last executing test programs: 1m12.692514209s ago: executing program 32 (id=114): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3e0, 0x3d8, 0x3d8, 0x3e0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x6dbf}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0x3, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3e0, 0x3d8, 0x3d8, 0x3e0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x6dbf}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0x3, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) 1m6.88594606s ago: executing program 3 (id=232): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) sendmmsg$inet6(r3, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000200)={0xa0000004}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x20, 0xe3, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x9e}}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x20008040) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='kmem_cache_free\x00', r10}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 1m6.640353869s ago: executing program 3 (id=240): syz_open_dev$sg(0x0, 0x0, 0x8002) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0xc, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@nogrpid}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1m6.603799509s ago: executing program 3 (id=241): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffeca50000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=") r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}, {&(0x7f00000014c0)="dc9ebe30", 0x4}], 0x2}, 0x0) creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r5, &(0x7f0000000080)="bd049128a4b068aa2ae4fe6bf50d88d323ed2c", 0x13, 0x3ff) 1m6.332487798s ago: executing program 3 (id=245): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000380)={0x3, {{0xa, 0x4e21, 0x1000000, @mcast1, 0x7}}}, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x44, &(0x7f0000000fc0)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xe, 0x11, 0x0, @private1, @mcast2, {[], {0x4e22, 0xe22, 0xe, 0x0, @gue={{0x1, 0x1, 0x0, 0x2, 0x4e22, @void}, "39ef"}}}}}}}, 0x0) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}, 0x0, 0xd1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m6.023379697s ago: executing program 33 (id=252): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_settime(r0, 0x0, &(0x7f00000005c0)={{}, {0x0, 0x989680}}, 0x0) gettid() socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002064070000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xd000000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m5.860410556s ago: executing program 3 (id=254): unshare(0x400) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101, @void, @value}, 0x94) r0 = socket(0x2, 0x80805, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0xc, 0x0, 0x2, 0xffffffff, 0x3, 0x3, 0x1}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x6}}], 0x48, 0x48001}, 0x2000c800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x5707b563827c8365, 0x0, 0x0, {{}, {@void, @val={0x8, 0x12a}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r4, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xb228, 0x66}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x28000014) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xa0800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, r4, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80000000, 0x63}}}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x52b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x13, 0x13, [{0x12, 0x1}, {0x48, 0x1}, {0x57, 0x1}, {0x2a59b824dd0b751, 0x1}, {0x36}, {0x18, 0x1}, {0x1b}, {0x6c}, {0xc}, {0xc}, {0x6c}, {0x4}, {0x24, 0x1}, {0x3, 0x1}, {0xd743a7653778df0b}]}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x13, 0x13, [{0x18}, {0x30, 0x1}, {0x16}, {0x72}, {0x2, 0x1}, {0x6c}, {0x6}, {0x0, 0x1}, {0x36, 0x1}, {0x2}, {0x2}, {0x60, 0x1}, {0x18}, {0x3, 0x1}, {0x3, 0x1}]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x28e}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x4080}, 0x20008881) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) 1m5.859709516s ago: executing program 34 (id=255): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@fadd={0x58, 0x114, 0x6, {{0xfffffffe, 0x3}, &(0x7f0000000180)=0x2, 0x0, 0x7c, 0x9, 0x0, 0xddd, 0x12, 0x3ff}}], 0x58, 0x8004}, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x152, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700148033006c6f0000000000000000000000000000e97fc47f78d9a5f274825bc5fa90eff1499493dcbe7e78c346bb8893ffc18345e47ba2dbb143fe50d3ff091677789a0aa5e69be7755c83faf03777f7937462df578440abfc6f2a57b923e4fef5f5d7f66852e23739e9c2e7017949703fa198cdb5b14ce703308aafb2aec66a208655054ed69dcc4a234eb5f2d506a5a8eb0ca0096d2f72a43fdb243a1b5996ded71d08b658cbd5581e7d564fefdfa8b34b42a8ad36f043455191453661aab7bb70b3975495ff8b0efe8cf04e97db1dcbfc69812570207863c30d5632b13149c16fdb1123"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 1m5.817820506s ago: executing program 3 (id=256): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = dup(r0) write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d520987f70e06d038e7ff7fc6e5539b0d650e8b089b3f353b680908f0e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8041800005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) 1m5.817374276s ago: executing program 35 (id=256): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = dup(r0) write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d520987f70e06d038e7ff7fc6e5539b0d650e8b089b3f353b680908f0e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8041800005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) 56.440142096s ago: executing program 5 (id=361): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000080), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 56.423258005s ago: executing program 5 (id=363): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 56.359121545s ago: executing program 5 (id=365): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14, 0x800) recvmsg(r0, &(0x7f0000001480)={&(0x7f0000000080)=@vsock, 0x80, &(0x7f0000001400)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/125, 0x7d}, {&(0x7f0000001180)=""/37, 0x25}, {&(0x7f00000011c0)=""/40, 0x28}, {&(0x7f0000001200)=""/21, 0x15}, {&(0x7f0000001240)=""/110, 0x6e}, {&(0x7f00000012c0)=""/228, 0xe4}, {&(0x7f00000013c0)=""/43, 0x2b}], 0x8}, 0x40010043) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getpeername(r2, &(0x7f00000014c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000001540)=0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000001740)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001600)={0xf8, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20040890}, 0x0) r5 = accept4(r3, &(0x7f0000001780)=@nfc, &(0x7f0000001800)=0x80, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x5400000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x54, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf0}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x1080}, 0x4000000) clock_gettime(0x0, &(0x7f00000019c0)={0x0, 0x0}) ppoll(&(0x7f0000001980)=[{r0, 0x80ce}], 0x1, &(0x7f0000001a00)={r6, r7+10000000}, &(0x7f0000001a40)={[0x7ff]}, 0x8) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001ac0), r3) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0xfdc345b35a443728}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x34, r8, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000014}, 0x8050) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000001bc0), &(0x7f0000001c00)=0x8) r9 = io_uring_setup(0x1800, &(0x7f0000001c40)={0x0, 0x7c13, 0x1, 0x0, 0x137}) io_uring_enter(r9, 0x459b, 0x7880, 0x4b, &(0x7f0000001cc0)={[0x5]}, 0x8) chdir(&(0x7f0000001d00)='./file0\x00') r10 = socket$netlink(0x10, 0x3, 0x9) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000001d80), r5) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000001e80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x64, r11, 0x400, 0x70bd27, 0x7, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb71}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10000}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r12 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000001ec0), 0x1, 0x0) write$binfmt_register(r12, &(0x7f0000001f00)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0xd, 0x3a, '@:', 0x3a, 'syz1\x00', 0x3a, './file0', 0x3a, [0x46, 0x4f, 0x4f, 0x43, 0x46]}, 0x33) r13 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xd) ioctl$TCSETS(r13, 0x5402, &(0x7f0000001f40)={0x1ff, 0x140, 0x4, 0x1, 0x14, "bf0eff7a220cd9691c93388b38c6c5593cb74c"}) r14 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001fc0), r10) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x38, r14, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044000}, 0x805) ioctl$KDGKBMETA(r13, 0x4b62, &(0x7f00000020c0)) sendmsg$key(r5, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002100)={0x2, 0x15, 0x5, 0x9, 0x1b, 0x0, 0x70bd2a, 0x25dfdbfd, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0x81, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x2}, @in6={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x10}, 0x8}}, @sadb_x_nat_t_type={0x1, 0x14, 0x8}, @sadb_ident={0x2, 0x0, 0x90, 0x0, 0x8}, @sadb_lifetime={0x4, 0x3, 0x9, 0xffffffffffffffff, 0x82e, 0x9}, @sadb_sa={0x2, 0x1, 0x4d6, 0xb, 0x9, 0x92, 0x4, 0x1a0000000}, @sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd2a, 0x3504}, @sadb_x_nat_t_type={0x1, 0x14, 0x2}, @sadb_x_nat_t_type={0x1, 0x14, 0x2}, @sadb_x_sa2={0x2, 0x13, 0xfc, 0x0, 0x0, 0x70bd25, 0x3500}, @sadb_ident={0x2, 0xa, 0x7ff, 0x0, 0x6}]}, 0xd8}}, 0x14040890) socket(0x2b, 0xd, 0x6) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000022c0)=0x4) 55.491529143s ago: executing program 5 (id=379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) creat(0x0, 0x0) (async) creat(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1805}, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd3860800000080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c600000000d7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x700}, 0x2c) pselect6(0x4b, &(0x7f0000000040), &(0x7f00000000c0)={0x9}, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000600)}, 0x20) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x100080a, &(0x7f0000000280)=ANY=[@ANYBLOB="756e686964652c68696465006e6f726f636b2c73657373696f6e3d3078303030303030013030303030303030312c686964652c63007b6865636b3d7374726963f4416e6f636fd689c91ceb036442a5e8b65659212a2bbc4e30952aa22edafcc01c50d9545f6d70726573534d6e6f726f636b2c6368657f12106458668eb97fd25f742c696f636861727365743d69736f383835392d31332c63727566742c7065726d6928d7997c17d1c8704a54dc34229c72656374696f2c61756469742c004b32b19ac463afda9675ef356e50e2fb3d253ba1480f27afe645fded942f5957f2992896524e7731fa148037452b21c34c9918911ac37dff04099efbbf3c69c8fb9bdcda4683151bb24329a40b273da9bce1145213686d55a96caab752943c330423edc3876e0b859d57cd6d60dc5220aa1367c24de5e66343c128db17391d25b7aa35001e68df726f9ca1e0bfab6993329f0318602f3c51a28ed0858da3e3c47e95de50cbd34e68dd8517f1b4e1eeab0000000000e7b4ea43ef9e4d817aae8e0d2e71215bc0127620b046361adbde0b60bee63e91aa28d93cd8d79802966dbfacceffe6b1d302c5515d7323f7cca3f665a6964cba6cd16ae40bc68e94ac6b40bf96a55dcefd4024a5d7a848d08bdb5d8bb89b4c1968cf6ae0fd7858fa38b738c1ee6822f2cfdb30c3941199251d603d495ab6ce2ddb8e918e72b9171aaa287f2b19755bdc92109150850d5c14ec2ac32dee0122b28fcb3e88d5096d6352799c5f13f597695adfd21e644379e6a400000000000000000000000000fa41c3f14dca4ef03fed7e6466a4e2d4503979398731ee0fc7487e0b09466d841e2d8e64ed9e0d4333e6a79acee454fdb4fff932f123000000", @ANYRES64], 0x1, 0x66b, &(0x7f0000000900)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r5}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) (async) waitid(0x0, 0x0, 0x0, 0x4, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000020000001d"], 0x202400) (async) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000020000001d"], 0x202400) r7 = open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) pwritev2(r7, 0x0, 0x0, 0x1400, 0x0, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 55.200349452s ago: executing program 5 (id=384): ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x4, 0x200, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000005c0)='kfree\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='fscache_active\x00', r0, 0x0, 0x6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000000)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x18, 0x67, 0x0, 0x2, 0x89, 0x0, @rand_addr=0x64010100, @multicast1}, "7550d72e"}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 54.951272661s ago: executing program 5 (id=393): ioperm(0x8, 0x7, 0x200000003) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x3000000, 0x0) 54.95119341s ago: executing program 36 (id=393): ioperm(0x8, 0x7, 0x200000003) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x3000000, 0x0) 35.050357445s ago: executing program 7 (id=796): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYRESDEC=0x0], 0xfe33) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f00000002c0)=""/147, 0x93}], 0x3}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000800000000000000100000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x38, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x38}}, 0x0) r7 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}, 0x2}, 0x1c) listen(r7, 0x101) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e1d, @dev}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 34.160100522s ago: executing program 7 (id=823): munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x15c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x5, 0x7}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x130, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x9}, @TCA_U32_SEL={0x124, 0x5, {0x7, 0xff, 0x4, 0xfff8, 0x200, 0x5, 0x0, 0x7, [{0xffff5582, 0x7fffffff, 0x1, 0x80000000}, {0x8, 0xfe3, 0x5, 0x100010}, {0x3, 0x6, 0x4, 0x101}, {0x239, 0x8, 0x800, 0x800}, {0xb3, 0x8, 0x6, 0x3}, {0x400, 0x4, 0x0, 0x95}, {0x6, 0xaef9, 0x6, 0x9}, {0x5, 0x10000007, 0x81, 0x8000}, {0x5, 0xfffff272, 0x7fff, 0xe}, {0x4e, 0x5, 0x2, 0xe}, {0x93, 0x5, 0x8}, {0xb, 0x0, 0x1e00, 0x401}, {0x9, 0x10, 0xfffffffb, 0x7fffffff}, {0xffff, 0x8, 0x5, 0x9}, {0x0, 0x80000000, 0x2, 0x6}, {0x1, 0x5, 0x800, 0x6}, {0x12, 0x8, 0x1, 0x5}]}}]}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 34.097910952s ago: executing program 7 (id=827): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x401, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ptrace$getregs(0xc, 0x0, 0xffffffff, &(0x7f0000000000)=""/26) 33.978796482s ago: executing program 7 (id=831): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x759, &(0x7f0000000580)={[], [], 0x2c}, 0x0, 0x4fd, &(0x7f0000000c00)="$eJzs3F1vFFUfAPD/bFtKH+jTPjxv8qKsorHRSGl5vfACiCbcmJhoDF7WthCkgKE1AdJIMQYSLzR8Al/uTPwEXumNUeOFxluJt8aEmN6AXpgxsztbt51uX7ddS3+/ZJczM2f2nP/MHHbOOTsNYNMqZ29JxPaI+DEieqqLszOUq//cn54c/m16cjiJNH3p16SS79705HAta22/bflCXymi9E4Su4vFdo5fvXZ+aGxs9HK+on+ilKcuDJ0dPTt6cfDYsUMHu44eGTzclDizOt3b9dalPTtPvXr7heHTt1/7+tOsvmm+vT6Oqt7K+5Yll9BWWFOO8uxjWeeJpVd9Q+iuSyft2XupdZVhybKrNjtdHZX23xNtlaWqnnj+7ZZWDlhTaZqmnYW1M99lU2m9JKnukKY3UuABkESrawC0Ru2L/t501lOdHC72gx9sd09EpQeUxX0/f1W3tFd6sOXeat+oY43K/09EnJ76/YPsFfOOQwAANNfnJyJunazed9Re1S2l+F9dvn/mc0O9EfGviNgREf/O71/+G1HJ+/+IeKhun+4lzAKU5ywX73++78oT9berTZPd/z2bz23Nvv+bqXlvW77UXYm/Izlzbmz0QH5M+qKjM1seKH70zLDaF8/98H6j8st193/ZKyu/di+Y1+OX9jkDdCNDE0Orjbvm7o3Kgb1ejD+J9qSWitgZEbtW8PnZMTv31Cd7Gm2fFX8WZyH+9xp/ePsKKjRH+lHEk9XzPxVz4o98/i+pzE9eeKN//Oq1Z87Vz08OHD0yeLh/a4yNHuivXRVF33x388U8WehGLHD+a01jTSfSsvP/j3mv/5mZy94sNTNfO778Mm7eudWwT7PS639L8nIlXZufvTI0MXF5IGJLMlVcP/jXvleGumblz+Lv2zd/+98R8ceH+X67IyK7iB+OiEciYm9e90cj4rGI2LdA/F+dfPz1Rl3IxeNfW1n8I8s6/40Sx7+NmH9T2/kvPysU/G65EH9HNDr/hyqpvnzNyNDE1sXiWqim9YlVH0AAAADYAPZGxPZISvvzgabtUSrt3x+xbWYEZXzi6TOX3rw4Un1GoDc6SrWRrp668dCBfGw4W872GqxbzrYfrIwbp2madmXLWf99rLu1ocOmt61B+8/8XHykBXjQLGserdETbcCGNLf931nyns3/QQawvprwOxpgg9L+YfNacvtfq6fggJaZr/1fj7jfgqoA62y+9v9KYc3xdakLsL70/2HzWnn792MA2Oh8/8OmtKSH5FeQ2HFqgTxJ+9oU2jhRioX/CkBvRG1N7Z5m4Q/8qRTRnBq2NTXSrlnntDRvnq3RjLKitGie9mX8IYb1TZT+HtWoJjojYpGrd+Ziu15LXFtlod2L5ak0go9b+78TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6v0ZAAD//0UV04U=") modify_ldt$write(0x1, &(0x7f0000000080), 