last executing test programs: 2.085415904s ago: executing program 3 (id=129): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f00000005c0)={[{@acl}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}]}, 0x1, 0x7bc, &(0x7f0000001740)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) syz_genetlink_get_family_id$nfc(0x0, r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3], 0x4c}}, 0x0) 1.991295225s ago: executing program 3 (id=134): syz_emit_ethernet(0xf87, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="fd000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff], 0x48) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000010c0)={@id={0x2, 0x0, @b}, 0x40, 0x0, '\x00', @b}) r6 = perf_event_open(0x0, 0x0, 0xfffffdfffffffffc, 0xffffffffffffffff, 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) gettid() timer_create(0x1, 0x0, &(0x7f0000bbdffc)) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r8, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x3, 0x27, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x1f, 0xc, &(0x7f0000001180)=ANY=[@ANYRESOCT, @ANYRESDEC=r9, @ANYRESDEC=r5, @ANYRES32, @ANYRESOCT=r4, @ANYRES8=r3, @ANYRES8=r4, @ANYRES16=r5, @ANYRES16=r9], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r10}, 0x3d) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000001000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='rxrpc_tx_fail\x00', r11}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r12 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) 1.914316776s ago: executing program 2 (id=139): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x185080, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000004c0)=0x14) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x79, 0x3c5, 0x660, 0x3, r1, 0xb3, '\x00', r2, r3, 0x1, 0x4, 0x1, 0xa, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @multicast2, 0x2}, @qipcrtr={0x2a, 0x3, 0x4001}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x4, 0x2}) 1.806821937s ago: executing program 2 (id=141): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x64000600) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 1.256475964s ago: executing program 1 (id=144): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f00000005c0)={[{@acl}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}]}, 0x1, 0x7bc, &(0x7f0000001740)="$eJzs3ctrXNcZAPDvjl6W7FYqFFp3JSi0AuNR5ap2C124dFEKNRjatW0xGgtXI43RjIwlBLYJgSwSSEIWgWTjdR7OLts8tvF/kUWwcRLZxCGLMOHOQxpJM4rG0cyI+PeDq3vOPXd0zjfnPs7MvcwN4Lk1mf7JRJyMiFeTiPH68iQihqqpwYjztfWebm7k0imJSuW/XyXVdZ5sbuSi6TWp4/XMbyPikxcjTmX21ltaW1+cKxTyK/X8dHnp+nRpbf30taW5hfxCfvnszOzsmXN/OXf28GL95v76iYev/euP75//7oXf3Hvl0yTOx4l6WXMch2UyJuvvyVD6Fu7wz8OurM+SfjeAZ5LumgO1vTxOxngMVFNtjPayZQBAt9yKiEpnXu5wfQDgyEl2nv/vD/atJQBAbzS+B3iyuZFrTP39RqK3Hv0jIo7V4m9c36yVDNav2R2rXgcde5LsuDKSRMTEIdQ/GRFvf3jp3XSKttchRw6hJoCdbt+JiCsTk3uP/8meexY69af9Ciu1Y9rkrsXP2/kH+umjdPzz11bjv8zW+CdajH9GWuy7z+LH9//Mg0Oopq10/Pf3pnvbnjbFXzcxUM/9ojrmG0quXivk02PbLyNiKoZG0vxMddXWd0FNPf7+cbv6m8d/X7/+/3fS+tP59hqZB4O7hn/zc+W5nxp3w6M7Eb8bbBV/stX/SZvx78UD1vHvv730VruyNP403sa0N/7uqtyN+EPL/t/uy2Tf+xOnq5vDdGOjaOGDz98ca1f/dv+PVOdp/Y3PAr2Q9v/Y/vFPJM33a5Y6r+Ozu+Mftytr3v5bx996+x9O/ldND9eX3Zwrl1dmIoaT/+xdfmb7tY18Y/00/qnft97/223/mfq9sVe2cvsbfPjle/V/1TL+qtvt4u+uNP75jvp/n0Sl/ppdRfeeLg60q/9g/T9bTU3Vlxzk+LdPSy81L3nmNw4AAAAAAAAAAAAAAAAAAAAAAAAAOpCJiBORZLJb6Uwmm609w/vXMZYpFEvlU1eLq8vzUX1W9kQMZRo/dTne9HuoM/Xfw2/kz+zK/zkifhURb4yMVvPZXLEw3+/gAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDu+M7n/99KZ9lsreyLkX63DgDommP9bgAA0HPO/wDw/Ons/D/atXYAAL3T8ef/StKdhgAAPXPg8/+V7rYDAOgd1/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADososXLqRT5dvNjVyan7+xtrpYvHF6Pl9azC6t5rK54sr17EKxuFDIZ3PFpbb/6HZtVigWr8/G8urN6XK+VJ4ura1fXiquLpcvX1uaW8hfzg/1LDIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOLjS2vriXKGQX5HYNzF6NJpxZBKDcSSa8bNPDPet9uajxGj/DlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR9wPAQAA//8zpCOb") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) syz_genetlink_get_family_id$nfc(0x0, r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3], 0x4c}}, 0x0) 1.113676916s ago: executing program 4 (id=146): bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095", @ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffb, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a00000007000000070000000600000000000000", @ANYRES32, @ANYBLOB="00020040000000001700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x45ee, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) capset(&(0x7f0000000400)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r8, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000001000"/20, @ANYRES32=r3, @ANYBLOB='J\x00'/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="0500"/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) fcntl$dupfd(r1, 0x5f74f7f75fad2da2, r9) unshare(0x2040400) r10 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_DISCSIGNAL(r6, 0x8010550e, &(0x7f0000000000)={0x10, &(0x7f0000000140)="23fe5331c12aab2bec16d200b3b434bca2eb13acc98ed187210440bbb82f587539e55b32e51befd98125149e624aaefea5b96e362394dee4b9e157b97b9f1b4493fdab1e70cf1ce8b9cc34257a51ae0af193d239e95425b1f797c9bd2add108b82ac341c50591a688b0b0b35143d18bb700799bc7d0b31cf86180ead33eb11e8d301da1864641b49"}) 1.101790276s ago: executing program 1 (id=147): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0}, 0x10400, 0xffffffff, 0x6, 0x6, 0x4, 0x5, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x6, 0xd, "85de"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 1.086830916s ago: executing program 0 (id=148): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)={0x1c, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0x5, 0x4, 0x0, 0x1, [@generic='6']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1.082790126s ago: executing program 3 (id=149): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x54}}, 0x40000c4) 1.016372137s ago: executing program 4 (id=150): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="b8100000000000001001"], 0x10b8}, 0x0) 1.015692237s ago: executing program 3 (id=152): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48080, 0x6d) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40081271, &(0x7f0000001080)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 1.009306927s ago: executing program 0 (id=153): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "5a5f0020008a3fc945e8724a114177ffffef00"}) r5 = syz_open_pts(r4, 0x0) read(r5, &(0x7f0000000000)=""/158, 0x9e) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0101020000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0xba01}, 0x810) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="050000000000000073113700000000008510002002000000850000000000000095000810000000009500a5050000000088575ed30800202891974534936a3ad4c6f367497da0ac39701bac5a463244d3988da5895c4ceb612221167cb1e6fb546c707f1d99f15f1f64dfa8d96bb31e595f498426bf378dd7e4a73ed2b3be79ed7f03cee8726e5fa78f01fbcab83cc9ba471578881b251987d55375cb2ea7ce0153dce53f04a81ae9e8d0d5ac0393a37584fdf76ec9c278b5c2a73f8de8be1a0f578d4c9f1461e83074a67008163893e6685dafa14256e2a2"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="b3884eb938f4ecc596f2497b2a3498e2ea124456a72baf7792230b2da8fbcd0d52645dd05620790fd0f78f4cd4181c3b586070dbd1abe2a6f608a5042f54560068bbd1ab148e37b745f90e857375b904698b1df7893ddf13ca1fff42e78eaa9a9b2fcd75a12821a47a25a4279d2a29ccafeadffb945275c4175c52c3ba18708b2a5ee1eadd1638234654962900bec19b94655d4336ca182eb721eec9b3ed7417df97804b13f7138d6605e39e3574fff0d4a3f801cdf9", @ANYRES16=r6, @ANYBLOB="01002cbd7000fbdbdf250400000014000600626f6e643000"/34], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8410) socket$inet6_mptcp(0xa, 0x1, 0x106) shmget(0x3, 0x2000, 0x219, &(0x7f0000ffb000/0x2000)=nil) shmget(0x3, 0x3000, 0x8, &(0x7f0000ff4000/0x3000)=nil) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r8}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000001400048008000140000000000800024000000b002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xb4}}, 0x0) 975.812258ms ago: executing program 3 (id=154): socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000feffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffffffeffffffffd, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000500)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x10001, 0xd0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x0, {[0xffffffff]}}, 0x5c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="2bd1598df75c98a6936444aa68d948213365771a20eb8b0338634fc5b0ef9432584af949108856571424758106273e2a06a088a30c2b700286f933c1b5a338e8f15fff2559eb545e1e8cfcb73d18c15dfaf04550bbd479aca9d59f408a7f8647ee014f5c0325ae447fc915d6a5ba5ddd204b1d4f3c83fc3a8b2e79726653e96d", 0x80}], 0x1}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000400"/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="189fed00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000029ede4b99913d872b89ee4a692ab3e08770e4e0f6ffaf2d6b1b3e5d877", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001140)={&(0x7f0000000540)='rpcb_unregister\x00', 0xffffffffffffffff, 0x0, 0x7ff}, 0x18) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501ef663", 0x0, 0x800004, 0x10030, 0x0, 0x0}) 975.282048ms ago: executing program 4 (id=155): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x185080, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000004c0)=0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @multicast2, 