20}}, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000a00)={{0xffffffffffffffff, 0x0, 0x2}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 19.36845369s ago: executing program 4 (id=9589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x0) 19.333730781s ago: executing program 4 (id=9590): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20040800}, 0x40080) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$getflags(r2, 0x3) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0xffffffffffffffff, 0x0) 19.299568353s ago: executing program 4 (id=9591): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0xca3d, 0x1, 0xfffffffc, 0x224}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, 0x0, 0x0, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x401}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xd, 0xfffffffffffffff8, 0x2, 0x8001, 0x8000059, 0x3ff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xffe0, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4008800) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) 17.213745491s ago: executing program 6 (id=9606): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x74}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) 17.183550873s ago: executing program 6 (id=9607): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0xf, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040800}, 0x40080) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$getflags(r2, 0x3) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0xffffffffffffffff, 0x0) 17.151299314s ago: executing program 6 (id=9608): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000003c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0xb, &(0x7f0000ffa000/0x1000)=nil) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) chdir(0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") 7.122426888s ago: executing program 52 (id=9557): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) 4.139706825s ago: executing program 53 (id=9591): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0xca3d, 0x1, 0xfffffffc, 0x224}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, 0x0, 0x0, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x401}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xd, 0xfffffffffffffff8, 0x2, 0x8001, 0x8000059, 0x3ff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xffe0, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4008800) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) 2.094500131s ago: executing program 54 (id=9608): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000003c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0xb, &(0x7f0000ffa000/0x1000)=nil) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) chdir(0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") 1.726566037s ago: executing program 9 (id=9643): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) unlink(&(0x7f0000000000)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000880)={{0x80, 0x2}, 'port1\x00', 0x41, 0xfe8ee28a1d9fac77, 0x7, 0x6, 0xffffffff, 0x1000040, 0xffffffff, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0xc0a85320, &(0x7f00000007c0)={{0x80}, 'port0\x00', 0x3c, 0x41001, 0xd, 0x101, 0x107, 0x4, 0x5, 0x0, 0x7, 0x5}) 1.64295576s ago: executing program 9 (id=9644): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xab) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c000}, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="05", 0x1}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="3000000000000000840000000100000002000000450000"], 0x30, 0x24008800}, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xef, 0x4a0, &(0x7f0000000200)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105042, 0x102) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xa, '\x00', 0x0, r2, 0x5, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@exit, @map_val={0x18, 0x1, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x82}]}, &(0x7f0000000780)='syzkaller\x00', 0x7, 0x5d, &(0x7f00000009c0)=""/93, 0x41000, 0x9, '\x00', 0x0, @fallback=0x33, r2, 0x8, &(0x7f0000000a40)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x3, 0xc, 0xf076, 0x8}, 0x10, 0xffffffffffffffff, r2, 0x1, &(0x7f0000000ac0)=[r2], &(0x7f0000000b00)=[{0x0, 0x2, 0xb, 0x2}], 0x10, 0xa}, 0x94) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="24000000b4a4fd6d67fe8b9ea4ce6896a5cd8f945fac053d6083080201000000fa5b8ad6bebc018e4025152baba34c4bbb2197b63da52f841dfe0300"/69, @ANYRES16=r4, @ANYBLOB="000128bd7000ffdbdf2508000000080011000000000006000e00b03a0000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008840) 1.271427396s ago: executing program 9 (id=9647): syz_read_part_table(0x5b2, &(0x7f00000005c0)="$eJzs0z9Lc3cUAOCTtOH2LbUJRXBoB8GMtgU76JBARWLI0ojY4tDOxcEOlg4OoqhDJ1u/QMV/i4t0LAhdihZEIU7iKH4BxcUpxeS2BHEQVOorzzPk5PzOuTm5nHuDt1o2/ky/NZOISKIrTZPOroU7J7nW55v4eqcyWusdGx6fiMjEtxFR+eSDVi3T+asR8Xua19O8lgw01g9HrnYKR30nB8XNbFrfy7anTZ9v5VsH368+/U3zauyW9/NLyzPVldny1Gl17uKLeL9dGNwozX/TU5pMH6y9dvzjuecXG0Pbx836ZRQ6XoLb9+CpB/Mi3N3/Wvfi2eLNV5n46fP+j87+mv81fQauM//3PwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF673TeRX1qeqa7Mlqd+/Dniu81PKx//UvlhdXCjNJ/0lCaz7b697L2Xv/vo+eX9/+YvVOcuio2h7eNm/fK3rs9yB42bgb/Tvv7MYyfxEqX7j9v9n1bnLta6F9/7t9bs2Pm1/QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD1QZrfWODY9PRGRa+Ui2kLuNzaRdz6R9uTTW0/NaMtBYPxy52ikc9Z0cFDfHkuhtXZeNWIiI6fOtfMSX9418px0+fNb74mH+CQAA//+X4HWC") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x1a) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb}]}) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x7, 0x1, 0x7, [{@rand_addr=0x64010101}]}]}}}], 0x20}, 0x200040c4) getdents(r2, &(0x7f0000001fc0)=""/184, 0x20002078) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000068000000680000000600ff00020000000000000a0009000000000b0000000000000e01000000000000000c00"], &(0x7f00000005c0)=""/69, 0x86, 0x45, 0x0, 0x0, 0x10000}, 0x28) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x100000000000000) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r10, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r10, 0x0) listen(r9, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 878.641073ms ago: executing program 3 (id=9650): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x6004) 868.008523ms ago: executing program 3 (id=9651): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) timerfd_create(0x5, 0x800) socket$igmp6(0xa, 0x3, 0x2) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000900)='kfree\x00', r3}, 0x18) r4 = syz_io_uring_setup(0x2801, &(0x7f0000001480)={0x0, 0xb35d, 0x1000, 0x7, 0x40224}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r4, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x530}, 0x0, 0x1000}) io_uring_enter(r4, 0x47f8, 0x1e43, 0x104000, 0x0, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) setpgid(0x0, 0x0) 752.718478ms ago: executing program 3 (id=9652): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffe, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x4}, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000031011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) (fail_nth: 4) 226.99878ms ago: executing program 9 (id=9653): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') fchdir(r0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x5) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) r5 = fsmount(r4, 0x0, 0x7) fchdir(r5) (async) socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000008c0)=ANY=[@ANYBLOB="6d616e676c65000000000002000000000000000000000000000000000000000003"], 0x58) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r8, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r8], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='ext4_es_find_extent_range_exit\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) (async) r10 = socket(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x2, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x21d, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x400c8b4) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0x6}}}, 0x24}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) 223.54617ms ago: executing program 3 (id=9654): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffe, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'vlan0\x00', 0x100}) r2 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x4}, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000031011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) 200.701281ms ago: executing program 9 (id=9655): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, &(0x7f0000000040)={[{@nr_blocks={'nr_blocks', 0x3d, [0x6d]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x37]}}]}) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x1c, r4, 0x8, 0x0, 0x25dfdbfb, {0x25}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = socket$kcm(0x2, 0x200000000000000, 0x106) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r5) 159.943983ms ago: executing program 9 (id=9656): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000004000000800000000400000028000000", @ANYRES32, @ANYBLOB="00000000000000000000000000001329ee85db68fc000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x339e, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1, 0x23a}, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='fib6_table_lookup\x00', r5}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0xfffffffffffffd8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000000000000000100032000300000000000000000000001000492a2efe00000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/48, 0x30}], 0x1, 0x10000, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x700, 0x80, 0x0, 0x8, {{0x11, 0x4, 0x3, 0x7, 0x44, 0x66, 0x0, 0xa7, 0x2f, 0x0, @remote, @empty, {[@timestamp_addr={0x44, 0x2c, 0x96, 0x1, 0xe, [{@multicast1, 0x1b}, {@multicast2, 0x7fa}, {@local, 0xabbc}, {@local, 0x1cca}, {@empty, 0x800}]}, @noop, @noop]}}}}}) clock_gettime(0x0, &(0x7f0000000240)) 17.415449ms ago: executing program 3 (id=9657): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x800) (fail_nth: 3) 0s ago: executing program 3 (id=9658): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000340)=@ethtool_link_settings={0x4d, 0x800, 0xf, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, [0x0, 0x40, 0x400, 0x3, 0x0, 0x2000, 0x1], [0xf, 0x26, 0x1, 0x8583, 0x8, 0xff, 0x5, 0x1, 0xfffffffc]}}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000006d14868931a179af8c17de48e6ce628f7a62bef935971da19c6d562c7b3583242ae1277c0f22cc4a209d41914c2f62dea3b6a20f66297a9d6c28b8d9124ab4f807666a0e5381a30549448d4f65ec173fb12c3b9e35b9d9edb339de58d124ba4a30eff6de1c967827b21ff903e27f6c9744c71bba06d02e4f99e10ae3ac3338942c6565be3b12ab1dbdaa4bfec274adde840f82112d495e36063aa1d4fdf0a966a70640bd75d113543f2ffe682869f5eafe156c8459e6db93aecbd604cbea0507278e7f7a41ae51685a82"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff92, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) unshare(0x40000000) (async) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) (async, rerun: 64) r6 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) (rerun: 64) shmctl$SHM_UNLOCK(r6, 0xc) kernel console output (not intermixed with test programs): 004000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 725.258563][ T1111] RBP: 00007f8bdf907090 R08: 0000000000000000 R09: 0000000000000000 [ 725.258577][ T1111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.258591][ T1111] R13: 00007f8be10f6038 R14: 00007f8be10f5fa0 R15: 00007ffc54518a28 [ 725.258675][ T1111] [ 725.623870][ T1123] loop4: detected capacity change from 0 to 512 [ 725.641012][ T1123] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.9431: iget: bad extra_isize 90 (inode size 256) [ 725.654825][ T1123] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.9431: error while reading EA inode 11 err=-117 [ 725.667513][ T1123] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.9431: iget: bad extra_isize 90 (inode size 256) [ 725.686088][ T1123] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.9431: error while reading EA inode 11 err=-117 [ 725.701366][ T1123] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.9431: iget: bad extra_isize 90 (inode size 256) [ 725.715492][ T1123] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.9431: error while reading EA inode 18 err=-117 [ 725.728155][ T1123] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.9431: iget: bad extra_isize 90 (inode size 256) [ 725.742059][ T1123] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.9431: error while reading EA inode 18 err=-117 [ 725.754737][ T1123] EXT4-fs (loop4): 1 orphan inode deleted [ 725.760905][ T1123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 725.786935][T32353] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.629146][ T1139] FAULT_INJECTION: forcing a failure. [ 726.629146][ T1139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.642304][ T1139] CPU: 1 UID: 0 PID: 1139 Comm: syz.8.9436 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 726.642339][ T1139] Tainted: [W]=WARN [ 726.642422][ T1139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 726.642436][ T1139] Call Trace: [ 726.642443][ T1139] [ 726.642450][ T1139] __dump_stack+0x1d/0x30 [ 726.642476][ T1139] dump_stack_lvl+0xe8/0x140 [ 726.642499][ T1139] dump_stack+0x15/0x1b [ 726.642533][ T1139] should_fail_ex+0x265/0x280 [ 726.642564][ T1139] should_fail+0xb/0x20 [ 726.642582][ T1139] should_fail_usercopy+0x1a/0x20 [ 726.642602][ T1139] _copy_from_iter+0xd2/0xe80 [ 726.642697][ T1139] ? __build_skb_around+0x1ab/0x200 [ 726.642724][ T1139] ? __alloc_skb+0x223/0x320 [ 726.642750][ T1139] netlink_sendmsg+0x471/0x6b0 [ 726.642794][ T1139] ? __pfx_netlink_sendmsg+0x10/0x10 [ 726.642817][ T1139] __sock_sendmsg+0x145/0x180 [ 726.642844][ T1139] ____sys_sendmsg+0x31e/0x4e0 [ 726.642884][ T1139] ___sys_sendmsg+0x17b/0x1d0 [ 726.642937][ T1139] __x64_sys_sendmsg+0xd4/0x160 [ 726.642963][ T1139] x64_sys_call+0x191e/0x3000 [ 726.642987][ T1139] do_syscall_64+0xd2/0x200 [ 726.643010][ T1139] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 726.643067][ T1139] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 726.643214][ T1139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.643238][ T1139] RIP: 0033:0x7f01f60ff749 [ 726.643254][ T1139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 726.643271][ T1139] RSP: 002b:00007f01f4b67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 726.643307][ T1139] RAX: ffffffffffffffda RBX: 00007f01f6355fa0 RCX: 00007f01f60ff749 [ 726.643320][ T1139] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 726.643335][ T1139] RBP: 00007f01f4b67090 R08: 0000000000000000 R09: 0000000000000000 [ 726.643350][ T1139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.643364][ T1139] R13: 00007f01f6356038 R14: 00007f01f6355fa0 R15: 00007ffdee576698 [ 726.643437][ T1139] [ 726.879045][ T1145] loop8: detected capacity change from 0 to 764 [ 726.881838][ T1143] siw: device registration error -23 [ 726.933889][ T1154] netlink: 'syz.4.9441': attribute type 1 has an invalid length. [ 726.967072][ T1155] rock: directory entry would overflow storage [ 726.973407][ T1155] rock: sig=0x4f50, size=4, remaining=3 [ 726.979025][ T1155] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 727.838474][ T1191] __nla_validate_parse: 3 callbacks suppressed [ 727.838490][ T1191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9451'. [ 727.859257][ T1191] siw: device registration error -23 [ 727.862044][ T1186] bridge0: entered promiscuous mode [ 727.880106][ T1186] macvtap1: entered allmulticast mode [ 727.885603][ T1186] bridge0: entered allmulticast mode [ 727.999869][ T1196] tipc: Started in network mode [ 728.004927][ T1196] tipc: Node identity ce091f22e0df, cluster identity 4711 [ 728.012206][ T1196] tipc: Enabled bearer , priority 0 [ 728.022589][ T1196] syzkaller0: entered promiscuous mode [ 728.028101][ T1196] syzkaller0: entered allmulticast mode [ 728.038131][ T1196] tipc: Resetting bearer [ 728.051478][ T1195] tipc: Resetting bearer [ 728.058975][ T1195] tipc: Disabling bearer [ 728.165708][ T1208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.183251][ T1208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.358930][ T1214] netlink: 'syz.1.9459': attribute type 1 has an invalid length. [ 728.407002][ T1226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9464'. [ 728.427872][ T1226] siw: device registration error -23 [ 728.764686][ T1235] netlink: 96 bytes leftover after parsing attributes in process `syz.8.9467'. [ 728.871829][ T1247] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1247 comm=syz.8.9468 [ 728.893214][ T1247] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=1247 comm=syz.8.9468 [ 728.991305][ T1249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9472'. [ 729.315522][ T1281] FAULT_INJECTION: forcing a failure. [ 729.315522][ T1281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 729.328834][ T1281] CPU: 1 UID: 0 PID: 1281 Comm: syz.1.9478 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 729.328918][ T1281] Tainted: [W]=WARN [ 729.328925][ T1281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 729.328938][ T1281] Call Trace: [ 729.328945][ T1281] [ 729.328968][ T1281] __dump_stack+0x1d/0x30 [ 729.329072][ T1281] dump_stack_lvl+0xe8/0x140 [ 729.329094][ T1281] dump_stack+0x15/0x1b [ 729.329115][ T1281] should_fail_ex+0x265/0x280 [ 729.329228][ T1281] should_fail+0xb/0x20 [ 729.329246][ T1281] should_fail_usercopy+0x1a/0x20 [ 729.329343][ T1281] _copy_from_iter+0xd2/0xe80 [ 729.329410][ T1281] ? __build_skb_around+0x1ab/0x200 [ 729.329483][ T1281] ? __alloc_skb+0x223/0x320 [ 729.329520][ T1281] netlink_sendmsg+0x471/0x6b0 [ 729.329542][ T1281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 729.329615][ T1281] __sock_sendmsg+0x145/0x180 [ 729.329763][ T1281] ____sys_sendmsg+0x31e/0x4e0 [ 729.329801][ T1281] ___sys_sendmsg+0x17b/0x1d0 [ 729.329835][ T1281] __x64_sys_sendmsg+0xd4/0x160 [ 729.329860][ T1281] x64_sys_call+0x191e/0x3000 [ 729.329880][ T1281] do_syscall_64+0xd2/0x200 [ 729.329899][ T1281] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 729.329988][ T1281] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 729.330026][ T1281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.330051][ T1281] RIP: 0033:0x7ff45f4ff749 [ 729.330070][ T1281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 729.330087][ T1281] RSP: 002b:00007ff45df67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 729.330115][ T1281] RAX: ffffffffffffffda RBX: 00007ff45f755fa0 RCX: 00007ff45f4ff749 [ 729.330128][ T1281] RDX: 0000000020040000 RSI: 0000200000000940 RDI: 0000000000000004 [ 729.330212][ T1281] RBP: 00007ff45df67090 R08: 0000000000000000 R09: 0000000000000000 [ 729.330224][ T1281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.330235][ T1281] R13: 00007ff45f756038 R14: 00007ff45f755fa0 R15: 00007ffc9d59ca48 [ 729.330252][ T1281] [ 729.623165][ T1283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=1283 comm=syz.1.9479 [ 729.671206][ T1287] loop8: detected capacity change from 0 to 512 [ 729.696762][ T1287] EXT4-fs error (device loop8): __ext4_iget:5443: inode #2: block 67108864: comm syz.8.9481: invalid block [ 729.723155][ T1287] EXT4-fs (loop8): get root inode failed [ 729.728831][ T1287] EXT4-fs (loop8): mount failed [ 729.737482][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 729.737509][ T29] audit: type=1400 audit(1763860020.290:69003): avc: denied { create } for pid=1285 comm="syz.1.9480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 729.965219][ T1296] tipc: Enabled bearer , priority 0 [ 729.980188][ T1296] syzkaller0: entered promiscuous mode [ 729.985775][ T1296] syzkaller0: entered allmulticast mode [ 730.003474][ T1296] tipc: Resetting bearer [ 730.017649][ T1295] tipc: Resetting bearer [ 730.024846][ T1295] tipc: Disabling bearer [ 730.114104][ T1302] netlink: 'syz.8.9484': attribute type 1 has an invalid length. [ 730.183999][ T1306] netlink: 14 bytes leftover after parsing attributes in process `syz.8.9486'. [ 730.659716][ T1313] bond1: entered promiscuous mode [ 730.664838][ T1313] bond1: entered allmulticast mode [ 730.703067][ T1313] 8021q: adding VLAN 0 to HW filter on device bond1 [ 731.427138][ T29] audit: type=1400 audit(1763860021.980:69004): avc: denied { write } for pid=1353 comm="syz.1.9490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 731.494427][ T1358] loop8: detected capacity change from 0 to 512 [ 731.505963][ T1354] netlink: 'syz.1.9490': attribute type 6 has an invalid length. [ 731.537889][ T1358] EXT4-fs error (device loop8): __ext4_iget:5443: inode #2: block 67108864: comm syz.8.9492: invalid block [ 731.554893][ T1358] EXT4-fs (loop8): get root inode failed [ 731.560636][ T1358] EXT4-fs (loop8): mount failed [ 731.650072][ T1367] tipc: Enabled bearer , priority 0 [ 731.659194][ T1367] syzkaller0: entered promiscuous mode [ 731.664806][ T1367] syzkaller0: entered allmulticast mode [ 731.690059][ T1367] tipc: Resetting bearer [ 731.704077][ T1366] tipc: Resetting bearer [ 731.714348][ T1366] tipc: Disabling bearer [ 731.884457][ T29] audit: type=1400 audit(1763860022.440:69005): avc: denied { ioctl } for pid=1376 comm="syz.2.9498" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=117089 ioctlcmd=0x5519 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 731.983871][ T29] audit: type=1400 audit(1763860022.440:69006): avc: denied { setattr } for pid=1376 comm="syz.2.9498" name="secretmem" dev="secretmem" ino=117089 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 732.245656][ T1382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 732.783692][ T1385] FAULT_INJECTION: forcing a failure. [ 732.783692][ T1385] name failslab, interval 1, probability 0, space 0, times 0 [ 732.796413][ T1385] CPU: 0 UID: 0 PID: 1385 Comm: syz.2.9500 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 732.796448][ T1385] Tainted: [W]=WARN [ 732.796456][ T1385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 732.796470][ T1385] Call Trace: [ 732.796510][ T1385] [ 732.796519][ T1385] __dump_stack+0x1d/0x30 [ 732.796619][ T1385] dump_stack_lvl+0xe8/0x140 [ 732.796638][ T1385] dump_stack+0x15/0x1b [ 732.796654][ T1385] should_fail_ex+0x265/0x280 [ 732.796688][ T1385] should_failslab+0x8c/0xb0 [ 732.796800][ T1385] __kmalloc_noprof+0xa5/0x570 [ 732.796855][ T1385] ? kobject_get_path+0x92/0x1c0 [ 732.796884][ T1385] kobject_get_path+0x92/0x1c0 [ 732.796914][ T1385] input_devices_seq_show+0x36/0x470 [ 732.796936][ T1385] traverse+0x149/0x3a0 [ 732.797011][ T1385] seq_read_iter+0x85f/0x950 [ 732.797031][ T1385] ? _parse_integer_limit+0x170/0x190 [ 732.797060][ T1385] seq_read+0x270/0x2b0 [ 732.797136][ T1385] ? __pfx_seq_read+0x10/0x10 [ 732.797158][ T1385] proc_reg_read+0x128/0x1c0 [ 732.797181][ T1385] ? __pfx_proc_reg_read+0x10/0x10 [ 732.797223][ T1385] vfs_readv+0x3fb/0x690 [ 732.797408][ T1385] __x64_sys_preadv+0xfd/0x1c0 [ 732.797433][ T1385] x64_sys_call+0x282e/0x3000 [ 732.797456][ T1385] do_syscall_64+0xd2/0x200 [ 732.797480][ T1385] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 732.797543][ T1385] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 732.797581][ T1385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.797604][ T1385] RIP: 0033:0x7f8be0e9f749 [ 732.797619][ T1385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 732.797681][ T1385] RSP: 002b:00007f8bdf907038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 732.797703][ T1385] RAX: ffffffffffffffda RBX: 00007f8be10f5fa0 RCX: 00007f8be0e9f749 [ 732.797716][ T1385] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 732.797728][ T1385] RBP: 00007f8bdf907090 R08: 000000000000000a R09: 0000000000000000 [ 732.797750][ T1385] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000001 [ 732.797808][ T1385] R13: 00007f8be10f6038 R14: 00007f8be10f5fa0 R15: 00007ffc54518a28 [ 732.797885][ T1385] [ 733.188149][ T1388] bond1: entered promiscuous mode [ 733.193348][ T1388] bond1: entered allmulticast mode [ 733.239049][ T1388] 8021q: adding VLAN 0 to HW filter on device bond1 [ 743.434253][ T1434] lo speed is unknown, defaulting to 1000 [ 743.775498][ T1434] chnl_net:caif_netlink_parms(): no params data found [ 744.006987][ T1434] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.014198][ T1434] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.021395][ T1434] bridge_slave_0: entered allmulticast mode [ 744.033847][ T1434] bridge_slave_0: entered promiscuous mode [ 744.040769][ T1434] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.047877][ T1434] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.055371][ T1434] bridge_slave_1: entered allmulticast mode [ 744.062678][ T1434] bridge_slave_1: entered promiscuous mode [ 744.153260][ T1434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.166084][ T1434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 744.294456][ T1434] team0: Port device team_slave_0 added [ 744.337413][ T1434] team0: Port device team_slave_1 added [ 744.403308][ T1434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 744.410347][ T1434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.436305][ T1434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 744.493240][ T1434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 744.500243][ T1434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.526203][ T1434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 744.603973][T24319] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.695770][ T1434] hsr_slave_0: entered promiscuous mode [ 744.713498][ T1434] hsr_slave_1: entered promiscuous mode [ 744.725638][ T1434] debugfs: 'hsr0' already exists in 'hsr' [ 744.731377][ T1434] Cannot create hsr debugfs directory [ 744.785856][T24319] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.823537][ T1658] lo speed is unknown, defaulting to 1000 [ 744.863997][T24319] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.015671][T24319] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.355077][ T1658] chnl_net:caif_netlink_parms(): no params data found [ 745.555925][T24319] bridge_slave_1: left allmulticast mode [ 745.561637][T24319] bridge_slave_1: left promiscuous mode [ 745.567408][T24319] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.604652][T24319] bridge_slave_0: left allmulticast mode [ 745.610349][T24319] bridge_slave_0: left promiscuous mode [ 745.616088][T24319] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.938852][T24319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.963305][T24319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 745.972782][T24319] bond0 (unregistering): Released all slaves [ 746.084507][ T1658] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.091675][ T1658] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.143134][ T1658] bridge_slave_0: entered allmulticast mode [ 746.153606][ T1658] bridge_slave_0: entered promiscuous mode [ 746.173517][ T1658] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.180612][ T1658] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.203079][ T1658] bridge_slave_1: entered allmulticast mode [ 746.223727][ T1658] bridge_slave_1: entered promiscuous mode [ 746.272927][T24319] hsr_slave_0: left promiscuous mode [ 746.283168][T24319] hsr_slave_1: left promiscuous mode [ 746.288853][T24319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 746.296270][T24319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.333430][T24319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.340826][T24319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.376000][T24319] veth1_macvtap: left promiscuous mode [ 746.381506][T24319] veth0_macvtap: left promiscuous mode [ 746.387107][T24319] veth1_vlan: left promiscuous mode [ 746.392336][T24319] veth0_vlan: left promiscuous mode [ 746.775045][T24319] team0 (unregistering): Port device team_slave_1 removed [ 746.796900][T24319] team0 (unregistering): Port device team_slave_0 removed [ 746.927160][ T1658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.944654][ T1658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.013763][ T1658] team0: Port device team_slave_0 added [ 747.020431][ T1658] team0: Port device team_slave_1 added [ 747.111091][ T1658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.118132][ T1658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.144076][ T1658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.203754][ T1658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.210724][ T1658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.236666][ T1658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.356205][ T1658] hsr_slave_0: entered promiscuous mode [ 747.362288][ T1658] hsr_slave_1: entered promiscuous mode [ 747.374577][ T1658] debugfs: 'hsr0' already exists in 'hsr' [ 747.380328][ T1658] Cannot create hsr debugfs directory [ 747.395324][ T1953] lo speed is unknown, defaulting to 1000 [ 747.401408][ T1434] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 747.433929][ T1434] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 747.453703][ T1434] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 747.509581][ T1434] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 747.601177][T24319] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.684717][T24319] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.777743][ T1434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.796208][T24319] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.856725][ T1434] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.873654][ T1953] chnl_net:caif_netlink_parms(): no params data found [ 747.891169][T24323] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.898351][T24323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.907842][T24323] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.914908][T24323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.927870][T24319] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.058784][ T1434] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 748.069245][ T1434] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 748.109661][T24319] bridge_slave_1: left allmulticast mode [ 748.115478][T24319] bridge_slave_1: left promiscuous mode [ 748.121235][T24319] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.144630][T24319] bridge_slave_0: left allmulticast mode [ 748.150312][T24319] bridge_slave_0: left promiscuous mode [ 748.156049][T24319] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.295178][T24319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 748.314284][T24319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 748.333971][T24319] bond0 (unregistering): Released all slaves [ 748.345338][T24319] bond1 (unregistering): Released all slaves [ 748.444454][ T1953] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.451574][ T1953] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.483128][ T1953] bridge_slave_0: entered allmulticast mode [ 748.490061][ T1953] bridge_slave_0: entered promiscuous