0x10) syz_clone(0x820ca000, 0x0, 0x39, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) close_range(r2, 0xffffffffffffffff, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x10000008ebc, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x7, 0x40, 0x7fffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = epoll_create(0x3ff) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000280)) r8 = syz_open_dev$vcsa(&(0x7f0000000100), 0x1, 0x82000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x21, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x5, 0x9, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x3f7e, 0x1000, &(0x7f0000001100)=""/4096, 0x0, 0x54, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x4, 0x7, 0x8}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x1, 0x4, 0xb, 0xb}, {0x5, 0x1, 0x9, 0x4}, {0x3, 0x3, 0xd, 0x2}, {0x5, 0x2, 0x0, 0x2}], 0x10, 0x21, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000d3ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat(r0, &(0x7f0000004280)='./file0\x00', 0x26000, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x18) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x40040) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3100000000080002400000000114000000080a000000000000000000000000000028000000000a030000000000000000000200000008000240000000000900010073797a3100000000260000001100010000000000000000000000000a"], 0x8c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r11, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r13 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r13, 0x40505330, &(0x7f00000000c0)={0x800000, 0x0, 0x0, 0x0, 0x0, 0x55a}) close_range(r10, 0xffffffffffffffff, 0x0) 33.63865188s ago: executing program 7 (id=837): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8fe00000000bfa200000000000007020000f8ffffffb703000008000000b70400008f2000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) 33.148797909s ago: executing program 7 (id=845): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900442f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a190", 0x32}, {&(0x7f0000000100)="08f2bf2aab", 0x5}, {&(0x7f0000000200)="6bdcf27c", 0x4}], 0x3) 33.148626529s ago: executing program 37 (id=845): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900442f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a190", 0x32}, {&(0x7f0000000100)="08f2bf2aab", 0x5}, {&(0x7f0000000200)="6bdcf27c", 0x4}], 0x3) 27.092387459s ago: executing program 8 (id=955): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x80, 0x0}, 0x0) (async) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'netpci0\x00', @local}) 26.960834928s ago: executing program 8 (id=959): syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') r0 = socket$kcm(0x29, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}], 0x1, 0x0) close(r0) 26.761673867s ago: executing program 8 (id=961): r0 = socket$kcm(0x29, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}], 0x1, 0x0) close(r0) 26.601557097s ago: executing program 8 (id=962): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r1 = io_uring_setup(0x1de0, &(0x7f0000000440)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x1b, 0x20000038, r2) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}, 0x10, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 26.244672306s ago: executing program 8 (id=972): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000b) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x10000044, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffe, 0xffeff7bf}, 0x0) listen(r1, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003b) fcntl$notify(r2, 0x402, 0x10) readv(r2, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket(0x2c, 0x3, 0x7286) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x800000, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r5) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000009000000850000001700000085100000050000008b8106000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000852000000300000018290000", @ANYRES32=r0, @ANYBLOB="000000000200000018110000", @ANYRES32, @ANYBLOB="000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000004750900070000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x34, &(0x7f00000001c0)=""/52, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0xa, 0x2a, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000580)=[0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r0, r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x3, 0x2, 0xedf3, 0x7}, {0x1, 0x4, 0x9, 0x3}, {0x1, 0x3, 0x8, 0xb}], 0x10, 0x0, @void, @value}, 0x94) r7 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x4, 0x0, 0x3, {0xa, 0x4e21, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4751}}}, 0x32) 25.550012134s ago: executing program 8 (id=991): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x206040, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r5, {0x5}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4000000}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000006c0)={'filter\x00', 0x7, 0x4, 0x408, 0x100, 0x210, 0x0, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "05bb69d2c4b63312b8bb1cbd9f0b724edaf74bab3a7bf6e1ae2144c337f6"}}, {{@arp={@private=0xa010100, @rand_addr=0x64010100, 0xffffffff, 0xff000000, 0x2, 0x2, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0x633a73686cb26ba9]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x101]}}, 0xe8, 0x0, 0x2009, 0x7, 0x403, 0x0, 'batadv0\x00', 'pimreg0\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xf, 0xffffffff}}}, {{@arp={@multicast2, @multicast2, 0xffffffff, 0xff000000, 0x7, 0xd, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x6, 0x4, 0x2, 0x0, 0x435, 'veth1_to_batadv\x00', 'veth1_vlan\x00', {0x42bfee0aa326d42d}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @multicast2, @remote, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x65, r10}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0x8, 0x0, 0xfffffffe}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x9, 0x0, 0x3ff}, 0x8) sendto$inet(r1, &(0x7f0000000300)="ab", 0x1a000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x1, {{0x2, 0xfffc, @private=0xa010100}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r1, 0x0, 0x20, &(0x7f0000002140)=""/4115, &(0x7f0000001000)=0x1013) 25.539407704s ago: executing program 38 (id=991): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x206040, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r5, {0x5}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4000000}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000006c0)={'filter\x00', 0x7, 0x4, 0x408, 0x100, 0x210, 0x0, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "05bb69d2c4b63312b8bb1cbd9f0b724edaf74bab3a7bf6e1ae2144c337f6"}}, {{@arp={@private=0xa010100, @rand_addr=0x64010100, 0xffffffff, 0xff000000, 0x2, 0x2, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0x633a73686cb26ba9]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x101]}}, 0xe8, 0x0, 0x2009, 0x7, 0x403, 0x0, 'batadv0\x00', 'pimreg0\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xf, 0xffffffff}}}, {{@arp={@multicast2, @multicast2, 0xffffffff, 0xff000000, 0x7, 0xd, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x6, 0x4, 0x2, 0x0, 0x435, 'veth1_to_batadv\x00', 'veth1_vlan\x00', {0x42bfee0aa326d42d}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @multicast2, @remote, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x65, r10}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0x8, 0x0, 0xfffffffe}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x9, 0x0, 0x3ff}, 0x8) sendto$inet(r1, &(0x7f0000000300)="ab", 0x1a000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x1, {{0x2, 0xfffc, @private=0xa010100}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r1, 0x0, 0x20, &(0x7f0000002140)=""/4115, &(0x7f0000001000)=0x1013) 8.914319189s ago: executing program 1 (id=1422): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 8.893777749s ago: executing program 1 (id=1424): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000140)='./file0\x00', 0x20000, 0x1d) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r1, 0x20, &(0x7f00000002c0)={&(0x7f0000000180)=""/56, 0x38, 0x0, &(0x7f00000001c0)=""/225, 0xe1}}, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002"], 0x84}}, 0x20000000) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000080)={0x5, 0x40, 0x0, 'queue1\x00', 0x3b0}) 8.817657819s ago: executing program 1 (id=1427): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) unshare(0x20000400) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r1, 0xfffffdeb, &(0x7f0000000580)}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, &(0x7f00000003c0)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r4, 0x400, 0x1) close(r4) unlink(&(0x7f0000000280)='./file1\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x6}, 0x5}}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_TTL={0x5, 0x7, 0x80}]}, {0x4, 0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x74}}, 0x0) 8.762063298s ago: executing program 1 (id=1430): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r0 = io_uring_setup(0x1de0, &(0x7f0000000440)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1b, 0x20000038, r1) 8.702284508s ago: executing program 1 (id=1432): linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd0900320003003000000060000000000c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) 7.590787545s ago: executing program 1 (id=1459): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xce28}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0) brk(0x7fffffff) 7.567647964s ago: executing program 39 (id=1459): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xce28}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0) brk(0x7fffffff) 5.515600298s ago: executing program 4 (id=1512): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_test', 0x14ba82, 0x18) write$cgroup_int(r0, 0x0, 0x0) 5.450941758s ago: executing program 4 (id=1516): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_setup(0x2624, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3, &(0x7f0000000d40), 0x9, 0x61c, &(0x7f0000000700)="$eJzs3U1rXFUfAPD/nbwnz/MkDQ9qXWhAtAVt0qStFBG0CK5KqS8LwY1jk5ba6QtNRFMrTaFuBHHjQnDlwrrwO2hBcOUXcOHGlVSKSDdK0ZE7uTNOk7nJTMzMtJnfD8Y5556bOeea/HvOnDnnTgA9ayr9TyFid0RcSCIm68r6IyucWj3v9m+XT6SPJMrlV35N4vKVZKX+tZLseSwi0oI/xyP5LiIm+9bXu7h86UyxVFq4mOVnls5emFlcvrTv9NniqYVTC+fmnp47fOjgocOz++t+6uSLrV7frrr00WtvvTP+4bHXv/jsTjL75Y/Hkni+VpZeV6uvvZmpmIpypv54+v/18HZX1iV9tb+TfyRrD6z1QhsbREuqv7+BiHgwxqOv7rc5Hh+81NXGAW1VTqLWRwG9JhH/0KOq44Dqe/vm3gcPtnlUAnTCrSMRT9TifyAiqvHfvzo3GMOVuYHR28ld8zxJROzfhvrTOr7/9ti19BFtmocDGlu5OpTN26/t/5NKbE7EcCU3ertwV/wXsmnciWz+8OWNqxnPK5hak8/qH9rq9QDNW7kaEQ81Gv9vHv9vZM/p8Te3WH9O/AMAAAAAAABbcONIRDzV6PO/Qm39z2CD9T9jEXW757Zu88//Cje3oRqggVtHIp5tuP63UD1loi/L/beyHmAgOXm6tLA/Iv4XEXtjYCjNz9a/6Fd1Px0R+z6a/DSv/vr1f+kjrb+6FjBrx83+NauB5otLxW24dOh5t65GPNyfv/4n7f+TBv1/Gt8Xmqxj8vHrx/PKNo9/oF3Kn0fsadj/J7Vzko3vzzFTGQ/MVEcF6z3y3sdf59Uv/qF70v5/dOP4H0rq79ez2NrrD0bEgeX+cl75Vsf/g8mrfVG3E/Hd4tLSxdmIweTo+uNzrbUZ7ifDzZ/6fkRU4qEaL2n8731s4/m/2vi/Lg5Hsnt8NeOBv8Z+yivT/0P3pPE/v3H/P3F3/996Yu76xDd59R9vqv8/WOnT92ZHzP/BxpoN0G63EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADuR4WI+E8khelaulCYno4Yi4j/x2ihdH5x6cmT598+N5+WVb7/v1D9pt/x1XxS/f7/ibr83Jr8gYjYFRGf9I1U8tMnzpfmu33xAAAAAAAAAAAAAAAAAAAAcI8YW31at/8/9XNfV5sGdEJ/9izeoff0d7sBQNeIf+hd4h96V378/36nXNHR5gAd1Gz/X77S5oYAHbfF8b+PC2AH8P4fetVAc6cNt7sdQDfo/wEAAAAAYEfZ9eiNH5KIWHlmpPJIDWZltQ8GR7rVOqCdCnkFQ51tB9B51vBC77L0B3pXk4t/gR0sqaX+aLjZP3/1f9KeBgEAAAAAAAAAAAAA6+zZ3cT+f2BHyt3/D+x4G+z/b7Sxx+0CYAex/x96l9t8AdXBft43/dv/DwAAAAAAAAAAAAD3gOFLZ4ql0sLFxeWmE1daOfnfJ36JvKLnOtmM7UqsFO+JZtwPiYGIWFNUHl/9sz1TLL0WnW1PNWI6UddgB+vKSXTp3yMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCdvwMAAP//emUoLA==") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000580)=""/217, 0xd9) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', 0x2818080, &(0x7f00000003c0)={[{@nodots}, {@fat=@dos1xfloppy}, {@nodots}, {@nodots}, {@fat=@tz_utc}, {@nodots}, {@nodots}, {@dots}, {@fat=@nfs}, {@dots}, {@dots}, {@dots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0xfe}}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@fat=@debug}, {@nodots}]}, 0xfd, 0x1ec, &(0x7f0000000980)="$eJzs3cFqE0EYB/AvadIknnoTRGHBg56K+gQVqSAGBCUHPSk0XloRkkvqJX0Mr76bDyA95VJW4m66drXYtGa3xt/vkm/2P7OZgWSSSyZvb3/Y3/s4fv/15ufodhvR3ImdmDViK5qxcBQAwDqZpWl8SzN1zwUAqMYFPv9PKp4SALBir16/ef643999mSTdiOOjyWAyyB6z/Omz/u6D5IetYtTxZDLYOM0fJuXvDvO8HTfy/FE2Pjmbb8b9u1k+z5686JfyTuytdukAAAAAAAAAAAAAAAAAAAAAAFCbO5Es/PZ8n+3tct7L86z10/lApfN7WnGrlTeL44HSacSXiGkVSwMAAAAAAAAAAAAAAAAAAIB/xvjw0/67g4PhqCg6EXH2yjJFI7/xJYcvXWzElYY3rza8rqL9t27YuhbLWa7o5S+x8/sk12Sql3wXbEbEqiY2S9P0Qp2LPaJT2jN6VW1OAAAAAAAAAAAAAAAAAADwnyl+9Ptr1q1jQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQg8X//99rZ+3haHx4ks6vjBbR+cU0Iv7UZzganz5Zr751AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsN6+BwAA///ixi+/") ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x120) sendfile(r4, r3, 0x0, 0x80000000) getsockopt$inet6_int(r2, 0x29, 0x13, 0x0, &(0x7f00000004c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = gettid() ptrace$getsig(0x4202, r6, 0x4951, &(0x7f0000000000)) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) connect$unix(r5, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 5.408905737s ago: executing program 6 (id=1518): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) 5.376305777s ago: executing program 6 (id=1519): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCG_STATS(r3, 0xc0109207, &(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180500000003006d000000854000002af2000095000000000000000000000000001d34d2cfb5128fe4958792107107715669b8f265b90805a12214cef5042ac9f0b90f815f6caec282ab41dc4ffca6253cef01ad6a22de48cc8c05659db82de56b58c92c1a60aa59bcd7420d8cb25ed2239df0082158276c7a24232dab29e6dc8afc62108baff3838de57148642b0599ee874b4c315c8d0e640ebd43d1ccd290a9f7c759a017e3a22a6b3caf0636b995b08bb81e36e23912bbbb5ab960771fef608c", @ANYRES32=r1, @ANYRES8=r3, @ANYRES32=r2], &(0x7f0000000040)='syzkaller\x00', 0x800000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) close(r9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'dvmrp1\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4d8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000600)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010001fff000000000000000000020000", @ANYRES32=0x0, @ANYBLOB="0040040000c10000280012800900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x891}, 0x0) 5.373451097s ago: executing program 4 (id=1521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @broadcast}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900442f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="08f2bf2aab", 0x5}, {&(0x7f0000000200)="6bdcf27c", 0x4}], 0x3) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 3.887257572s ago: executing program 6 (id=1541): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) 3.807620352s ago: executing program 6 (id=1544): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r0 = io_uring_setup(0x1de0, &(0x7f0000000440)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1b, 0x20000038, 0x0) 3.772777172s ago: executing program 6 (id=1545): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="19000000040000000800000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850b00000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_NAME(0xf, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x102e}) 3.453260421s ago: executing program 9 (id=1549): munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x1fff, &(0x7f00000004c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0d0028bd7000fcdbdf25040000003372edb0b577a5b7b5d0c27be1836b50b49fd4801d4ab61b1f0e0a9200314c3e55e7da6fa8c6ad30c44f3e5d84d217942bccc066cf120231eccac34b3d802e87f4778bbded7a584b7e0868482587bc7dc100d85de48d75d311330721e0c40ecf08e5ee0d45f9b998eb4e1aba85d90a1a86a9393d925b7875853081ad9c8596"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x890) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f80)=@filter={'filter\x00', 0xe, 0x4, 0x420, 0xffffffff, 0x128, 0x228, 0x228, 0xffffffff, 0xffffffff, 0x350, 0x350, 0x350, 0xffffffff, 0x4, &(0x7f00000003c0), {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [0xffffffff, 0xff, 0x800000ff, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xff], 'xfrm0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x3b, 0x2, 0x5, 0x40}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x100], 0x400, 0x22, 0x3}}, @common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@local, @mcast1, [0xffffff00, 0xff], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], 'veth0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x2f, 0x18, 0x0, 0x5b}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0xffffffff, 0x4], 0xffff, 0x1, 0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x4c}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x6422d6a2], 0x3, 0x5, 0x2}}, @common=@hl={{0x28}, {0x1, 0xff}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0xbfd1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r8 = socket(0x34, 0x3, 0x0) write(r8, &(0x7f0000000240)="240000001e005f1814fffffffffffff807000000010000000000000008000500c4cb0b02", 0x24) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x10) r10 = syz_open_dev$vcsa(&(0x7f0000000000), 0xbf, 0x42) lseek(r10, 0xfffffffffffffff7, 0x1) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r13}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r13}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f0000000300)={0x16, 0x98, 0xfa00, {&(0x7f00000002c0), 0x4, r13, 0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}}}, 0xa0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000010000100000000000000000000000002", @ANYRES32=r12, @ANYBLOB="0006000000000000140012800b00010067656e657665000004000280"], 0x34}, 0x1, 0x2}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r9, r12, 0x25, 0x8, @val=@kprobe_multi=@addrs={0x1, 0x1, 0x0, &(0x7f0000000040)=[0xd1e1], 0x3ff}}, 0x30) ioperm(0xfffffffffffffffe, 0x8, 0xff000) 2.932088119s ago: executing program 6 (id=1553): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000040)={0xfffffffd, 0x4, [0x6eb, 0xc6, 0x5f9, 0x633]}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r8 = accept4(r4, 0x0, &(0x7f0000000180), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f00000001c0)={0x9, 0x8, 0x6, 0x0, 0x2c, 0x7, 0x5}, 0xc) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x3c, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x3c}}, 0x4000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000040)="caf9545765b14b5a4f20de10095240c317e627173ea7265adf41b28e963f59388330da8e6cc7ad5885eebc65f056dc76a1c276e1d1d76119e318f9f9af4d634c358cffa1a1c6dee6825131d4b58a42ca132872442b398be1ffa053fd5f", 0x5d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00'}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0) 2.917965289s ago: executing program 40 (id=1553): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000040)={0xfffffffd, 0x4, [0x6eb, 0xc6, 0x5f9, 0x633]}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r8 = accept4(r4, 0x0, &(0x7f0000000180), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f00000001c0)={0x9, 0x8, 0x6, 0x0, 0x2c, 0x7, 0x5}, 0xc) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x3c, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x3c}}, 0x4000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000040)="caf9545765b14b5a4f20de10095240c317e627173ea7265adf41b28e963f59388330da8e6cc7ad5885eebc65f056dc76a1c276e1d1d76119e318f9f9af4d634c358cffa1a1c6dee6825131d4b58a42ca132872442b398be1ffa053fd5f", 0x5d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00'}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0) 2.777692319s ago: executing program 4 (id=1555): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r0 = io_uring_setup(0x1de0, &(0x7f0000000440)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1b, 0x20000038, 0x0) 2.652356069s ago: executing program 4 (id=1556): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x3, 0x101, 0xfffd, 0x4}, 0xc) listen(r0, 0x3) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=0x0, @ANYRES8, @ANYRESOCT, @ANYRESOCT=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, r3, 0x0, 0x4, &(0x7f0000000380)='GPL\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) fstat(r2, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000bc0)=@newpolicy={0xc0, 0x13, 0x8, 0x70bd2c, 0x25dfdbfe, {{@in=@remote, @in=@multicast2, 0x4e24, 0xfa03, 0x4e24, 0xa00, 0x0, 0x0, 0xa0, 0x2f, 0x0, r5}, {0x0, 0x602, 0x1, 0x0, 0x3, 0x1, 0x3ff, 0x101}, {0xffffffffffffe46f, 0x100000000, 0x3, 0x5cc}, 0x7fff, 0x6e6bb6, 0x1, 0x1, 0x0, 0x9374877323d8a6c5}, [@extra_flags={0x8, 0x18, 0x81}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket(0x10, 0x3, 0x9) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$TIPC_CMD_GET_MAX_PORTS(r7, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000400)={0x1c}, 0xdb}}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r9}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 2.585472238s ago: executing program 9 (id=1558): r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 2.432269368s ago: executing program 0 (id=1560): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}], 0x1, 0x0) close(r0) 2.413342127s ago: executing program 0 (id=1561): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x2, 0x0, 0x0, 0xff91) 1.741425615s ago: executing program 9 (id=1565): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x20}}}, 0x24}}, 0x0) 1.559909294s ago: executing program 9 (id=1567): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$eJzs3d9rW1UcAPDvTX/sp66DMdQHKezByVy6tv6Y4MN8FB0O9H2G9q6Mpsto0rHWgduDe9mLDEHEgfgH+O7j8B/wrxjoYMgo+uBL5aY3XbYmbZZlSzSfD9ztnPuj55yce07OyUm4AQytyeyfQsSrEfFNEnGo6dho5AcnN89bf3htLtuS2Nj47M8kknxf4/wk//9AHnklIn79OuJEYXu61dW1xVK5nC7n8ana0uWp6urayYtLpYV0Ib00Mzt7+p3Zmfffe7dnZX3z3N/ff3r3o9O3jq1/9/P9w7eTOBMH82PN5XgG15sjkzGZvyZjceaJE6d7kNggSfqdAboykrfzscj6gEMxkrd64P/vq4jYAIZUov3DkGqMAxpz+x7Ng/8zHny4OQHaXv7Rzc9GYm99brR/PXlsZpTNdyd6kH6Wxi9/3LmdbdG7zyEAdnX9RkScGh3d3v8lef/XvVMdnPNkGvo/eHHuZuOft1qNfwpb459oMf450KLtdmP39l+43+KypFefUmfjvw9ajn+3Fq0mRvLYS/Ux31hy4WI5zfq2lyPieIztyeI7reecXr+30e5Y8/gv27L0G2PBPB/3R/c8fs18qVZ6ljI3e3Aj4rWW499kq/6TFvWfvR7nOkzjaHrn9XbHdi//87XxU8QbLev/0YpWsvP65FT9fphq3BXb/XXz6G/t0u93+bP6379z+SeS5vXa6tOn8ePef9J2x7q9/8eTz+vh8Xzf1VKttjwdMZ58sn3/zKNrG/HG+Vn5jx/buf9rdf/vi4gvOiz/zSM32546CPU//1T1//SBex9/+UO79Dur/7froeP5nk76v04z+CyvHQAAAAAAAAyaQkQcjKRQ3AoXCsXi5vc7jsT+QrlSrZ24UFm5NB/138pOxFihsdJ9qOn7ENP592Eb8Zkn4rMRcTgivh3ZV48X5yrl+X4XHgAAAAAAAAAAAAAAAAAAAAbEgTa//8/8PtLykvEXm0PgufLIbxheu7b/XjzpCRhI3v9heHXV/vf1Ph/Ai+f9H4bUWL8zAPST938YXto/DC/tH4aX9g8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9de7s2WzbWH94bS6Lz19ZXVmsXDk5n1YXi0src8W5yvLl4kKlslBOi3OVpd3+XrlSuTw9EytXp2pptTZVXV07v1RZuVQ7f3GptJCeTz1tCAAAAAAAAAAAAAAAAAAAALarrq4tlsrldFlAoKvA6GBkQ6ApcKsHrbvPHRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANPk3AAD//0unNek=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r0 = io_uring_setup(0x1de0, &(0x7f0000000440)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1b, 0x20000038, 0x0) 1.558500715s ago: executing program 2 (id=1568): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1e, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_netfilter(0x10, 0x3, 0xc) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, 0x0, 0x2, 0xc3, &(0x7f0000000340)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) gettid() r2 = mq_open(&(0x7f0000000200)='!selinuxselinup\x00', 0x1, 0x0, &(0x7f0000000300)={0x0, 0x43, 0x7}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{}]}, 0x1, 0x453, &(0x7f0000001040)="$eJzs3U9sFFUcB/DvbrslAbRg/IP4r4JKEaW2NUESTCTKSS4GE88NLYRYqKE1EUKMJh68eTHx7EG5eeTgyXjAoyZ48aaejJEYIvGk1sx2ly5lt3RD26nu55PM7pud132/mdffzO7ryzRAzxoqHirJ1iTfJxlcWL25wtDC0/VrF47/ee3C8Urm54/9XqnX++PahePNqs2f21I8VJPhalL9oJKH2rQ7e+78mxPT01NnG+sjc6ffGpk9d/7ZU6cnTk6dnDozeuDgC+OjB8bGx1dtX1+9+O6xLa+9dOSjySu/zVz86csi3q2Nba37sVqGMnTzsWzx1Go3VrL7WsqV/hIDoSt9SYruqtXzfzB9Wey8wXzzY6nBAWtqvrCp4+b35oH/sUrKjgAoR/NCX3z/bS7r9dmD8l09vPAFsOj3641lYUt/qo06tSXf71fTUJJDl458USxZo3EYAAAAgF721eEkz7Qb/6vm/pZ6RfmBJDuSPJhkZ1Kf1/NwkkeSPJrkseZ8oi4srb90/KfSaQINq+Lq4eRQY27XzeN/zdG/bOtrrN1VrKRWOXFqeuq5JHcnGU5tU7E+ukwbl7/957tO21rH/4qlaL85FtiI49f+JX+fnpyYm7iTfWbR1feTnf3t+r9yYyZQkYKPJ9nVzRvXFos/79p7slO12/c/a2n+02RP2/xvnHivHKw/LTM/c6R+PhhpnhVu9eHo2Cud2tf/5Sryf/Ny/Z9sq7TO153tvo3LOy692Glb9+f/Hz4rzv8DldfrAQ40Xn1nYm7u7GgyUDl66+tj3cf839b5Q1PzeDSPV9H/w7vbX//vaXm33UmeSPJkY+7ynvq1P9mb5Okk+5aJ5u+XD7zRaZv8L1fR/5Nt8//G1IAl+d994dD2T452an9l+f98/Rd6uPGKz3+3t9IOKjtOAAAAAAAAAFZHtX4PvEp1/41ytbp//8I9/O7N5ur0zOzcvhMzb5+ZXLhX3rbUqs2ZXoMt80FH6+XF9bEl6+NJtif5uO+vxp0HZqYny9556HFbOuR/4Ze+sqMD1pz7tULvWkH+19YjDmD9uf5D75L/0LvkP/Qu+Q+9S/5D75L/0LtWnv8DaxoHsP5c/6En3cl9/TZaoT8bIoy2heb8qZLCaP5L/g1yNDZm4fOvk3Voqy/JRtnlZQplnpUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANo5/AwAA//9EA9s8") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000480)={0x1, &(0x7f0000000b00)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff5}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2000400) fsmount(r3, 0x0, 0x70) 1.451592035s ago: executing program 0 (id=1569): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='kmem_cache_free\x00', r2, 0x0, 0x1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001200576d100000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000002000255000008001d00ca0e00000a000100"], 0x3c}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x5}, 0x18) r6 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000280)={0x2, 'gre0\x00', {0xddc}, 0xfff8}) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x5, 0x8, 0x3, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0xfd, 0x0, 0x0, 0xb}]}, 0x20}}, 0x0) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1a000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xfffffffb, 0x20}, &(0x7f0000000200)=0xc) 1.325255174s ago: executing program 9 (id=1570): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) r0 = syz_open_procfs(0x0, &(0x7f00000007c0)='map_files\x00') getdents64(r0, &(0x7f0000001fc0)=""/4086, 0xff6) r1 = socket$key(0xf, 0x3, 0x2) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="1b00000000000000000000000000010000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000080000000000008d5100000000000000"], 0x50) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x4}, 0x18) (async) alarm(0xa) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000080000000800000000000000", @ANYRES32, @ANYBLOB='\v\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000ad00"/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000f3570521a092319180000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000500)='sys_enter\x00', r7}, 0x18) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000140)=""/67) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r8, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) (async) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000100)='kfree\x00', r9}, 0x18) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000a40)=@newtaction={0x200, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x1ec, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x5, 0x0, 0x2000003}, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_xt={0x17b, 0xa, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0xb1adb71959b29ca4}, @TCA_IPT_TARG={0x5f, 0x6, {0x9, 'raw\x00', 0x2, 0xd011, "26fe5317fb9d577cd1243ce437fe47fa928cc0bc0ae6d99a2cc072db2477817abb39842a6c581af2f00961286ef98ad8be677dd6c5"}}]}, {0xc3, 0x6, "ec31fd2887d641748cfa79b5dce97081a755377f826d02dc12179b24f71bbcad6e4b29d04d33e1965b5e60444e48ab78c14fc3f5f594b45f4fc2945f4dded1ffc321d1eab9478dccc94dccf1c5e4006ada4a8e1ca807d50bb4261ac5ec960f1fa6da533f3f46372037b14e311b3f20d40d93d77be4204f405635ba9557ccf865fcf477eb60cae10b1ac641afebe7243c32b50df61e3d50fadcbffab066157660f67a261cfb1fafff4c32be068cf447f1fc834c390601111a03e588c3e3b758"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x200}}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 1.177853474s ago: executing program 2 (id=1571): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000c40)={0x2000000b}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000100000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r10}, 0x10) r11 = socket(0x10, 0x3, 0x0) connect$netlink(r11, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x0) migrate_pages(0x0, 0x8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) 994.649973ms ago: executing program 2 (id=1572): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x14, r3, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r1], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r6) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f0000000680)) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000640)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x17c, r8, 0x6, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xffffffff, @private1, 0x6}}, {0x14, 0x2, @in={0x2, 0x1, @private=0xa010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6a8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcdde}]}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x80000000, @mcast2, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010100}}}}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg0\x00'}}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4040) 915.589472ms ago: executing program 2 (id=1573): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5", @ANYRES8=0x0, @ANYRESHEX=r3, @ANYRES64=r0, @ANYRESHEX=r1, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r4}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r6, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$packet(0x11, 0xa, 0x300) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) fcntl$dupfd(r5, 0x0, r5) sendto$packet(r8, &(0x7f0000000180)="02034effd3fc02000000ab5d71acedd7c9560385dcb188fb84d7dc039806112405ce811cc352", 0x26, 0x0, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x20, 0x6, @broadcast}, 0x14) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$PPPIOCSPASS(r10, 0x40107447, &(0x7f00000002c0)={0x4, &(0x7f0000000280)=[{0xfffc, 0xfa, 0x6, 0x7fff}, {0x7, 0x9, 0x5, 0xc}, {0xf8d, 0x3, 0x7f, 0xdb}, {0x1ff, 0x6, 0x7, 0x7}]}) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000080)=0x9, &(0x7f0000000140)=0x4) 881.132423ms ago: executing program 4 (id=1574): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fff}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xd9}}}}}}}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfe90, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mincore(&(0x7f0000003000/0x1000)=nil, 0x1000, &(0x7f0000000140)=""/157) 880.874823ms ago: executing program 2 (id=1575): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r1 = syz_open_pts(r0, 0x141601) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x1f, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) 851.901843ms ago: executing program 41 (id=1574): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fff}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xd9}}}}}}}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfe90, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mincore(&(0x7f0000003000/0x1000)=nil, 0x1000, &(0x7f0000000140)=""/157) 620.504662ms ago: executing program 0 (id=1577): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @broadcast}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900442f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="08f2bf2aab", 0x5}, {&(0x7f0000000200)="6bdcf27c", 0x4}], 0x3) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 558.693161ms ago: executing program 