last executing test programs: 4.303309227s ago: executing program 1 (id=15): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085000000500000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x9}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x21}, 0x28) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f00000002c0)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, 'erspan0\x00'}}, 0x1e) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)='system_u:object_r:fuse_device_t:s0\x00', 0x23, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x1000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r5 = gettid() rt_sigqueueinfo(r5, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) 4.023029636s ago: executing program 1 (id=18): r0 = epoll_create1(0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xc000201e}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) getpgrp(0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r7, &(0x7f0000002f40)=""/4098, 0x1002) getdents64(r7, 0x0, 0x607a9e0a432a4785) fadvise64(r2, 0xff, 0xffff, 0x5) close(r6) 3.898364514s ago: executing program 1 (id=19): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f00000003c0)=""/229) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000023893) shutdown(r9, 0x2) 2.751762209s ago: executing program 1 (id=28): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180400000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0xfffffffffffffe24, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x24, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x55}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0xa}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x83, &(0x7f00000006c0)=""/131, 0x41000, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x1, 0x9, 0x4a35}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000400)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, r0, 0x1], &(0x7f0000000780)=[{0x3, 0x4, 0x8, 0x3}, {0x1, 0x20005, 0x4, 0x3}, {0x3, 0x1, 0x2, 0x7}, {0x3, 0x2, 0xc, 0x9}, {0x0, 0x5, 0x3, 0x4}, {0x2, 0x3, 0x4, 0x7}, {0x1, 0x5, 0xf, 0x4}], 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1, 0x0, 0x5}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=r0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r5], 0x40}}, 0x4008054) r6 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r6, 0x6e2, 0x3900, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_allocate_blocks\x00', r9, 0x0, 0x141147af}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000080), 0x64, 0x52a, &(0x7f0000000a40)="$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") r10 = eventfd2(0x8, 0x80801) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, &(0x7f0000000340)=r10, 0x1) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x77359400}, 0x0) r11 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r11, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r12, 0x6, 0x9, &(0x7f00000002c0)={{0x2, @rand_addr, 0x0, 0x2, 'wlc\x00', 0x29, 0x2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0xffff, 0x2, 0x0, 0x6a, 0x2}}, 0x44) r13 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pidfd_send_signal(r13, 0x0, &(0x7f0000000100)={0x0, 0x0, 0xffffffc4}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x41) 2.714703352s ago: executing program 3 (id=29): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYRES32=r10, @ANYBLOB="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"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x4e23, 0x0, 0x4e24, 0x0, 0x2, 0x80, 0x0, 0x11, 0x0, r10}, {0xe61, 0x0, 0x0, 0x2, 0x9, 0x1, 0xffd, 0xc}, {0xfffffffffffff5b9, 0x4, 0x7fffffffffffffff, 0x7}, 0x8000, 0x6e6bb5, 0x0, 0x1, 0x2, 0x3}, {{@in6=@local, 0x4d3, 0x3c}, 0xa, @in6=@remote, 0x43500, 0x0, 0x0, 0x4, 0xc, 0xd0, 0x1}}, 0xe8) r11 = getgid() lchown(&(0x7f0000000040)='./file0\x00', r10, r11) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, r10, &(0x7f00000001c0)) ioprio_get$uid(0x3, r10) getresgid(&(0x7f0000000f80), 0x0, &(0x7f0000001000)=0x0) sendmmsg$unix(r1, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="fb943de36be0382392a1ce4286a7ab3847c0e6ee44bc955f4459a9e8332d5cf015028ba8f0730a06ac19846ce204643889a618ba02801562f80712f1d7761946b82e85a7199c8517458d7d6ae0c682a586709c1bb2897195b65cb8358caaa0e313267f66041856ce3792172350cbc1ef4aba62e5a5d1377ac022d68e8eaf626321926672a718763a3765e410e0955a69db7b7915dd7e6fa2fe8c4075b4031d7b680c6e120ebf18cd22e788cb03da3e754b7e2a36bd82e0fcb2b9adefab0fea558b0f4b0e6b292b09e10b79cc2737439660e75af68cddfa4d38772ac6c7c570f192f0981c8bafa9d43b2c7307118956577f42", 0xf2}, {&(0x7f0000000040)="293e96109f757f238c1092b70253f2900ce70e235081", 0x16}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r2, @ANYRES32, @ANYRES32=r4, @ANYRES32=r6], 0x88, 0x8001}}, {{&(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000780)="4ea07ee0d5afa09c4827ef3b5ed00993262f2ae83db427969c5d37cfe20680ef7a10b09476d76a8e4587d89552092058032c8f5713693d8151e56f090133af7866ddb2f7e6d300d937201ef7ad288d5c5f216b19661451303292e24160efe7946f33865caba5f2134ca88cf4af3f4ca7b71f956479", 0x75}, {&(0x7f0000000800)="46d2aac396c5491ae1858885243a6dbef7da6c6a8a8e0ed1d740acf239b826a991fa", 0x22}, {&(0x7f0000000840)="8e10fd0246e8741d680a652613d3abf783425fe52569273ba497a8333a36c3f33e5fe982f817ee1a8d94d842faedfe63bf4fa126de54f2f01062e4682f92a4f7c486bf2167fc2c7d084851a90c52b412b0c27ddc38dad2f4c954631decb936dfe521d0af615653565630bc19da86f79ab45bf8de89a7b1426cc9eeab23d58efc9a67bc940bab82ce02f600201c760daa06df64643f8a0e6477923698513e1abfbbea366e2dc1bfaeba99198f7f2d73c16289f979446a83aff9ad3b466931e38f4a32d982c3ba27a9f6b10901b56bc0dc8ab9d144caa7d8cc6e8d6509920d", 0xde}, {&(0x7f0000000940)="dc54e0b834e89c13463541f293737baf7291dd5ccc8c96355fc689c8a46281eebf7ebc6c528ef1e03ac62fcd76a40273d2df649fabc3b159d7465039c069751b744eea1465ec5ee5c499735449bac4a794401513f72b1b7faec01f2194938e96596acc06d224c65eaccc1fefd5ec07b33a19963874ece28cfe09ced038e92a25518fb2542032e78cbf27daa9d50ee7bcb5342a465ecf72972592f36a14356f01b50ee2f74bcd62ce956151ddccddf54361c3cb5cf7eebe53cf7740b335e22c8c738e6265efc718badae32bc1efb58021a739f9d403b915ac0acf011ccabee90f0308d94ff40b1ff7219c76a5393a76b67a5cc1c077e1be46", 0xf8}, {&(0x7f0000000a40)="e4bbecaf569b6a66bba2116712f565fa5b9c2de8a8246cabf421716aedf9b63f422642ece18c2588c42fcc65cd557ebd37f031bfe10f2b982380a4be24731d0790bc5e3971a7593c10449ed6fe01643b00780d102d3a0ab263d17610a5b86e5d091a93d5a52d1cc5394d65ea125a1a2baab0a36566d7065c05bff8ce5859633b00d9b47b18b13d607ead9154edf2251da17b2f6d6d8537b41c7b5bd67e35f262106cc84c46a6382c4135795d066f688ce06978f5bea3dced37e93cdec5b2fe90e482c3a27c02822bc88875f706a5798392684792ef0a50c63c", 0xd9}, {&(0x7f00000024c0)="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", 0x1000}, {&(0x7f0000000b40)="f597e60050f6383590931e3275640c79cfbf69cefb8601e222395fbff9d4e103e9887598a340c28f7f95749997a388f4065a757b74b30a3c227a4dc546fab0c0aa1aa8352fb7c825769ccce521c46159894c214d55ca2afd265f10ee10abadf13c49c08985c3", 0x66}], 0x7, 0x0, 0x0, 0x20000841}}, {{&(0x7f0000000c40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, &(0x7f0000001040)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x1c, 0x1, 0x1, [r5, r3, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, r8]}}, @cred={{0x1c, 0x1, 0x2, {r0, r10, r12}}}], 0xa0, 0x40040c0}}], 0x3, 0x4004000) r13 = fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r13, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r13, 0x6, 0x0, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 2.662217985s ago: executing program 4 (id=30): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r1, r0}, 0xc) 2.614774278s ago: executing program 4 (id=32): r0 = epoll_create1(0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xc000201e}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) getpgrp(0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r7, &(0x7f0000002f40)=""/4098, 0x1002) getdents64(r7, 0x0, 0x607a9e0a432a4785) fadvise64(r2, 0xff, 0xffff, 0x5) close(r6) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00'}, 0x9) openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) 2.270470321s ago: executing program 4 (id=33): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bf"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f00000003c0)=""/229) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000023893) shutdown(r9, 0x2) 2.199155136s ago: executing program 2 (id=34): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x3b4825, 0x0, 0x7, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000000, 0x4c831, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x400, &(0x7f00000ce000/0x1000)=nil, 0x3) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000001000ffff27bd700003dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500400012800e0001006970366772657461700000002c00028014000700ff01000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x200408d0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) 2.156091628s