0x2}, @qipcrtr={0x2a, 0x3, 0x4001}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x4, 0x2}) 959.828698ms ago: executing program 1 (id=156): socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x800000000000002, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000feffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffffffeffffffffd, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000500)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x10001, 0xd0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x0, {[0xffffffff]}}, 0x5c) 875.124299ms ago: executing program 2 (id=157): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r5, 0x29, 0x10, &(0x7f0000000000)=0x9, 0x4) sendmmsg(r5, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}], 0x1, 0x4000810) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x10, 0xfffc}, {}, {0x4, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x998, 0x3, 0x4}, {0x6189, 0x6, 0x100, 0x9}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc004884}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r9, 0x17, &(0x7f00000001c0)={&(0x7f0000002000)={[{&(0x7f0000000180)="40e3bc1f6f", 0x5, 0x3}, {&(0x7f0000000340)="48e6efe24d5faab1b23b5cd7d38a68531df1485789f96ab8d01f894082d01df9a5d7b747f4a1a60d8931200f4d107fa6573aa7015162f5ba6a14ea6ea95bf9d02563c37268b44ba4be3135c49b0dadc0790c51bfa1e768d5d436633332269b84d6dcb0c7f5ca8cb9dc9dd71ed030dc4eb43af78ab733f31f518f7d13f3c6bdcb779e3b0f21ddaa2d02576cc5d3f4a8798ae2f932a206ece838a30243f5092cbd82a6db612d5606a654d8318922e608235596d1d27c40efd646cdd2a7b5b6949b3d754607dac2a56ed568fd10b47f68fec5f7c46aaceaabb0ae78301d2826826a9a59c109016a1d6daa8faad72b4caaf3d98af5f57c5c180fb93e3a714a0d", 0xfe, 0x3}, {&(0x7f00000004c0)="af7ae2b27bd47b4f9f16fd0b75dd72c2081a8b9de0dbdccdd4b93ab67c40d5062b46efd87fc29099a735b6f226fcc2ab7fa1d1c509d082914e1a211b6b3ce39470a66fecc5a0c940d1fd21ff6237c4e249306556be8504ad95d40b8b43c981c73e5115a115c29ffd64218d658d9693c685ca37797568504ae5360834a2e235cd58b068fd0d2e149b54a1d20b09813114efa50d134c", 0x95, 0x1}, {&(0x7f0000000a00)="9b9517fa1c061a1ad1982eb272f6d91b9bedb87a2d22022fe6b688b2824d585e695551a3cdf1c70ccc7de7e4ec1356b121f50bccae427c3b6e4692b058f4706ef593921aed1120952698351a5422c15606fc0c5eb2e2f4cb34b0c3543b36a12651c14724aa870d957add9a031e02f6f6eeb831c71d3e5b9e0d695a652c88152f2700abba4b9b1bbc1a84fb6a2bbf5ee45322595cf48079c601326b92b039d9b6dde730d705ec8da101e06e7e5ec2b0422c8d2d6d35ac8fab8d30a8d3b29d939bb6d498b874b0ce5b368f3ec35c6252c2490e6f0f47ed7ae6f206c89aefbeb6a2139549ded0af10529b482cc29fb7cda377b4a9392370f1860408ed76c93ab7f6affc52cd8d5858024bf18349ec630226ddc2309bd1f9b6e1109b24e78f0fcdf7ebcbc9062e68198de61aa9a80412cb6b5130121c1a6b2cd72ea92815e7437f1b84169d8456903caedd75327be9fbf6b364ffc04f9d94ed81c37c9edb6f2c534b78ed042fb448b4c64775a0999b080849dc0856e26220cd146f3d8208d987ff06ab6d202f8d1502c54bf8150a13a4b932574e821655a55d25be84a26815bb6935109fcd4c367e756f435d4a7b4bee734b00ebe9e0ec2601082594b71172505760bc0f3fa942b0fc2fc18b3c1db024609cb641717894507da2147146bb0431687e0838e7efd1d787211ca8f8ee97b16a3544e55b53ae52405e6cbd6397ff824b3d49e6a06fd9ecb1c38425074fae8e1d0026155311529106eed6577dc6126e2a4178f264465e70f71b029d01b17d22d552c223443f6f7fb2ffc3ee4f4c8a39df241bba2d204a2e06807900b4319618586ec19129ea8b993a46c9528c5f1adca692497bf9dc55b8aebe1af12f10d14848ee3830673251b6779b7cd02723e7f366729e2dac23d3292d9a9257226f1b2f3921fbb63acf720950710bdea86dfe8412afc6e9697028753b83bdf39ff78ad6116f321cfe7f2e2a4aaa1f06b285b1ed15c50c470f9468f9bc7ce6bf98d61368474518eed75ce79d4f09981cf068a6c553889d61fcbc14af0d982710dc717a6216bca06195db6f4b9e8854883ba9287067471d75bc603f3cf3413edb3bc159b0c478ca7754d61b68973ff42cf8b9ed422ad3d4bfcec7c120ed3c7e151ad9296530744fe801ab34d857ea21cb37f06f33c5e9e70b0115ee7fd14e48efb1ee0357dc57d8c4f350913cb50a8967777e6c4d0e086b135fb643e49b86374d9b79c31d0283547a16cad60c99be5a3ed9be209e4034ba0237959b6b435db526782b36b35eb8a2b14ac78e00015b43ba6c09b39b4bbd37993b9160aeb82de63d599168f53777ae8639060415f7fe005bce0e24de218a5c374bb2c7e2f1921fc0a04d8eb937f1ce622a71b4360e2bb969c8715e126ef2b3391e6471ea639b01ad26040d60f8abd61f78516171d4cb1dca78f12de398265c6dadcb5ae5bae1e59e0387989bbc67320755a987414419d6f6ecae12b010818809219686179758ca3049a9de4ddfe015463862183fc302adc4d01e0b92e338ad37d7d382bbf973921ab9cea1d9690ace425eb0672fde3e0bab86b1704f95263d7833cd3c43003a3090b7250c894e351dbe25b14849d372ddb414aee7ee5e7b76b9c1753bcd279c5c5bef56e1f6f10258ff41a7154d6a074c0472036416d77972d0d195f695817b5cf8ec02220b0a0d4f6184c72b9af4817f739d746e0f8881f2a8628ebeb3d311f02f6ba0576dcd5abbc3699d693e7e6d6246e48840f42cd51f7a86fe9be2d0a082dcd9e4a197346aa8ed08906ec15b6e79aa1a2588200fbe953f90a0c69cf492bebcc203c83e53ca425aeddcf6a58fdae89824b475ad61c8af429bbea343be2bd86fcd001659f629705f660934d6213074bb99f06f32d57c4211034c1225d7ea1289364a81214e849a4213461e20434dfbcec3e13f0921877f8ba39eec5b711d19476de06135c8609d924f4f35d382f4662849a468365d23f4eb85e6d236865188f88e3d141862ae637764f54d92b74967934b5f8aa6dfd80e5a143026e79cb2f6fef2765b416daf3d662163d2aba00ae2d376585030147520ae18c7acc7212cce1bec60917193ddfb0973389a58722d4fc9ee8c3f97a2875cf2590508ad9c3394db721a3c9eaccf87694114ff9c3d135befe58c7fed556b03e37f693f27ef42acd23c831bc097be44ce4694b5be9bf4ed8dcae6e1eac8b0018e0db4bfe737ae9b89e5b26eac9f2f2bdab350f4b16f7794a1e12c13854baa628ec4d7f3977123dd9bbfa65067deac9cba6265bee7f1f4b58a7b632e1947aaf2470e6e2bd90229ecfe555b7dfb71548fd5342be03174481406f5809171b6506abe28d567cd2c4c25b0d228f2471772692d4d9e2695383416581799cff8510fe53b4ae7b047054a632162ed39f4b1ae1b6c0b7c5f0425a75e7daf63c6f167ab2871335da6d2e6d09a99f983e29e663134466060117f39ffe1e2cad44ef0ec0996bc7eae06c2f4ce883f20cf82309afa879e996e5373b4e93806dfd73013181f9f58ff38aa80179a0c47f207988afaa5cc87abaa0334a86fb54947aa93a3418967a75d044888cf8c24592d2254ae4583736b2c76f33d559af57f1226a69a82beaab2d94e32c451f2546d8583c447eff4986b1f33994f05ebcdf8c148c6602673eb2c5a2902b279afb0778e44a281e38a05df240413bab4eac110b3ca09dfc420962a93d76f9e5d4db7e1060cd9889b26b0d0c75cac89fda107bfa0415ac8c359836c7960c3fd804abe4ca398ba1e7ceb52f9816908f39401182603a1f65b7c3039bf0bf8d8d0213fefcc5e11988e51053d77c1693128c74cf8e43d62ba3fc25a1dba2c329797d1c1f76f20deecb19f5081fbb1cb40be0b5c61d49fab766209a8559bcec056ef25abe72b7d3a199dc35685c1bcd1e34a8bf96e839f4238ac001b53e54f57712560778aa2aad81c26813c92dadff85dbab61f5512e56cbaf636a176cd7034239071e97667994ec5536a0928ecc7d8ea70d8ade239fa047119b2f3d817d45f5a8991b2be0a7cdd095e1e6a4232c110e79da7673d7b5e6f2e6a31e4181294e3ec4b694f74a7c32177a80ef0fb497a8789df16f2ee980e19922432fdb574a8bbf31eacdb3cc766f1a838746014e6d23847b4f236d53ab0d1b102c96f326167ad430a1c81006d82809d67af0b056eebeb2a4c183545e54cef834fdebbc4654d29365e75ecfdca0d30a9d1b12b886b5853c8cfcce71a0e08efd63dc1858bcbe2611246086e7ec4c1d9a02710251560182dc47b978429978f432c8049ebc7b91e62a3ca1a2693670681e19ede3461b44660d6aa2441595476f9c9092f17f91088e6ba52883f5f76e2689d54f1bd3f0f3cc3a8d879a9f0553fca62dd720a6227247159020ae5f4d441938e6bbe7f7b83c1d89302f847fc05b40f814be786119f360999b729cbc06a9eb21e73eea5504588882141e65ecf86ce6abcf967b9a2d498ad4cdbd26a60731bd2608119ca69d5a7420af90979d3fe102d51ceac608c6f0fd4ebc164a3ad637e5253958cce4f57667a68f7f5de92b3388b5f6288463699465b89879ad0174cf125771e768e8c8cc2fab234ff7dac9e0c68f86d2b359801cb1c50491a8a33bda7c20d5328137e0d35ea54a74821958166b8341c574ae52059f0fee6bb865087a827d17d8686628922508b6a16130bd1c9c1c1a3f9fbee8ee7ddf8a76c1cb0793363aa6859b013aadcc9a4c5afea14ff2258caa6fc47590ed092b3ce8360d56d9058682533f8cb1ef808bce4fc7868931779408e871264cada33fef47a82e9a6ded13502887a60f19794c34fd77fdea6d758a955156473c07aac18922b5cc668d593be260290a56aad821d2588b4a35a788ceb1375f1e23e3402cb9cacc7844fdb198b7039ee924d7ff7719228a11f0cd3adbd857aa5e0e33b52c6d147698655d5af346e52848fb121cf3a9f7988682565834aa91c2c033547b6185e0f3c45128fb4a06dcd401b6a3a12d0437fefc4e48e59c4d6c25b75e5ba79f57129488f17020320e4285db8d00c833d171c016b9d762c77b0394aecb0b259af005714de1801739373cf816647e2b0acc48e862ab9690aa06bede57cf50bef0fad342dafd6d8c280dbcb12a7713b950e4a52acf864b0bcd8b110fbb1ea809cd2d60a8fe06f15f8181ec3e9c6aa2ab1de2236d4d7609fa7da641a818be9d851e64c8f36f6c10e75ac9b135574af832284923c1bb205333771303164b7c9db0685280a7c88e4ee07f8aa93f074a416c804c3e4a8cc385f5c6472f64b8dc95718af9b5ee80cbdbef221ac2acaea696b5c94ac2f16f054c092a99c27f559285e6eaa0c09dafc84f7c60563748501ab7752b022d8e23a553fe0834dcd59af2b3f25d335e62d534236e2ee51a511b3dc5f2270eb50bbfcc7a36266a82b5ef6fe2b950ad7e7344d5dc2ee4aed3fc6d6afaa648dae7e04b2ea80fae0bea86883316333f9c64fc244d17c775dc97f6bf2b2e0609758cec9ae158e0ddfd825b03300623a7bcad1a334a08c823a5e377385d33a0b07e9ea1561aa30d79c1219b278ad8723594a3ee74e0bc34a1033152d2b67b27c179537a3361919d81ba9e26c63444237f008f21288425d9b5ca528fc82b0d197eb82a173109f5e2e9680bcf7ba4ed714bc7f46cd4faa0a945feced573c255d1b68861b3d8ee415684836109e8a641684efbf08f57fc5e87eb9ab2ccd5f06aa7c9333c1ad347511e3da7a5456c336ad42ef5cea5c32166ecb51bd3b60a72f22b0b7fcd7053926f0f46768f686f5ee2e26f4b854d611d177d8d1b92dbb0f18ce66358460505ab3e10d98661a43fb1d65c3c39cebc316429f2167aeffc4d3bd44347679b613a7d32b404e2025f451ad2bd6d2c0a05de0b019aef20735de813f849f5198cb3d40abcc043374a92423382cea0c5ffdc92e631dc34a6c9380f95a5d34e8e8d169a0b71564b5fe1991233757c22a4bc2e6790fdb99b4e7bb89de9fd9518142b5ea7739ff364c6ca1dae6034da36ef51281e22698764c596a83a2e500b537f3531d2eee52e4f9796e784014774467f7bd11fe9d59c2035b8c854e0e869b162cdabafab2fc5aafea10e4963b0c30a49eaf4992227c0a8e6d6ac9fadafeb206d304b7959173d33e4708c929fe48d14c16e4e3c3f81911a09233e0f0614ac3d223ce452ad1642074f8ae86e36e8679733e5e5dd5527ae6710cec1bee737015e59b7f26185623236e3508aeef12e218695da60956deb51991f332d8d0b1d09bc1227c9c2584137f571d662cdcadd48e7738cc199a039917f1733a7fd3ce9cba998b63afb4ae5dfe82f2d417b15c8d57fb37ab153b1c2f732e356a0c430497ee1af81571fb071cbb71d998ee8a40da551b53e6e98b03bc399484df27ad210f548c590b732c13fd3589660be2312a08590076daa129f23963180ea799dff3918fd99e9af32a1876756be5c8f0ca904576a3093e63fd584e5800d8e6939568d2f8b24512c0e9f051138b4b642518d2efbb314ca153629f26d2c02b9e44ef8719b058675373c8d8606148b130be4506e53a83da194e0a13501dcca1c50e8c8eea1aac34eb93d2e7355461c563af529bb65f72d0f8b23c872274e0aa95afde12c39a144163e03047d21c82887a27c6ffd7c45416f98d6e9d5ce43884d87544ab130913d78926cd7c11327d0cb7369d39916057844e7af253cfc5ac81b6a7d5f69004d1b24b52e9665d7d945429bbb96fda6aafbb56f52215b60fc3a7b71a2d0ee02beee69026955807f0ad3ea903", 