9 (id=1578): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 555.673161ms ago: executing program 42 (id=1578): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 305.613581ms ago: executing program 0 (id=1580): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x1b, 0x20000038, r0) 170.60915ms ago: executing program 0 (id=1581): munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x1fff, &(0x7f00000004c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0d0028bd7000fcdbdf25040000003372edb0b577a5b7b5d0c27be1836b50b49fd4801d4ab61b1f0e0a9200314c3e55e7da6fa8c6ad30c44f3e5d84d217942bccc066cf120231eccac34b3d802e87f4778bbded7a584b7e0868482587bc7dc100d85de48d75d311330721e0c40ecf08e5ee0d45f9b998eb4e1aba85d90a1a86a9393d925b7875853081ad9c8596"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x890) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f80)=@filter={'filter\x00', 0xe, 0x4, 0x420, 0xffffffff, 0x128, 0x228, 0x228, 0xffffffff, 0xffffffff, 0x350, 0x350, 0x350, 0xffffffff, 0x4, &(0x7f00000003c0), {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [0xffffffff, 0xff, 0x800000ff, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xff], 'xfrm0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x3b, 0x2, 0x5, 0x40}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x100], 0x400, 0x22, 0x3}}, @common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@local, @mcast1, [0xffffff00, 0xff], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], 'veth0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x2f, 0x18, 0x0, 0x5b}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0xffffffff, 0x4], 0xffff, 0x1, 0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x4c}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x6422d6a2], 0x3, 0x5, 0x2}}, @common=@hl={{0x28}, {0x1, 0xff}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0xbfd1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r8 = socket(0x34, 0x3, 0x0) write(r8, &(0x7f0000000240)="240000001e005f1814fffffffffffff807000000010000000000000008000500c4cb0b02", 0x24) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x10) r10 = syz_open_dev$vcsa(&(0x7f0000000000), 0xbf, 0x42) lseek(r10, 0xfffffffffffffff7, 0x1) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r13}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r13}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f0000000300)={0x16, 0x98, 0xfa00, {&(0x7f00000002c0), 0x4, r13, 0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}}}, 0xa0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000010000100000000000000000000000002", @ANYRES32=r12, @ANYBLOB="0006000000000000140012800b00010067656e657665000004000280"], 0x34}, 0x1, 0x2}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r9, r12, 0x25, 0x8, @val=@kprobe_multi=@addrs={0x1, 0x1, 0x0, &(0x7f0000000040)=[0xd1e1], 0x3ff}}, 0x30) ioperm(0xfffffffffffffffe, 0x8, 0xff000) 0s ago: executing program 2 (id=1582): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) eventfd2(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="160000000000000008000000050000000000bfa457c58880ccdcc46d334cf58b280000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='attr/exec\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) syz_io_uring_setup(0x2e3b, &(0x7f0000000240)={0x0, 0x492b, 0x10100, 0x400}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89fc, &(0x7f0000001440)={'veth0_to_hsr\x00', 0x0}) sendto$l2tp(r8, &(0x7f0000000200)="8d2b719020f135f391fc5bd8d0d5bdd27153ed580cff5a0bf061afe4acff216d6acd68b5fd90fe9c66f8f052889e385c76f849826d86eb3f6bd52a634a6edc02fbc8e0d58d269ce0a5638c43f77a685267f38beef700c48f1d83f48114bf7cc07f265db7f0876c7a727df58ce5d4eb4c5b2659ae1947a9837b41f825484514feb4091361fe4e8a0205da230e7e17fed1bfa47de89a6536f5a3fd20ba0cdafd6a748e142cbbc49337783edf4ccfcd665bcc9fb418120431b3fb603f6a0b4e", 0xbe, 0x4000, &(0x7f00000002c0)={0x2, 0x0, @empty, 0x3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000001a00000018000180140002006261746164765f73aa6176655f3100"], 0x2c}}, 0x0) close(r10) tee(r9, r11, 0x8000000000081, 0x0) kernel console output (not intermixed with test programs): -speed) [ 77.600705][ T6427] vhci_hcd vhci_hcd.0: Device attached [ 77.716956][ T6402] vhci_hcd: connection reset by peer [ 77.722489][ T5519] vhci_hcd: stop threads [ 77.726785][ T5519] vhci_hcd: release socket [ 77.731205][ T5519] vhci_hcd: disconnect device [ 77.848314][ T6324] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.854163][ T9] usb 17-1: new low-speed USB device number 2 using vhci_hcd [ 77.863758][ T6324] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.873460][ T6324] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.882146][ T6324] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.922667][ T6324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.937072][ T6324] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.946697][ T5519] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.953770][ T5519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.966092][ T5501] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.973140][ T5501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.039098][ T6324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.142587][ T6324] veth0_vlan: entered promiscuous mode [ 78.161105][ T6324] veth1_vlan: entered promiscuous mode [ 78.176628][ T6460] IPv6: Can't replace route, no match found [ 78.187387][ T6324] veth0_macvtap: entered promiscuous mode [ 78.195721][ T6324] veth1_macvtap: entered promiscuous mode [ 78.205758][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.216269][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.227661][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.238121][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.247984][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.259589][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.277801][ T6324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.287375][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.297852][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.307734][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.318185][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.329476][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.339919][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.348016][ T6467] loop6: detected capacity change from 0 to 512 [ 78.350543][ T6324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.400530][ T6470] lo speed is unknown, defaulting to 1000 [ 78.408030][ T6467] EXT4-fs error (device loop6): ext4_ext_check_inode:524: inode #3: comm syz.6.887: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 78.440756][ T6467] EXT4-fs error (device loop6): ext4_quota_enable:7115: comm syz.6.887: Bad quota inode: 3, type: 0 [ 78.445813][ T6428] vhci_hcd: connection reset by peer [ 78.457480][ T6467] EXT4-fs warning (device loop6): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 78.458689][ T6324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.478565][ T6467] EXT4-fs (loop6): mount failed [ 78.482056][ T6324] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.486084][ T5495] vhci_hcd: stop threads [ 78.494460][ T6324] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.498669][ T5495] vhci_hcd: release socket [ 78.508652][ T6324] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.511817][ T5495] vhci_hcd: disconnect device [ 78.635902][ T6479] loop6: detected capacity change from 0 to 1024 [ 78.697802][ T6484] FAULT_INJECTION: forcing a failure. [ 78.697802][ T6484] name failslab, interval 1, probability 0, space 0, times 0 [ 78.710485][ T6484] CPU: 1 UID: 0 PID: 6484 Comm: syz.9.892 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 78.721108][ T6484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 78.731175][ T6484] Call Trace: [ 78.734625][ T6484] [ 78.737615][ T6484] dump_stack_lvl+0xf2/0x150 [ 78.742353][ T6484] dump_stack+0x15/0x1a [ 78.746515][ T6484] should_fail_ex+0x223/0x230 [ 78.751224][ T6484] should_failslab+0x8f/0xb0 [ 78.755891][ T6484] kmem_cache_alloc_noprof+0x52/0x320 [ 78.761304][ T6484] ? fib_table_insert+0x464/0xf90 [ 78.766371][ T6484] fib_table_insert+0x464/0xf90 [ 78.771221][ T6484] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 78.776667][ T6484] ? kmem_cache_free+0xdc/0x2d0 [ 78.781502][ T6484] fib_magic+0x1a1/0x1f0 [ 78.785745][ T6484] fib_add_ifaddr+0xd5/0x330 [ 78.790357][ T6484] fib_inetaddr_event+0xb9/0x200 [ 78.795365][ T6484] ? inetaddr_event+0x71/0xa0 [ 78.800059][ T6484] ? __pfx_fib_inetaddr_event+0x10/0x10 [ 78.805646][ T6484] blocking_notifier_call_chain+0x94/0x200 [ 78.811472][ T6484] __inet_insert_ifa+0x511/0x630 [ 78.816517][ T6484] inet_insert_ifa+0x3b/0x70 [ 78.821192][ T6484] devinet_ioctl+0xdcc/0xe10 [ 78.825789][ T6484] inet_ioctl+0x2f4/0x3a0 [ 78.830151][ T6484] sock_do_ioctl+0x81/0x260 [ 78.834668][ T6484] sock_ioctl+0x40f/0x600 [ 78.839065][ T6484] ? __pfx_sock_ioctl+0x10/0x10 [ 78.843911][ T6484] __se_sys_ioctl+0xc9/0x140 [ 78.848643][ T6484] __x64_sys_ioctl+0x43/0x50 [ 78.853227][ T6484] x64_sys_call+0x1690/0x2dc0 [ 78.858032][ T6484] do_syscall_64+0xc9/0x1c0 [ 78.862549][ T6484] ? clear_bhb_loop+0x55/0xb0 [ 78.867211][ T6484] ? clear_bhb_loop+0x55/0xb0 [ 78.871950][ T6484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.877881][ T6484] RIP: 0033:0x7f3fdce05d29 [ 78.882307][ T6484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.901926][ T6484] RSP: 002b:00007f3fdb456038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.910323][ T6484] RAX: ffffffffffffffda RBX: 00007f3fdcff6080 RCX: 00007f3fdce05d29 [ 78.918279][ T6484] RDX: 0000000020000540 RSI: 000000000000891c RDI: 0000000000000008 [ 78.926290][ T6484] RBP: 00007f3fdb456090 R08: 0000000000000000 R09: 0000000000000000 [ 78.934247][ T6484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 78.942224][ T6484] R13: 0000000000000000 R14: 00007f3fdcff6080 R15: 00007fffa5e65ba8 [ 78.950286][ T6484] [ 78.966543][ T6498] syzkaller1: entered promiscuous mode [ 78.972064][ T6498] syzkaller1: entered allmulticast mode [ 78.982215][ T6504] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 78.988780][ T6504] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 78.996538][ T6504] vhci_hcd vhci_hcd.0: Device attached [ 79.007988][ T6505] vhci_hcd: connection closed [ 79.008266][ T5505] vhci_hcd: stop threads [ 79.017910][ T5505] vhci_hcd: release socket [ 79.022419][ T5505] vhci_hcd: disconnect device [ 79.061610][ T6509] loop6: detected capacity change from 0 to 1024 [ 79.069397][ T6509] EXT4-fs: Ignoring removed nobh option [ 79.075722][ T6509] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.083241][ T6509] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.093730][ T6509] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.113129][ T6509] 9pnet_fd: Insufficient options for proto=fd [ 79.120696][ T6509] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 79.142996][ T4399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.470891][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.6.916'. [ 79.485034][ T6549] 9pnet_fd: Insufficient options for proto=fd [ 79.606782][ T6561] FAULT_INJECTION: forcing a failure. [ 79.606782][ T6561] name failslab, interval 1, probability 0, space 0, times 0 [ 79.619448][ T6561] CPU: 0 UID: 0 PID: 6561 Comm: syz.6.921 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 79.630125][ T6561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 79.640188][ T6561] Call Trace: [ 79.643461][ T6561] [ 79.646438][ T6561] dump_stack_lvl+0xf2/0x150 [ 79.651038][ T6561] dump_stack+0x15/0x1a [ 79.655200][ T6561] should_fail_ex+0x223/0x230 [ 79.659883][ T6561] should_failslab+0x8f/0xb0 [ 79.664501][ T6561] kmem_cache_alloc_noprof+0x52/0x320 [ 79.669885][ T6561] ? __nf_conntrack_alloc+0xcd/0x280 [ 79.675198][ T6561] __nf_conntrack_alloc+0xcd/0x280 [ 79.680371][ T6561] nf_conntrack_alloc+0x37/0x50 [ 79.685254][ T6561] ctnetlink_new_conntrack+0x38d/0x1220 [ 79.690801][ T6561] ? __nla_parse+0x40/0x60 [ 79.695277][ T6561] nfnetlink_rcv_msg+0x4a9/0x570 [ 79.700300][ T6561] netlink_rcv_skb+0x12c/0x230 [ 79.705055][ T6561] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 79.710592][ T6561] nfnetlink_rcv+0x16c/0x15d0 [ 79.715261][ T6561] ? kmem_cache_free+0xdc/0x2d0 [ 79.720264][ T6561] ? nlmon_xmit+0x51/0x60 [ 79.724588][ T6561] ? __kfree_skb+0x102/0x150 [ 79.729237][ T6561] ? consume_skb+0x49/0x160 [ 79.733807][ T6561] ? nlmon_xmit+0x51/0x60 [ 79.738125][ T6561] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 79.743469][ T6561] ? __dev_queue_xmit+0xb6e/0x2090 [ 79.748597][ T6561] ? ref_tracker_free+0x3a5/0x410 [ 79.753613][ T6561] ? __dev_queue_xmit+0x186/0x2090 [ 79.758716][ T6561] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 79.764238][ T6561] netlink_unicast+0x599/0x670 [ 79.768998][ T6561] netlink_sendmsg+0x5cc/0x6e0 [ 79.773814][ T6561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.779095][ T6561] __sock_sendmsg+0x140/0x180 [ 79.783818][ T6561] ____sys_sendmsg+0x312/0x410 [ 79.788579][ T6561] __sys_sendmsg+0x19d/0x230 [ 79.793168][ T6561] __x64_sys_sendmsg+0x46/0x50 [ 79.797924][ T6561] x64_sys_call+0x2734/0x2dc0 [ 79.802591][ T6561] do_syscall_64+0xc9/0x1c0 [ 79.807084][ T6561] ? clear_bhb_loop+0x55/0xb0 [ 79.811810][ T6561] ? clear_bhb_loop+0x55/0xb0 [ 79.816475][ T6561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.822434][ T6561] RIP: 0033:0x7fab3f1d5d29 [ 79.826883][ T6561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.846513][ T6561] RSP: 002b:00007fab3d847038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.854999][ T6561] RAX: ffffffffffffffda RBX: 00007fab3f3c5fa0 RCX: 00007fab3f1d5d29 [ 79.862958][ T6561] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 79.870967][ T6561] RBP: 00007fab3d847090 R08: 0000000000000000 R09: 0000000000000000 [ 79.878986][ T6561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.886998][ T6561] R13: 0000000000000000 R14: 00007fab3f3c5fa0 R15: 00007fffbb774a38 [ 79.894963][ T6561] [ 80.097472][ T6545] Set syz1 is full, maxelem 65536 reached [ 80.142020][ T6569] syzkaller1: entered promiscuous mode [ 80.147610][ T6569] syzkaller1: entered allmulticast mode [ 80.209302][ T6576] loop1: detected capacity change from 0 to 512 [ 80.242450][ T6576] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.259087][ T6576] ext4 filesystem being mounted at /221/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.498462][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.582245][ T6598] loop1: detected capacity change from 0 to 512 [ 80.601613][ T6598] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 80.634364][ T6594] ALSA: seq fatal error: cannot create timer (-19) [ 80.641638][ T6598] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 80.745714][ T6598] System zones: 1-12 [ 80.750426][ T6598] EXT4-fs (loop1): 1 truncate cleaned up [ 80.756906][ T6598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.782342][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.936535][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.939'. [ 81.017855][ T6610] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6610 comm=syz.8.940 [ 81.056217][ T6608] team0 (unregistering): Port device team_slave_0 removed [ 81.087225][ T6608] team0 (unregistering): Port device team_slave_1 removed [ 81.114873][ T6610] hub 6-0:1.0: USB hub found [ 81.134006][ T6610] hub 6-0:1.0: 8 ports detected [ 81.197915][ T6620] loop1: detected capacity change from 0 to 128 [ 81.213700][ T6620] FAULT_INJECTION: forcing a failure. [ 81.213700][ T6620] name failslab, interval 1, probability 0, space 0, times 0 [ 81.226939][ T6620] CPU: 1 UID: 0 PID: 6620 Comm: syz.1.936 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 81.237633][ T6620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 81.247685][ T6620] Call Trace: [ 81.251005][ T6620] [ 81.254004][ T6620] dump_stack_lvl+0xf2/0x150 [ 81.258594][ T6620] dump_stack+0x15/0x1a [ 81.262755][ T6620] should_fail_ex+0x223/0x230 [ 81.267536][ T6620] should_failslab+0x8f/0xb0 [ 81.272134][ T6620] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 81.277883][ T6620] ? __d_alloc+0x3d/0x340 [ 81.282206][ T6620] __d_alloc+0x3d/0x340 [ 81.286354][ T6620] d_alloc_parallel+0x54/0xc60 [ 81.291114][ T6620] ? __d_lookup_rcu_op_compare+0x224/0x260 [ 81.296919][ T6620] ? msdos_format_name+0x78e/0x860 [ 81.302110][ T6620] ? lockref_get_not_dead+0x118/0x1b0 [ 81.307489][ T6620] ? down_read+0x171/0x4b0 [ 81.311914][ T6620] __lookup_slow+0x8d/0x250 [ 81.316496][ T6620] lookup_slow+0x3c/0x60 [ 81.320844][ T6620] walk_component+0x1f5/0x230 [ 81.325605][ T6620] ? path_lookupat+0xfd/0x2b0 [ 81.330406][ T6620] path_lookupat+0x10a/0x2b0 [ 81.334987][ T6620] filename_lookup+0x150/0x340 [ 81.339805][ T6620] user_path_at+0x3c/0x120 [ 81.344314][ T6620] __se_sys_name_to_handle_at+0xfa/0x560 [ 81.349991][ T6620] ? ksys_write+0x176/0x1b0 [ 81.354491][ T6620] __x64_sys_name_to_handle_at+0x67/0x80 [ 81.360139][ T6620] x64_sys_call+0xe82/0x2dc0 [ 81.364726][ T6620] do_syscall_64+0xc9/0x1c0 [ 81.369219][ T6620] ? clear_bhb_loop+0x55/0xb0 [ 81.373909][ T6620] ? clear_bhb_loop+0x55/0xb0 [ 81.378637][ T6620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.384688][ T6620] RIP: 0033:0x7f5c7dc75d29 [ 81.389092][ T6620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.408690][ T6620] RSP: 002b:00007f5c7c2e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 81.417095][ T6620] RAX: ffffffffffffffda RBX: 00007f5c7de65fa0 RCX: 00007f5c7dc75d29 [ 81.425141][ T6620] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000004 [ 81.433108][ T6620] RBP: 00007f5c7c2e1090 R08: 0000000000001200 R09: 0000000000000000 [ 81.441092][ T6620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.449062][ T6620] R13: 0000000000000000 R14: 00007f5c7de65fa0 R15: 00007ffc2bd561e8 [ 81.457046][ T6620] [ 81.588578][ T6633] syz.1.949[6633] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.588630][ T6633] syz.1.949[6633] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.617412][ T6633] syz.1.949[6633] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.632516][ T6637] loop8: detected capacity change from 0 to 2048 [ 81.664277][ T6633] SELinux: security_context_str_to_sid () failed with errno=-22 [ 81.704502][ T6637] Alternate GPT is invalid, using primary GPT. [ 81.710918][ T6637] loop8: p2 p3 p7 [ 81.730842][ T6647] loop9: detected capacity change from 0 to 512 [ 81.737167][ T3000] Alternate GPT is invalid, using primary GPT. [ 81.737389][ T3000] loop8: p2 p3 p7 [ 81.763354][ T6647] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 81.813734][ T6655] loop6: detected capacity change from 0 to 512 [ 81.849370][ T6647] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 81.857453][ T6647] System zones: 1-12 [ 81.865583][ T6655] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 81.879903][ T6647] EXT4-fs (loop9): 1 truncate cleaned up [ 81.887971][ T6655] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 81.894082][ T6647] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.916992][ T6655] System zones: 1-12 [ 81.927641][ T4882] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.934194][ T3471] udevd[3471]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 81.949268][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 81.963723][ T29] kauditd_printk_skb: 244 callbacks suppressed [ 81.963735][ T29] audit: type=1326 audit(1735817249.822:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.1.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7dc75d29 code=0x7ffc0000 [ 81.965552][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 81.969916][ T29] audit: type=1326 audit(1735817249.822:3508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.1.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5c7dc75d29 code=0x7ffc0000 [ 82.026412][ T29] audit: type=1326 audit(1735817249.822:3509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.1.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7dc75d29 code=0x7ffc0000 [ 82.049768][ T29] audit: type=1326 audit(1735817249.822:3510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.1.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f5c7dc75d29 code=0x7ffc0000 [ 82.073176][ T29] audit: type=1326 audit(1735817249.822:3511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.1.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7dc75d29 code=0x7ffc0000 [ 82.096596][ T29] audit: type=1326 audit(1735817249.822:3512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.1.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5c7dc75d29 code=0x7ffc0000 [ 82.103817][ T6655] EXT4-fs (loop6): 1 truncate cleaned up [ 82.119917][ T29] audit: type=1326 audit(1735817249.822:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.1.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7dc75d29 code=0x7ffc0000 [ 82.119947][ T29] audit: type=1326 audit(1735817249.822:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.1.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c7dc75d29 code=0x7ffc0000 [ 82.119971][ T29] audit: type=1326 audit(1735817249.822:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.1.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7dc75d29 code=0x7ffc0000 [ 82.120023][ T29] audit: type=1326 audit(1735817249.822:3516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6661 comm="syz.1.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7dc75d29 code=0x7ffc0000 [ 82.186612][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 82.200829][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 82.222341][ T3471] udevd[3471]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 82.233351][ T6655] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.264409][ T3362] usb 19-1: enqueue for inactive port 0 [ 82.264429][ T3362] usb 19-1: enqueue for inactive port 0 [ 82.311217][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 82.320500][ T6670] loop8: detected capacity change from 0 to 1024 [ 82.328463][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 82.339076][ T3473] udevd[3473]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 82.344851][ T3362] vhci_hcd: vhci_device speed not set [ 82.365359][ T6673] syzkaller1: entered promiscuous mode [ 82.370870][ T6673] syzkaller1: entered allmulticast mode [ 82.397189][ T4399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.458939][ T6670] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.540262][ T6691] loop1: detected capacity change from 0 to 512 [ 82.558106][ T6691] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.568037][ T6691] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 82.584982][ T6691] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.970: corrupted in-inode xattr: e_value out of bounds [ 82.588206][ T4420] EXT4-fs error (device loop8): ext4_readdir:261: inode #11: block 38: comm syz-executor: path /125/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 82.624929][ T6691] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.970: couldn't read orphan inode 15 (err -117) [ 82.626350][ T4420] EXT4-fs error (device loop8): ext4_empty_dir:3135: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 82.660424][ T6691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.665005][ T4420] EXT4-fs error (device loop8): ext4_readdir:261: inode #11: block 38: comm syz-executor: path /125/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 82.699342][ T4420] EXT4-fs error (device loop8): ext4_empty_dir:3135: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 82.728156][ T4420] EXT4-fs error (device loop8): ext4_readdir:261: inode #11: block 38: comm syz-executor: path /125/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 82.752495][ T4420] EXT4-fs error (device loop8): ext4_empty_dir:3135: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 82.774304][ T4420] EXT4-fs error (device loop8): ext4_readdir:261: inode #11: block 38: comm syz-executor: path /125/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 82.799092][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.799736][ T4420] EXT4-fs error (device loop8): ext4_empty_dir:3135: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 82.832293][ T4420] EXT4-fs error (device loop8): ext4_readdir:261: inode #11: block 38: comm syz-executor: path /125/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 82.857630][ T4420] EXT4-fs error (device loop8): ext4_empty_dir:3135: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 82.862680][ T6703] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6703 comm=syz.9.975 [ 82.907287][ T9] usb 17-1: enqueue for inactive port 0 [ 82.912879][ T9] usb 17-1: enqueue for inactive port 0 [ 82.927272][ T6705] loop1: detected capacity change from 0 to 512 [ 82.941256][ T6705] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 82.968634][ T6705] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 82.976772][ T6705] System zones: 1-12 [ 82.984947][ T9] vhci_hcd: vhci_device speed not set [ 82.991331][ T6712] loop6: detected capacity change from 0 to 512 [ 82.994653][ T6703] hub 6-0:1.0: USB hub found [ 83.002744][ T6705] EXT4-fs (loop1): 1 truncate cleaned up [ 83.007381][ T6712] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 83.011093][ T6705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.031694][ T6703] hub 6-0:1.0: 8 ports detected [ 83.041942][ T6712] EXT4-fs (loop6): 1 truncate cleaned up [ 83.048717][ T6712] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.062762][ T6712] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.083282][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.110549][ T6715] syzkaller1: entered promiscuous mode [ 83.116389][ T6715] syzkaller1: entered allmulticast mode [ 83.125700][ T6717] syz.9.981: attempt to access beyond end of device [ 83.125700][ T6717] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 83.169015][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.982'. [ 83.190966][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.982'. [ 83.193253][ T4420] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.211753][ T5505] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.247709][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.982'. [ 83.261677][ T6735] IPv6: Can't replace route, no match found [ 83.272618][ T6737] netlink: zone id is out of range [ 83.279199][ T6737] netlink: zone id is out of range [ 83.284370][ T6737] netlink: zone id is out of range [ 83.289569][ T6737] netlink: zone id is out of range [ 83.294710][ T6737] netlink: zone id is out of range [ 83.299857][ T6737] netlink: zone id is out of range [ 83.306361][ T6737] netlink: zone id is out of range [ 83.311478][ T6737] netlink: zone id is out of range [ 83.316640][ T6737] netlink: zone id is out of range [ 83.343083][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.990'. [ 83.351971][ T6741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.990'. [ 83.360866][ T6741] netlink: 'syz.1.990': attribute type 7 has an invalid length. [ 83.371395][ T6737] netlink: 28 bytes leftover after parsing attributes in process `syz.6.988'. [ 83.415024][ T6748] netlink: 'syz.9.994': attribute type 10 has an invalid length. [ 83.427483][ T5505] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.489434][ T5505] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.537685][ T6770] loop1: detected capacity change from 0 to 512 [ 83.555865][ T5505] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.587567][ T6746] lo speed is unknown, defaulting to 1000 [ 83.658963][ T6776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=6776 comm=syz.1.1002 [ 83.736727][ T6782] netlink: 19 bytes leftover after parsing attributes in process `syz.6.1005'. [ 83.778550][ T6786] loop1: detected capacity change from 0 to 256 [ 83.792077][ T6785] rtc_cmos 00:00: Alarms can be up to one day in the future [ 83.804039][ T6786] syz.1.1007: attempt to access beyond end of device [ 83.804039][ T6786] loop1: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 83.818974][ T6788] netlink: 348 bytes leftover after parsing attributes in process `syz.9.1008'. [ 83.825088][ T6786] syz.1.1007: attempt to access beyond end of device [ 83.825088][ T6786] loop1: rw=2049, sector=260, nr_sectors = 4 limit=256 [ 83.841567][ T6786] Buffer I/O error on dev loop1, logical block 65, lost async page write [ 83.846584][ T6790] 9pnet_fd: Insufficient options for proto=fd [ 83.858498][ T6786] syz.1.1007: attempt to access beyond end of device [ 83.858498][ T6786] loop1: rw=2049, sector=264, nr_sectors = 60 limit=256 [ 83.860092][ T5505] bond0 (unregistering): Released all slaves [ 83.923241][ T6746] chnl_net:caif_netlink_parms(): no params data found [ 83.935159][ T5505] IPVS: stopping master sync thread 5899 ... [ 83.945290][ T6795] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6795 comm=syz.1.1010 [ 83.985914][ T6797] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6797 comm=syz.9.1011 [ 83.991089][ T6795] hub 6-0:1.0: USB hub found [ 84.009967][ T6795] hub 6-0:1.0: 8 ports detected [ 84.032352][ T5505] hsr_slave_0: left promiscuous mode [ 84.046176][ T5505] hsr_slave_1: left promiscuous mode [ 84.064109][ T6797] hub 6-0:1.0: USB hub found [ 84.073026][ T6797] hub 6-0:1.0: 8 ports detected [ 84.082069][ T5505] veth1_macvtap: left promiscuous mode [ 84.088897][ T5505] veth0_macvtap: left promiscuous mode [ 84.094419][ T5505] veth1_vlan: left promiscuous mode [ 84.099721][ T5505] veth0_vlan: left promiscuous mode [ 84.100332][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 84.112507][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 84.120046][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 84.127581][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 84.135105][ T8] rtc rtc0: __rtc_set_alarm: err=-22 [ 84.148144][ T6811] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1015'. [ 84.259526][ T6815] vlan2: entered promiscuous mode [ 84.264673][ T6815] bridge0: entered promiscuous mode [ 84.270025][ T6815] vlan2: entered allmulticast mode [ 84.275275][ T6815] bridge0: entered allmulticast mode [ 84.281777][ T6815] bridge0: port 3(vlan2) entered blocking state [ 84.288190][ T6815] bridge0: port 3(vlan2) entered disabled state [ 84.295953][ T6815] bridge0: left allmulticast mode [ 84.301033][ T6815] bridge0: left promiscuous mode [ 84.316788][ T6746] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.323853][ T6746] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.331434][ T6746] bridge_slave_0: entered allmulticast mode [ 84.338506][ T6746] bridge_slave_0: entered promiscuous mode [ 84.345921][ T6746] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.352984][ T6746] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.364701][ T6746] bridge_slave_1: entered allmulticast mode [ 84.371248][ T6746] bridge_slave_1: entered promiscuous mode [ 84.392746][ T6746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.403048][ T6746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.456386][ T6746] team0: Port device team_slave_0 added [ 84.463039][ T6746] team0: Port device team_slave_1 added [ 84.480666][ T6746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.487746][ T6746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.514937][ T6746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.526101][ T6746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.533043][ T6746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.560253][ T6746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.696003][ T6746] hsr_slave_0: entered promiscuous mode [ 84.706439][ T6746] hsr_slave_1: entered promiscuous mode [ 84.724979][ T6746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.732537][ T6746] Cannot create hsr debugfs directory [ 84.837180][ T6746] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.866774][ T6838] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6838 comm=syz.9.1026 [ 84.919675][ T6746] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.978687][ T6849] IPv6: Can't replace route, no match