ago: executing program 0 (id=35): r0 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0xf) lsm_list_modules(&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000140)=0x10, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c00000010c05e4938ffffff189c175000000000101dfeb0b62867cf5523c18e6f950e0d56f37f1e03cb4d08b9ed1c3d507d01cad1a2830b00258ff23898a865577e9e20590a21", @ANYRES32=0x0, @ANYBLOB="00000000282c060008001b000000000014001a8010000280acfe018008001e0003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0xffff, 0xfff2}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x11, 0x1, 0x3}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, r6, 0x5b6fb64ccc2f776d, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}, @ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x3}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x80000000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000840) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800058008000200080000003e"], 0x44}}, 0x0) connect$phonet_pipe(r2, &(0x7f0000000280)={0x23, 0x9, 0x2, 0xff}, 0x10) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x4, [@type_tag={0x7, 0x0, 0x0, 0x12, 0x4}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x49, 0x0, 0x7d}, @func={0x7, 0x0, 0x0, 0xc, 0x1}, @const={0xa, 0x0, 0x0, 0xa, 0x2}, @union={0x0, 0x6, 0x0, 0x5, 0x0, 0x8, [{0x4, 0x5, 0x6}, {0x1, 0x3, 0x100}, {0x3, 0x3, 0x9}, {0xf, 0x3, 0x80000001}, {0x4, 0x2, 0x3ff}, {0x9, 0x3, 0x1}]}, @union={0x6, 0x2, 0x0, 0x5, 0x1, 0xfff, [{0x5, 0x0, 0x3}, {0xb, 0x1, 0x80000000}]}, @func={0x7, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x30, 0x61]}}, &(0x7f0000000500)=""/192, 0xd4, 0xc0, 0x0, 0x0, 0x10000}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r10}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYRES64=0x0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0x0, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f00000000c0)) mknod$loop(&(0x7f0000000080)='./file0\x00', 0xc000, 0x0) 1.872622347s ago: executing program 0 (id=36): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r3, 0x0, 0x8000) close_range(r2, 0xffffffffffffffff, 0x0) 1.82891129s ago: executing program 3 (id=37): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1, 0xe4}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000c000000180001801400020076657468315f746f5f626174616476000400038018000380040001000d000500c47a61125e05081a94000000a00003809200050042c1e40c1fac641c3c0b67a3dde70471ce4fc01cbc2a9e8bb4a93729b7d727"], 0xe8}}, 0x0) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r0, 0x2, 0xb, 0x3}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}}, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, &(0x7f0000000180)) 1.756611855s ago: executing program 1 (id=38): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f00000003c0)=""/229) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000023893) shutdown(r9, 0x2) 1.740909546s ago: executing program 0 (id=39): r0 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(0x0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) shmctl$IPC_RMID(0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='sched_kthread_work_queue_work\x00', r3, 0x0, 0x9}, 0x34) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x13e, 0x0, &(0x7f0000000000)="06ff03076844268cb89e14f008004ee0ffff00febabec41177fb86dd1402e000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be30043d50ea5a6b868", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.718989167s ago: executing program 3 (id=40): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r1, 0x41}, {r1, 0x601}], 0x2, 0xffffffff) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x1, 0x401, 0xfd, 0xb103, 0x1, "c74192f3b7e8720700000000000010ee0800", 0x2, 0xcd3dc55}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000007c0)='kmem_cache_free\x00'}, 0x18) open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x124) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) open(&(0x7f00000001c0)='./file0\x00', 0x300, 0x40) 1.559058708s ago: executing program 2 (id=41): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8b33000000000000000005"], 0x28}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xb8, r2, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x5}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x3}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x73bf}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x7}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x92}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0xfff8}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x8, 0x24, [{0x24, 0x1}, {0x6c, 0x1}, {0x3, 0x1}, {0xc, 0x1}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_TX_RATES={0x40, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x48, 0x5137c8e4d701009a, 0x1, 0x6, 0x1b, 0x49, 0xc, 0x3, 0x9, 0x5, 0x6c, 0x1b, 0x5, 0x6c]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x24, 0xb, 0x60, 0x2, 0x1b, 0x4, 0x0, 0x9, 0x6c, 0x2, 0x6, 0xc, 0xb, 0x4, 0x30, 0x3, 0xc, 0xc, 0x18, 0x1b, 0x18, 0x3, 0x48, 0x2, 0x1b, 0x9, 0xcb, 0x36, 0x6c, 0xc, 0x24]}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4091) r4 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r4, 0x0, 0xb, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) recvfrom$inet(r4, 0x0, 0xffffffffffffff06, 0x2, 0x0, 0x0) 1.534667369s ago: executing program 3 (id=42): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)=ANY=[], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) r2 = msgget$private(0x0, 0x184) msgsnd(r2, 0x0, 0xfd1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x5}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, &(0x7f0000000380)=0x6, 0xfffffffffffffdee) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) msgctl$IPC_SET(r2, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x11) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r1, &(0x7f0000000ac0)=[{&(0x7f0000000400)="c218662719c952bac71051788063df6540d3dc2c756534a8d5b7fe0fecde6d52d3a410c6b9089410228cc6709a052c0bc0a8d133757d25dc9aa70509965053e9ae061382996f7a4b0eb1001b8eeb368a74d684e4e330246819943a383244fd619572da3d32d7e65107ec4df6da6298e56843bd650906ee93e3717ca95f668c30583572cd80196c459ba7e71c5f243b9a119b5926df6a8e5d1fbcfabd3729a7f06a32cac421fb824b001bb7d1527d7d2cee9f01125c4f4daad17171b6fcbf524ecc39cefe401e4d8b0cb3c7a0946f4a322eae9fca7436b004d5594a4be27bf80b33b7b467b2685fea4e7cb032a60e", 0xee}], 0x1) 1.498752102s ago: executing program 0 (id=43): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYRES64=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x2000c002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x1000000, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x0, 0x0, 0x0, 0x4}, {0x39, 0x0, 0x5}, {0xfffe}, {0x0, 0x1, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x4}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x7c}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCVHANGUP(r4, 0x5437, 0x200000000000000) r8 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) fgetxattr(r8, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 1.468349664s ago: executing program 0 (id=44): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="160000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") 1.316072454s ago: executing program 4 (id=45): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000b8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000023893) shutdown(r9, 0x2) 705.226014ms ago: executing program 2 (id=46): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2240, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000000c0)="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", 0x461}], 0x1, 0x0, 0x0, 0x10}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000002300)=ANY=[@ANYBLOB="180000060010000000000000000000001800000004000000000000000700000085100000fbffffff1864000003000000000000000200000095000000000000009721f8f99b9c32b94fa3531ed1fe6ba94a51ebae43e4e02c6702b58f46e33936345a20937f2a96fd56d9437cee57a6a28ddc0fa3e93f72c37140d76fdb2f2dba11bf3e68b3d449ed8a6e259d56194a83c83d8add0ffb3af5414ebd89"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_acct\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000120a01030000000000000000020000000900020073797a310000000008000440000000000800034000000004140000001100010000000047223f55000000000a"], 0x58}}, 0x4040000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000009, 0x11, r3, 0x180000000) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c00f7c2528e0cc51d1a1e81bf11656e5be8913c25783cf410c829e65eac129c2d90927f77baeb18f56136cfbab7710f7ab1e0087ca4a0de0da0e1f5f31a9b45255958343f3684331d459b6020dcbe2482657abee903e5db2e3a139e2383e7e0ec5c1ae2c2af9f712d1779dc7738d8ce142cff1529e71f2d"]) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000340)) 610.97312ms ago: executing program 1 (id=47): inotify_init() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x121202, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018", @ANYRES32=r5, @ANYRESDEC=r1], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r8, 0x0, 0xffffffffffffffff}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31000000005c000000060a010400000000000000000100000008000b400000000034000480200001800e000100636f6e6e6c696d69740000000c0002800800014000000000100001800b00010072656a65637400000900010073797a30"], 0xd0}}, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r13 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r13, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r13, 0x10f, 0x88) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001040)=@bpf_lsm={0x1d, 0x27, &(0x7f00000007c0)=@raw=[@ldst={0x2, 0x3, 0x4, 0x0, 0x6, 0x5, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0x9, 0x5, 0x0, 0x1, 0x7}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], &(0x7f0000000380)='GPL\x00', 0xffff, 0x88, &(0x7f0000000580)=""/136, 0x40f00, 0x5c, '\x00', r12, 0x1b, r14, 0x8, &(0x7f0000000640)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x1, 0xc, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000b40)=[r7], &(0x7f0000000b80)=[{0x0, 0x4, 0xd, 0x6}, {0x4, 0x4, 0x1, 0x3}, {0x0, 0x5, 0xf, 0xb}, {0x0, 0x4, 0x2, 0x4}], 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0xffffffc6, 0x0, 0xffffffffffffffff, 0x37}, 0x24) syz_clone(0x81248080, 0x0, 0x4c, 0x0, 0x0, 0x0) 575.959703ms ago: executing program 0 (id=48): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x0, 0x83, "00000000000000000000ffff00"}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$eJzs3c9vFGUfAPDvs7stlAItb97kfZGDTUiERG1pwWiMiRDx5sEfJJ5IrG0hhAUaWhNBjJDgf6B/gIk3E2M8EmOIevHqzcSriSESA714WzO7s2WB3f7cMsh8PsnQ55mnk+8zu3z7zDw7MxtAaY1l/1Qi9kbEfIoY6WirRd441vq9u3euzCzduTKTotF4568UKV/X/v2U/xzON94eEb/8kOI/1YfjLly6fHa6Xp+7mNcnFs/NTyxcuvz8mXPTp+dOz52fmnxx8oUjh6eOHOrLfu6KiJ/Gj9eun3pt3zczX+755LuvbqQ4Gjvz9s796JexGFt+TTplr+tL/Q5WkGq+P51vcaoV2CHWpf3+DUTE/2IkqnHvzRuJT98qtHPAlmqkiAZQUkn+Q0m1jwOy89/2UuwRCfCo3D7WmgC4m1pze0vL+V9rzQ3G9ubcwI6lFJ3TOiki+jEzl8WYfyaNZEts0Twc0N3VaxHx/27jf2rm5mhzFj/L/8p9+V+JiDfzn9n6tzcYf+yBuvyHR2cz+f9eR/6/v8H48h8AAAAAAAD65+axiHiu2+d/leXrf6LL9T/DEXG0D/FX//yvcqsPYYAubh+LeCUi2tf+LXXkf260mtd2Na8HGEinztTnDkXE7og4GAPbsvrkCjHG9v080LOt4/q/bMnit68FzPtxq7bt/m1mpxenN7PPQMvtaxFP1brlf1oe/1OX8T8b++fXGKNx/NUfe7Wtnv/AVml8EXGg6/h/78kVaeXnc0w0jwcm2kcFD/vo5I1ve8WX/1CcbPzfsXL+j6bO5/UsrD/Gx3/+ton87378P5hONB85M5iv+3B6cfHiZMRgeuPh9VPr7zM8idr50M6XLP8P7u9+/r/S8f9QRFxdY8wT379+vVeb8R+KM3QtYnZd4//6C/vf/fzvXvHXNv4faY7pB/M15v9gZWtN0KL7CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/RpWI2BmpMr5crlTGxyOGI+K/saNSv7Cw+OypCx+cn83amt//X2l/0+9Iq57a3/8/2lGfeqB+OCL2RMRn1aFmfXzmQn226J0HAAAAAAAAAAAAAAAAAACAx8Rwj/v/M39Ui+4dsOVqRXcAKIz8h/KS/1Be8h/KS/5Decl/KC/5D+Ul/6G85D+UV7Xx9cmi+wAAAAAAAPTNnqdv/poi4urLQ80lM5i3DRTaM2CrHS26A0BhPOIHysulf1Beq53jmwOAJ19apX37hrcEAAAAAAAAAAAAAPrlwF73/0NZVYruAFCY3vf/ezIAPOnc/w/l5RwfcP8/AAAAAAAAAAAAADz+Fi5dPjtdr89d3Ghh2+Y2V1BYa+H33a3/s49Lf9ZfiNSHjHtEhaL/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG3/BAAA//9r5fVk") 520.154176ms ago: executing program 4 (id=49): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000b8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000023893) shutdown(r9, 0x2) 493.945388ms ago: executing program 2 (id=50): r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0xf0ffffff}, 0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), 0x0}, 0x20) mknodat$null(0xffffffffffffff9c, 0x0, 0x1d4e, 0x103) lsm_set_self_attr(0x0, 0x0, 0x65, 0x0) creat(&(0x7f0000001080)='./file0\x00', 0x185) r2 = syz_create_resource$binfmt(&(0x7f0000000500)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) close(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB='.wfdso=', @ANYRESHEX, @ANYBLOB=',dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',access=client,version=9p2000.L,dfltgid=', @ANYRESHEX, @ANYBLOB=',fscache,msize=0x000000006d98d365,cache=none,fowner<', @ANYRESDEC, @ANYBLOB=',context=user_u,\x00']) 432.002572ms ago: executing program 3 (id=51): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r4, 0x1, 0x0, 0x25dfdbfd, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) close_range(r2, 0xffffffffffffffff, 0x0) 395.681604ms ago: executing program 3 (id=52): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 384.397755ms ago: executing program 2 (id=53): timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x2, 0x5, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) lstat(&(0x7f00000006c0)='./file0\x00', 0x0) sendmsg$inet_sctp(r2, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880), 0x0, 0x8004084}, 0x4041) timer_gettime(r0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r5}, 0x8) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000700)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="050000000000000000000000393793bf9b5663baa4bf5238e5c97b07b5b151e73e5f47cfc4ee1e50a5aaea414221c3632622b30d7e5196d932d73060c937f5d08779e0da5eb1ff0f00001bf22e59", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r10, &(0x7f0000000140)={&(0x7f0000000ec0)=@name={0x1e, 0x2, 0x0, {{0x43, 0x4}, 0x2}}, 0x10, 0x0}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 41.201568ms ago: executing program 2 (id=54): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180400000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0xfffffffffffffe24, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x24, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x55}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0xa}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x83, &(0x7f00000006c0)=""/131, 0x41000, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x1, 0x9, 0x4a35}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000400)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, r0, 0x1], &(0x7f0000000780)=[{0x3, 0x4, 0x8, 0x3}, {0x1, 0x20005, 0x4, 0x3}, {0x3, 0x1, 0x2, 0x7}, {0x3, 0x2, 0xc, 0x9}, {0x0, 0x5, 0x3, 0x4}, {0x2, 0x3, 0x4, 0x7}, {0x1, 0x5, 0xf, 0x4}], 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=r0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32=r4], 0x40}}, 0x4008054) r5 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r5, 0x6e2, 0x3900, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_allocate_blocks\x00', r8, 0x0, 0x141147af}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000080), 0x64, 0x52a, &(0x7f0000000a40)="$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") r9 = eventfd2(0x8, 0x80801) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000340)=r9, 0x1) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x77359400}, 0x0) r10 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r10, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r11, 0x6, 0x9, &(0x7f00000002c0)={{0x2, @rand_addr, 0x0, 0x2, 'wlc\x00', 0x29, 0x2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0xffff, 0x2, 0x0, 0x6a, 0x2}}, 0x44) r12 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pidfd_send_signal(r12, 0x0, &(0x7f0000000100)={0x0, 0x0, 0xffffffc4}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x41) 0s ago: executing program 4 (id=55): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000b8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x20000023893) shutdown(r8, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.48' (ED25519) to the list of known hosts. [ 42.202460][ T29] audit: type=1400 audit(1759893398.021:62): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.228622][ T29] audit: type=1400 audit(1759893398.051:63): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.229614][ T3305] cgroup: Unknown subsys name 'net' [ 42.262404][ T29] audit: type=1400 audit(1759893398.081:64): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.418576][ T3305] cgroup: Unknown subsys name 'cpuset' [ 42.425646][ T3305] cgroup: Unknown subsys name 'rlimit' [ 42.596932][ T29] audit: type=1400 audit(1759893398.411:65): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.621196][ T29] audit: type=1400 audit(1759893398.421:66): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.641966][ T29] audit: type=1400 audit(1759893398.421:67): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.662568][ T29] audit: type=1400 audit(1759893398.421:68): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.683601][ T29] audit: type=1400 audit(1759893398.431:69): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 42.693430][ T3311] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 42.710113][ T29] audit: type=1400 audit(1759893398.431:70): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 42.743222][ T29] audit: type=1400 audit(1759893398.541:71): avc: denied { relabelto } for pid=3311 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 42.777662][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.023795][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 44.069724][ T3327] chnl_net:caif_netlink_parms(): no params data found [ 