mode [ 748.497376][ T1953] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.504662][ T1953] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.511913][ T1953] bridge_slave_1: entered allmulticast mode [ 748.518803][ T1953] bridge_slave_1: entered promiscuous mode [ 748.587113][T24319] hsr_slave_0: left promiscuous mode [ 748.592745][T24319] hsr_slave_1: left promiscuous mode [ 748.613028][T24319] veth1_macvtap: left promiscuous mode [ 748.618671][T24319] veth0_macvtap: left promiscuous mode [ 748.633186][T24319] veth1_vlan: left promiscuous mode [ 748.638489][T24319] veth0_vlan: left promiscuous mode [ 748.768435][T24319] team0 (unregistering): Port device team_slave_1 removed [ 748.780876][T24319] team0 (unregistering): Port device team_slave_0 removed [ 748.903132][ T1953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 748.926840][ T1658] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 748.946506][ T1953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 748.959428][ T1658] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 748.986010][ T1434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.028220][ T1953] team0: Port device team_slave_0 added [ 749.044703][ T1658] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 749.054732][ T1953] team0: Port device team_slave_1 added [ 749.104688][ T1658] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 749.115946][ T1953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.122950][ T1953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.148958][ T1953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.203856][ T1953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.210936][ T1953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.236891][ T1953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.355828][ T1953] hsr_slave_0: entered promiscuous mode [ 749.368111][ T1953] hsr_slave_1: entered promiscuous mode [ 749.381828][ T1953] debugfs: 'hsr0' already exists in 'hsr' [ 749.387623][ T1953] Cannot create hsr debugfs directory [ 749.432165][ T1434] veth0_vlan: entered promiscuous mode [ 749.450814][ T1434] veth1_vlan: entered promiscuous mode [ 749.471682][ T1658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.503211][T24319] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.535930][ T1658] 8021q: adding VLAN 0 to HW filter on device team0 [ 749.548313][ T2437] lo speed is unknown, defaulting to 1000 [ 749.557672][T24319] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.597276][T24323] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.604399][T24323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.650134][T24323] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.657241][T24323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.668125][ T1434] veth0_macvtap: entered promiscuous mode [ 749.683847][T24319] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.717017][ T1434] veth1_macvtap: entered promiscuous mode [ 749.740077][ T1434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 749.771280][ T1658] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 749.786360][ T1434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 749.805091][T24319] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.855643][T24321] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.870511][ T1658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.904687][T24323] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.928777][ T2437] chnl_net:caif_netlink_parms(): no params data found [ 749.957291][T24323] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.010518][T24323] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.102294][ T2437] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.109618][ T2437] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.117468][ T2437] bridge_slave_0: entered allmulticast mode [ 750.124102][ T2437] bridge_slave_0: entered promiscuous mode [ 750.151526][ T2713] tipc: Started in network mode [ 750.156627][ T2713] tipc: Node identity 068163f45024, cluster identity 4711 [ 750.163848][ T2713] tipc: Enabled bearer , priority 0 [ 750.171181][ T2437] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.178276][ T2437] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.195078][ T2437] bridge_slave_1: entered allmulticast mode [ 750.201745][ T2437] bridge_slave_1: entered promiscuous mode [ 750.223531][ T2670] syzkaller0: entered promiscuous mode [ 750.229037][ T2670] syzkaller0: entered allmulticast mode [ 750.261351][ T2437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.270589][T24319] bridge_slave_1: left allmulticast mode [ 750.276308][T24319] bridge_slave_1: left promiscuous mode [ 750.282020][T24319] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.290390][T24319] bridge_slave_0: left allmulticast mode [ 750.296138][T24319] bridge_slave_0: left promiscuous mode [ 750.301917][T24319] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.356124][T24319] bridge0 (unregistering): left allmulticast mode [ 750.406707][T24319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.417053][T24319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.426759][T24319] bond0 (unregistering): Released all slaves [ 750.436049][T24319] bond1 (unregistering): Released all slaves [ 750.469198][ T1658] veth0_vlan: entered promiscuous mode [ 750.476697][ T2437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.495437][T24319] hsr_slave_0: left promiscuous mode [ 750.501250][T24319] hsr_slave_1: left promiscuous mode [ 750.507178][T24319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 750.514639][T24319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.522440][T24319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 750.530003][T24319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 750.542137][T24319] veth1_macvtap: left promiscuous mode [ 750.547882][T24319] veth0_macvtap: left promiscuous mode [ 750.553786][T24319] veth1_vlan: left promiscuous mode [ 750.559162][T24319] veth0_vlan: left promiscuous mode [ 750.632100][T24319] team0 (unregistering): Port device team_slave_1 removed [ 750.642105][T24319] team0 (unregistering): Port device team_slave_0 removed [ 750.692523][ T2753] tipc: Resetting bearer [ 750.719304][ T2667] tipc: Resetting bearer [ 750.728586][ T2667] tipc: Disabling bearer [ 750.737658][ T2437] team0: Port device team_slave_0 added [ 750.745507][ T2437] team0: Port device team_slave_1 added [ 750.760805][ T1658] veth1_vlan: entered promiscuous mode [ 750.773817][ T1953] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 750.796091][ T1953] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 750.819182][ T29] audit: type=1400 audit(1763860041.370:69007): avc: denied { create } for pid=2800 comm="syz.7.9511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 750.839198][ T2801] loop7: detected capacity change from 0 to 512 [ 750.846457][ T2801] EXT4-fs: Ignoring removed mblk_io_submit option [ 750.846520][ T2437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 750.853352][ T2801] EXT4-fs: Ignoring removed nomblk_io_submit option [ 750.859967][ T2437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.892486][ T2437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.903822][ T2801] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 750.912285][ T2801] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 750.921416][ T29] audit: type=1400 audit(1763860041.370:69008): avc: denied { ioctl } for pid=2800 comm="syz.7.9511" path="socket:[119131]" dev="sockfs" ino=119131 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 750.946333][ T29] audit: type=1400 audit(1763860041.370:69009): avc: denied { setopt } for pid=2800 comm="syz.7.9511" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 750.966184][ T29] audit: type=1326 audit(1763860041.370:69010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2800 comm="syz.7.9511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9db7ef749 code=0x7ffc0000 [ 750.989725][ T29] audit: type=1326 audit(1763860041.370:69011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2800 comm="syz.7.9511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb9db7ef749 code=0x7ffc0000 [ 750.999244][ T1658] veth0_macvtap: entered promiscuous mode [ 751.013247][ T29] audit: type=1326 audit(1763860041.370:69012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2800 comm="syz.7.9511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb9db7ef783 code=0x7ffc0000 [ 751.024393][ T1658] veth1_macvtap: entered promiscuous mode [ 751.042227][ T29] audit: type=1326 audit(1763860041.370:69013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2800 comm="syz.7.9511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb9db7ee1ff code=0x7ffc0000 [ 751.071266][ T29] audit: type=1326 audit(1763860041.380:69014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2800 comm="syz.7.9511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb9db7ef7d7 code=0x7ffc0000 [ 751.079697][ T1658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.094729][ T29] audit: type=1326 audit(1763860041.390:69015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2800 comm="syz.7.9511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb9db7edf90 code=0x7ffc0000 [ 751.094757][ T29] audit: type=1326 audit(1763860041.390:69016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2800 comm="syz.7.9511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb9db7ef34b code=0x7ffc0000 [ 751.124408][ T1658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.163071][ T1953] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 751.173234][ T2437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 751.180212][ T2437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.206676][ T2437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 751.219879][ T2801] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.9511: Allocating blocks 41-42 which overlap fs metadata [ 751.235522][ T2801] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.9511: Allocating blocks 41-42 which overlap fs metadata [ 751.254258][ T1953] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 751.264887][ T2801] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.9511: Failed to acquire dquot type 1 [ 751.276725][ T2801] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 751.291375][ T2801] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.9511: corrupted inode contents [ 751.295582][T24318] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.315380][ T2801] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #12: comm syz.7.9511: mark_inode_dirty error [ 751.327590][ T2801] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.9511: corrupted inode contents [ 751.339757][ T2801] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.9511: mark_inode_dirty error [ 751.352598][ T2801] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.9511: corrupted inode contents [ 751.366073][ T2801] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 751.374879][ T2801] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.9511: corrupted inode contents [ 751.388512][ T2801] EXT4-fs error (device loop7): ext4_truncate:4637: inode #12: comm syz.7.9511: mark_inode_dirty error [ 751.399703][T24318] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.414173][ T2801] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 751.425785][ T2437] hsr_slave_0: entered promiscuous mode [ 751.432035][ T2437] hsr_slave_1: entered promiscuous mode [ 751.437995][ T2801] EXT4-fs (loop7): 1 truncate cleaned up [ 751.438049][ T2437] debugfs: 'hsr0' already exists in 'hsr' [ 751.444940][ T2801] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 751.449422][ T2437] Cannot create hsr debugfs directory [ 751.462465][ T1953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.477516][T24318] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.505317][ T1953] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.534808][T24322] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.541956][T24322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.553119][T24324] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.584648][T24318] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.591718][T24318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.602386][ T1434] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.651608][ T2893] ipvlan2: entered promiscuous mode [ 751.660146][ T2893] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 751.700099][ T2904] loop7: detected capacity change from 0 to 256 [ 751.707816][ T2904] vfat: Unknown parameter '18446744073709551615' [ 751.729880][ T2917] netlink: 'syz.9.9514': attribute type 6 has an invalid length. [ 751.781289][ T2936] netlink: 'syz.9.9514': attribute type 6 has an invalid length. [ 751.799800][ T2917] loop9: detected capacity change from 0 to 1024 [ 751.800060][ T2917] EXT4-fs: Ignoring removed bh option [ 751.800155][ T2917] EXT4-fs: inline encryption not supported [ 751.811831][ T2917] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 751.812469][ T2917] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 751.816008][ T2917] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 2: comm syz.9.9514: lblock 2 mapped to illegal pblock 2 (length 1) [ 751.816110][ T2917] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 48: comm syz.9.9514: lblock 0 mapped to illegal pblock 48 (length 1) [ 751.816196][ T2917] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.9514: Failed to acquire dquot type 0 [ 751.816407][ T2917] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 751.816475][ T2917] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.9514: mark_inode_dirty error [ 751.816701][ T2917] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 751.816777][ T2917] EXT4-fs (loop9): 1 orphan inode deleted [ 751.817205][ T2917] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 751.833422][T24322] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:31: lblock 1 mapped to illegal pblock 1 (length 1) [ 751.833536][T24322] EXT4-fs error (device loop9): ext4_release_dquot:6981: comm kworker/u8:31: Failed to release dquot type 0 [ 751.870098][T24318] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.929522][ T1953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 752.075968][T24318] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.088328][ T2896] lo speed is unknown, defaulting to 1000 [ 752.136949][T24318] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.233956][T24318] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.261565][ T3004] loop7: detected capacity change from 0 to 2048 [ 752.287728][ T3004] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 752.287875][ T3004] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 752.295898][ T3004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.309839][ T2437] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 752.329077][ T3004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.368945][ T2437] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 752.384149][ T2437] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 752.398359][ T3106] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9515'. [ 752.409360][ T2437] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 752.412382][T24318] bridge_slave_1: left allmulticast mode [ 752.412402][T24318] bridge_slave_1: left promiscuous mode [ 752.412561][T24318] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.414331][T24318] bridge_slave_0: left allmulticast mode [ 752.414348][T24318] bridge_slave_0: left promiscuous mode [ 752.414460][T24318] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.501923][ T1658] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.511236][ T1658] EXT4-fs error (device loop9): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 752.524329][ T1658] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 752.534418][ T1658] EXT4-fs error (device loop9): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 752.625079][T24318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 752.634863][T24318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 752.645034][T24318] bond0 (unregistering): Released all slaves [ 752.661822][ T2896] chnl_net:caif_netlink_parms(): no params data found [ 752.675128][ T3121] tipc: Started in network mode [ 752.680071][ T3121] tipc: Node identity 6a1fad25bbe2, cluster identity 4711 [ 752.687405][ T3121] tipc: Enabled bearer , priority 0 [ 752.702205][ T1953] veth0_vlan: entered promiscuous mode [ 752.724718][ T3121] syzkaller0: entered promiscuous mode [ 752.730222][ T3121] syzkaller0: entered allmulticast mode [ 752.736939][T24318] tipc: Left network mode [ 752.756066][ T3121] tipc: Resetting bearer [ 752.764955][T24318] hsr_slave_0: left promiscuous mode [ 752.770514][T24318] hsr_slave_1: left promiscuous mode [ 752.776241][T24318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 752.783646][T24318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.791328][T24318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 752.798921][T24318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.809229][T24318] veth1_macvtap: left promiscuous mode [ 752.814727][T24318] veth0_macvtap: left promiscuous mode [ 752.820414][T24318] veth1_vlan: left promiscuous mode [ 752.825772][T24318] veth0_vlan: left promiscuous mode [ 752.878580][T24318] team0 (unregistering): Port device team_slave_1 removed [ 752.889855][T24318] team0 (unregistering): Port device team_slave_0 removed [ 752.921893][ T2896] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.929004][ T2896] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.936241][ T2896] bridge_slave_0: entered allmulticast mode [ 752.942787][ T2896] bridge_slave_0: entered promiscuous mode [ 752.949963][ T1953] veth1_vlan: entered promiscuous mode [ 752.963946][ T3120] tipc: Resetting bearer [ 752.970856][ T1434] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.971096][ T3120] tipc: Disabling bearer [ 752.994501][ T2896] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.001672][ T2896] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.009452][ T2896] bridge_slave_1: entered allmulticast mode [ 753.015558][ T3199] siw: device registration error -23 [ 753.016470][ T2896] bridge_slave_1: entered promiscuous mode [ 753.069377][ T3203] loop9: detected capacity change from 0 to 512 [ 753.083278][ T3203] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 753.095629][ T2896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.104877][ T3202] loop7: detected capacity change from 0 to 8192 [ 753.105696][ T3203] EXT4-fs (loop9): 1 truncate cleaned up [ 753.124134][ T1953] veth0_macvtap: entered promiscuous mode [ 753.131663][ T3203] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 753.131862][ T2896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 753.156329][ T2437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.173944][ T1953] veth1_macvtap: entered promiscuous mode [ 753.174015][ T1658] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.187325][ T2437] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.208978][ T3239] loop9: detected capacity change from 0 to 512 [ 753.226442][ T1434] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 753.229552][ T1953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.234384][ T1434] FAT-fs (loop7): Filesystem has been set read-only [ 753.248988][ T2896] team0: Port device team_slave_0 added [ 753.255469][ T3239] EXT4-fs error (device loop9): __ext4_iget:5443: inode #2: block 67108864: comm syz.9.9521: invalid block [ 753.268442][ T2896] team0: Port device team_slave_1 added [ 753.281859][ T3239] EXT4-fs (loop9): get root inode failed [ 753.287750][ T3239] EXT4-fs (loop9): mount failed [ 753.294793][ T2896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 753.301748][ T2896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.327781][ T2896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 753.340380][T24321] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.347507][T24321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.356501][T24321] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.363576][T24321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.382616][ T2896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 753.389589][ T2896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.415663][ T2896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 753.448524][ T2896] hsr_slave_0: entered promiscuous mode [ 753.454646][ T2896] hsr_slave_1: entered promiscuous mode [ 753.460505][ T2896] debugfs: 'hsr0' already exists in 'hsr' [ 753.466261][ T2896] Cannot create hsr debugfs directory [ 753.474097][ T1953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.501847][T24322] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.513208][T24322] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.521934][T24322] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.545200][T24322] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.585572][T24318] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.662610][T24318] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.673178][ T3420] loop5: detected capacity change from 0 to 512 [ 753.680065][ T3420] EXT4-fs: Ignoring removed orlov option [ 753.688042][ T3420] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 753.699277][ T3420] EXT4-fs (loop5): orphan cleanup on readonly fs [ 753.707042][ T3420] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.9509: bg 0: block 248: padding at end of block bitmap is not set [ 753.725492][T24318] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.737455][ T3420] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.9509: Failed to acquire dquot type 1 [ 753.744475][ T2437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.757602][ T3420] EXT4-fs (loop5): 1 truncate cleaned up [ 753.768086][ T3420] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 753.785086][ T3420] FAULT_INJECTION: forcing a failure. [ 753.785086][ T3420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.798260][ T3420] CPU: 0 UID: 0 PID: 3420 Comm: syz.5.9509 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 753.798285][ T3420] Tainted: [W]=WARN [ 753.798289][ T3420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 753.798297][ T3420] Call Trace: [ 753.798301][ T3420] [ 753.798306][ T3420] __dump_stack+0x1d/0x30 [ 753.798323][ T3420] dump_stack_lvl+0xe8/0x140 [ 753.798337][ T3420] dump_stack+0x15/0x1b [ 753.798449][ T3420] should_fail_ex+0x265/0x280 [ 753.798470][ T3420] should_fail+0xb/0x20 [ 753.798481][ T3420] should_fail_usercopy+0x1a/0x20 [ 753.798494][ T3420] strncpy_from_user+0x25/0x230 [ 753.798511][ T3420] ? kmem_cache_alloc_noprof+0x242/0x480 [ 753.798547][ T3420] ? getname_flags+0x80/0x3b0 [ 753.798566][ T3420] getname_flags+0xae/0x3b0 [ 753.798593][ T3420] __x64_sys_mkdirat+0x40/0x60 [ 753.798608][ T3420] x64_sys_call+0x2b7/0x3000 [ 753.798624][ T3420] do_syscall_64+0xd2/0x200 [ 753.798638][ T3420] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 753.798702][ T3420] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 753.798723][ T3420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.798737][ T3420] RIP: 0033:0x7f8bd477de97 [ 753.798748][ T3420] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 753.798760][ T3420] RSP: 002b:00007f8bd31e6e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 753.798812][ T3420] RAX: ffffffffffffffda RBX: 00007f8bd31e6ef0 RCX: 00007f8bd477de97 [ 753.798820][ T3420] RDX: 00000000000001ff RSI: 0000200000000f00 RDI: 00000000ffffff9c [ 753.798829][ T3420] RBP: 0000200000000f40 R08: 0000200000000000 R09: 0000000000000000 [ 753.798837][ T3420] R10: 0000200000000f40 R11: 0000000000000246 R12: 0000200000000f00 [ 753.798846][ T3420] R13: 00007f8bd31e6eb0 R14: 0000000000000000 R15: 00002000000008c0 [ 753.798858][ T3420] [ 753.799261][ T3420] EXT4-fs: Ignoring removed orlov option [ 753.812263][ T3401] lo speed is unknown, defaulting to 1000 [ 753.816608][ T3420] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 754.005147][ T3420] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 754.015455][T24318] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.023435][ T3420] EXT4-fs error (device loop5): __ext4_remount:6748: comm syz.5.9509: Abort forced by user [ 754.035957][ T3420] EXT4-fs (loop5): Remounting filesystem read-only [ 754.042488][ T3420] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 754.050954][ T3420] ext4 filesystem being remounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 754.072083][ T1953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.135836][ T2437] veth0_vlan: entered promiscuous mode [ 754.161562][ T2437] veth1_vlan: entered promiscuous mode [ 754.171486][T24318] bridge_slave_1: left allmulticast mode [ 754.177305][T24318] bridge_slave_1: left promiscuous mode [ 754.183054][T24318] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.191140][T24318] bridge_slave_0: left allmulticast mode [ 754.196816][T24318] bridge_slave_0: left promiscuous mode [ 754.202584][T24318] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.257320][ T3575] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9528'. [ 754.285154][T24318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 754.295473][T24318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 754.305481][T24318] bond0 (unregistering): Released all slaves [ 754.324340][ T3401] chnl_net:caif_netlink_parms(): no params data found [ 754.339095][ T2896] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 754.353659][T24318] tipc: Left network mode [ 754.359000][ T2896] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 754.378422][T24318] hsr_slave_0: left promiscuous mode [ 754.378762][ T3594] loop9: detected capacity change from 0 to 1024 [ 754.390463][T24318] hsr_slave_1: left promiscuous mode [ 754.390986][ T3594] EXT4-fs: Ignoring removed orlov option [ 754.396612][T24318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.409060][T24318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.409885][ T3594] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 754.429108][T24318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.436645][T24318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.448314][T24318] veth1_macvtap: left promiscuous mode [ 754.453924][T24318] veth0_macvtap: left promiscuous mode [ 754.459507][T24318] veth1_vlan: left promiscuous mode [ 754.465207][T24318] veth0_vlan: left promiscuous mode [ 754.522802][ T1658] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.532119][T24318] team0 (unregistering): Port device team_slave_1 removed [ 754.542484][T24318] team0 (unregistering): Port device team_slave_0 removed [ 754.555832][ T3614] loop9: detected capacity change from 0 to 512 [ 754.568789][ T3614] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 754.581584][ T2896] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 754.590957][ T2896] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 754.626703][ T3401] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.633907][ T3401] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.641077][ T3401] bridge_slave_0: entered allmulticast mode [ 754.648539][ T3401] bridge_slave_0: entered promiscuous mode [ 754.662270][ T2437] veth0_macvtap: entered promiscuous mode [ 754.671080][ T3401] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.678266][ T3401] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.685652][ T3401] bridge_slave_1: entered allmulticast mode [ 754.692652][ T3401] bridge_slave_1: entered promiscuous mode [ 754.705567][ T3665] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9530'. [ 754.717786][ T2437] veth1_macvtap: entered promiscuous mode [ 754.732797][ T3401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 754.743569][ T3401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.769471][ T3401] team0: Port device team_slave_0 added [ 754.776774][ T3401] team0: Port device team_slave_1 added [ 754.798707][ T3401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 754.805735][ T3401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.831681][ T3401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.845193][ T2437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.858769][ T3401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.865784][ T3401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.891804][ T3401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.911653][ T2437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.944309][ T3401] hsr_slave_0: entered promiscuous mode [ 754.950396][ T3401] hsr_slave_1: entered promiscuous mode [ 754.956652][ T3401] debugfs: 'hsr0' already exists in 'hsr' [ 754.962394][ T3401] Cannot create hsr debugfs directory [ 754.971136][T24317] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.000681][T24317] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.011712][ T2896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.028575][T24317] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.052101][ T2896] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.061995][ T3773] loop5: detected capacity change from 0 to 2048 [ 755.073661][T24317] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.074162][ T3773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 755.098090][ T3773] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 755.125207][ T3773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.129224][T24322] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.133848][ T3773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.140628][T24322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.157911][T24322] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.165017][T24322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.195708][ T3401] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.229740][ T2896] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 755.240243][ T2896] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 755.251737][ T3773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9531'. [ 755.267480][ T3829] loop3: detected capacity change from 0 to 164 [ 755.275214][ T3829] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 755.284257][ T3829] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 755.292650][ T3829] Symlink component flag not implemented [ 755.298349][ T3829] Symlink component flag not implemented [ 755.304252][ T3829] Symlink component flag not implemented (7) [ 755.304884][ T3401] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.310232][ T3829] Symlink component flag not implemented (116) [ 755.333360][ T3829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9532'. [ 755.349922][ T2896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 755.377707][ T3401] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.406707][ T1658] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.426877][ T3401] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.444917][ T3853] netlink: 'syz.9.9535': attribute type 1 has an invalid length. [ 755.547758][ T3401] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 755.563608][ T3401] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 755.575672][ T3401] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 755.585885][ T2896] veth0_vlan: entered promiscuous mode [ 755.593320][ T3401] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 755.605151][ T2896] veth1_vlan: entered promiscuous mode [ 755.628146][ T3889] FAULT_INJECTION: forcing a failure. [ 755.628146][ T3889] name failslab, interval 1, probability 0, space 0, times 0 [ 755.640932][ T3889] CPU: 0 UID: 0 PID: 3889 Comm: syz.9.9539 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 755.641047][ T3889] Tainted: [W]=WARN [ 755.641054][ T3889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 755.641068][ T3889] Call Trace: [ 755.641075][ T3889] [ 755.641083][ T3889] __dump_stack+0x1d/0x30 [ 755.641108][ T3889] dump_stack_lvl+0xe8/0x140 [ 755.641131][ T3889] dump_stack+0x15/0x1b [ 755.641163][ T3889] should_fail_ex+0x265/0x280 [ 755.641197][ T3889] should_failslab+0x8c/0xb0 [ 755.641228][ T3889] __kvmalloc_node_noprof+0x12e/0x670 [ 755.641266][ T3889] ? simple_xattr_set+0x73/0x2b0 [ 755.641298][ T3889] simple_xattr_set+0x73/0x2b0 [ 755.641369][ T3889] ? strlen+0x19/0x40 [ 755.641392][ T3889] pidfs_xattr_set+0xf7/0x150 [ 755.641500][ T3889] ? __pfx_pidfs_xattr_set+0x10/0x10 [ 755.641523][ T3889] __vfs_setxattr+0x2e6/0x310 [ 755.641553][ T3889] __vfs_setxattr_noperm+0xe8/0x410 [ 755.641580][ T3889] __vfs_setxattr_locked+0x1af/0x1d0 [ 755.641687][ T3889] vfs_setxattr+0x132/0x270 [ 755.641714][ T3889] file_setxattr+0x139/0x1b0 [ 755.641740][ T3889] path_setxattrat+0x290/0x310 [ 755.641830][ T3889] __x64_sys_fsetxattr+0x6b/0x80 [ 755.641881][ T3889] x64_sys_call+0x1ced/0x3000 [ 755.641905][ T3889] do_syscall_64+0xd2/0x200 [ 755.641927][ T3889] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 755.641957][ T3889] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 755.642068][ T3889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.642126][ T3889] RIP: 0033:0x7f74f476f749 [ 755.642144][ T3889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 755.642163][ T3889] RSP: 002b:00007f74f31d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 755.642186][ T3889] RAX: ffffffffffffffda RBX: 00007f74f49c5fa0 RCX: 00007f74f476f749 [ 755.642226][ T3889] RDX: 0000000000000000 RSI: 00002000000018c0 RDI: 0000000000000008 [ 755.642304][ T3889] RBP: 00007f74f31d7090 R08: 0000000000000003 R09: 0000000000000000 [ 755.642317][ T3889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 755.642338][ T3889] R13: 00007f74f49c6038 R14: 00007f74f49c5fa0 R15: 00007fff62a098f8 [ 755.642357][ T3889] [ 755.875498][ T2896] veth0_macvtap: entered promiscuous mode [ 755.903171][ T3890] lo speed is unknown, defaulting to 1000 [ 755.914370][ T2896] veth1_macvtap: entered promiscuous mode [ 755.941545][ T2896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 755.965916][ T2896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.974155][ T1953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.982042][ T3401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.990338][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 755.990352][ T29] audit: type=1400 audit(1763860046.540:69278): avc: denied { read } for pid=3901 comm="syz.9.9541" path="socket:[120842]" dev="sockfs" ino=120842 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 756.008279][T24319] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.036516][ T3401] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.128218][T24322] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.135331][T24322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.194548][T24322] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.201645][T24322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.279337][T24319] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.325648][T24319] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.343078][ T3401] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 756.421161][T24318] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.533702][ T29] audit: type=1400 audit(1763860047.090:69279): avc: denied { kexec_image_load } for pid=3934 comm="syz.5.9543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 756.555282][ T3401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.641042][ T3946] bond1: entered promiscuous mode [ 756.646364][ T3946] bond1: entered allmulticast mode [ 756.652197][ T3946] 8021q: adding VLAN 0 to HW filter on device bond1 [ 756.739815][ T3995] loop9: detected capacity change from 0 to 1024 [ 756.777920][ T4001] loop5: detected capacity change from 0 to 512 [ 756.777999][ T3401] veth0_vlan: entered promiscuous mode [ 756.779696][ T4001] EXT4-fs (loop5): Invalid log cluster size: 63 [ 756.785578][ T3995] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 756.811886][ T3401] veth1_vlan: entered promiscuous mode [ 756.825741][ T3995] FAULT_INJECTION: forcing a failure. [ 756.825741][ T3995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 756.838978][ T3995] CPU: 0 UID: 0 PID: 3995 Comm: syz.9.9547 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 756.839042][ T3995] Tainted: [W]=WARN [ 756.839049][ T3995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 756.839060][ T3995] Call Trace: [ 756.839066][ T3995] [ 756.839073][ T3995] __dump_stack+0x1d/0x30 [ 756.839095][ T3995] dump_stack_lvl+0xe8/0x140 [ 756.839183][ T3995] dump_stack+0x15/0x1b [ 756.839200][ T3995] should_fail_ex+0x265/0x280 [ 756.839229][ T3995] should_fail+0xb/0x20 [ 756.839244][ T3995] should_fail_usercopy+0x1a/0x20 [ 756.839265][ T3995] strncpy_from_user+0x25/0x230 [ 756.839368][ T3995] ? kmem_cache_alloc_noprof+0x242/0x480 [ 756.839400][ T3995] ? getname_flags+0x80/0x3b0 [ 756.839429][ T3995] getname_flags+0xae/0x3b0 [ 756.839468][ T3995] __x64_sys_mkdirat+0x40/0x60 [ 756.839491][ T3995] x64_sys_call+0x2b7/0x3000 [ 756.839515][ T3995] do_syscall_64+0xd2/0x200 [ 756.839534][ T3995] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 756.839579][ T3995] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 756.839611][ T3995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.839708][ T3995] RIP: 0033:0x7f74f476de97 [ 756.839724][ T3995] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.839806][ T3995] RSP: 002b:00007f74f31d6e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 756.839828][ T3995] RAX: ffffffffffffffda RBX: 00007f74f31d6ef0 RCX: 00007f74f476de97 [ 756.839844][ T3995] RDX: 00000000000001ff RSI: 0000200000000f00 RDI: 00000000ffffff9c [ 756.839859][ T3995] RBP: 0000200000000f40 R08: 0000200000000000 R09: 0000000000000000 [ 756.839906][ T3995] R10: 0000200000000f40 R11: 0000000000000246 R12: 0000200000000f00 [ 756.839921][ T3995] R13: 00007f74f31d6eb0 R14: 0000000000000000 R15: 00002000000008c0 [ 756.839938][ T3995] [ 757.051648][ T3401] veth0_macvtap: entered promiscuous mode [ 757.060103][ T3401] veth1_macvtap: entered promiscuous mode [ 757.072842][ T3401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 757.084297][ T3995] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 757.147754][ T29] audit: type=1326 audit(1763860047.690:69280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.6.9550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f140f749 code=0x7ffc0000 [ 757.147783][ T29] audit: type=1326 audit(1763860047.690:69281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.6.9550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03f140f749 code=0x7ffc0000 [ 757.147877][ T29] audit: type=1326 audit(1763860047.690:69282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.6.9550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f140f749 code=0x7ffc0000 [ 757.147936][ T29] audit: type=1326 audit(1763860047.690:69283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.6.9550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03f140f749 code=0x7ffc0000 [ 757.147962][ T29] audit: type=1326 audit(1763860047.690:69284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.6.9550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f140f749 code=0x7ffc0000 [ 757.147989][ T29] audit: type=1326 audit(1763860047.690:69285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.6.9550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f03f140f749 code=0x7ffc0000 [ 757.148013][ T29] audit: type=1326 audit(1763860047.690:69286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.6.9550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f140f749 code=0x7ffc0000 [ 757.148081][ T29] audit: type=1326 audit(1763860047.690:69287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.6.9550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03f140f749 code=0x7ffc0000 [ 757.149202][ T1658] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.154382][ T4014] 8021q: adding VLAN 0 to HW filter on device bond1 [ 757.159578][ T3401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 757.165058][T24322] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.168566][T24322] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.168611][T24322] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.168642][T24322] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.172384][ T4014] bond_slave_0: entered promiscuous mode [ 757.172409][ T4014] bond_slave_1: entered promiscuous mode [ 757.172806][ T4014] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 757.174880][ T4014] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 757.186574][ T4014] bond1: option mode: unable to set because the bond device has slaves [ 757.367714][ T4063] netlink: 'syz.6.9550': attribute type 6 has an invalid length. [ 757.433125][ T4059] netlink: 'syz.6.9550': attribute type 6 has an invalid length. [ 757.448657][ T4067] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9554'. [ 757.490124][ T4061] loop6: detected capacity change from 0 to 1024 [ 757.490328][ T4061] EXT4-fs: Ignoring removed bh option [ 757.490419][ T4061] EXT4-fs: inline encryption not supported [ 757.492791][ T4061] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 757.502626][ T4061] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 757.558046][ T4064] bond2: entered promiscuous mode [ 757.563196][ T4064] bond2: entered allmulticast mode [ 757.568886][ T4061] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.9550: lblock 2 mapped to illegal pblock 2 (length 1) [ 757.583238][ T4061] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.9550: lblock 0 mapped to illegal pblock 48 (length 1) [ 757.598330][ T4064] 8021q: adding VLAN 0 to HW filter on device bond2 [ 757.607841][ T4061] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.9550: Failed to acquire dquot type 0 [ 757.621187][ T4061] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 757.631380][ T4061] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.9550: mark_inode_dirty error [ 757.631780][ T4064] bond2 (unregistering): Released all slaves [ 757.642831][ T4061] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 757.674811][ T4061] EXT4-fs (loop6): 1 orphan inode deleted [ 757.689967][ T4061] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 757.704311][T24319] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1) [ 757.721427][ T4143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64221 sclass=netlink_route_socket pid=4143 comm=syz.4.9525 [ 757.753030][T24319] EXT4-fs error (device loop6): ext4_release_dquot:6981: comm kworker/u8:28: Failed to release dquot type 0 [ 757.810626][ T2896] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.837449][ T2896] EXT4-fs error (device loop6): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 757.852439][ T2896] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 757.873060][ T2896] EXT4-fs error (device loop6): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 758.588262][ T4159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9561'. [ 758.612030][ T4159] siw: device registration error -23 [ 758.665182][ T4163] loop3: detected capacity change from 0 to 512 [ 758.673822][ T4163] EXT4-fs error (device loop3): __ext4_iget:5443: inode #2: block 67108864: comm syz.3.9563: invalid block [ 758.685726][ T4163] EXT4-fs (loop3): get root inode failed [ 758.691460][ T4163] EXT4-fs (loop3): mount failed [ 758.712089][ T4171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9565'. [ 758.773370][ T4179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9567'. [ 758.782280][ T4179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9567'. [ 758.833568][ T4186] blktrace: Concurrent blktraces are not allowed on loop7 [ 758.899895][ T4188] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9571'. [ 758.921554][ T4190] pimreg: entered allmulticast mode [ 758.959104][ T4197] loop3: detected capacity change from 0 to 512 [ 758.991733][ T4197] EXT4-fs: Ignoring removed nomblk_io_submit option [ 759.003290][ T4197] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 759.033930][ T4197] EXT4-fs (loop3): 1 truncate cleaned up [ 759.040374][ T4197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 759.116302][ T2437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.212909][ T4196] pimreg: left allmulticast mode [ 759.378708][ T4224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 759.535565][ T4226] loop9: detected capacity change from 0 to 512 [ 759.554504][ T4226] EXT4-fs error (device loop9): __ext4_iget:5443: inode #2: block 67108864: comm syz.9.9578: invalid block [ 759.578215][ T4226] EXT4-fs (loop9): get root inode failed [ 759.583977][ T4226] EXT4-fs (loop9): mount failed [ 759.696446][ T4234] ipvlan2: entered promiscuous mode [ 759.708048][ T4234] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 759.745473][ T4239] loop9: detected capacity change from 0 to 256 [ 759.761515][ T4239] vfat: Unknown parameter '18446744073709551615' [ 760.030674][ T4246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9582'. [ 760.039864][ T4246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9582'. [ 760.072644][ T4246] FAULT_INJECTION: forcing a failure. [ 760.072644][ T4246] name failslab, interval 1, probability 0, space 0, times 0 [ 760.085572][ T4246] CPU: 0 UID: 0 PID: 4246 Comm: syz.3.9582 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 760.085604][ T4246] Tainted: [W]=WARN [ 760.085611][ T4246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 760.085622][ T4246] Call Trace: [ 760.085628][ T4246] [ 760.085636][ T4246] __dump_stack+0x1d/0x30 [ 760.085658][ T4246] dump_stack_lvl+0xe8/0x140 [ 760.085682][ T4246] dump_stack+0x15/0x1b [ 760.085763][ T4246] should_fail_ex+0x265/0x280 [ 760.085792][ T4246] ? __add_metainfo+0x5a/0x220 [ 760.085891][ T4246] should_failslab+0x8c/0xb0 [ 760.085922][ T4246] __kmalloc_cache_noprof+0x4c/0x4a0 [ 760.085997][ T4246] __add_metainfo+0x5a/0x220 [ 760.086026][ T4246] use_all_metadata+0x91/0x140 [ 760.086132][ T4246] tcf_ife_init+0x6f5/0x880 [ 760.086164][ T4246] tcf_action_init_1+0x36a/0x4a0 [ 760.086219][ T4246] tcf_action_init+0x267/0x6d0 [ 760.086258][ T4246] tc_ctl_action+0x291/0x830 [ 760.086362][ T4246] ? __pfx_tc_ctl_action+0x10/0x10 [ 760.086429][ T4246] rtnetlink_rcv_msg+0x65a/0x6d0 [ 760.086454][ T4246] netlink_rcv_skb+0x123/0x220 [ 760.086489][ T4246] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 760.086573][ T4246] rtnetlink_rcv+0x1c/0x30 [ 760.086593][ T4246] netlink_unicast+0x5c0/0x690 [ 760.086621][ T4246] netlink_sendmsg+0x58b/0x6b0 [ 760.086772][ T4246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 760.086844][ T4246] __sock_sendmsg+0x145/0x180 [ 760.086873][ T4246] ____sys_sendmsg+0x31e/0x4e0 [ 760.086899][ T4246] ___sys_sendmsg+0x17b/0x1d0 [ 760.087060][ T4246] __x64_sys_sendmsg+0xd4/0x160 [ 760.087087][ T4246] x64_sys_call+0x191e/0x3000 [ 760.087113][ T4246] do_syscall_64+0xd2/0x200 [ 760.087156][ T4246] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 760.087189][ T4246] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 760.087220][ T4246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.087296][ T4246] RIP: 0033:0x7f1a2ba7f749 [ 760.087314][ T4246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 760.087381][ T4246] RSP: 002b:00007f1a2a4df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 760.087404][ T4246] RAX: ffffffffffffffda RBX: 00007f1a2bcd5fa0 RCX: 00007f1a2ba7f749 [ 760.087418][ T4246] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 760.087430][ T4246] RBP: 00007f1a2a4df090 R08: 0000000000000000 R09: 0000000000000000 [ 760.087442][ T4246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.087490][ T4246] R13: 00007f1a2bcd6038 R14: 00007f1a2bcd5fa0 R15: 00007fff1c162638 [ 760.087510][ T4246] [ 760.433850][ T4252] netlink: 'syz.4.9585': attribute type 1 has an invalid length. [ 760.445798][ T4256] netlink: 'syz.3.9588': attribute type 3 has an invalid length. [ 760.453641][ T4256] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9588'. [ 760.496121][ T4260] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9586'. [ 760.522112][ T4260] loop9: detected capacity change from 0 to 512 [ 760.613980][ T4260] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.9586: couldn't read orphan inode 26 (err -116) [ 760.663277][ T4260] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 760.693069][ T4260] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 760.725711][ T4260] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #3: comm syz.9.9586: corrupted inode contents [ 760.748510][ T4260] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #3: comm syz.9.9586: mark_inode_dirty error [ 760.785407][ T4260] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.9586: bg 0: block 64: padding at end of block bitmap is not set [ 760.830762][ T4260] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.9586: Failed to acquire dquot type 0 [ 760.995647][ T1658] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.093444][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 761.093461][ T29] audit: type=1326 audit(1763860051.650:69333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4283 comm="syz.9.9594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f476f749 code=0x7ffc0000 [ 761.126095][ T4284] audit: audit_lost=10 audit_rate_limit=0 audit_backlog_limit=64 [ 761.133903][ T4284] audit: out of memory in audit_log_start [ 761.165976][ T29] audit: type=1326 audit(1763860051.680:69334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4283 comm="syz.9.9594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74f476f749 code=0x7ffc0000 [ 761.189605][ T29] audit: type=1326 audit(1763860051.680:69335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4283 comm="syz.9.9594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f476f749 code=0x7ffc0000 [ 761.213422][ T29] audit: type=1326 audit(1763860051.680:69336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4283 comm="syz.9.9594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f476f749 code=0x7ffc0000 [ 761.237227][ T29] audit: type=1326 audit(1763860051.680:69337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4283 comm="syz.9.9594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74f476f749 code=0x7ffc0000 [ 761.260745][ T29] audit: type=1326 audit(1763860051.680:69338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4283 comm="syz.9.9594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f476f749 code=0x7ffc0000 [ 761.284956][ T29] audit: type=1326 audit(1763860051.680:69339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4283 comm="syz.9.9594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f476f749 code=0x7ffc0000 [ 761.308614][ T29] audit: type=1326 audit(1763860051.680:69340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4283 comm="syz.9.9594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74f476df90 code=0x7ffc0000 [ 761.372284][ T4288] loop9: detected capacity change from 0 to 256 [ 761.437003][ T4293] loop9: detected capacity change from 0 to 512 [ 761.452797][ T4293] ext4: Unknown parameter 'smackfsdef' [ 761.514039][ T4298] FAULT_INJECTION: forcing a failure. [ 761.514039][ T4298] name failslab, interval 1, probability 0, space 0, times 0 [ 761.526845][ T4298] CPU: 0 UID: 0 PID: 4298 Comm: syz.9.9598 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 761.526934][ T4298] Tainted: [W]=WARN [ 761.526942][ T4298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 761.526995][ T4298] Call Trace: [ 761.527001][ T4298] [ 761.527054][ T4298] __dump_stack+0x1d/0x30 [ 761.527080][ T4298] dump_stack_lvl+0xe8/0x140 [ 761.527103][ T4298] dump_stack+0x15/0x1b [ 761.527122][ T4298] should_fail_ex+0x265/0x280 [ 761.527160][ T4298] should_failslab+0x8c/0xb0 [ 761.527260][ T4298] kmem_cache_alloc_noprof+0x50/0x480 [ 761.527303][ T4298] ? getname_flags+0x80/0x3b0 [ 761.527376][ T4298] getname_flags+0x80/0x3b0 [ 761.527407][ T4298] user_path_at+0x28/0x130 [ 761.527429][ T4298] __se_sys_mount+0x25b/0x2e0 [ 761.527473][ T4298] ? fput+0x8f/0xc0 [ 761.527492][ T4298] __x64_sys_mount+0x67/0x80 [ 761.527518][ T4298] x64_sys_call+0x2b51/0x3000 [ 761.527613][ T4298] do_syscall_64+0xd2/0x200 [ 761.527636][ T4298] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 761.527666][ T4298] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 761.527776][ T4298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.527852][ T4298] RIP: 0033:0x7f74f476f749 [ 761.527954][ T4298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 761.527977][ T4298] RSP: 002b:00007f74f31d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 761.528025][ T4298] RAX: ffffffffffffffda RBX: 00007f74f49c5fa0 RCX: 00007f74f476f749 [ 761.528039][ T4298] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 761.528052][ T4298] RBP: 00007f74f31d7090 R08: 0000200000000300 R09: 0000000000000000 [ 761.528066][ T4298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 761.528079][ T4298] R13: 00007f74f49c6038 R14: 00007f74f49c5fa0 R15: 00007fff62a098f8 [ 761.528145][ T4298] [ 761.807528][ T4304] loop9: detected capacity change from 0 to 512 [ 761.833942][ T4304] EXT4-fs error (device loop9): __ext4_iget:5443: inode #2: block 67108864: comm syz.9.9601: invalid block [ 761.855995][ T4304] EXT4-fs (loop9): get root inode failed [ 761.861646][ T4304] EXT4-fs (loop9): mount failed [ 765.254719][ T4332] FAULT_INJECTION: forcing a failure. [ 765.254719][ T4332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 765.267821][ T4332] CPU: 0 UID: 0 PID: 4332 Comm: syz.3.9610 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 765.267855][ T4332] Tainted: [W]=WARN [ 765.267863][ T4332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 765.267918][ T4332] Call Trace: [ 765.267924][ T4332] [ 765.267931][ T4332] __dump_stack+0x1d/0x30 [ 765.267976][ T4332] dump_stack_lvl+0xe8/0x140 [ 765.268036][ T4332] dump_stack+0x15/0x1b [ 765.268072][ T4332] should_fail_ex+0x265/0x280 [ 765.268107][ T4332] should_fail+0xb/0x20 [ 765.268127][ T4332] should_fail_usercopy+0x1a/0x20 [ 765.268150][ T4332] _copy_from_user+0x1c/0xb0 [ 765.268172][ T4332] memdup_user+0x5e/0xd0 [ 765.268355][ T4332] strndup_user+0x68/0xb0 [ 765.268379][ T4332] perf_ioctl+0x58a/0x12e0 [ 765.268402][ T4332] ? ioctl_has_perm+0x289/0x2a0 [ 765.268434][ T4332] ? do_vfs_ioctl+0x866/0xe10 [ 765.268486][ T4332] ? selinux_file_ioctl+0x308/0x3a0 [ 765.268527][ T4332] ? __fget_files+0x184/0x1c0 [ 765.268553][ T4332] ? __pfx_perf_ioctl+0x10/0x10 [ 765.268576][ T4332] __se_sys_ioctl+0xce/0x140 [ 765.268595][ T4332] __x64_sys_ioctl+0x43/0x50 [ 765.268640][ T4332] x64_sys_call+0x1816/0x3000 [ 765.268659][ T4332] do_syscall_64+0xd2/0x200 [ 765.268735][ T4332] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 765.268760][ T4332] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 765.268896][ T4332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.268916][ T4332] RIP: 0033:0x7f1a2ba7f749 [ 765.268932][ T4332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.269000][ T4332] RSP: 002b:00007f1a2a4df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 765.269052][ T4332] RAX: ffffffffffffffda RBX: 00007f1a2bcd5fa0 RCX: 00007f1a2ba7f749 [ 765.269067][ T4332] RDX: 00002000000001c0 RSI: 0000000040082406 RDI: 0000000000000003 [ 765.269081][ T4332] RBP: 00007f1a2a4df090 R08: 0000000000000000 R09: 0000000000000000 [ 765.269094][ T4332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.269106][ T4332] R13: 00007f1a2bcd6038 R14: 00007f1a2bcd5fa0 R15: 00007fff1c162638 [ 765.269170][ T4332] [ 765.602671][ T4334] netlink: 'syz.3.9611': attribute type 1 has an invalid length. [ 766.539632][ T4342] loop3: detected capacity change from 0 to 512 [ 766.595125][ T4342] EXT4-fs error (device loop3): __ext4_iget:5443: inode #2: block 67108864: comm syz.3.9614: invalid block [ 766.652966][ T4342] EXT4-fs (loop3): get root inode failed [ 766.658662][ T4342] EXT4-fs (loop3): mount failed [ 766.788794][ T4348] loop3: detected capacity change from 0 to 4096 [ 766.873079][ T4348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 766.933956][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 766.933975][ T29] audit: type=1400 audit(1763860057.490:69396): avc: denied { setattr } for pid=4347 comm="syz.3.9615" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 767.643399][ T2437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.173525][ T4369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 771.225820][ T4373] FAULT_INJECTION: forcing a failure. [ 771.225820][ T4373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 771.238959][ T4373] CPU: 1 UID: 0 PID: 4373 Comm: syz.3.9619 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 771.238994][ T4373] Tainted: [W]=WARN [ 771.239002][ T4373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 771.239061][ T4373] Call Trace: [ 771.239069][ T4373] [ 771.239078][ T4373] __dump_stack+0x1d/0x30 [ 771.239102][ T4373] dump_stack_lvl+0xe8/0x140 [ 771.239123][ T4373] dump_stack+0x15/0x1b [ 771.239139][ T4373] should_fail_ex+0x265/0x280 [ 771.239168][ T4373] should_fail+0xb/0x20 [ 771.239300][ T4373] should_fail_usercopy+0x1a/0x20 [ 771.239323][ T4373] _copy_from_user+0x1c/0xb0 [ 771.239347][ T4373] memdup_user+0x5e/0xd0 [ 771.239425][ T4373] strndup_user+0x68/0xb0 [ 771.239451][ T4373] perf_ioctl+0x58a/0x12e0 [ 771.239479][ T4373] ? ioctl_has_perm+0x289/0x2a0 [ 771.239586][ T4373] ? do_vfs_ioctl+0x866/0xe10 [ 771.239652][ T4373] ? selinux_file_ioctl+0x308/0x3a0 [ 771.239677][ T4373] ? __fget_files+0x184/0x1c0 [ 771.239753][ T4373] ? __pfx_perf_ioctl+0x10/0x10 [ 771.239777][ T4373] __se_sys_ioctl+0xce/0x140 [ 771.239800][ T4373] __x64_sys_ioctl+0x43/0x50 [ 771.239820][ T4373] x64_sys_call+0x1816/0x3000 [ 771.239840][ T4373] do_syscall_64+0xd2/0x200 [ 771.239872][ T4373] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 771.239903][ T4373] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 771.239953][ T4373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.239977][ T4373] RIP: 0033:0x7f1a2ba7f749 [ 771.239994][ T4373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.240034][ T4373] RSP: 002b:00007f1a2a4df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 771.240054][ T4373] RAX: ffffffffffffffda RBX: 00007f1a2bcd5fa0 RCX: 00007f1a2ba7f749 [ 771.240066][ T4373] RDX: 00002000000001c0 RSI: 0000000040082406 RDI: 0000000000000003 [ 771.240079][ T4373] RBP: 00007f1a2a4df090 R08: 0000000000000000 R09: 0000000000000000 [ 771.240091][ T4373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.240103][ T4373] R13: 00007f1a2bcd6038 R14: 00007f1a2bcd5fa0 R15: 00007fff1c162638 [ 771.240164][ T4373] [ 771.505277][ T29] audit: type=1326 audit(1763860062.060:69397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4374 comm="syz.3.9620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2ba7f749 code=0x7ffc0000 [ 771.593415][ T29] audit: type=1326 audit(1763860062.080:69398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4374 comm="syz.3.9620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a2ba7f749 code=0x7ffc0000 [ 771.593451][ T29] audit: type=1326 audit(1763860062.080:69399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4374 comm="syz.3.9620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2ba7f749 code=0x7ffc0000 [ 771.593556][ T29] audit: type=1326 audit(1763860062.080:69400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4374 comm="syz.3.9620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a2ba7f749 code=0x7ffc0000 [ 771.593584][ T29] audit: type=1326 audit(1763860062.080:69401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4374 comm="syz.3.9620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2ba7f749 code=0x7ffc0000 [ 771.593614][ T29] audit: type=1326 audit(1763860062.080:69402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4374 comm="syz.3.9620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2ba7f749 code=0x7ffc0000 [ 771.593713][ T29] audit: type=1326 audit(1763860062.080:69403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4374 comm="syz.3.9620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a2ba7f749 code=0x7ffc0000 [ 771.593735][ T29] audit: type=1326 audit(1763860062.080:69404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4374 comm="syz.3.9620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2ba7f749 code=0x7ffc0000 [ 771.593832][ T29] audit: type=1326 audit(1763860062.080:69405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4374 comm="syz.3.9620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2ba7f749 code=0x7ffc0000 [ 771.753733][ T4378] netlink: 'syz.3.9620': attribute type 6 has an invalid length. [ 771.754488][ T4378] netlink: 'syz.3.9620': attribute type 6 has an invalid length. [ 771.759931][ T4378] loop3: detected capacity change from 0 to 1024 [ 771.787848][ T4378] EXT4-fs: Ignoring removed bh option [ 771.787971][ T4378] EXT4-fs: inline encryption not supported [ 771.793551][ T4378] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 771.833206][ T4378] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 772.063150][ T4378] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.9620: lblock 2 mapped to illegal pblock 2 (length 1) [ 772.063300][ T4378] __quota_error: 20 callbacks suppressed [ 772.063312][ T4378] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 772.063328][ T4378] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.9620: lblock 0 mapped to illegal pblock 48 (length 1) [ 772.102980][ T4378] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 772.103003][ T4378] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.9620: Failed to acquire dquot type 0 [ 772.203714][ T4378] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 772.213513][ T4378] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.9620: mark_inode_dirty error [ 772.242984][ T4378] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 772.243024][ T4378] EXT4-fs (loop3): 1 orphan inode deleted [ 772.243561][ T4378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 