found [ 84.998681][ T6746] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.047767][ T6746] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.094255][ T6861] syzkaller1: entered promiscuous mode [ 85.101095][ T6861] syzkaller1: entered allmulticast mode [ 85.157538][ T6866] syzkaller1: entered promiscuous mode [ 85.163059][ T6866] syzkaller1: entered allmulticast mode [ 85.187046][ T6746] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.214816][ T6746] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.239236][ T6746] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.262159][ T6746] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.299798][ T6746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.316283][ T6746] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.325572][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.332636][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.343904][ T6874] IPv6: Can't replace route, no match found [ 85.353317][ T5519] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.360460][ T5519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.393240][ T6746] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.403795][ T6746] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.462319][ T6746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.549807][ T6746] veth0_vlan: entered promiscuous mode [ 85.573330][ T6898] loop9: detected capacity change from 0 to 256 [ 85.576466][ T6746] veth1_vlan: entered promiscuous mode [ 85.593995][ T6746] veth0_macvtap: entered promiscuous mode [ 85.601036][ T6898] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.617768][ T6900] loop6: detected capacity change from 0 to 512 [ 85.624880][ T6746] veth1_macvtap: entered promiscuous mode [ 85.639118][ T6898] FAULT_INJECTION: forcing a failure. [ 85.639118][ T6898] name failslab, interval 1, probability 0, space 0, times 0 [ 85.651868][ T6898] CPU: 0 UID: 0 PID: 6898 Comm: syz.9.1046 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 85.662549][ T6898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 85.672676][ T6898] Call Trace: [ 85.676009][ T6898] [ 85.678937][ T6898] dump_stack_lvl+0xf2/0x150 [ 85.683585][ T6898] dump_stack+0x15/0x1a [ 85.687807][ T6898] should_fail_ex+0x223/0x230 [ 85.692493][ T6898] should_failslab+0x8f/0xb0 [ 85.697096][ T6898] kmem_cache_alloc_noprof+0x52/0x320 [ 85.702498][ T6898] ? fat_parse_long+0x5d/0x400 [ 85.707270][ T6898] fat_parse_long+0x5d/0x400 [ 85.711885][ T6898] fat_search_long+0x1ff/0x980 [ 85.716730][ T6898] vfat_rename2+0x307/0x1500 [ 85.721349][ T6898] ? selinux_inode_rename+0x5b3/0x6f0 [ 85.726723][ T6898] ? __pfx_vfat_rename2+0x10/0x10 [ 85.731799][ T6898] vfs_rename+0x875/0x9c0 [ 85.736195][ T6898] do_renameat2+0x6a2/0xa70 [ 85.740790][ T6898] __x64_sys_rename+0x58/0x70 [ 85.745491][ T6898] x64_sys_call+0x2b1c/0x2dc0 [ 85.750160][ T6898] do_syscall_64+0xc9/0x1c0 [ 85.754715][ T6898] ? clear_bhb_loop+0x55/0xb0 [ 85.759427][ T6898] ? clear_bhb_loop+0x55/0xb0 [ 85.764146][ T6898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.770115][ T6898] RIP: 0033:0x7f3fdce05d29 [ 85.774583][ T6898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.794184][ T6898] RSP: 002b:00007f3fdb477038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 85.802588][ T6898] RAX: ffffffffffffffda RBX: 00007f3fdcff5fa0 RCX: 00007f3fdce05d29 [ 85.810550][ T6898] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000020000580 [ 85.818546][ T6898] RBP: 00007f3fdb477090 R08: 0000000000000000 R09: 0000000000000000 [ 85.826581][ T6898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.834540][ T6898] R13: 0000000000000000 R14: 00007f3fdcff5fa0 R15: 00007fffa5e65ba8 [ 85.842506][ T6898] [ 85.851098][ T6900] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 85.856416][ T6746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.873601][ T6746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.883433][ T6746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.893901][ T6746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.903727][ T6746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.914181][ T6746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.924131][ T6746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.934591][ T6746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.945699][ T6746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.946405][ T6900] EXT4-fs warning (device loop6): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 85.980249][ T4399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.990472][ T6746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.993970][ T6905] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 86.000924][ T6746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.007418][ T6905] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 86.017183][ T6746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.026002][ T6905] vhci_hcd vhci_hcd.0: Device attached [ 86.035047][ T6746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.050523][ T6746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.061148][ T6746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.071042][ T6746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.081763][ T6746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.098113][ T6746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.106435][ T6746] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.115242][ T6746] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.123933][ T6746] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.132713][ T6746] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.152774][ T6911] syz.1.1051[6911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.152894][ T6911] syz.1.1051[6911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.164589][ T6906] vhci_hcd: connection closed [ 86.167783][ T6913] __nla_validate_parse: 8 callbacks suppressed [ 86.167816][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1050'. [ 86.179071][ T11] vhci_hcd: stop threads [ 86.186043][ T6913] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1050'. [ 86.186809][ T11] vhci_hcd: release socket [ 86.186822][ T11] vhci_hcd: disconnect device [ 86.195703][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1050'. [ 86.225221][ T6911] syz.1.1051[6911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.228840][ T3378] vhci_hcd: vhci_device speed not set [ 86.281108][ T6921] IPv6: Can't replace route, no match found [ 86.307528][ T6928] FAULT_INJECTION: forcing a failure. [ 86.307528][ T6928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.320739][ T6928] CPU: 1 UID: 0 PID: 6928 Comm: syz.2.1056 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 86.331556][ T6928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 86.341617][ T6928] Call Trace: [ 86.344890][ T6928] [ 86.347918][ T6928] dump_stack_lvl+0xf2/0x150 [ 86.352582][ T6928] dump_stack+0x15/0x1a [ 86.356733][ T6928] should_fail_ex+0x223/0x230 [ 86.361404][ T6928] should_fail+0xb/0x10 [ 86.365565][ T6928] should_fail_usercopy+0x1a/0x20 [ 86.370719][ T6928] _copy_from_user+0x1e/0xb0 [ 86.375314][ T6928] snd_seq_ioctl+0x11b/0x2a0 [ 86.379910][ T6928] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 86.385020][ T6928] __se_sys_ioctl+0xc9/0x140 [ 86.389613][ T6928] __x64_sys_ioctl+0x43/0x50 [ 86.394262][ T6928] x64_sys_call+0x1690/0x2dc0 [ 86.399001][ T6928] do_syscall_64+0xc9/0x1c0 [ 86.403555][ T6928] ? clear_bhb_loop+0x55/0xb0 [ 86.408301][ T6928] ? clear_bhb_loop+0x55/0xb0 [ 86.412971][ T6928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.418930][ T6928] RIP: 0033:0x7f5aacda5d29 [ 86.423334][ T6928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.443081][ T6928] RSP: 002b:00007f5aab417038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.451629][ T6928] RAX: ffffffffffffffda RBX: 00007f5aacf95fa0 RCX: 00007f5aacda5d29 [ 86.459658][ T6928] RDX: 0000000020000340 RSI: 0000000040505330 RDI: 0000000000000004 [ 86.467627][ T6928] RBP: 00007f5aab417090 R08: 0000000000000000 R09: 0000000000000000 [ 86.475666][ T6928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.483631][ T6928] R13: 0000000000000000 R14: 00007f5aacf95fa0 R15: 00007ffffe4785e8 [ 86.491646][ T6928] [ 86.504203][ T6923] netlink: 'syz.6.1052': attribute type 3 has an invalid length. [ 86.846468][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1061'. [ 86.856817][ T6953] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1061'. [ 86.865882][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1061'. [ 86.908640][ T6960] IPv6: Can't replace route, no match found [ 86.923600][ T6958] loop6: detected capacity change from 0 to 512 [ 86.952319][ T6958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 87.000376][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 87.000460][ T29] audit: type=1400 audit(1735817254.862:3765): avc: denied { remount } for pid=6971 comm="syz.6.1070" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 87.035203][ T6976] syz.2.1072[6976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.037636][ T6976] syz.2.1072[6976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.052221][ T6976] syz.2.1072[6976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.385196][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'. [ 87.406639][ T6983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1074'. [ 87.472861][ T29] audit: type=1400 audit(1735817255.331:3766): avc: denied { accept } for pid=6982 comm="syz.1.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 87.556840][ T6986] tls_set_device_offload_rx: netdev not found [ 87.609336][ T29] audit: type=1326 audit(1735817255.471:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6985 comm="syz.1.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7dc75d29 code=0x7ffc0000 [ 87.634585][ T29] audit: type=1326 audit(1735817255.491:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6985 comm="syz.1.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7dc75d29 code=0x7ffc0000 [ 87.705055][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1077'. [ 87.714258][ T6997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1077'. [ 87.787684][ T29] audit: type=1326 audit(1735817255.651:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7000 comm="syz.1.1079" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c7dc75d29 code=0x0 [ 87.808136][ T7003] xt_hashlimit: max too large, truncated to 1048576 [ 87.815024][ T29] audit: type=1400 audit(1735817255.651:3770): avc: denied { write } for pid=7002 comm="syz.0.1080" path="socket:[18020]" dev="sockfs" ino=18020 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 87.841716][ T29] audit: type=1400 audit(1735817255.651:3771): avc: denied { nlmsg_read } for pid=7002 comm="syz.0.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 87.864642][ T29] audit: type=1400 audit(1735817255.711:3772): avc: denied { ioctl } for pid=7004 comm="syz.0.1081" path="socket:[18032]" dev="sockfs" ino=18032 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.891239][ T29] audit: type=1400 audit(1735817255.711:3773): avc: denied { create } for pid=7004 comm="syz.0.1081" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=atmpvc_socket permissive=1 [ 87.911586][ T29] audit: type=1400 audit(1735817255.711:3774): avc: denied { read } for pid=7004 comm="syz.0.1081" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 87.990887][ T7018] loop6: detected capacity change from 0 to 512 [ 88.002655][ T7016] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7016 comm=syz.0.1084 [ 88.015767][ T7018] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 88.038935][ T7018] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 88.048194][ T7018] System zones: 1-12 [ 88.052984][ T7018] EXT4-fs (loop6): 1 truncate cleaned up [ 88.065539][ T7016] hub 6-0:1.0: USB hub found [ 88.071182][ T7016] hub 6-0:1.0: 8 ports detected [ 88.078983][ T7018] 9pnet_fd: Insufficient options for proto=fd [ 88.136450][ T7033] netlink: 'syz.2.1091': attribute type 10 has an invalid length. [ 88.144958][ T7033] team0: Device hsr0 is up. Set it down before adding it as a team port [ 88.153762][ T7035] loop0: detected capacity change from 0 to 512 [ 88.163203][ T7035] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 88.177061][ T7035] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 88.185214][ T7035] System zones: 1-12 [ 88.191313][ T7035] EXT4-fs (loop0): 1 truncate cleaned up [ 88.200668][ T7035] 9pnet_fd: Insufficient options for proto=fd [ 88.250387][ T7045] syzkaller1: entered promiscuous mode [ 88.255925][ T7045] syzkaller1: entered allmulticast mode [ 88.461575][ T7058] loop0: detected capacity change from 0 to 512 [ 88.468403][ T7058] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 88.479750][ T7058] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 88.487789][ T7058] System zones: 1-12 [ 88.492528][ T7058] EXT4-fs (loop0): 1 truncate cleaned up [ 88.499795][ T7058] 9pnet_fd: Insufficient options for proto=fd [ 88.752415][ T7087] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7087 comm=syz.1.1110 [ 88.803729][ T7087] hub 6-0:1.0: USB hub found [ 88.812094][ T7087] hub 6-0:1.0: 8 ports detected [ 88.905160][ T7100] loop1: detected capacity change from 0 to 1024 [ 88.912218][ T7100] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 89.019595][ T7106] loop9: detected capacity change from 0 to 512 [ 89.032673][ T7106] EXT4-fs: inline encryption not supported [ 89.048380][ T7106] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.060921][ T7106] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #2: comm syz.9.1117: corrupted inode contents [ 89.074032][ T7106] EXT4-fs error (device loop9): ext4_dirty_inode:6041: inode #2: comm syz.9.1117: mark_inode_dirty error [ 89.085647][ T7106] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #2: comm syz.9.1117: corrupted inode contents [ 89.100206][ T7106] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #2: comm syz.9.1117: mark_inode_dirty error [ 89.419441][ T7128] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 89.425980][ T7128] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 89.433594][ T7128] vhci_hcd vhci_hcd.0: Device attached [ 89.459709][ T7129] vhci_hcd: connection closed [ 89.459878][ T11] vhci_hcd: stop threads [ 89.470162][ T11] vhci_hcd: release socket [ 89.474568][ T11] vhci_hcd: disconnect device [ 89.537070][ T7134] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 89.537070][ T7134] program syz.9.1125 not setting count and/or reply_len properly [ 89.878151][ T7159] loop1: detected capacity change from 0 to 256 [ 89.884941][ T7159] vfat: Unknown parameter '0xffffffffffffffffÿ0x0000000000000000' [ 90.001532][ T7165] IPv6: Can't replace route, no match found [ 90.194657][ T7172] loop6: detected capacity change from 0 to 512 [ 90.241912][ T7172] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.662761][ T7201] FAULT_INJECTION: forcing a failure. [ 90.662761][ T7201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.675964][ T7201] CPU: 0 UID: 0 PID: 7201 Comm: syz.1.1151 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 90.686655][ T7201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 90.696728][ T7201] Call Trace: [ 90.700037][ T7201] [ 90.702987][ T7201] dump_stack_lvl+0xf2/0x150 [ 90.707607][ T7201] dump_stack+0x15/0x1a [ 90.711792][ T7201] should_fail_ex+0x223/0x230 [ 90.716463][ T7201] should_fail+0xb/0x10 [ 90.720617][ T7201] should_fail_usercopy+0x1a/0x20 [ 90.725836][ T7201] _copy_to_user+0x20/0xa0 [ 90.730267][ T7201] simple_read_from_buffer+0xa0/0x110 [ 90.735658][ T7201] proc_fail_nth_read+0xf9/0x140 [ 90.741252][ T7201] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.746814][ T7201] vfs_read+0x1a2/0x700 [ 90.751052][ T7201] ? __rcu_read_unlock+0x4e/0x70 [ 90.755992][ T7201] ? __fget_files+0x17c/0x1c0 [ 90.760722][ T7201] ksys_read+0xe8/0x1b0 [ 90.764985][ T7201] __x64_sys_read+0x42/0x50 [ 90.769482][ T7201] x64_sys_call+0x2874/0x2dc0 [ 