44.119167][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 44.140760][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 44.169794][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.177250][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.184638][ T3322] bridge_slave_0: entered allmulticast mode [ 44.191145][ T3322] bridge_slave_0: entered promiscuous mode [ 44.200519][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.207730][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.214900][ T3322] bridge_slave_1: entered allmulticast mode [ 44.221604][ T3322] bridge_slave_1: entered promiscuous mode [ 44.238592][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 44.285609][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.303893][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.311237][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.318560][ T3327] bridge_slave_0: entered allmulticast mode [ 44.325278][ T3327] bridge_slave_0: entered promiscuous mode [ 44.340397][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.354911][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.362556][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.369989][ T3327] bridge_slave_1: entered allmulticast mode [ 44.376676][ T3327] bridge_slave_1: entered promiscuous mode [ 44.386027][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.393655][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.400881][ T3318] bridge_slave_0: entered allmulticast mode [ 44.407610][ T3318] bridge_slave_0: entered promiscuous mode [ 44.432717][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.440021][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.447348][ T3318] bridge_slave_1: entered allmulticast mode [ 44.454268][ T3318] bridge_slave_1: entered promiscuous mode [ 44.466966][ T3322] team0: Port device team_slave_0 added [ 44.490575][ T3322] team0: Port device team_slave_1 added [ 44.508243][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.533152][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.554293][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.563868][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.571017][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.578406][ T3320] bridge_slave_0: entered allmulticast mode [ 44.585112][ T3320] bridge_slave_0: entered promiscuous mode [ 44.591831][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.599151][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.606465][ T3325] bridge_slave_0: entered allmulticast mode [ 44.613460][ T3325] bridge_slave_0: entered promiscuous mode [ 44.621805][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.631178][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.638633][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.646036][ T3325] bridge_slave_1: entered allmulticast mode [ 44.652696][ T3325] bridge_slave_1: entered promiscuous mode [ 44.659250][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.666505][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.693768][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.714879][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.722079][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.729567][ T3320] bridge_slave_1: entered allmulticast mode [ 44.736011][ T3320] bridge_slave_1: entered promiscuous mode [ 44.752219][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.759822][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.786980][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.807586][ T3327] team0: Port device team_slave_0 added [ 44.833962][ T3327] team0: Port device team_slave_1 added [ 44.846234][ T3318] team0: Port device team_slave_0 added [ 44.853539][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.863726][ T3318] team0: Port device team_slave_1 added [ 44.871830][ T3322] hsr_slave_0: entered promiscuous mode [ 44.878429][ T3322] hsr_slave_1: entered promiscuous mode [ 44.891553][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.908609][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.929055][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.938752][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.945982][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.973591][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.985891][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.993689][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.021139][ T3327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.054975][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.062535][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.088756][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.099807][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.106770][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.134108][ T3327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.153687][ T3325] team0: Port device team_slave_0 added [ 45.160448][ T3325] team0: Port device team_slave_1 added [ 45.191399][ T3320] team0: Port device team_slave_0 added [ 45.198246][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.205443][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.232003][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.254357][ T3320] team0: Port device team_slave_1 added [ 45.260831][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.267928][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.294604][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.340676][ T3318] hsr_slave_0: entered promiscuous mode [ 45.346998][ T3318] hsr_slave_1: entered promiscuous mode [ 45.353187][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 45.359091][ T3318] Cannot create hsr debugfs directory [ 45.371829][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.379031][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.405335][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.420768][ T3327] hsr_slave_0: entered promiscuous mode [ 45.427080][ T3327] hsr_slave_1: entered promiscuous mode [ 45.433167][ T3327] debugfs: 'hsr0' already exists in 'hsr' [ 45.439087][ T3327] Cannot create hsr debugfs directory [ 45.458374][ T3325] hsr_slave_0: entered promiscuous mode [ 45.464665][ T3325] hsr_slave_1: entered promiscuous mode [ 45.470755][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 45.476676][ T3325] Cannot create hsr debugfs directory [ 45.482584][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.489850][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.517897][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.584810][ T3320] hsr_slave_0: entered promiscuous mode [ 45.590995][ T3320] hsr_slave_1: entered promiscuous mode [ 45.597532][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 45.603526][ T3320] Cannot create hsr debugfs directory [ 45.760640][ T3322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.769797][ T3322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.780832][ T3322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.789905][ T3322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.812410][ T3325] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.824358][ T3325] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.834270][ T3325] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.843459][ T3325] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.881214][ T3327] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.901693][ T3327] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.911329][ T3327] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.923602][ T3327] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.947495][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 45.956596][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 45.966201][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 45.976045][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 46.011379][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.037593][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.056090][ T3320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.065915][ T3320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.076294][ T3320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.085347][ T3320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.102745][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.110073][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.124192][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.131496][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.151846][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.172000][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.197617][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.230734][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.238580][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.247717][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.254840][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.270930][ T3327] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.292306][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.299435][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.311940][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.319219][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.335045][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.347768][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.365250][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.372649][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.394111][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.425636][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.433067][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.444235][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.478119][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.495787][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.506781][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.516029][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.538083][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.545906][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.575719][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.599519][ T3322] veth0_vlan: entered promiscuous mode [ 46.612789][ T3322] veth1_vlan: entered promiscuous mode [ 46.622899][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.633509][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.707325][ T3325] veth0_vlan: entered promiscuous mode [ 46.721456][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.747307][ T3322] veth0_macvtap: entered promiscuous mode [ 46.755756][ T3322] veth1_macvtap: entered promiscuous mode [ 46.778977][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.794079][ T3325] veth1_vlan: entered promiscuous mode [ 46.804406][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.813685][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.838119][ T3325] veth0_macvtap: entered promiscuous mode [ 46.849453][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.859396][ T3325] veth1_macvtap: entered promiscuous mode [ 46.872843][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.884759][ T3327] veth0_vlan: entered promiscuous mode [ 46.892879][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.901760][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.917398][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.935675][ T3327] veth1_vlan: entered promiscuous mode [ 46.953202][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.981647][ T3327] veth0_macvtap: entered promiscuous mode [ 46.992875][ T3322] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 46.999719][ T3327] veth1_macvtap: entered promiscuous mode [ 47.034174][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.080113][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.091038][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.113943][ T3320] veth0_vlan: entered promiscuous mode [ 47.124810][ T3488] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 47.126783][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.133924][ T3488] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 47.150343][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.160841][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.182628][ T3320] veth1_vlan: entered promiscuous mode [ 47.201589][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.207966][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 47.207994][ T29] audit: type=1326 audit(1759893403.021:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3492 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f078db3eec9 code=0x7ffc0000 [ 47.240229][ T29] audit: type=1326 audit(1759893403.021:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3492 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078db3eec9 code=0x7ffc0000 [ 47.263695][ T29] audit: type=1326 audit(1759893403.021:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3492 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078db3eec9 code=0x7ffc0000 [ 47.288363][ T29] audit: type=1326 audit(1759893403.031:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3492 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f078db3eec9 code=0x7ffc0000 [ 47.290935][ T3493] loop2: detected capacity change from 0 to 1035 [ 47.312639][ T29] audit: type=1326 audit(1759893403.031:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3492 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078db3eec9 code=0x7ffc0000 [ 47.312676][ T29] audit: type=1326 audit(1759893403.031:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3492 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f078db3eec9 code=0x7ffc0000 [ 47.312708][ T29] audit: type=1326 audit(1759893403.031:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3492 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078db3eec9 code=0x7ffc0000 [ 47.312757][ T29] audit: type=1326 audit(1759893403.031:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3492 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f078db3eec9 code=0x7ffc0000 [ 47.322775][ T3318] veth0_vlan: entered promiscuous mode [ 47.343484][ T29] audit: type=1400 audit(1759893403.061:118): avc: denied { prog_run } for pid=3492 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 47.394202][ T3493] ======================================================= [ 47.394202][ T3493] WARNING: The mand mount option has been deprecated and [ 47.394202][ T3493] and is ignored by this kernel. Remove the mand [ 47.394202][ T3493] option from the mount to silence this warning. [ 47.394202][ T3493] ======================================================= [ 47.416849][ T29] audit: type=1326 audit(1759893403.061:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3492 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078db3eec9 code=0x7ffc0000 [ 47.431696][ T3318] veth1_vlan: entered promiscuous mode [ 47.514206][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.532815][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.551302][ T3493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.569585][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.574710][ T3493] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.597406][ T3318] veth0_macvtap: entered promiscuous mode [ 47.612612][ T3320] veth0_macvtap: entered promiscuous mode [ 47.637195][ T3318] veth1_macvtap: entered promiscuous mode [ 47.652199][ T3320] veth1_macvtap: entered promiscuous mode [ 47.684492][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.692276][ T3493] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.3: corrupted xattr block 128: invalid header [ 47.708281][ T3502] loop0: detected capacity change from 0 to 1024 [ 47.716980][ T3502] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.1: Failed to acquire dquot type 0 [ 47.729385][ T3502] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 47.745042][ T3493] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 47.754539][ T3493] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.3: corrupted xattr block 128: invalid header [ 47.768828][ T3493] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 47.778975][ T3493] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.3: corrupted xattr block 128: invalid header [ 47.792795][ T3493] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 47.804222][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.838321][ T3502] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #13: comm syz.0.1: corrupted inode contents [ 47.851289][ T3502] EXT4-fs error (device loop0): ext4_dirty_inode:6509: inode #13: comm syz.0.1: mark_inode_dirty error [ 47.863640][ T3502] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #13: comm syz.0.1: corrupted inode contents [ 47.875630][ T3502] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.1: mark_inode_dirty error [ 47.888995][ T3502] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #13: comm syz.0.1: corrupted inode contents [ 47.901193][ T3502] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 47.910833][ T3502] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #13: comm syz.0.1: corrupted inode contents [ 47.940146][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.951059][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.960690][ T3502] EXT4-fs error (device loop0): ext4_truncate:4637: inode #13: comm syz.0.1: mark_inode_dirty error [ 47.960939][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.995853][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.005136][ T3502] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 48.029206][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.031051][ T3502] EXT4-fs (loop0): 1 truncate cleaned up [ 48.058256][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.092762][ T3502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.121598][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.147162][ T3514] loop3: detected capacity change from 0 to 512 [ 48.147459][ T3502] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.168270][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.202076][ T3514] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 48.204653][ T300] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.210585][ T3514] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 48.238398][ T300] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.247491][ T300] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.287992][ T3514] EXT4-fs (loop3): 1 truncate cleaned up [ 48.294142][ T3514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.351289][ T3519] loop1: detected capacity change from 0 to 4096 [ 48.353063][ T3522] loop2: detected capacity change from 0 to 512 [ 48.368512][ T3519] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.391108][ T3522] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 48.404595][ T3522] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.433069][ T3519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.470806][ T3522] EXT4-fs (loop2): 1 truncate cleaned up [ 48.481742][ T3522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.540172][ T3528] loop0: detected capacity change from 0 to 512 [ 48.584969][ T3522] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.633978][ T3528] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 48.690428][ T3528] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 48.764368][ T3533] loop2: detected capacity change from 0 to 1024 [ 48.773073][ T3528] EXT4-fs (loop0): 1 truncate cleaned up [ 48.782190][ T3533] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.11: Failed to acquire dquot type 0 [ 48.797967][ T3528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.823033][ T3533] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 48.865890][ T3533] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.11: corrupted inode contents [ 48.916982][ T3533] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #13: comm syz.2.11: mark_inode_dirty error [ 48.939768][ T3533] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.11: corrupted inode contents [ 48.971257][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.981684][ T3533] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.11: mark_inode_dirty error [ 48.998301][ T3533] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.11: corrupted inode contents [ 49.032720][ T3533] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 49.062328][ T3533] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.11: corrupted inode contents [ 49.104023][ T3533] EXT4-fs error (device loop2): ext4_truncate:4637: inode #13: comm syz.2.11: mark_inode_dirty error [ 49.158504][ T3516] Set syz1 is full, maxelem 65536 reached [ 49.184914][ T3533] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 49.197369][ T3533] EXT4-fs (loop2): 1 truncate cleaned up [ 49.199497][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.203838][ T3533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.267262][ T3537] loop3: detected capacity change from 0 to 1024 [ 49.302601][ T3327] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.336890][ T3537] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.12: Failed to acquire dquot type 0 [ 49.353691][ T3542] netlink: 9 bytes leftover after parsing attributes in process `syz.0.14'. [ 49.364701][ T3537] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 49.379988][ T3542] gretap0: entered promiscuous mode [ 49.415880][ T3537] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.12: corrupted inode contents [ 49.457480][ T3537] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #13: comm syz.3.12: mark_inode_dirty error [ 49.478613][ T3537] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.12: corrupted inode contents [ 49.528399][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.542983][ T3537] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.12: mark_inode_dirty error [ 49.602197][ T3537] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.12: corrupted inode contents [ 49.655767][ T3537] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 49.720830][ T3537] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.12: corrupted inode contents [ 49.825882][ T3562] loop2: detected capacity change from 0 to 512 [ 49.838127][ T3537] EXT4-fs error (device loop3): ext4_truncate:4637: inode #13: comm syz.3.12: mark_inode_dirty error [ 49.884370][ T3562] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 49.884383][ T3537] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 49.884913][ T3537] EXT4-fs (loop3): 1 truncate cleaned up [ 49.909330][ T3537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.932428][ T3562] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 49.949215][ T3562] EXT4-fs (loop2): 1 truncate cleaned up [ 49.955441][ T3562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.025505][ T3565] loop1: detected capacity change from 0 to 512 [ 50.073801][ T3565] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 50.098286][ T3565] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 50.292877][ T3565] EXT4-fs (loop1): 1 truncate cleaned up [ 50.303040][ T3565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.350421][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.603767][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.630690][ C1] hrtimer: interrupt took 60033 ns [ 50.733697][ T3581] syzkaller0: entered promiscuous mode [ 50.739262][ T3581] syzkaller0: entered allmulticast mode [ 50.857044][ T3579] loop2: detected capacity change from 0 to 1024 [ 50.888761][ T3579] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.24: Failed to acquire dquot type 0 [ 50.919820][ T3579] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 50.936926][ T3576] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 50.949637][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.950744][ T3579] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.24: corrupted inode contents [ 50.971861][ T3579] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #13: comm syz.2.24: mark_inode_dirty error [ 50.987476][ T3579] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.24: corrupted inode contents [ 51.008360][ T3579] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.24: mark_inode_dirty error [ 51.023288][ T3579] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.24: corrupted inode contents [ 51.041690][ T3579] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 51.058135][ T3594] loop0: detected capacity change from 0 to 1024 [ 51.067348][ T3594] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.31: Failed to acquire dquot type 0 [ 51.086645][ T3594] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 51.104130][ T3579] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.24: corrupted inode contents [ 51.104600][ T3594] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #13: comm syz.0.31: corrupted inode contents [ 51.129318][ T3599] netlink: 'syz.3.29': attribute type 1 has an invalid length. [ 51.136994][ T3599] netlink: 224 bytes leftover after parsing attributes in process `syz.3.29'. [ 51.148504][ T3594] EXT4-fs error (device loop0): ext4_dirty_inode:6509: inode #13: comm syz.0.31: mark_inode_dirty error [ 51.160642][ T3579] EXT4-fs error (device loop2): ext4_truncate:4637: inode #13: comm syz.2.24: mark_inode_dirty error [ 51.175811][ T3594] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #13: comm syz.0.31: corrupted inode contents [ 51.188018][ T3579] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 51.197628][ T3590] loop1: detected capacity change from 0 to 512 [ 51.198210][ T3594] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.31: mark_inode_dirty error [ 51.231692][ T3579] EXT4-fs (loop2): 1 truncate cleaned up [ 51.246236][ T3594] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #13: comm syz.0.31: corrupted inode contents [ 51.258071][ T3590] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.28: bg 0: block 248: padding at end of block bitmap is not set [ 51.265612][ T3579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.287651][ T3590] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.28: Failed to acquire dquot type 1 [ 51.288178][ T3594] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 51.299645][ T3590] EXT4-fs (loop1): 1 truncate cleaned up [ 51.308504][ T3579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.314697][ T3590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.323643][ T3594] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #13: comm syz.0.31: corrupted inode contents [ 51.336217][ T3590] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.368314][ T3594] EXT4-fs error (device loop0): ext4_truncate:4637: inode #13: comm syz.0.31: mark_inode_dirty error [ 51.383308][ T3594] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 51.394664][ T3594] EXT4-fs (loop0): 1 truncate cleaned up [ 51.401621][ T3594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.418077][ T3594] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.484133][ T3602] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.28: deleted inode referenced: 12 [ 51.643094][ T3617] loop4: detected capacity change from 0 to 512 [ 51.672769][ T3620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49168 sclass=netlink_route_socket pid=3620 comm=syz.0.35 [ 51.728179][ T3617] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 51.742080][ T3617] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 51.753896][ T3620] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.769702][ T3620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35'. [ 51.785323][ T3617] EXT4-fs (loop4): 1 truncate cleaned up [ 51.801508][ T3617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.837565][ T3590] syz.1.28 (3590) used greatest stack depth: 9200 bytes left [ 51.886785][ T3627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'. [ 51.945995][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.041204][ T3629] geneve2: entered promiscuous mode [ 52.046697][ T3629] geneve2: entered allmulticast mode [ 52.151719][ T3639] netlink: 20 bytes leftover after parsing attributes in process `syz.2.41'. [ 52.271443][ T3647] loop1: detected capacity change from 0 to 512 [ 52.292572][ T3647] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 52.308308][ T3647] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 52.325175][ T3645] bridge_slave_0: left allmulticast mode [ 52.331144][ T3645] bridge_slave_0: left promiscuous mode [ 52.337242][ T3645] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.350814][ T3647] EXT4-fs (loop1): 1 truncate cleaned up [ 52.358512][ T3647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.387222][ T3649] Zero length message leads to an empty skb [ 52.402449][ T3646] loop0: detected capacity change from 0 to 1024 [ 52.410587][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.411096][ T29] kauditd_printk_skb: 521 callbacks suppressed [ 52.411114][ T29] audit: type=1400 audit(1759893408.201:629): avc: denied { create } for pid=3644 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.424987][ T3646] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 52.432147][ T29] audit: type=1400 audit(1759893408.211:630): avc: denied { write } for pid=3644 comm="syz.3.42" path="socket:[4958]" dev="sockfs" ino=4958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.450583][ T3646] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 52.450611][ T3646] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.44: Failed to acquire dquot type 0 [ 52.477287][ T3646] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 52.559455][ T3646] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #13: comm syz.0.44: corrupted inode contents [ 52.573337][ T3646] EXT4-fs error (device loop0): ext4_dirty_inode:6509: inode #13: comm syz.0.44: mark_inode_dirty error [ 52.586010][ T3646] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #13: comm syz.0.44: corrupted inode contents [ 52.590910][ T3645] bridge_slave_1: left allmulticast mode [ 52.605201][ T3645] bridge_slave_1: left promiscuous mode [ 52.611862][ T3645] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.633174][ T3646] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.44: mark_inode_dirty error [ 52.641581][ T29] audit: type=1326 audit(1759893408.451:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3651 comm="syz.4.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453e5eeec9 code=0x7ffc0000 [ 52.663489][ T3646] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #13: comm syz.0.44: corrupted inode contents [ 52.682140][ T3646] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 52.691628][ T3646] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #13: comm syz.0.44: corrupted inode contents [ 52.699078][ T29] audit: type=1326 audit(1759893408.461:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3651 comm="syz.4.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f453e5eeec9 code=0x7ffc0000 [ 52.704515][ T3646] EXT4-fs error (device loop0): ext4_truncate:4637: inode #13: comm syz.0.44: mark_inode_dirty error [ 52.731337][ T29] audit: type=1326 audit(1759893408.461:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3651 comm="syz.4.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453e5eeec9 code=0x7ffc0000 [ 52.741490][ T3654] loop4: detected capacity change from 0 to 512 [ 52.762530][ T29] audit: type=1326 audit(1759893408.461:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3651 comm="syz.4.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f453e5eeec9 code=0x7ffc0000 [ 52.790151][ T3654] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 52.793711][ T29] audit: type=1326 audit(1759893408.461:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3651 comm="syz.4.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453e5eeec9 code=0x7ffc0000 [ 52.801578][ T3654] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 52.834253][ T3654] EXT4-fs (loop4): 1 truncate cleaned up [ 52.836673][ T29] audit: type=1326 audit(1759893408.461:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3651 comm="syz.4.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453e5eeec9 code=0x7ffc0000 [ 52.841278][ T3654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.845003][ T3646] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 52.890084][ T3645] bond0: (slave bond_slave_0): Releasing backup interface [ 52.904702][ T3646] EXT4-fs (loop0): 1 truncate cleaned up [ 52.911116][ T3646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.924292][ T3645] bond0: (slave bond_slave_1): Releasing backup interface [ 52.932371][ T3646] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.968177][ T3645] team0: Port device team_slave_0 removed [ 53.050892][ T3645] team0: Port device team_slave_1 removed [ 53.070411][ T3645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.078918][ T3645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.089439][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.099602][ T3645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.107106][ T3645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.131028][ T10] kernel write not supported for file /24/net/rt_acct (pid: 10 comm: kworker/0:1) [ 53.138638][ T3645] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 53.186393][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.236925][ T3660] loop1: detected capacity change from 0 to 512 [ 53.253978][ T3667] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 53.277031][ T3660] EXT4-fs warning (device loop1): ext4_xattr_inode_get:546: inode #11: comm syz.1.47: ea_inode file size=0 entry size=6 [ 53.296428][ T3673] loop0: detected capacity change from 0 to 1024 [ 53.308583][ T3668] loop4: detected capacity change from 0 to 512 [ 53.341439][ T3668] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 53.347758][ T3660] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 53.354475][ T3673] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.48: Failed to acquire dquot type 0 [ 53.370391][ T3668] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 53.388126][ T3673] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 53.399424][ T3660] ------------[ cut here ]------------ [ 53.408471][ T3660] EA inode 11 i_nlink=2 [ 53.408744][ T3660] WARNING: CPU: 0 PID: 3660 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 53.423991][ T3660] Modules linked in: [ 53.428622][ T3660] CPU: 0 UID: 0 PID: 3660 Comm: syz.1.47 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.438541][ T3660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 53.448839][ T3660] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 53.449123][ T3673] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #13: comm syz.0.48: corrupted inode contents [ 53.455565][ T3660] Code: 90 49 8d 7e 40 e8 26 03 b9 ff 4d 8b 6e 40 4c 89 e7 e8 3a fe b8 ff 41 8b 56 48 48 c7 c7 70 4b 55 86 4c 89 ee e8 87 15 68 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 c8 63 b0 03 0f 1f 84 00 00 00 00 00 [ 53.487739][ T3660] RSP: 0018:ffffc9000ea6b778 EFLAGS: 00010246 [ 53.494178][ T3660] RAX: e74907990e00f700 RBX: ffff88811a8981a8 RCX: 0000000000080000 [ 53.502784][ T3660] RDX: ffffc9000218a000 RSI: 0000000000014e07 RDI: 0000000000014e08 [ 53.511874][ T3660] RBP: 0000000000000002 R08: 0001c9000ea6b5f7 R09: 0000000000000000 [ 53.521118][ T3660] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811a898158 [ 53.529561][ T3660] R13: 000000000000000b R14: ffff88811a898110 R15: 0000000000000001 [ 53.537657][ T3660] FS: 00007fdd30f376c0(0000) GS:ffff8882aee3a000(0000) knlGS:0000000000000000 [ 53.547121][ T3660] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.554415][ T3660] CR2: 00007f164487f000 CR3: 000000011d880000 CR4: 00000000003506f0 [ 53.562812][ T3660] Call Trace: [ 53.566290][ T3660] [ 53.569336][ T3660] ext4_xattr_inode_dec_ref_all+0x579/0x830 [ 53.575578][ T3660] ? errseq_check+0x2c/0x50 [ 53.580421][ T3660] ext4_xattr_delete_inode+0x6b7/0x790 [ 53.586006][ T3660] ? ext4_truncate+0x92e/0xae0 [ 53.588630][ T3668] EXT4-fs (loop4): 1 truncate cleaned up [ 53.591210][ T3660] ext4_evict_inode+0xa6a/0xd90 [ 53.598210][ T3668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.601981][ T3660] ? __pfx_ext4_evict_inode+0x10/0x10 [ 53.615802][ T3673] EXT4-fs error (device loop0): ext4_dirty_inode:6509: inode #13: comm syz.0.48: mark_inode_dirty error [ 53.620216][ T3660] evict+0x2e3/0x550 [ 53.635611][ T3660] ? __dquot_initialize+0x146/0x7c0 [ 53.638042][ T3673] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #13: comm syz.0.48: corrupted inode contents [ 53.640947][ T3660] iput+0x4ed/0x650 [ 53.656808][ T3660] ext4_process_orphan+0x1a9/0x1c0 [ 53.662101][ T3660] ext4_orphan_cleanup+0x6a8/0xa00 [ 53.667529][ T3660] ext4_fill_super+0x3483/0x3810 [ 53.667787][ T3673] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.48: mark_inode_dirty error [ 53.673891][ T3660] ? snprintf+0x86/0xb0 [ 53.689236][ T3660] ? set_blocksize+0x1a8/0x310 [ 53.694244][ T3660] ? sb_set_blocksize+0xe3/0x100 [ 53.698926][ T3673] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #13: comm syz.0.48: corrupted inode contents [ 53.699507][ T3660] ? setup_bdev_super+0x30e/0x370 [ 53.711933][ T3673] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 53.716369][ T3660] ? __pfx_ext4_fill_super+0x10/0x10 [ 53.726260][ T3673] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #13: comm syz.0.48: corrupted inode contents [ 53.730803][ T3660] get_tree_bdev_flags+0x291/0x300 [ 53.743154][ T3673] EXT4-fs error (device loop0): ext4_truncate:4637: inode #13: comm syz.0.48: mark_inode_dirty error [ 53.748017][ T3660] ? __pfx_ext4_fill_super+0x10/0x10 [ 53.759888][ T3673] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 53.765245][ T3660] get_tree_bdev+0x1f/0x30 [ 53.779000][ T3660] ext4_get_tree+0x1c/0x30 [ 53.780133][ T3673] EXT4-fs (loop0): 1 truncate cleaned up [ 53.783638][ T3660] vfs_get_tree+0x54/0x1d0 [ 53.792442][ T3673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.794244][ T3660] do_new_mount+0x24d/0x660 [ 53.811823][ T3660] path_mount+0x4a5/0xb70 [ 53.816474][ T3660] ? user_path_at+0x109/0x130 [ 53.821291][ T3660] __se_sys_mount+0x28c/0x2e0 [ 53.826195][ T3660] ? do_mkdirat+0x3ac/0x3f0 [ 53.831071][ T3660] __x64_sys_mount+0x67/0x80 [ 53.835849][ T3660] x64_sys_call+0x2b51/0x3000 [ 53.840859][ T3660] do_syscall_64+0xd2/0x200 [ 53.845727][ T3660] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 53.852424][ T3660] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 53.858327][ T3660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.864359][ T3660] RIP: 0033:0x7fdd324d066a [ 53.868971][ T3660] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.889508][ T3660] RSP: 002b:00007fdd30f36e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 53.898177][ T3660] RAX: ffffffffffffffda RBX: 00007fdd30f36ef0 RCX: 00007fdd324d066a [ 53.906269][ T3660] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fdd30f36eb0 [ 53.914940][ T3660] RBP: 0000200000000180 R08: 00007fdd30f36ef0 R09: 0000000000800700 [ 53.923464][ T3660] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 53.931684][ T3660] R13: 00007fdd30f36eb0 R14: 0000000000000473 R15: 0000200000000680 [ 53.939784][ T3660] [ 53.942830][ T3660] ---[ end trace 0000000000000000 ]--- [ 53.949018][ T3660] EXT4-fs (loop1): 1 orphan inode deleted [ 53.955816][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.956341][ T3660] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.010560][ T3682] loop2: detected capacity change from 0 to 512 [ 54.029616][ T3003] ================================================================== [ 54.038042][ T3003] BUG: KCSAN: data-race in set_nlink / set_nlink [ 54.044494][ T3003] [ 54.047061][ T3003] read to 0xffff88810711c518 of 4 bytes by task 3310 on cpu 1: [ 54.054894][ T3003] set_nlink+0x29/0xb0 [ 54.059085][ T3003] kernfs_iop_permission+0x1e2/0x220 [ 54.064517][ T3003] inode_permission+0x1ca/0x310 [ 54.069506][ T3003] link_path_walk+0x162/0x900 [ 54.074368][ T3003] path_openat+0x1de/0x2170 [ 54.079084][ T3003] do_filp_open+0x109/0x230 [ 54.083605][ T3003] do_sys_openat2+0xa6/0x110 [ 54.088317][ T3003] __x64_sys_openat+0xf2/0x120 [ 54.093284][ T3003] x64_sys_call+0x2eab/0x3000 [ 54.098058][ T3003] do_syscall_64+0xd2/0x200 [ 54.102581][ T3003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.108614][ T3003] [ 54.110953][ T3003] write to 0xffff88810711c518 of 4 bytes by task 3003 on cpu 0: [ 54.118815][ T3003] set_nlink+0x99/0xb0 [ 54.122995][ T3003] kernfs_iop_permission+0x1e2/0x220 [ 54.128656][ T3003] inode_permission+0x1ca/0x310 [ 54.133996][ T3003] link_path_walk+0x162/0x900 [ 54.138696][ T3003] path_lookupat+0x63/0x2a0 [ 54.143248][ T3003] filename_lookup+0x147/0x340 [ 54.148069][ T3003] vfs_statx+0x9d/0x390 [ 54.152264][ T3003] vfs_fstatat+0x115/0x170 [ 54.156699][ T3003] __se_sys_newfstatat+0x55/0x260 [ 54.161755][ T3003] __x64_sys_newfstatat+0x55/0x70 [ 54.167080][ T3003] x64_sys_call+0x135a/0x3000 [ 54.171770][ T3003] do_syscall_64+0xd2/0x200 [ 54.176371][ T3003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.182369][ T3003] [ 54.184769][ T3003] value changed: 0x00000008 -> 0x00000009 [ 54.190577][ T3003] [ 54.192904][ T3003] Reported by Kernel Concurrency Sanitizer on: [ 54.199062][ T3003] CPU: 0 UID: 0 PID: 3003 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 54.210103][ T3003] Tainted: [W]=WARN [ 54.213931][ T3003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 54.224180][ T3003] ================================================================== [ 54.239150][ T3686] loop4: detected capacity change from 0 to 512 [ 54.254820][ T3327] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.275450][ T3686] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 54.284056][ T3686] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 54.305952][ T3682] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.54: bg 0: block 248: padding at end of block bitmap is not set [ 54.329202][ T3686] EXT4-fs (loop4): 1 truncate cleaned up [ 54.336070][ T3686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.344833][ T3682] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.54: Failed to acquire dquot type 1 [ 54.371389][ T3682] EXT4-fs (loop2): 1 truncate cleaned up [ 54.385729][ T3682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.401446][ T3320] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 54.413817][ T3682] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.452364][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.464527][ T3320] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 54.479747][ T3320] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 54.541331][ T3683] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.54: deleted inode referenced: 12 [ 54.674191][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.722098][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.762501][ T3691] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.775144][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.851414][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.931093][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.032067][ T35] bridge_slave_1: left allmulticast mode [ 55.037914][ T35] bridge_slave_1: left promiscuous mode [ 55.044232][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.053639][ T35] bridge_slave_0: left allmulticast mode [ 55.060145][ T35] bridge_slave_0: left promiscuous mode [ 55.066121][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.140841][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.151350][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.161393][ T35] bond0 (unregistering): Released all slaves [ 55.192479][ T35] hsr_slave_0: left promiscuous mode [ 55.198456][ T35] hsr_slave_1: left promiscuous mode [ 55.204318][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.212056][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.248552][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.256099][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.281404][ T35] veth1_macvtap: left promiscuous mode [ 55.287283][ T35] veth0_macvtap: left promiscuous mode [ 55.298988][ T35] veth1_vlan: left promiscuous mode [ 55.304348][ T35] veth0_vlan: left promiscuous mode [ 55.376032][ T35] team0 (unregistering): Port device team_slave_1 removed [ 55.397997][ T35] team0 (unregistering): Port device team_slave_0 removed