0x1000, 0x2}]}, 0x4}, 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="140100002d0001000000000000600000010100800c0000000000000000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x44010}, 0x0) 734.390921ms ago: executing program 4 (id=158): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f00000005c0)={[{@acl}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}]}, 0x1, 0x7bc, &(0x7f0000001740)="$eJzs3ctrXNcZAPDvjl6W7FYqFFp3JSi0AuNR5ap2C124dFEKNRjatW0xGgtXI43RjIwlBLYJgSwSSEIWgWTjdR7OLts8tvF/kUWwcRLZxCGLMOHOQxpJM4rG0cyI+PeDq3vOPXd0zjfnPs7MvcwN4Lk1mf7JRJyMiFeTiPH68iQihqqpwYjztfWebm7k0imJSuW/XyXVdZ5sbuSi6TWp4/XMbyPikxcjTmX21ltaW1+cKxTyK/X8dHnp+nRpbf30taW5hfxCfvnszOzsmXN/OXf28GL95v76iYev/euP75//7oXf3Hvl0yTOx4l6WXMch2UyJuvvyVD6Fu7wz8OurM+SfjeAZ5LumgO1vTxOxngMVFNtjPayZQBAt9yKiEpnXu5wfQDgyEl2nv/vD/atJQBAbzS+B3iyuZFrTP39RqK3Hv0jIo7V4m9c36yVDNav2R2rXgcde5LsuDKSRMTEIdQ/GRFvf3jp3XSKttchRw6hJoCdbt+JiCsTk3uP/8meexY69af9Ciu1Y9rkrsXP2/kH+umjdPzz11bjv8zW+CdajH9GWuy7z+LH9//Mg0Oopq10/Pf3pnvbnjbFXzcxUM/9ojrmG0quXivk02PbLyNiKoZG0vxMddXWd0FNPf7+cbv6m8d/X7/+/3fS+tP59hqZB4O7hn/zc+W5nxp3w6M7Eb8bbBV/stX/SZvx78UD1vHvv730VruyNP403sa0N/7uqtyN+EPL/t/uy2Tf+xOnq5vDdGOjaOGDz98ca1f/dv+PVOdp/Y3PAr2Q9v/Y/vFPJM33a5Y6r+Ozu+Mftytr3v5bx996+x9O/ldND9eX3Zwrl1dmIoaT/+xdfmb7tY18Y/00/qnft97/223/mfq9sVe2cvsbfPjle/V/1TL+qtvt4u+uNP75jvp/n0Sl/ppdRfeeLg60q/9g/T9bTU3Vlxzk+LdPSy81L3nmNw4AAAAAAAAAAAAAAAAAAAAAAAAAOpCJiBORZLJb6Uwmm609w/vXMZYpFEvlU1eLq8vzUX1W9kQMZRo/dTne9HuoM/Xfw2/kz+zK/zkifhURb4yMVvPZXLEw3+/gAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDu+M7n/99KZ9lsreyLkX63DgDommP9bgAA0HPO/wDw/Ons/D/atXYAAL3T8ef/StKdhgAAPXPg8/+V7rYDAOgd1/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADososXLqRT5dvNjVyan7+xtrpYvHF6Pl9azC6t5rK54sr17EKxuFDIZ3PFpbb/6HZtVigWr8/G8urN6XK+VJ4ura1fXiquLpcvX1uaW8hfzg/1LDIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOLjS2vriXKGQX5HYNzF6NJpxZBKDcSSa8bNPDPet9uajxGj/DlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR9wPAQAA//8zpCOb") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) syz_genetlink_get_family_id$nfc(0x0, r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3], 0x4c}}, 0x0) 693.815271ms ago: executing program 3 (id=159): syz_io_uring_setup(0xec5, &(0x7f0000000c00)={0x0, 0x0, 0x2}, &(0x7f0000000500)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$netlink(0x10, 0x3, 0x4) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 601.745142ms ago: executing program 1 (id=160): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40006, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff01, 0x8}, 0xc4c, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES64=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYRES8=r8], 0x0, 0x208, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r11, 0x1, &(0x7f00000002c0)=ANY=[]) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) 527.173963ms ago: executing program 0 (id=161): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x41, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x1102, 0x5dd8, 0x0, 0x8, 0x5, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x8, r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futimesat(0xffffffffffffffff, 0x0, 0x0) 516.761763ms ago: executing program 2 (id=162): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x54}}, 0x40000c4) 516.352684ms ago: executing program 4 (id=163): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)={0x1c, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0x5, 0x4, 0x0, 0x1, [@generic='6']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 453.669444ms ago: executing program 0 (id=164): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 453.086244ms ago: executing program 2 (id=165): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x1100, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futimesat(0xffffffffffffffff, 0x0, 0x0) (fail_nth: 9) 394.625165ms ago: executing program 4 (id=166): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0}, 0x10400, 0xffffffff, 0x6, 0x6, 0x4, 0x5, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x6, 0xd, "85de"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 88.272239ms ago: executing program 1 (id=167): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x10001}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x1f, 0x40000000, 0x0, 0x800}, 0x8}) 87.495879ms ago: executing program 0 (id=168): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$inet(0x2, 0x1, 0x8000) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f0000000280), &(0x7f00000002c0)=0x8) close_range(r3, r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x163102, 0xfc) sendmsg$IPSET_CMD_HEADER(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, 0xc, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x200408d5}, 0x8000) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r7}, 0x10) io_getevents(0x0, 0x1, 0x0, &(0x7f0000000080), 0x0) 22.29089ms ago: executing program 0 (id=169): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "0195f0efd2581b636f293efa3040c34a2be908"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00'}, 0x37) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x103200, 0x1, 0x840000, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_read_part_table(0x60d, &(0x7f0000002200)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 21.86626ms ago: executing program 1 (id=170): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) fallocate(r3, 0x0, 0x0, 0x1001f0) fallocate(r3, 0x3, 0x2, 0x10000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x14, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5c68, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}, @alu={0x7, 0x0, 0x7, 0xc8f6f877247e9d1b, 0xc, 0x1, 0x8}, @map_fd={0x18, 0x4, 0x1, 0x0, r2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x32, &(0x7f0000000380)=""/50, 0x40f00, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[r3], &(0x7f0000000740)=[{0x5, 0x5, 0x1, 0x5}], 0x10, 0x5, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x7, &(0x7f0000000980)=ANY=[@ANYBLOB="0000eaff", @ANYBLOB="8284019d65de1054949713e983b68c3d7aa03c0c3adf2e0db0fa0419f2a60dc259e971be5108e869963104803c128488d0fae1e1a31e5e74a084b8ea5ad7377b1e765c43235558191a5586e50a52e24e36e6084823bf30b3ccf6128b7187f1d0b42dd66519b49fc937df6f9454e6dbae3d40470be4f3520d46357f54d4df5a51"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r5, 0x0, 0x68f}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x6c}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x5, r1}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x2}, 0x18) r8 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) faccessat2(r8, &(0x7f0000001400)='\x00', 0x0, 0x1100) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$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") r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r10}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$inet_udp(0x2, 0x2, 0x0) 0s ago: executing program 2 (id=171): socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x800000000000002, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000feffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffffffeffffffffd, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000500)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x10001, 0xd0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x0, {[0xffffffff]}}, 0x5c) kernel console output (not intermixed with test programs): [ 21.830496][ T29] audit: type=1400 audit(1746004298.241:81): avc: denied { read } for pid=2988 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.118' (ED25519) to the list of known hosts. [ 26.529768][ T29] audit: type=1400 audit(1746004302.941:82): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.530821][ T3291] cgroup: Unknown subsys name 'net' [ 26.552774][ T29] audit: type=1400 audit(1746004302.941:83): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.580218][ T29] audit: type=1400 audit(1746004302.971:84): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.720240][ T3291] cgroup: Unknown subsys name 'cpuset' [ 26.726512][ T3291] cgroup: Unknown subsys name 'rlimit' [ 26.857409][ T29] audit: type=1400 audit(1746004303.261:85): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.882639][ T29] audit: type=1400 audit(1746004303.261:86): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.894081][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.903263][ T29] audit: type=1400 audit(1746004303.261:87): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.921319][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.932440][ T29] audit: type=1400 audit(1746004303.261:88): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.962131][ T29] audit: type=1400 audit(1746004303.271:89): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.987088][ T29] audit: type=1400 audit(1746004303.271:90): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.011279][ T29] audit: type=1400 audit(1746004303.331:91): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.156961][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 28.268214][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 28.293358][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 28.313725][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.320949][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.328108][ T3303] bridge_slave_0: entered allmulticast mode [ 28.334656][ T3303] bridge_slave_0: entered promiscuous mode [ 28.343179][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.350335][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.357579][ T3303] bridge_slave_1: entered allmulticast mode [ 28.364179][ T3303] bridge_slave_1: entered promiscuous mode [ 28.391095][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 28.413282][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.433336][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.478958][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.486724][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.494065][ T3305] bridge_slave_0: entered allmulticast mode [ 28.500883][ T3305] bridge_slave_0: entered promiscuous mode [ 28.527945][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.535330][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.543551][ T3305] bridge_slave_1: entered allmulticast mode [ 28.551619][ T3305] bridge_slave_1: entered promiscuous mode [ 28.561461][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.570994][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.579207][ T3306] bridge_slave_0: entered allmulticast mode [ 28.590263][ T3306] bridge_slave_0: entered promiscuous mode [ 28.599780][ T3303] team0: Port device team_slave_0 added [ 28.614589][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.623800][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.632648][ T3306] bridge_slave_1: entered allmulticast mode [ 28.639607][ T3306] bridge_slave_1: entered promiscuous mode [ 28.646627][ T3303] team0: Port device team_slave_1 added [ 28.666584][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 28.703383][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.710614][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.718024][ T3313] bridge_slave_0: entered allmulticast mode [ 28.724647][ T3313] bridge_slave_0: entered promiscuous mode [ 28.732487][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.743467][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.752938][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.760066][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.786168][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.799810][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.807060][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.814931][ T3313] bridge_slave_1: entered allmulticast mode [ 28.821376][ T3313] bridge_slave_1: entered promiscuous mode [ 28.828744][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.839637][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.854330][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.861352][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.887632][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.939064][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.948924][ T3306] team0: Port device team_slave_0 added [ 28.955785][ T3306] team0: Port device team_slave_1 added [ 28.962155][ T3305] team0: Port device team_slave_0 added [ 28.981461][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.991664][ T3305] team0: Port device team_slave_1 added [ 29.007402][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.014541][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.042607][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.073646][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.080733][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.107295][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.134201][ T3313] team0: Port device team_slave_0 added [ 29.142527][ T3303] hsr_slave_0: entered promiscuous mode [ 29.148633][ T3303] hsr_slave_1: entered promiscuous mode [ 29.161989][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.169103][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.176641][ T3314] bridge_slave_0: entered allmulticast mode [ 29.183218][ T3314] bridge_slave_0: entered promiscuous mode [ 29.190239][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.197481][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.204985][ T3314] bridge_slave_1: entered allmulticast mode [ 29.211883][ T3314] bridge_slave_1: entered promiscuous mode [ 29.218341][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.225348][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.251566][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.264921][ T3313] team0: Port device team_slave_1 added [ 29.297213][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.304258][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.330188][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.363861][ T3306] hsr_slave_0: entered promiscuous mode [ 29.370071][ T3306] hsr_slave_1: entered promiscuous mode [ 29.375906][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.383555][ T3306] Cannot create hsr debugfs directory [ 29.392290][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.418849][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.438875][ T3314] team0: Port device team_slave_0 added [ 29.445539][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.452906][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.479676][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.505413][ T3314] team0: Port device team_slave_1 added [ 29.516881][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.523958][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.550313][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.590751][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.597823][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.627596][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.638893][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.646030][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.672960][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.689346][ T3305] hsr_slave_0: entered promiscuous mode [ 29.695557][ T3305] hsr_slave_1: entered promiscuous mode [ 29.701551][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.709345][ T3305] Cannot create hsr debugfs directory [ 29.753400][ T3313] hsr_slave_0: entered promiscuous mode [ 29.759687][ T3313] hsr_slave_1: entered promiscuous mode [ 29.765918][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.773658][ T3313] Cannot create hsr debugfs directory [ 29.808130][ T3314] hsr_slave_0: entered promiscuous mode [ 29.814242][ T3314] hsr_slave_1: entered promiscuous mode [ 29.820554][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.828292][ T3314] Cannot create hsr debugfs directory [ 29.898670][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.927117][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.950726][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.974559][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.006469][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.015291][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.029698][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.038690][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.077998][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.087618][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.099941][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.110101][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.143786][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.154364][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.170526][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.183184][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.216114][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.224628][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.234736][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.244035][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.253247][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.279720][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.306139][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.321787][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.329272][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.345435][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.358087][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.365322][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.383528][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.390850][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.427497][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.434634][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.458412][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.469650][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.502789][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.514715][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.531628][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.538785][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.551370][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.558491][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.578311][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.588322][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.595904][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.611025][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.618516][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.651570][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.667741][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.680961][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.700383][ T1396] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.708265][ T1396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.721125][ T1396] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.729055][ T1396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.813334][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.822830][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.844152][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.921676][ T3306] veth0_vlan: entered promiscuous mode [ 30.940784][ T3303] veth0_vlan: entered promiscuous mode [ 30.949088][ T3306] veth1_vlan: entered promiscuous mode [ 30.961721][ T3303] veth1_vlan: entered promiscuous mode [ 30.977083][ T3306] veth0_macvtap: entered promiscuous mode [ 31.007383][ T3306] veth1_macvtap: entered promiscuous mode [ 31.020322][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.034243][ T3313] veth0_vlan: entered promiscuous mode [ 31.044687][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.062666][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.076229][ T3313] veth1_vlan: entered promiscuous mode [ 31.083917][ T3303] veth0_macvtap: entered promiscuous mode [ 31.093130][ T3306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.102223][ T3306] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.111182][ T3306] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.120090][ T3306] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.135632][ T3303] veth1_macvtap: entered promiscuous mode [ 31.161739][ T3305] veth0_vlan: entered promiscuous mode [ 31.179088][ T3313] veth0_macvtap: entered promiscuous mode [ 31.191552][ T3313] veth1_macvtap: entered promiscuous mode [ 31.199069][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.209601][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.222136][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.230268][ T3305] veth1_vlan: entered promiscuous mode [ 31.243610][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.254266][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.265360][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.274862][ T3303] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.283746][ T3303] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.292561][ T3303] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.301353][ T3303] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.323437][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.335519][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.346195][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.359501][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.372070][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.372500][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.403769][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.414359][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.424307][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.435064][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.448981][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.460479][ T3314] veth0_vlan: entered promiscuous mode [ 31.468510][ T3314] veth1_vlan: entered promiscuous mode [ 31.487458][ T3313] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.493453][ T3443] loop0: detected capacity change from 0 to 256 [ 31.496278][ T3313] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.509731][ T3443] FAT-fs (loop0): bogus number of FAT sectors [ 31.511658][ T3313] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.517814][ T3443] FAT-fs (loop0): Can't find a valid FAT filesystem [ 31.526629][ T3313] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.529860][ T3305] veth0_macvtap: entered promiscuous mode [ 31.562419][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 31.562437][ T29] audit: type=1326 audit(1746004307.961:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3442 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ded40d2d0 code=0x7ffc0000 [ 31.566144][ T3314] veth0_macvtap: entered promiscuous mode [ 31.568649][ T29] audit: type=1326 audit(1746004307.961:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3442 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4ded40e56b code=0x7ffc0000 [ 31.568676][ T29] audit: type=1326 audit(1746004307.961:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3442 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4ded40d5ca code=0x7ffc0000 [ 31.595532][ T3305] veth1_macvtap: entered promiscuous mode [ 31.597942][ T29] audit: type=1326 audit(1746004307.961:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3442 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ded40e969 code=0x7ffc0000 [ 31.673729][ T29] audit: type=1326 audit(1746004307.961:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3442 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ded40e969 code=0x7ffc0000 [ 31.698152][ T29] audit: type=1326 audit(1746004308.041:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3442 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ded40e969 code=0x7ffc0000 [ 31.707652][ T3314] veth1_macvtap: entered promiscuous mode [ 31.721677][ T29] audit: type=1326 audit(1746004308.041:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3442 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ded40e969 code=0x7ffc0000 [ 31.735231][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.750812][ T29] audit: type=1326 audit(1746004308.041:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3442 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ded40e969 code=0x7ffc0000 [ 31.761959][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.761978][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.761994][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.762006][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.762018][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.764814][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.785701][ T29] audit: type=1326 audit(1746004308.041:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3442 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ded40e969 code=0x7ffc0000 [ 31.785797][ T29] audit: type=1326 audit(1746004308.051:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3442 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ded40e969 code=0x7ffc0000 [ 31.915913][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.926567][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.936823][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.947393][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.957354][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.967992][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.977936][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.988680][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.002717][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.023515][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.034159][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.044305][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.054825][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.064811][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.075548][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.087889][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.107960][ T3305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.116864][ T3305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.125918][ T3305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.134945][ T3305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.166112][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.176990][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.188020][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.198684][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.208636][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.219223][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.229194][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.239823][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.256631][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.266283][ T3314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.275114][ T3314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.283884][ T3314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.292671][ T3314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.305632][ T3454] netlink: 'syz.1.2': attribute type 16 has an invalid length. [ 32.313282][ T3454] netlink: 'syz.1.2': attribute type 17 has an invalid length. [ 32.490146][ T3454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 32.659069][ T3465] loop4: detected capacity change from 0 to 764 [ 32.674067][ T3465] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 32.943999][ T3470] netlink: 'syz.2.3': attribute type 16 has an invalid length. [ 32.951616][ T3470] netlink: 'syz.2.3': attribute type 17 has an invalid length. [ 32.968768][ T3458] loop3: detected capacity change from 0 to 256 [ 33.022316][ T3470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 33.652667][ T3458] FAT-fs (loop3): bogus number of FAT sectors [ 33.658855][ T3458] FAT-fs (loop3): Can't find a valid FAT filesystem [ 33.680342][ T3474] loop0: detected capacity change from 0 to 512 [ 33.822121][ T3474] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 33.995524][ T3472] netlink: 'syz.1.8': attribute type 16 has an invalid length. [ 34.003500][ T3472] netlink: 'syz.1.8': attribute type 17 has an invalid length. [ 34.015398][ T3472] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 34.116324][ T3474] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 34.307136][ T3472] syz.1.8 (3472) used greatest stack depth: 10808 bytes left [ 34.329826][ T3474] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.9: corrupted in-inode xattr: e_value size too large [ 34.366147][ T3474] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.9: couldn't read orphan inode 15 (err -117) [ 34.366797][ T3474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.399531][ T3474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'. [ 34.408552][ T3486] loop3: detected capacity change from 0 to 256 [ 34.415525][ T3491] 9pnet_fd: Insufficient options for proto=fd [ 34.443259][ T3474] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 34.474785][ T3495] Zero length message leads to an empty skb [ 34.500195][ T3474] syz.0.9 (3474) used greatest stack depth: 10272 bytes left [ 34.526917][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.705654][ T3510] mmap: +}[@ (3510) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.776307][ T3512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'. [ 34.785224][ T3512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 34.901561][ T3513] netlink: 'syz.0.15': attribute type 16 has an invalid length. [ 34.909259][ T3513] netlink: 'syz.0.15': attribute type 17 has an invalid length. [ 34.921525][ T3513] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 34.979105][ T3514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'. [ 34.988142][ T3514] netlink: 86 bytes leftover after parsing attributes in process `syz.1.19'. [ 35.241980][ T3524] loop1: detected capacity change from 0 to 128 [ 35.255651][ T3524] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.276837][ T3524] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 35.279336][ T3524] EXT4-fs error (device loop1): htree_dirblock_to_tree:1082: inode #2: block 4: comm syz.1.24: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 35.365907][ T3530] loop3: detected capacity change from 0 to 8192 [ 35.376522][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.411089][ T3479] loop3: p1 p3 p4 [ 35.415780][ T3479] loop3: p1 size 3506438656 extends beyond EOD, truncated [ 35.437204][ T3479] loop3: p3 start 218103808 is beyond EOD, truncated [ 35.445130][ T3479] loop3: p4 size 50331648 extends beyond EOD, truncated [ 35.458714][ T3530] loop3: p1 p3 p4 [ 35.463128][ T3530] loop3: p1 size 3506438656 extends beyond EOD, truncated [ 35.483424][ T3532] loop1: detected capacity change from 0 to 512 [ 35.494040][ T3532] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 35.502803][ T3530] loop3: p3 start 218103808 is beyond EOD, truncated [ 35.504235][ T3532] EXT4-fs (loop1): invalid journal inode [ 35.509665][ T3530] loop3: p4 size 50331648 extends beyond EOD, truncated [ 35.515475][ T3532] EXT4-fs (loop1): can't get journal size [ 35.533075][ T3532] EXT4-fs (loop1): 1 truncate cleaned up [ 35.539189][ T3534] loop0: detected capacity change from 0 to 512 [ 35.554205][ T3534] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.560879][ T3532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.580907][ T3529] batadv_slave_1: entered promiscuous mode [ 35.588382][ T3534] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.28: corrupted in-inode xattr: invalid ea_ino [ 35.624072][ T3528] batadv_slave_1: left promiscuous mode [ 35.630308][ T3532] SELinux: policydb version 0 does not match my version range 15-34 [ 35.638565][ T3534] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.28: couldn't read orphan inode 15 (err -117) [ 35.650494][ T3532] SELinux: failed to load policy [ 35.665283][ T3534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.714005][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.730778][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.744190][ T3538] loop3: detected capacity change from 0 to 512 [ 35.758064][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 35.758509][ T3479] udevd[3479]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 35.782916][ T3538] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.796410][ T3538] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.832808][ T3538] EXT4-fs (loop3): 1 truncate cleaned up [ 35.839846][ T3538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.852955][ T3538] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.889303][ T3538] loop3: detected capacity change from 0 to 512 [ 35.910916][ T3538] ======================================================= [ 35.910916][ T3538] WARNING: The mand mount option has been deprecated and [ 35.910916][ T3538] and is ignored by this kernel. Remove the mand [ 35.910916][ T3538] option from the mount to silence this warning. [ 35.910916][ T3538] ======================================================= [ 35.953121][ T3538] EXT4-fs: Ignoring removed orlov option [ 35.959535][ T3538] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.961859][ T3542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31'. [ 35.968847][ T3538] EXT4-fs (loop3): orphan cleanup on readonly fs [ 35.984381][ T3538] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.30: bg 0: block 248: padding at end of block bitmap is not set [ 36.003208][ T3538] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.30: Failed to acquire dquot type 1 [ 36.015211][ T3538] EXT4-fs (loop3): 1 truncate cleaned up [ 36.019149][ T3548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33'. [ 36.030508][ T3538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.044175][ T3538] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.061145][ T3548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.068761][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.076938][ T3548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.084441][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.131004][ T3538] syz.3.30 (3538) used greatest stack depth: 9360 bytes left [ 36.172012][ T3557] loop2: detected capacity change from 0 to 764 [ 36.182396][ T3557] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 36.285312][ T3566] netlink: 36 bytes leftover after parsing attributes in process `syz.2.39'. [ 36.298834][ T3566] SELinux: syz.2.39 (3566) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 36.314323][ T3566] loop2: detected capacity change from 0 to 128 [ 36.323411][ T3566] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.336098][ T3566] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 36.500865][ T3569] netlink: 'syz.0.34': attribute type 16 has an invalid length. [ 36.508561][ T3569] netlink: 'syz.0.34': attribute type 17 has an invalid length. [ 36.522332][ T3569] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 37.131315][ T3572] netlink: 56 bytes leftover after parsing attributes in process `syz.3.40'. [ 37.171021][ T29] kauditd_printk_skb: 468 callbacks suppressed [ 37.171041][ T29] audit: type=1400 audit(1746004313.581:631): avc: denied { sqpoll } for pid=3573 comm="syz.4.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 37.204506][ T29] audit: type=1400 audit(1746004313.611:632): avc: denied { create } for pid=3576 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 37.225135][ T29] audit: type=1400 audit(1746004313.611:633): avc: denied { create } for pid=3573 comm="syz.4.