90.774293][ T7201] do_syscall_64+0xc9/0x1c0 [ 90.778833][ T7201] ? clear_bhb_loop+0x55/0xb0 [ 90.783500][ T7201] ? clear_bhb_loop+0x55/0xb0 [ 90.788167][ T7201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.794185][ T7201] RIP: 0033:0x7f5c7dc7473c [ 90.798593][ T7201] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 90.818191][ T7201] RSP: 002b:00007f5c7c2e1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 90.826690][ T7201] RAX: ffffffffffffffda RBX: 00007f5c7de65fa0 RCX: 00007f5c7dc7473c [ 90.834726][ T7201] RDX: 000000000000000f RSI: 00007f5c7c2e10a0 RDI: 0000000000000004 [ 90.842686][ T7201] RBP: 00007f5c7c2e1090 R08: 0000000000000000 R09: 0000000000000000 [ 90.850692][ T7201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.858736][ T7201] R13: 0000000000000000 R14: 00007f5c7de65fa0 R15: 00007ffc2bd561e8 [ 90.866713][ T7201] [ 90.947529][ T7213] syzkaller1: entered promiscuous mode [ 90.953452][ T7213] syzkaller1: entered allmulticast mode [ 91.195705][ T7240] loop9: detected capacity change from 0 to 512 [ 91.198293][ T7241] loop6: detected capacity change from 0 to 1024 [ 91.208280][ T7238] IPv6: Can't replace route, no match found [ 91.211410][ T7240] EXT4-fs: Ignoring removed oldalloc option [ 91.216831][ T7241] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 91.232804][ T7240] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 91.244821][ T7243] IPv6: Can't replace route, no match found [ 91.254603][ T7241] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1161: Invalid block bitmap block 0 in block_group 0 [ 91.268490][ T7240] EXT4-fs (loop9): 1 truncate cleaned up [ 91.293977][ T7241] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.1161: Failed to acquire dquot type 0 [ 91.310134][ T7241] EXT4-fs error (device loop6): ext4_free_blocks:6589: comm syz.6.1161: Freeing blocks not in datazone - block = 0, count = 4096 [ 91.318480][ T7248] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.325952][ T7241] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.1161: Invalid inode bitmap blk 0 in block_group 0 [ 91.347149][ T7241] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 91.347555][ T5500] EXT4-fs error (device loop6): ext4_release_dquot:6961: comm kworker/u8:27: Failed to release dquot type 0 [ 91.377015][ T7241] EXT4-fs (loop6): 1 orphan inode deleted [ 91.463781][ T7248] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.511913][ T7263] loop1: detected capacity change from 0 to 128 [ 91.520124][ T7248] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.560340][ T7263] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.609816][ T7248] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.632852][ T7264] __nla_validate_parse: 11 callbacks suppressed [ 91.632867][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1172'. [ 91.648118][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1172'. [ 91.693608][ T7271] loop1: detected capacity change from 0 to 512 [ 91.719015][ T7248] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.737377][ T7271] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1173: bg 0: block 248: padding at end of block bitmap is not set [ 91.763843][ T7248] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.780544][ T7271] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1173: Failed to acquire dquot type 1 [ 91.787828][ T7248] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.843492][ T7271] EXT4-fs (loop1): 1 truncate cleaned up [ 91.851927][ T7271] ext4 filesystem being mounted at /276/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.855684][ T7282] IPv6: Can't replace route, no match found [ 91.870561][ T7248] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.903975][ T7286] syzkaller1: entered promiscuous mode [ 91.909772][ T7286] syzkaller1: entered allmulticast mode [ 91.910172][ T7271] ext4: Unknown parameter 'x'ÖjµêÖ¥M¤ Z*¬ð¿Ë m˜.Dc8'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5 æÒÔŒöÀ‰Ýöqqÿ³±Yˆç³”ÅÚóá' [ 91.997485][ T7288] ALSA: seq fatal error: cannot create timer (-19) [ 92.005693][ T7291] loop9: detected capacity change from 0 to 512 [ 92.049401][ T7291] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.061750][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 92.061763][ T29] audit: type=1400 audit(1735817259.921:4051): avc: denied { read write } for pid=7290 comm="syz.9.1181" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.093735][ T29] audit: type=1400 audit(1735817259.951:4052): avc: denied { open } for pid=7290 comm="syz.9.1181" path="/154/file0/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.137119][ T7306] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 92.143664][ T7306] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 92.151302][ T7306] vhci_hcd vhci_hcd.0: Device attached [ 92.159075][ T7310] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1184'. [ 92.168148][ T7307] vhci_hcd: connection closed [ 92.173502][ T5499] vhci_hcd: stop threads [ 92.182504][ T5499] vhci_hcd: release socket [ 92.187016][ T5499] vhci_hcd: disconnect device [ 92.240658][ T29] audit: type=1400 audit(1735817260.101:4053): avc: denied { write } for pid=7318 comm="syz.9.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.284324][ T7315] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1188'. [ 92.318022][ T7323] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1190'. [ 92.377803][ T29] audit: type=1400 audit(1735817260.241:4054): avc: denied { read } for pid=7324 comm="syz.0.1191" lport=52006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.401747][ T7327] syzkaller1: entered promiscuous mode [ 92.407364][ T7327] syzkaller1: entered allmulticast mode [ 92.418267][ T29] audit: type=1400 audit(1735817260.281:4055): avc: denied { ioctl } for pid=7328 comm="syz.6.1193" path="socket:[19219]" dev="sockfs" ino=19219 ioctlcmd=0x4b67 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.446918][ T29] audit: type=1326 audit(1735817260.311:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7324 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4b9af5d29 code=0x7ffc0000 [ 92.471752][ T29] audit: type=1326 audit(1735817260.311:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7324 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4b9af5d29 code=0x7ffc0000 [ 92.508910][ T29] audit: type=1326 audit(1735817260.311:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7324 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7ff4b9af5d29 code=0x7ffc0000 [ 92.533696][ T29] audit: type=1326 audit(1735817260.311:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7324 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4b9af5d29 code=0x7ffc0000 [ 92.558321][ T29] audit: type=1326 audit(1735817260.311:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7324 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4b9af5d29 code=0x7ffc0000 [ 92.614181][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1196'. [ 92.670773][ T7341] bridge0: port 3(gretap0) entered blocking state [ 92.678583][ T7341] bridge0: port 3(gretap0) entered disabled state [ 92.685506][ T7341] gretap0: entered allmulticast mode [ 92.691468][ T7341] gretap0: entered promiscuous mode [ 92.700279][ T3362] kernel write not supported for file /724/attr/exec (pid: 3362 comm: kworker/0:2) [ 92.702024][ T7341] bridge0: port 3(gretap0) entered blocking state [ 92.716174][ T7341] bridge0: port 3(gretap0) entered forwarding state [ 92.727411][ T7350] gretap0: left allmulticast mode [ 92.732466][ T7350] gretap0: left promiscuous mode [ 92.737618][ T7350] bridge0: port 3(gretap0) entered disabled state [ 92.763867][ T7341] netlink: '+}[@': attribute type 21 has an invalid length. [ 92.771416][ T7341] netlink: 152 bytes leftover after parsing attributes in process `+}[@'. [ 92.815805][ T7358] raw_sendmsg: syz.2.1206 forgot to set AF_INET. Fix it! [ 92.823111][ T7354] hub 6-0:1.0: USB hub found [ 92.831824][ T7358] ipip0: entered promiscuous mode [ 92.836918][ T7358] ipip0: entered allmulticast mode [ 92.838057][ T7354] hub 6-0:1.0: 8 ports detected [ 92.875674][ T7362] syzkaller1: entered promiscuous mode [ 92.881257][ T7362] syzkaller1: entered allmulticast mode [ 92.946706][ T7368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1210'. [ 93.038056][ T7386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1216'. [ 93.091903][ T7392] net_ratelimit: 15 callbacks suppressed [ 93.091919][ T7392] ebtables: ebtables: counters copy to user failed while replacing table [ 93.139245][ T7403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.230852][ T7410] loop1: detected capacity change from 0 to 1024 [ 93.239089][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1224'. [ 93.246492][ T7410] EXT4-fs: Ignoring removed nobh option [ 93.301554][ T7415] loop9: detected capacity change from 0 to 128 [ 93.593074][ T7425] loop6: detected capacity change from 0 to 2048 [ 93.658273][ T7436] macvlan2: entered promiscuous mode [ 93.663674][ T7436] macvlan2: entered allmulticast mode [ 93.669116][ T7436] bridge0: entered allmulticast mode [ 93.719066][ T7421] EXT4-fs error (device loop6): ext4_find_extent:938: inode #2: comm syz.6.1228: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 93.741127][ T7421] EXT4-fs (loop6): Remounting filesystem read-only [ 93.787992][ T7448] xt_hashlimit: max too large, truncated to 1048576 [ 93.794895][ T7448] Cannot find set identified by id 0 to match [ 93.803320][ T7450] IPv6: Can't replace route, no match found [ 93.911013][ T7454] veth0_to_team: entered promiscuous mode [ 93.917049][ T7454] veth0_to_team: entered allmulticast mode [ 94.192998][ T7482] loop6: detected capacity change from 0 to 2048 [ 94.240055][ T7482] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 94.275466][ T7482] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 28 [ 94.287799][ T7482] EXT4-fs (loop6): This should not happen!! Data will be lost [ 94.287799][ T7482] [ 94.297567][ T7482] EXT4-fs (loop6): Total free blocks count 0 [ 94.302491][ T7489] IPv6: Can't replace route, no match found [ 94.303551][ T7482] EXT4-fs (loop6): Free/Dirty block details [ 94.312457][ T7490] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 94.315439][ T7482] EXT4-fs (loop6): free_blocks=2415919104 [ 94.327641][ T7490] EXT4-fs (loop6): This should not happen!! Data will be lost [ 94.327641][ T7490] [ 94.333316][ T7482] EXT4-fs (loop6): dirty_blocks=32 [ 94.344262][ T7490] EXT4-fs (loop6): Total free blocks count 0 [ 94.348117][ T7482] EXT4-fs (loop6): Block reservation details [ 94.530763][ T7496] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.537982][ T7496] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.590266][ T7503] loop1: detected capacity change from 0 to 1024 [ 94.606112][ T7503] ext4: Unknown parameter 'uid' [ 94.713475][ T7508] netlink: 'syz.6.1257': attribute type 1 has an invalid length. [ 94.725569][ T7508] netlink: 'syz.6.1257': attribute type 21 has an invalid length. [ 94.733435][ T7508] netlink: 'syz.6.1257': attribute type 20 has an invalid length. [ 94.741302][ T7508] IPv6: NLM_F_CREATE should be specified when creating new route [ 95.031507][ T7521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.047214][ T7521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.061561][ T7523] loop6: detected capacity change from 0 to 512 [ 95.152618][ T7530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.161717][ T7530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.191015][ T7534] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7534 comm=syz.2.1270 [ 95.252409][ T7534] hub 6-0:1.0: USB hub found [ 95.258796][ T7534] hub 6-0:1.0: 8 ports detected [ 95.360544][ T7542] hub 6-0:1.0: USB hub found [ 95.365442][ T7542] hub 6-0:1.0: 8 ports detected [ 95.452448][ T7551] netlink: 'syz.9.1275': attribute type 1 has an invalid length. [ 95.466589][ T7553] syz.2.1276[7553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.466645][ T7553] syz.2.1276[7553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.479353][ T7553] syz.2.1276[7553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.610498][ T7573] netlink: 'syz.9.1285': attribute type 1 has an invalid length. [ 95.694016][ T7585] loop9: detected capacity change from 0 to 512 [ 95.719233][ T7585] EXT4-fs mount: 28 callbacks suppressed [ 95.719249][ T7585] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.741038][ T7585] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.769184][ T4882] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.830423][ T7594] tipc: Enabling of bearer rejected, failed to enable media [ 95.978189][ T7612] loop1: detected capacity change from 0 to 512 [ 96.039825][ T9] IPVS: starting estimator thread 0... [ 96.126431][ T7615] IPVS: using max 2640 ests per chain, 132000 per kthread [ 96.199103][ T7623] syzkaller1: entered promiscuous mode [ 96.204622][ T7623] syzkaller1: entered allmulticast mode [ 96.222047][ T7625] loop1: detected capacity change from 0 to 512 [ 96.247594][ T7625] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 96.267817][ T7625] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.1305: bad orphan inode 131083 [ 96.279659][ T7625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.299374][ T7628] loop6: detected capacity change from 0 to 8192 [ 96.336805][ T7628] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 96.345437][ T7628] FAT-fs (loop6): Filesystem has been set read-only [ 96.410213][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.411544][ T7639] loop6: detected capacity change from 0 to 512 [ 96.429237][ T7639] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 96.447472][ T7639] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 96.455579][ T7639] System zones: 1-12 [ 96.470073][ T7639] EXT4-fs (loop6): 1 truncate cleaned up [ 96.484222][ T7639] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.488336][ T7648] loop0: detected capacity change from 0 to 2048 [ 96.518562][ T7648] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 96.529995][ T7639] 9pnet_fd: Insufficient options for proto=fd [ 96.543530][ T7651] syzkaller1: entered promiscuous mode [ 96.549150][ T7651] syzkaller1: entered allmulticast mode [ 96.568918][ T4399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.575312][ T7654] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7654 comm=syz.9.1319 [ 96.629376][ T7656] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7656 comm=syz.6.1320 [ 96.646207][ T7654] hub 6-0:1.0: USB hub found [ 96.651554][ T7654] hub 6-0:1.0: 8 ports detected [ 96.677251][ T7656] hub 6-0:1.0: USB hub found [ 96.685081][ T7656] hub 6-0:1.0: 8 ports detected [ 96.745107][ T7661] __nla_validate_parse: 6 callbacks suppressed [ 96.745121][ T7661] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1322'. [ 96.779828][ T7664] 9p: Unknown access argument 18446744073709551615: -34 [ 96.800522][ T7657] x_tables: unsorted underflow at hook 2 [ 96.935212][ T7683] syzkaller1: entered promiscuous mode [ 96.940745][ T7683] syzkaller1: entered allmulticast mode [ 96.963981][ T7688] SELinux: syz.1.1326 (7688) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 96.979823][ T7689] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7689 comm=syz.2.1332 [ 97.011741][ T7691] netlink: 3 bytes leftover after parsing attributes in process `+}[@'. [ 97.022925][ T7691] batadv0: entered promiscuous mode [ 97.028203][ T7691] batadv0: entered allmulticast mode [ 97.040750][ T7689] hub 6-0:1.0: USB hub found [ 97.045535][ T7689] hub 6-0:1.0: 8 ports detected [ 97.128412][ T7698] loop6: detected capacity change from 0 to 128 [ 97.149106][ T7698] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.167176][ T29] kauditd_printk_skb: 446 callbacks suppressed [ 97.167190][ T29] audit: type=1400 audit(1735817265.030:4507): avc: denied { ioctl } for pid=7706 comm="syz.9.1339" path="socket:[20911]" dev="sockfs" ino=20911 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.168901][ T7698] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.219986][ T29] audit: type=1400 audit(1735817265.080:4508): avc: denied { module_load } for pid=7697 comm="syz.6.1337" path="/240/file0/bus" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=system permissive=1 [ 97.251601][ T7698] Invalid ELF header magic: != ELF [ 97.258581][ T29] audit: type=1326 audit(1735817265.120:4509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7697 comm="syz.6.1337" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab3f1d5d29 code=0x0 [ 97.308405][ T29] audit: type=1326 audit(1735817265.170:4510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.2.