772.263040][T24312] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:21: lblock 1 mapped to illegal pblock 1 (length 1) [ 772.263144][T24312] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 772.263164][T24312] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:21: Failed to release dquot type 0 [ 772.515135][ T2437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.553125][ T2437] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 772.602902][ T2437] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 772.622910][ T2437] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 772.676481][ T4383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9621'. [ 772.724172][ T4387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9622'. [ 772.851965][ T4397] loop3: detected capacity change from 0 to 512 [ 772.880262][ T4397] EXT4-fs error (device loop3): __ext4_iget:5443: inode #2: block 67108864: comm syz.3.9625: invalid block [ 772.891939][ T4397] EXT4-fs (loop3): get root inode failed [ 772.897714][ T4397] EXT4-fs (loop3): mount failed [ 772.998559][ T4410] bond1: entered promiscuous mode [ 773.003661][ T4410] bond1: entered allmulticast mode [ 773.023163][ T4410] 8021q: adding VLAN 0 to HW filter on device bond1 [ 773.044883][ T4410] bond1 (unregistering): Released all slaves [ 773.089636][T24313] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.136732][ T4391] lo speed is unknown, defaulting to 1000 [ 773.169542][ T29] audit: type=1400 audit(1763860063.720:69426): avc: denied { write } for pid=4482 comm="syz.3.9627" name="event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 773.211111][ T29] audit: type=1400 audit(1763860063.720:69427): avc: denied { ioctl } for pid=4482 comm="syz.3.9627" path="/dev/input/event3" dev="devtmpfs" ino=256 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 773.255970][T24313] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.263379][ T29] audit: type=1326 audit(1763860063.760:69428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4482 comm="syz.3.9627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2ba7f749 code=0x7ffc0000 [ 773.289870][ T29] audit: type=1326 audit(1763860063.760:69429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4482 comm="syz.3.9627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2ba7f749 code=0x7ffc0000 [ 773.313408][ T29] audit: type=1326 audit(1763860063.760:69430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4482 comm="syz.3.9627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a2ba7f749 code=0x7ffc0000 [ 773.336997][ T29] audit: type=1326 audit(1763860063.760:69431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4482 comm="syz.3.9627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2ba7f749 code=0x7ffc0000 [ 773.360670][ T29] audit: type=1326 audit(1763860063.760:69432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4482 comm="syz.3.9627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2ba7f749 code=0x7ffc0000 [ 773.436843][T24313] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.523079][ T4505] loop3: detected capacity change from 0 to 512 [ 773.531117][ T4505] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 773.563938][ T4505] EXT4-fs (loop3): invalid journal inode [ 773.569700][ T4505] EXT4-fs (loop3): can't get journal size [ 773.581615][T24313] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.603761][ T4505] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #2: comm syz.3.9628: blocks 6-6 from inode overlap system zone [ 773.673239][ T4505] EXT4-fs (loop3): failed to initialize system zone (-117) [ 773.680567][ T4505] EXT4-fs (loop3): mount failed [ 773.719195][ T4391] chnl_net:caif_netlink_parms(): no params data found [ 773.776252][T24313] bridge_slave_1: left allmulticast mode [ 773.781958][T24313] bridge_slave_1: left promiscuous mode [ 773.787803][T24313] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.843510][ T4614] loop3: detected capacity change from 0 to 1024 [ 773.850002][T24313] bridge_slave_0: left allmulticast mode [ 773.855758][T24313] bridge_slave_0: left promiscuous mode [ 773.861431][T24313] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.885618][T24313] bond_slave_0: left promiscuous mode [ 773.891100][T24313] bond_slave_1: left promiscuous mode [ 773.896965][ T4614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 774.095155][T24313] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 774.104311][ T4619] rdma_rxe: rxe_newlink: failed to add lo [ 774.104371][T24313] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 774.121161][ T4619] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.9629: Allocating blocks 497-513 which overlap fs metadata [ 774.165672][T24313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.213255][T24313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.233815][T24313] bond0 (unregistering): Released all slaves [ 774.242649][T24313] bond1 (unregistering): Released all slaves [ 774.345747][T24313] hsr_slave_0: left promiscuous mode [ 774.364356][T24313] hsr_slave_1: left promiscuous mode [ 774.373656][T24313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 774.381113][T24313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.413332][T24313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.420843][T24313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.456578][T24313] veth1_macvtap: left promiscuous mode [ 774.462137][T24313] veth0_macvtap: left promiscuous mode [ 774.492956][T24313] veth1_vlan: left promiscuous mode [ 774.498234][T24313] veth0_vlan: left promiscuous mode [ 774.655423][T24313] team0 (unregistering): Port device team_slave_1 removed [ 774.671330][ T4618] EXT4-fs (loop3): pa ffff888107256e00: logic 16, phys. 129, len 24 [ 774.679443][ T4618] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 774.689762][T24313] team0 (unregistering): Port device team_slave_0 removed [ 774.702415][ T2437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.763257][ T4669] loop3: detected capacity change from 0 to 512 [ 774.803162][ T4391] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.810445][ T4391] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.895305][ T4391] bridge_slave_0: entered allmulticast mode [ 774.908041][ T4391] bridge_slave_0: entered promiscuous mode [ 774.933826][ T4391] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.940915][ T4391] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.003259][ T4391] bridge_slave_1: entered allmulticast mode [ 775.019790][ T4391] bridge_slave_1: entered promiscuous mode [ 775.494834][ T4391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.507546][ T4677] lo speed is unknown, defaulting to 1000 [ 775.523763][ T4391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.576427][ T4391] team0: Port device team_slave_0 added [ 775.664063][ T4391] team0: Port device team_slave_1 added [ 775.729736][ T4391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.736753][ T4391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.763132][ T4391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.827720][ T4391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.834727][ T4391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.860787][ T4391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.975095][ T4391] hsr_slave_0: entered promiscuous mode [ 775.981459][ T4391] hsr_slave_1: entered promiscuous mode [ 775.993193][ T4391] debugfs: 'hsr0' already exists in 'hsr' [ 775.998940][ T4391] Cannot create hsr debugfs directory [ 776.062221][ T4840] loop3: detected capacity change from 0 to 1024 [ 776.097304][ T4840] EXT4-fs: inline encryption not supported [ 776.117163][ T4840] EXT4-fs (loop3): unable to read superblock [ 776.128285][T24313] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.133563][ T4842] usb usb8: usbfs: process 4842 (syz.3.9632) did not claim interface 0 before use [ 776.153925][ T4842] usb usb8: usbfs: process 4842 (syz.3.9632) did not claim interface 0 before use [ 776.174988][ T4840] netlink: 'syz.3.9632': attribute type 62 has an invalid length. [ 776.200829][T24313] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.219214][ T4784] lo speed is unknown, defaulting to 1000 [ 776.271407][T24313] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.314283][ T4891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9633'. [ 776.353420][T24313] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.409566][ T4912] bond1: entered promiscuous mode [ 776.414673][ T4912] bond1: entered allmulticast mode [ 776.453082][ T4912] 8021q: adding VLAN 0 to HW filter on device bond1 [ 776.475803][ T4912] bond1 (unregistering): Released all slaves [ 776.535548][ T5004] loop9: detected capacity change from 0 to 512 [ 776.558747][ T5004] EXT4-fs error (device loop9): __ext4_iget:5443: inode #2: block 67108864: comm syz.9.9635: invalid block [ 776.577936][ T5004] EXT4-fs (loop9): get root inode failed [ 776.583761][ T5004] EXT4-fs (loop9): mount failed [ 776.603657][ T5010] ipvlan2: entered promiscuous mode [ 776.619743][ T5010] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 776.655913][ T5088] loop3: detected capacity change from 0 to 256 [ 776.684115][T24313] bridge_slave_1: left allmulticast mode [ 776.689797][T24313] bridge_slave_1: left promiscuous mode [ 776.695578][T24313] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.695937][ T5088] vfat: Unknown parameter '18446744073709551615' [ 776.723829][T24313] bridge_slave_0: left allmulticast mode [ 776.729494][T24313] bridge_slave_0: left promiscuous mode [ 776.735311][T24313] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.835211][ T5100] netlink: 'syz.9.9637': attribute type 6 has an invalid length. [ 776.984249][ T5102] loop9: detected capacity change from 0 to 1024 [ 776.984557][ T5102] EXT4-fs: Ignoring removed bh option [ 776.984623][ T5102] EXT4-fs: inline encryption not supported [ 777.001579][ T5102] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 777.013402][T24313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 777.036540][ T5102] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 777.065028][ T5102] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 2: comm syz.9.9637: lblock 2 mapped to illegal pblock 2 (length 1) [ 777.065217][ T5102] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 48: comm syz.9.9637: lblock 0 mapped to illegal pblock 48 (length 1) [ 777.073371][ T5102] __quota_error: 56 callbacks suppressed [ 777.073384][ T5102] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 777.073462][ T5102] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.9637: Failed to acquire dquot type 0 [ 777.083122][ T5102] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 777.083421][ T5102] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.9637: mark_inode_dirty error [ 777.163751][T24313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 777.172918][ T5102] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 777.172966][ T5102] EXT4-fs (loop9): 1 orphan inode deleted [ 777.173352][ T5102] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 777.193535][T24321] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:30: lblock 1 mapped to illegal pblock 1 (length 1) [ 777.213354][T24321] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 777.213380][T24321] EXT4-fs error (device loop9): ext4_release_dquot:6981: comm kworker/u8:30: Failed to release dquot type 0 [ 777.214712][T24313] bond0 (unregistering): Released all slaves [ 777.224584][ T4784] chnl_net:caif_netlink_parms(): no params data found [ 777.252120][ T29] audit: type=1400 audit(1763860067.800:69488): avc: denied { create } for pid=5113 comm="syz.3.9638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 777.323254][ T29] audit: type=1400 audit(1763860067.870:69489): avc: denied { bind } for pid=5113 comm="syz.3.9638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 777.408469][T24313] hsr_slave_0: left promiscuous mode [ 777.414815][T24313] hsr_slave_1: left promiscuous mode [ 777.415178][T24313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 777.427718][T24313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 777.454336][T24313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 777.454355][T24313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 777.468073][T24313] veth1_macvtap: left promiscuous mode [ 777.468112][T24313] veth0_macvtap: left promiscuous mode [ 777.468220][T24313] veth1_vlan: left promiscuous mode [ 777.468255][T24313] veth0_vlan: left promiscuous mode [ 777.586052][ T1658] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.595725][ T1658] EXT4-fs error (device loop9): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 777.614081][ T1658] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 777.624011][ T1658] EXT4-fs error (device loop9): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 777.649600][T24313] team0 (unregistering): Port device team_slave_1 removed [ 777.674886][T24313] team0 (unregistering): Port device team_slave_0 removed [ 777.728026][ T29] audit: type=1400 audit(1763860068.280:69490): avc: denied { shutdown } for pid=5140 comm="syz.9.9639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 777.846161][ T29] audit: type=1400 audit(1763860068.400:69491): avc: denied { setopt } for pid=5180 comm="syz.9.9641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 777.864351][ T5185] 8021q: adding VLAN 0 to HW filter on device bond2 [ 777.885162][ T5185] bond2 (unregistering): Released all slaves [ 777.899065][ T5184] netlink: 'syz.9.9641': attribute type 10 has an invalid length. [ 777.907068][ T4391] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 777.920013][ T4784] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.927222][ T4784] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.934921][ T4784] bridge_slave_0: entered allmulticast mode [ 777.941816][ T4784] bridge_slave_0: entered promiscuous mode [ 777.948651][ T5114] lo speed is unknown, defaulting to 1000 [ 777.958293][ T5184] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 777.967376][ T5184] team0: Failed to send options change via netlink (err -105) [ 777.974946][ T5184] team0: Port device dummy0 added [ 777.980550][ T4391] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 777.989543][ T4391] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 778.000985][ T4784] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.008297][ T4784] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.016717][ T4784] bridge_slave_1: entered allmulticast mode [ 778.025093][ T4784] bridge_slave_1: entered promiscuous mode [ 778.039568][ T4391] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 778.048098][ T5265] loop9: detected capacity change from 0 to 1024 [ 778.069057][ T5265] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 778.090838][ T4784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.123506][ T4784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.136468][ T1658] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.178068][ T4784] team0: Port device team_slave_0 added [ 778.192433][ T4784] team0: Port device team_slave_1 added [ 778.226672][ T5177] lo speed is unknown, defaulting to 1000 [ 778.237122][ T4784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 778.244266][ T4784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 778.270505][ T4784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 778.287692][ T5380] loop9: detected capacity change from 0 to 512 [ 778.304594][ T4784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 778.311555][ T4784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 778.337667][ T4784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 778.343314][ T5380] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.9644: inode has both inline data and extents flags [ 778.369916][ T5380] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.9644: couldn't read orphan inode 15 (err -117) [ 778.384979][ T5380] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.398669][T24313] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.430383][ T4391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.443245][ T5413] FAULT_INJECTION: forcing a failure. [ 778.443245][ T5413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 778.456411][ T5413] CPU: 1 UID: 0 PID: 5413 Comm: syz.3.9645 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 778.456476][ T5413] Tainted: [W]=WARN [ 778.456483][ T5413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 778.456496][ T5413] Call Trace: [ 778.456502][ T5413] [ 778.456511][ T5413] __dump_stack+0x1d/0x30 [ 778.456535][ T5413] dump_stack_lvl+0xe8/0x140 [ 778.456621][ T5413] dump_stack+0x15/0x1b [ 778.456697][ T5413] should_fail_ex+0x265/0x280 [ 778.456732][ T5413] should_fail+0xb/0x20 [ 778.456750][ T5413] should_fail_usercopy+0x1a/0x20 [ 778.456771][ T5413] _copy_from_user+0x1c/0xb0 [ 778.456927][ T5413] copy_from_bpfptr+0x5c/0x90 [ 778.456951][ T5413] bpf_prog_load+0x73b/0x1100 [ 778.456982][ T5413] ? security_bpf+0x2b/0x90 [ 778.457012][ T5413] __sys_bpf+0x469/0x7c0 [ 778.457040][ T5413] __x64_sys_bpf+0x41/0x50 [ 778.457143][ T5413] x64_sys_call+0x2aee/0x3000 [ 778.457168][ T5413] do_syscall_64+0xd2/0x200 [ 778.457193][ T5413] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 778.457225][ T5413] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 778.457339][ T5413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.457362][ T5413] RIP: 0033:0x7f1a2ba7f749 [ 778.457380][ T5413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.457440][ T5413] RSP: 002b:00007f1a2a4df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 778.457463][ T5413] RAX: ffffffffffffffda RBX: 00007f1a2bcd5fa0 RCX: 00007f1a2ba7f749 [ 778.457478][ T5413] RDX: 000000000000002e RSI: 0000200000000080 RDI: 0000000000000005 [ 778.457493][ T5413] RBP: 00007f1a2a4df090 R08: 0000000000000000 R09: 0000000000000000 [ 778.457507][ T5413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.457521][ T5413] R13: 00007f1a2bcd6038 R14: 00007f1a2bcd5fa0 R15: 00007fff1c162638 [ 778.457539][ T5413] [ 778.463300][ T5380] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.9644: bg 0: block 320: padding at end of block bitmap is not set [ 778.537937][ T4784] hsr_slave_0: entered promiscuous mode [ 778.683789][ T1658] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.694251][ T4784] hsr_slave_1: entered promiscuous mode [ 778.700127][ T4784] debugfs: 'hsr0' already exists in 'hsr' [ 778.705935][ T4784] Cannot create hsr debugfs directory [ 778.725918][T24313] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.747318][ T5430] loop3: detected capacity change from 0 to 8192 [ 778.762383][ T5438] loop9: detected capacity change from 0 to 2048 [ 778.794058][ T4391] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.824203][T24313] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.842156][T24314] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.849257][T24314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.857690][ T5438] loop9: p1 p3 p4 [ 778.858777][T24314] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.863009][ T5438] loop9: p4 size 589824 extends beyond EOD, truncated [ 778.868534][T24314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.882254][ T5461] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 778.883835][ T29] audit: type=1326 audit(1763860069.430:69492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5437 comm="syz.9.9647" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74f476f749 code=0x0 [ 778.925857][T24313] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.948684][ T4391] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 779.019270][ T29] audit: type=1326 audit(1763860069.570:69493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.3.9651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2ba7f749 code=0x7ffc0000 [ 779.042923][ T29] audit: type=1326 audit(1763860069.570:69494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.3.9651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a2ba7f749 code=0x7ffc0000 [ 779.066417][ T29] audit: type=1326 audit(1763860069.570:69495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.3.9651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2ba7f749 code=0x7ffc0000 [ 779.069447][ T5177] chnl_net:caif_netlink_parms(): no params data found [ 779.120157][ T5598] FAULT_INJECTION: forcing a failure. [ 779.120157][ T5598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 779.133398][ T5598] CPU: 0 UID: 0 PID: 5598 Comm: syz.3.9652 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 779.133440][ T5598] Tainted: [W]=WARN [ 779.133448][ T5598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 779.133538][ T5598] Call Trace: [ 779.133545][ T5598] [ 779.133554][ T5598] __dump_stack+0x1d/0x30 [ 779.133580][ T5598] dump_stack_lvl+0xe8/0x140 [ 779.133603][ T5598] dump_stack+0x15/0x1b [ 779.133675][ T5598] should_fail_ex+0x265/0x280 [ 779.133713][ T5598] should_fail+0xb/0x20 [ 779.133756][ T5598] should_fail_usercopy+0x1a/0x20 [ 779.133779][ T5598] _copy_from_iter+0xd2/0xe80 [ 779.133805][ T5598] ? kmem_cache_free+0xe4/0x3d0 [ 779.133836][ T5598] ? pskb_expand_head+0xf7/0x880 [ 779.133871][ T5598] ? skb_free_head+0x87/0x150 [ 779.133889][ T5598] skb_copy_datagram_from_iter+0xb1/0x490 [ 779.133995][ T5598] tun_get_user+0xafb/0x26e0 [ 779.134032][ T5598] ? ref_tracker_alloc+0x1f2/0x2f0 [ 779.134152][ T5598] ? selinux_file_permission+0x1e4/0x320 [ 779.134195][ T5598] tun_chr_write_iter+0x15e/0x210 [ 779.134220][ T5598] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 779.134243][ T5598] vfs_write+0x52a/0x960 [ 779.134295][ T5598] ksys_write+0xda/0x1a0 [ 779.134324][ T5598] __x64_sys_write+0x40/0x50 [ 779.134351][ T5598] x64_sys_call+0x2802/0x3000 [ 779.134439][ T5598] do_syscall_64+0xd2/0x200 [ 779.134462][ T5598] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 779.134519][ T5598] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 779.134555][ T5598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.134611][ T5598] RIP: 0033:0x7f1a2ba7f749 [ 779.134629][ T5598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.134700][ T5598] RSP: 002b:00007f1a2a4df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 779.134793][ T5598] RAX: ffffffffffffffda RBX: 00007f1a2bcd5fa0 RCX: 00007f1a2ba7f749 [ 779.134806][ T5598] RDX: 000000000000fdef RSI: 0000200000000280 RDI: 0000000000000005 [ 779.134821][ T5598] RBP: 00007f1a2a4df090 R08: 0000000000000000 R09: 0000000000000000 [ 779.134834][ T5598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.134847][ T5598] R13: 00007f1a2bcd6038 R14: 00007f1a2bcd5fa0 R15: 00007fff1c162638 [ 779.134866][ T5598] [ 779.371018][T24313] bridge_slave_1: left allmulticast mode [ 779.376789][T24313] bridge_slave_1: left promiscuous mode [ 779.382454][T24313] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.390600][T24313] bridge_slave_0: left allmulticast mode [ 779.396405][T24313] bridge_slave_0: left promiscuous mode [ 779.402082][T24313] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.475001][T24313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.485138][T24313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 779.494535][T24313] bond0 (unregistering): Released all slaves [ 779.531341][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.538623][ T5177] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.546167][ T5177] bridge_slave_0: entered allmulticast mode [ 779.552577][ T5177] bridge_slave_0: entered promiscuous mode [ 779.559730][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.566816][ T5177] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.574201][ T5177] bridge_slave_1: entered allmulticast mode [ 779.580680][ T5177] bridge_slave_1: entered promiscuous mode [ 779.589355][T24313] hsr_slave_0: left promiscuous mode [ 779.597822][T24313] hsr_slave_1: left promiscuous mode [ 779.604060][T24313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 779.611455][T24313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 779.619104][T24313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 779.626549][T24313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 779.638047][T24313] veth1_macvtap: left promiscuous mode [ 779.644907][T24313] veth0_macvtap: left promiscuous mode [ 779.650575][T24313] veth1_vlan: left promiscuous mode [ 779.656265][T24313] veth0_vlan: left promiscuous mode [ 779.728786][T24313] team0 (unregistering): Port device team_slave_1 removed [ 779.738319][T24313] team0 (unregistering): Port device team_slave_0 removed [ 779.788777][ T5177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.800684][ T5177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.812386][ T4391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 779.831972][ T5728] smc: net device hsr0 applied user defined pnetid SYZ2 [ 779.833109][ T5177] team0: Port device team_slave_0 added [ 779.856679][ T5177] team0: Port device team_slave_1 added [ 779.880545][ T5177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.887635][ T5177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.913738][ T5177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.926363][ T5177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.933380][ T5177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.959356][ T5177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.006121][ T5177] hsr_slave_0: entered promiscuous mode [ 780.012651][ T5177] hsr_slave_1: entered promiscuous mode [ 780.018740][ T5177] debugfs: 'hsr0' already exists in 'hsr' [ 780.024554][ T5177] Cannot create hsr debugfs directory [ 780.030169][ T5767] lo speed is unknown, defaulting to 1000 [ 780.071883][T24319] ================================================================== [ 780.079984][T24319] BUG: KCSAN: data-race in alloc_pid / copy_process [ 780.086587][T24319] [ 780.088914][T24319] read-write to 0xffffffff8685ff98 of 4 bytes by task 24314 on cpu 1: [ 780.097060][T24319] alloc_pid+0x539/0x720 [ 780.101308][T24319] copy_process+0xe25/0x2000 [ 780.105902][T24319] kernel_clone+0x16c/0x5c0 [ 780.110414][T24319] user_mode_thread+0x7d/0xb0 [ 780.115098][T24319] call_usermodehelper_exec_work+0x41/0x160 [ 780.120996][T24319] process_scheduled_works+0x4ce/0x9d0 [ 780.126466][T24319] worker_thread+0x582/0x770 [ 780.131052][T24319] kthread+0x489/0x510 [ 780.135120][T24319] ret_from_fork+0x122/0x1b0 [ 780.139710][T24319] ret_from_fork_asm+0x1a/0x30 [ 780.144478][T24319] [ 780.146797][T24319] read to 0xffffffff8685ff98 of 4 bytes by task 24319 on cpu 0: [ 780.154424][T24319] copy_process+0x17fc/0x2000 [ 780.159104][T24319] kernel_clone+0x16c/0x5c0 [ 780.163618][T24319] user_mode_thread+0x7d/0xb0 [ 780.168306][T24319] call_usermodehelper_exec_work+0x41/0x160 [ 780.174196][T24319] process_scheduled_works+0x4ce/0x9d0 [ 780.179663][T24319] worker_thread+0x582/0x770 [ 780.184250][T24319] kthread+0x489/0x510 [ 780.188322][T24319] ret_from_fork+0x122/0x1b0 [ 780.192912][T24319] ret_from_fork_asm+0x1a/0x30 [ 780.197675][T24319] [ 780.199992][T24319] value changed: 0x80000121 -> 0x80000122 [ 780.205704][T24319] [ 780.208024][T24319] Reported by Kernel Concurrency Sanitizer on: [ 780.214173][T24319] CPU: 0 UID: 0 PID: 24319 Comm: kworker/u8:28 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 780.225803][T24319] Tainted: [W]=WARN [ 780.229601][T24319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 780.239657][T24319] Workqueue: events_unbound call_usermodehelper_exec_work [ 780.246769][T24319] ================================================================== [ 780.271749][ T4391] veth0_vlan: entered promiscuous mode [ 780.306641][ T4784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 780.315984][ T4784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 780.328657][ T4784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 780.340369][ T4784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 780.350888][ T4391] veth1_vlan: entered promiscuous mode [ 780.374712][ T4391] veth0_macvtap: entered promiscuous mode [ 780.383094][ T4391] veth1_macvtap: entered promiscuous mode [ 780.400708][ T4391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 780.413535][ T4391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 780.433824][T24312] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.442819][T24312] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.461728][ T4784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.471788][T24312] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.485770][T24312] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.504851][ T4784] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.514536][T24312] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.521622][T24312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.536146][T24317] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.543240][T24317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.610028][ T4784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 780.639131][ T5177] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 780.649133][ T5177] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 780.662255][ T5177] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 780.671944][ T5177] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 780.713261][ T4784] veth0_vlan: entered promiscuous mode [ 780.724458][ T4784] veth1_vlan: entered promiscuous mode [ 780.738532][ T5177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.755205][ T4784] veth0_macvtap: entered promiscuous mode [ 780.762783][ T4784] veth1_macvtap: entered promiscuous mode [ 780.770260][ T5177] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.782252][T24313] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.789348][T24313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.799715][T24312] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.806823][T24312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.821625][ T4784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 780.837263][ T4784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 780.853289][T24317] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.862006][T24317] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.875059][T24317] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.885419][T24317] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.942796][ T5177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.003620][ T5177] veth0_vlan: entered promiscuous mode [ 781.011219][ T5177] veth1_vlan: entered promiscuous mode [ 781.026374][ T5177] veth0_macvtap: entered promiscuous mode [ 781.034056][ T5177] veth1_macvtap: entered promiscuous mode [ 781.045008][ T5177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 781.057812][ T5177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.068332][T24312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.077357][T24312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.086343][T24312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.095651][T24312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0