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 37.245460][ T29] audit: type=1400 audit(1746004313.631:634): avc: denied { bind } for pid=3576 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 37.265121][ T29] audit: type=1400 audit(1746004313.631:635): avc: denied { name_bind } for pid=3576 comm="syz.0.41" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 37.285705][ T29] audit: type=1400 audit(1746004313.631:636): avc: denied { node_bind } for pid=3576 comm="syz.0.41" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 37.306543][ T29] audit: type=1400 audit(1746004313.631:637): avc: denied { listen } for pid=3576 comm="syz.0.41" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 37.328505][ T29] audit: type=1400 audit(1746004313.641:638): avc: denied { create } for pid=3576 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.350370][ T29] audit: type=1400 audit(1746004313.651:639): avc: denied { bind } for pid=3576 comm="syz.0.41" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.370714][ T29] audit: type=1400 audit(1746004313.651:640): avc: denied { node_bind } for pid=3576 comm="syz.0.41" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 37.424268][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.549758][ T3589] openvswitch: netlink: Message has 6 unknown bytes. [ 37.606288][ T3594] loop2: detected capacity change from 0 to 128 [ 37.859214][ T3600] loop1: detected capacity change from 0 to 256 [ 37.895285][ T3600] FAT-fs (loop1): bogus number of FAT sectors [ 37.897995][ C0] hrtimer: interrupt took 26620 ns [ 37.901431][ T3600] FAT-fs (loop1): Can't find a valid FAT filesystem [ 37.915346][ T3598] netlink: 60 bytes leftover after parsing attributes in process `syz.3.48'. [ 38.110584][ T3609] loop0: detected capacity change from 0 to 2048 [ 38.124293][ T3611] loop3: detected capacity change from 0 to 164 [ 38.134844][ T3613] loop1: detected capacity change from 0 to 128 [ 38.141341][ T3611] ISOFS: unable to read i-node block [ 38.146687][ T3611] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 38.175954][ T3609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.223045][ T3613] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.247044][ T3613] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.286395][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.446811][ T3624] netlink: 'syz.0.55': attribute type 4 has an invalid length. [ 38.472329][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.508619][ T3633] loop1: detected capacity change from 0 to 2048 [ 38.533271][ T3633] loop1: p1 < > p4 [ 38.542750][ T3633] loop1: p4 size 8388608 extends beyond EOD, truncated [ 38.573013][ T3638] loop0: detected capacity change from 0 to 764 [ 38.591826][ T3638] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 38.593382][ T3640] loop3: detected capacity change from 0 to 256 [ 38.607488][ T3640] FAT-fs (loop3): bogus number of FAT sectors [ 38.613643][ T3640] FAT-fs (loop3): Can't find a valid FAT filesystem [ 38.665722][ T3642] loop1: detected capacity change from 0 to 256 [ 38.674144][ T3642] FAT-fs (loop1): bogus number of FAT sectors [ 38.680520][ T3642] FAT-fs (loop1): Can't find a valid FAT filesystem [ 39.098129][ T3657] netlink: 'syz.0.69': attribute type 16 has an invalid length. [ 39.106029][ T3657] netlink: 'syz.0.69': attribute type 17 has an invalid length. [ 39.118504][ T3657] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 39.721874][ T3663] netlink: 'syz.4.70': attribute type 16 has an invalid length. [ 39.729743][ T3663] netlink: 'syz.4.70': attribute type 17 has an invalid length. [ 39.741192][ T3663] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 40.016657][ T3671] loop3: detected capacity change from 0 to 256 [ 40.145634][ T3671] FAT-fs (loop3): bogus number of FAT sectors [ 40.151926][ T3671] FAT-fs (loop3): Can't find a valid FAT filesystem [ 40.213978][ T3682] loop4: detected capacity change from 0 to 512 [ 40.222124][ T3682] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 40.359401][ T3687] netlink: 'syz.1.75': attribute type 16 has an invalid length. [ 40.367123][ T3687] netlink: 'syz.1.75': attribute type 17 has an invalid length. [ 40.379819][ T3687] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 41.134497][ T3689] netlink: 'syz.3.80': attribute type 16 has an invalid length. [ 41.142413][ T3689] netlink: 'syz.3.80': attribute type 17 has an invalid length. [ 41.154767][ T3689] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 41.205971][ T3682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.306629][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.316370][ T3703] loop2: detected capacity change from 0 to 2048 [ 41.336182][ T3705] loop0: detected capacity change from 0 to 512 [ 41.343101][ T3705] EXT4-fs: Ignoring removed oldalloc option [ 41.360628][ T3705] EXT4-fs (loop0): 1 truncate cleaned up [ 41.390264][ T3705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.410118][ T3703] loop2: p1 < > p4 [ 41.414934][ T3703] loop2: p4 size 8388608 extends beyond EOD, truncated [ 41.450028][ T3705] vlan2: entered allmulticast mode [ 41.504025][ T3712] can0: slcan on ttyS3. [ 41.609211][ T3719] loop2: detected capacity change from 0 to 2048 [ 41.640341][ T3719] loop2: p1 < > p4 [ 41.645939][ T3719] loop2: p4 size 8388608 extends beyond EOD, truncated [ 41.813621][ T3725] netlink: 'syz.3.90': attribute type 16 has an invalid length. [ 41.826531][ T3725] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 41.899781][ T3712] can0 (unregistered): slcan off ttyS3. [ 41.918337][ T3712] Falling back ldisc for ttyS3. [ 42.249561][ T29] kauditd_printk_skb: 346 callbacks suppressed [ 42.249574][ T29] audit: type=1326 audit(1746004318.641:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf77cde969 code=0x7ffc0000 [ 42.278985][ T29] audit: type=1326 audit(1746004318.641:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf77cde969 code=0x7ffc0000 [ 42.302230][ T29] audit: type=1326 audit(1746004318.651:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf77cde969 code=0x7ffc0000 [ 42.325484][ T29] audit: type=1326 audit(1746004318.651:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf77cde969 code=0x7ffc0000 [ 42.348677][ T29] audit: type=1326 audit(1746004318.651:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf77cde969 code=0x7ffc0000 [ 42.371847][ T29] audit: type=1326 audit(1746004318.651:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fdf77cde969 code=0x7ffc0000 [ 42.395237][ T29] audit: type=1326 audit(1746004318.651:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf77cde969 code=0x7ffc0000 [ 42.418594][ T29] audit: type=1326 audit(1746004318.651:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf77cde969 code=0x7ffc0000 [ 42.422985][ T3736] loop4: detected capacity change from 0 to 764 [ 42.441832][ T29] audit: type=1326 audit(1746004318.651:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fdf77cde969 code=0x7ffc0000 [ 42.541240][ T29] audit: type=1326 audit(1746004318.651:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf77cde969 code=0x7ffc0000 [ 42.565666][ T3736] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 42.576435][ T3731] loop1: detected capacity change from 0 to 256 [ 42.584292][ T3731] FAT-fs (loop1): bogus number of FAT sectors [ 42.590625][ T3731] FAT-fs (loop1): Can't find a valid FAT filesystem [ 42.609099][ T3740] loop3: detected capacity change from 0 to 764 [ 42.622528][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.644248][ T3740] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 42.723565][ T3750] loop2: detected capacity change from 0 to 2048 [ 42.766414][ T3750] loop2: p1 < > p4 [ 42.770911][ T3750] loop2: p4 size 8388608 extends beyond EOD, truncated [ 42.822772][ T3754] ipvlan2: entered promiscuous mode [ 42.836366][ T3754] bridge0: port 3(ipvlan2) entered blocking state [ 42.842973][ T3754] bridge0: port 3(ipvlan2) entered disabled state [ 42.860139][ T3754] ipvlan2: entered allmulticast mode [ 42.865523][ T3754] bridge0: entered allmulticast mode [ 42.891630][ T3754] ipvlan2: left allmulticast mode [ 42.896938][ T3754] bridge0: left allmulticast mode [ 42.924958][ T3755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=3755 comm=syz.3.97 [ 43.227601][ T3763] loop4: detected capacity change from 0 to 2048 [ 43.290360][ T3763] loop4: p1 < > p4 [ 43.294808][ T3763] loop4: p4 size 8388608 extends beyond EOD, truncated [ 43.510801][ T3766] loop2: detected capacity change from 0 to 2048 [ 43.522232][ T3766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.553903][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.564179][ T3772] __nla_validate_parse: 2 callbacks suppressed [ 43.564197][ T3772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.104'. [ 43.600099][ T3779] loop1: detected capacity change from 0 to 512 [ 43.622152][ T3779] EXT4-fs (loop1): 1 orphan inode deleted [ 43.630523][ T3779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.647637][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 43.670467][ T3779] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.811944][ T3787] binfmt_misc: register: failed to install interpreter file ./file2 [ 43.821801][ T3787] netlink: 16 bytes leftover after parsing attributes in process `syz.2.109'. [ 43.831005][ T3787] netlink: 16 bytes leftover after parsing attributes in process `syz.2.109'. [ 43.883909][ T3789] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 44.080819][ T3799] loop2: detected capacity change from 0 to 2048 [ 44.122081][ T3799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.187555][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.334366][ T3824] capability: warning: `syz.2.123' uses deprecated v2 capabilities in a way that may be insecure [ 44.347324][ T3822] validate_nla: 1 callbacks suppressed [ 44.347403][ T3822] netlink: 'syz.3.122': attribute type 1 has an invalid length. [ 44.360648][ T3822] netlink: 92 bytes leftover after parsing attributes in process `syz.3.122'. [ 44.369607][ T3822] NCSI netlink: No device for ifindex 0 [ 44.415163][ T3829] loop2: detected capacity change from 0 to 2048 [ 44.434698][ T3831] loop3: detected capacity change from 0 to 256 [ 44.482317][ T3829] loop2: p1 < > p4 [ 44.487408][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.500026][ T3829] loop2: p4 size 8388608 extends beyond EOD, truncated [ 44.523691][ T3836] netlink: 14 bytes leftover after parsing attributes in process `syz.1.127'. [ 44.544564][ T3836] hsr_slave_0: left promiscuous mode [ 44.553274][ T3836] hsr_slave_1: left promiscuous mode [ 44.565056][ T3838] FAULT_INJECTION: forcing a failure. [ 44.565056][ T3838] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 44.578521][ T3838] CPU: 0 UID: 0 PID: 3838 Comm: syz.0.128 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 44.578548][ T3838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 44.578563][ T3838] Call Trace: [ 44.578570][ T3838] [ 44.578580][ T3838] __dump_stack+0x1d/0x30 [ 44.578605][ T3838] dump_stack_lvl+0xe8/0x140 [ 44.578629][ T3838] dump_stack+0x15/0x1b [ 44.578649][ T3838] should_fail_ex+0x265/0x280 [ 44.578683][ T3838] should_fail_alloc_page+0xf2/0x100 [ 44.578723][ T3838] __alloc_frozen_pages_noprof+0xff/0x360 [ 44.578758][ T3838] alloc_pages_mpol+0xb3/0x250 [ 44.578781][ T3838] alloc_pages_noprof+0x90/0x130 [ 44.578807][ T3838] __pud_alloc+0x47/0x450 [ 44.578839][ T3838] ? should_fail_ex+0xdb/0x280 [ 44.578879][ T3838] copy_page_range+0x3545/0x3760 [ 44.578899][ T3838] ? kmem_cache_alloc_bulk_noprof+0x288/0x410 [ 44.578925][ T3838] ? mas_wr_store_type+0x4bd/0xba0 [ 44.578953][ T3838] ? mas_store+0x4f8/0x6e0 [ 44.578981][ T3838] copy_mm+0xab6/0x1310 [ 44.579020][ T3838] copy_process+0xcf1/0x1f90 [ 44.579059][ T3838] kernel_clone+0x16c/0x5b0 [ 44.579088][ T3838] ? vfs_write+0x75e/0x8d0 [ 44.579113][ T3838] __x64_sys_clone+0xe6/0x120 [ 44.579147][ T3838] x64_sys_call+0x2c59/0x2fb0 [ 44.579172][ T3838] do_syscall_64+0xd0/0x1a0 [ 44.579195][ T3838] ? clear_bhb_loop+0x25/0x80 [ 44.579215][ T3838] ? clear_bhb_loop+0x25/0x80 [ 44.579235][ T3838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.579256][ T3838] RIP: 0033:0x7f4ded40e969 [ 44.579274][ T3838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.579294][ T3838] RSP: 002b:00007f4deba76fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 44.579310][ T3838] RAX: ffffffffffffffda RBX: 00007f4ded635fa0 RCX: 00007f4ded40e969 [ 44.579322][ T3838] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042164000 [ 44.579333][ T3838] RBP: 00007f4deba77090 R08: 0000000000000000 R09: 0000000000000000 [ 44.579343][ T3838] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 44.579354][ T3838] R13: 0000000000000000 R14: 00007f4ded635fa0 R15: 00007ffca86e16e8 [ 44.579376][ T3838] [ 44.806136][ T3839] loop1: detected capacity change from 0 to 512 [ 44.813889][ T3839] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 44.822189][ T3839] EXT4-fs (loop1): orphan cleanup on readonly fs [ 44.830868][ T3839] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.127: Failed to acquire dquot type 1 [ 44.840132][ T3844] loop3: detected capacity change from 0 to 2048 [ 44.843790][ T3839] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.127: bg 0: block 40: padding at end of block bitmap is not set [ 44.865309][ T3839] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 44.874740][ T3839] EXT4-fs (loop1): 1 truncate cleaned up [ 44.882966][ T3844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.895669][ T3839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.970276][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.973859][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.509496][ T3882] netlink: 'syz.2.141': attribute type 16 has an invalid length. [ 45.517327][ T3882] netlink: 'syz.2.141': attribute type 17 has an invalid length. [ 45.529518][ T3882] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 45.784086][ T3887] loop1: detected capacity change from 0 to 2048 [ 45.818195][ T3887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.847742][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.885695][ T3895] capability: warning: `syz.4.146' uses 32-bit capabilities (legacy support in use) [ 46.075146][ T3916] ipvlan2: entered promiscuous mode [ 46.121072][ T3916] bridge0: port 3(ipvlan2) entered blocking state [ 46.127658][ T3916] bridge0: port 3(ipvlan2) entered disabled state [ 46.197784][ T3926] loop4: detected capacity change from 0 to 2048 [ 46.213852][ T3927] netlink: 'syz.2.157': attribute type 1 has an invalid length. [ 46.221949][ T3927] netlink: 224 bytes leftover after parsing attributes in process `syz.2.157'. [ 46.234192][ T3916] ipvlan2: entered allmulticast mode [ 46.239631][ T3916] bridge0: entered allmulticast mode [ 46.262158][ T3916] ipvlan2: left allmulticast mode [ 46.267327][ T3916] bridge0: left allmulticast mode [ 46.291918][ T3926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.402111][ T3934] program syz.1.160 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.448833][ T3934] bridge0: entered promiscuous mode [ 46.458000][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.562774][ T3945] FAULT_INJECTION: forcing a failure. [ 46.562774][ T3945] name failslab, interval 1, probability 0, space 0, times 1 [ 46.575516][ T3945] CPU: 1 UID: 0 PID: 3945 Comm: syz.2.165 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 46.575553][ T3945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 46.575565][ T3945] Call Trace: [ 46.575572][ T3945] [ 46.575582][ T3945] __dump_stack+0x1d/0x30 [ 46.575607][ T3945] dump_stack_lvl+0xe8/0x140 [ 46.575644][ T3945] dump_stack+0x15/0x1b [ 46.575659][ T3945] should_fail_ex+0x265/0x280 [ 46.575696][ T3945] should_failslab+0x8c/0xb0 [ 46.575779][ T3945] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 46.575942][ T3945] ? sidtab_sid2str_get+0xa0/0x130 [ 46.576032][ T3945] kmemdup_noprof+0x2b/0x70 [ 46.576053][ T3945] sidtab_sid2str_get+0xa0/0x130 [ 46.576084][ T3945] security_sid_to_context_core+0x1eb/0x2e0 [ 46.576174][ T3945] security_sid_to_context+0x27/0x40 [ 46.576222][ T3945] selinux_lsmprop_to_secctx+0x67/0xf0 [ 46.576277][ T3945] security_lsmprop_to_secctx+0x43/0x80 [ 46.576300][ T3945] audit_log_task_context+0x77/0x190 [ 46.576330][ T3945] audit_log_task+0xf4/0x250 [ 46.576390][ T3945] audit_seccomp+0x61/0x100 [ 46.576419][ T3945] ? __seccomp_filter+0x68c/0x10d0 [ 46.576440][ T3945] __seccomp_filter+0x69d/0x10d0 [ 46.576507][ T3945] ? fdget+0x105/0x110 [ 46.576531][ T3945] ? do_utimes+0x19e/0x210 [ 46.576558][ T3945] __secure_computing+0x82/0x150 [ 46.576576][ T3945] syscall_trace_enter+0xcf/0x1e0 [ 46.576617][ T3945] do_syscall_64+0xaa/0x1a0 [ 46.576638][ T3945] ? clear_bhb_loop+0x25/0x80 [ 46.576660][ T3945] ? clear_bhb_loop+0x25/0x80 [ 46.576708][ T3945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.576729][ T3945] RIP: 0033:0x7fcd0cf8d37c [ 46.576743][ T3945] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 46.576817][ T3945] RSP: 002b:00007fcd0b5d6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 46.576836][ T3945] RAX: ffffffffffffffda RBX: 00007fcd0d1b6080 RCX: 00007fcd0cf8d37c [ 46.576850][ T3945] RDX: 000000000000000f RSI: 00007fcd0b5d60a0 RDI: 0000000000000004 [ 46.576865][ T3945] RBP: 00007fcd0b5d6090 R08: 0000000000000000 R09: 0000000000000000 [ 46.576878][ T3945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.576889][ T3945] R13: 0000000000000000 R14: 00007fcd0d1b6080 R15: 00007ffd87719178 [ 46.576911][ T3945] [ 46.939232][ T3956] loop1: detected capacity change from 0 to 256 [ 46.947324][ T31] ================================================================== [ 46.956253][ T31] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios [ 46.965045][ T31] [ 46.967377][ T31] write to 0xffff888119ba5108 of 44 bytes by task 3957 on cpu 0: [ 46.975183][ T31] tty_set_termios+0xc0/0x8c0 [ 46.979882][ T31] set_termios+0x35b/0x4e0 [ 46.984341][ T31] tty_mode_ioctl+0x379/0x5c0 [ 46.989033][ T31] n_tty_ioctl_helper+0x91/0x210 [ 46.994073][ T31] n_tty_ioctl+0x101/0x200 [ 46.998518][ T31] tty_ioctl+0x842/0xb80 [ 47.002776][ T31] __se_sys_ioctl+0xcb/0x140 [ 47.007379][ T31] __x64_sys_ioctl+0x43/0x50 [ 47.011978][ T31] x64_sys_call+0x19a8/0x2fb0 [ 47.016667][ T31] do_syscall_64+0xd0/0x1a0 [ 47.021281][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.027279][ T31] [ 47.029610][ T31] read to 0xffff888119ba5121 of 1 bytes by task 31 on cpu 1: [ 47.037086][ T31] n_tty_receive_char_flow_ctrl+0x23/0x1a0 [ 47.043015][ T31] n_tty_lookahead_flow_ctrl+0xed/0x130 [ 47.048693][ T31] tty_port_default_lookahead_buf+0x8e/0xc0 [ 47.054964][ T31] flush_to_ldisc+0x318/0x410 [ 47.059671][ T31] process_scheduled_works+0x4cb/0x9d0 [ 47.065176][ T31] worker_thread+0x582/0x770 [ 47.069893][ T31] kthread+0x486/0x510 [ 47.074057][ T31] ret_from_fork+0x4b/0x60 [ 47.078521][ T31] ret_from_fork_asm+0x1a/0x30 [ 47.083309][ T31] [ 47.085636][ T31] value changed: 0x11 -> 0x6f [ 47.090313][ T31] [ 47.092733][ T31] Reported by Kernel Concurrency Sanitizer on: [ 47.098886][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/u8:1 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 47.111318][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 47.121399][ T31] Workqueue: events_unbound flush_to_ldisc [ 47.127225][ T31] ================================================================== [ 47.146797][ T3958] loop0: detected capacity change from 0 to 2048 [ 47.147334][ T3956] FAT-fs (loop1): bogus number of FAT sectors [ 47.159393][ T3956] FAT-fs (loop1): Can't find a valid FAT filesystem [ 47.210276][ T3958] loop0: p1 < > p4 [ 47.220261][ T3958] loop0: p4 size 8388608 extends beyond EOD, truncated