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aacda5d29 code=0x7ffc0000 [ 97.331888][ T29] audit: type=1326 audit(1735817265.170:4511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.2.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aacda5d29 code=0x7ffc0000 [ 97.369643][ T29] audit: type=1326 audit(1735817265.220:4512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.2.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f5aacda5d29 code=0x7ffc0000 [ 97.394298][ T29] audit: type=1326 audit(1735817265.220:4513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.2.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aacda5d29 code=0x7ffc0000 [ 97.417716][ T29] audit: type=1326 audit(1735817265.220:4514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.2.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aacda5d29 code=0x7ffc0000 [ 97.442454][ T29] audit: type=1326 audit(1735817265.220:4515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.2.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f5aacda5d29 code=0x7ffc0000 [ 97.465990][ T29] audit: type=1326 audit(1735817265.220:4516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.2.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aacda5d29 code=0x7ffc0000 [ 97.498416][ T7727] bridge0: port 3(vlan2) entered blocking state [ 97.504762][ T7727] bridge0: port 3(vlan2) entered disabled state [ 97.523833][ T7727] vlan2: entered allmulticast mode [ 97.529676][ T7727] vlan2: left allmulticast mode [ 97.537140][ T7730] tipc: Started in network mode [ 97.542042][ T7730] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 97.552518][ T7730] tipc: Enabled bearer , priority 10 [ 97.576332][ T7733] IPv6: Can't replace route, no match found [ 97.636812][ T7740] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1351'. [ 97.660910][ T7745] loop9: detected capacity change from 0 to 8192 [ 97.688995][ T7750] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7750 comm=syz.2.1355 [ 97.716425][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1356'. [ 97.741154][ T7750] hub 6-0:1.0: USB hub found [ 97.752045][ T7750] hub 6-0:1.0: 8 ports detected [ 97.780090][ T7761] loop9: detected capacity change from 0 to 512 [ 97.786956][ T7761] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 97.839321][ T8] kernel write not supported for file /138/attr/exec (pid: 8 comm: kworker/0:0) [ 97.863617][ T7761] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 97.878803][ T7761] System zones: 1-12 [ 97.882138][ T7757] loop0: detected capacity change from 0 to 128 [ 97.890182][ T7761] EXT4-fs (loop9): 1 truncate cleaned up [ 97.896308][ T7761] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.934696][ T4399] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.946080][ T4882] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.010014][ T7779] loop0: detected capacity change from 0 to 512 [ 98.019651][ T7779] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 98.049082][ T7779] EXT4-fs (loop0): 1 truncate cleaned up [ 98.055149][ T7779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.118519][ T7777] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 98.177795][ T7783] netlink: zone id is out of range [ 98.183171][ T7783] netlink: del zone limit has 4 unknown bytes [ 98.227862][ T7792] syzkaller1: entered promiscuous mode [ 98.233355][ T7792] syzkaller1: entered allmulticast mode [ 98.314294][ T7797] pim6reg: entered allmulticast mode [ 98.335813][ T7801] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7801 comm=syz.9.1372 [ 98.381283][ T7801] hub 6-0:1.0: USB hub found [ 98.386243][ T7801] hub 6-0:1.0: 8 ports detected [ 98.409976][ T7805] loop6: detected capacity change from 0 to 512 [ 98.417527][ T7805] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 98.429448][ T7805] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 98.437728][ T7805] System zones: 1-12 [ 98.442516][ T7805] EXT4-fs (loop6): 1 truncate cleaned up [ 98.448667][ T7805] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.463425][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1375'. [ 98.488538][ T4399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.505970][ T7814] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7814 comm=syz.1.1377 [ 98.536494][ T7822] syzkaller1: entered promiscuous mode [ 98.536946][ T7824] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1381'. [ 98.542068][ T7822] syzkaller1: entered allmulticast mode [ 98.559468][ T7814] hub 6-0:1.0: USB hub found [ 98.563990][ T7824] netlink: 172 bytes leftover after parsing attributes in process `syz.6.1381'. [ 98.564525][ T7814] hub 6-0:1.0: 8 ports detected [ 98.667996][ T5167] tipc: Node number set to 4269801491 [ 98.717065][ T7842] dvmrp5: entered allmulticast mode [ 98.769668][ T7846] SELinux: syz.9.1390 (7846) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 99.005369][ T6324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.052833][ T7856] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7856 comm=syz.6.1393 [ 99.088644][ T7864] syzkaller1: entered promiscuous mode [ 99.094151][ T7864] syzkaller1: entered allmulticast mode [ 99.096280][ T7866] loop9: detected capacity change from 0 to 1024 [ 99.110657][ T7856] hub 6-0:1.0: USB hub found [ 99.115934][ T7856] hub 6-0:1.0: 8 ports detected [ 99.153569][ T7866] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.257307][ T7883] loop0: detected capacity change from 0 to 1024 [ 99.264094][ T7883] EXT4-fs: Ignoring removed nobh option [ 99.271296][ T7883] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 99.273459][ T7874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.288191][ T7883] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 99.298734][ T7874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.312447][ T7883] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #11: comm syz.0.1404: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 99.334424][ T7883] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1404: couldn't read orphan inode 11 (err -117) [ 99.350882][ T7883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.365183][ T4882] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.369672][ T7890] syz.6.1407[7890] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.375534][ T7890] syz.6.1407[7890] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.375662][ T7882] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1404: Invalid block bitmap block 0 in block_group 0 [ 99.388405][ T7890] syz.6.1407[7890] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.405470][ T7882] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.1404: Failed to acquire dquot type 0 [ 99.437161][ T7891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.445376][ T7893] loop9: detected capacity change from 0 to 2048 [ 99.446534][ T7891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.453337][ T7883] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.1404: Invalid inode bitmap blk 137438953472 in block_group 0 [ 99.498936][ T7893] loop9: p1 p2 p3 [ 99.529072][ T7897] IPv6: Can't replace route, no match found [ 99.589547][ T5499] EXT4-fs error (device loop0): __ext4_get_inode_loc:4435: comm kworker/u8:26: Invalid inode table block 8589934593 in block_group 0 [ 99.604681][ T6324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.623678][ T7909] syzkaller1: entered promiscuous mode [ 99.627962][ T7911] loop0: detected capacity change from 0 to 512 [ 99.629869][ T7909] syzkaller1: entered allmulticast mode [ 99.723704][ T7918] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1416'. [ 99.794164][ T7920] loop1: detected capacity change from 0 to 8192 [ 99.822356][ T7923] IPv6: Can't replace route, no match found [ 99.837690][ T7920] loop1: p1 p2 p3 p4 [ 99.841806][ T7920] loop1: p1 size 1048968 extends beyond EOD, truncated [ 99.849186][ T7920] loop1: p2 start 861536256 is beyond EOD, truncated [ 99.855898][ T7920] loop1: p3 start 17039360 is beyond EOD, truncated [ 99.948227][ T7929] IPv6: Can't replace route, no match found [ 100.005629][ T7937] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1424'. [ 100.014650][ T7937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1424'. [ 100.123365][ T7953] loop1: detected capacity change from 0 to 1024 [ 100.142912][ T7953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.184944][ T3298] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 38: comm syz-executor: path /326/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 100.209126][ T3298] EXT4-fs error (device loop1): ext4_empty_dir:3135: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 100.240160][ T3298] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 38: comm syz-executor: path /326/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 100.290343][ T3298] EXT4-fs error (device loop1): ext4_empty_dir:3135: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 100.328387][ T3298] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 38: comm syz-executor: path /326/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 100.367618][ T3298] EXT4-fs error (device loop1): ext4_empty_dir:3135: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 100.410698][ T7960] IPv6: Can't replace route, no match found [ 100.423690][ T3298] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 38: comm syz-executor: path /326/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 100.469792][ T3298] EXT4-fs error (device loop1): ext4_empty_dir:3135: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 100.504897][ T3298] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 38: comm syz-executor: path /326/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 100.548722][ T3298] EXT4-fs error (device loop1): ext4_empty_dir:3135: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 100.550750][ T7970] loop6: detected capacity change from 0 to 1024 [ 100.602490][ T7970] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.712644][ T4399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.816841][ T7989] loop0: detected capacity change from 0 to 512 [ 100.829892][ T7990] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.848480][ T4527] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.855956][ T7989] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 100.874223][ T7989] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 100.888681][ T7990] 9pnet_fd: Insufficient options for proto=fd [ 100.894824][ T7989] System zones: 1-12 [ 100.903280][ T7989] EXT4-fs (loop0): 1 truncate cleaned up [ 100.909357][ T7989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.944377][ T7989] 9pnet: Could not find request transport: fd0x0000000000000004 [ 100.950727][ T7999] team0 (unregistering): Port device team_slave_0 removed [ 100.970386][ T6324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.980363][ T7999] team0 (unregistering): Port device team_slave_1 removed [ 101.018238][ T4527] syz_tun (unregistering): left promiscuous mode [ 101.095732][ T8017] syzkaller1: entered promiscuous mode [ 101.101260][ T8017] syzkaller1: entered allmulticast mode [ 101.189273][ T8022] loop9: detected capacity change from 0 to 1024 [ 101.196309][ T8022] EXT4-fs (loop9): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 101.210623][ T8024] loop0: detected capacity change from 0 to 512 [ 101.219896][ T8024] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 101.231741][ T8022] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.265141][ T8028] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8028 comm=syz.2.1458 [ 101.343787][ T8028] hub 6-0:1.0: USB hub found [ 101.350369][ T8028] hub 6-0:1.0: 8 ports detected [ 101.400616][ T8042] loop0: detected capacity change from 0 to 512 [ 101.553315][ T8032] chnl_net:caif_netlink_parms(): no params data found [ 101.671490][ T8032] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.678627][ T8032] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.685885][ T8032] bridge_slave_0: entered allmulticast mode [ 101.692223][ T8032] bridge_slave_0: entered promiscuous mode [ 101.698893][ T8032] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.705967][ T8032] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.713314][ T8032] bridge_slave_1: entered allmulticast mode [ 101.719870][ T8032] bridge_slave_1: entered promiscuous mode [ 101.740002][ T8032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.751104][ T8032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.771428][ T8032] team0: Port device team_slave_0 added [ 101.778313][ T8032] team0: Port device team_slave_1 added [ 101.781845][ T8086] loop6: detected capacity change from 0 to 512 [ 101.791808][ T8086] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 101.803050][ T8032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.810015][ T8032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.812883][ T8086] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 101.835970][ T8032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.836789][ T8032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.836802][ T8032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.836828][ T8032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.900753][ T8086] System zones: 1-12 [ 101.906261][ T8086] EXT4-fs (loop6): 1 truncate cleaned up [ 101.908049][ T8032] hsr_slave_0: entered promiscuous mode [ 101.914744][ T8086] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.930282][ T8032] hsr_slave_1: entered promiscuous mode [ 101.936262][ T8032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.943980][ T8032] Cannot create hsr debugfs directory [ 101.945764][ T8086] 9pnet: Could not find request transport: fd0x0000000000000004 [ 101.971110][ T4399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.040506][ T4882] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.076622][ T8095] netlink: zone id is out of range [ 102.082089][ T8095] netlink: del zone limit has 4 unknown bytes [ 102.106971][ T8097] netlink: zone id is out of range [ 102.112207][ T8097] netlink: del zone limit has 4 unknown bytes [ 102.128980][ T8099] __nla_validate_parse: 8 callbacks suppressed [ 102.128995][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1482'. [ 102.138318][ T8101] syzkaller1: entered promiscuous mode [ 102.149540][ T8101] syzkaller1: entered allmulticast mode [ 102.204964][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 102.205025][ T29] audit: type=1400 audit(1735817270.060:4686): avc: denied { create } for pid=8106 comm="syz.6.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 102.242714][ T8109] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8109 comm=syz.6.1487 [ 102.269678][ T29] audit: type=1400 audit(1735817270.130:4687): avc: denied { read } for pid=8112 comm="syz.9.1489" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 102.284584][ T8032] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.293894][ T29] audit: type=1400 audit(1735817270.130:4688): avc: denied { open } for pid=8112 comm="syz.9.1489" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 102.329536][ T8032] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.341867][ T8032] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.381081][ T8032] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.401353][ T8032] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.408452][ T8032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.415759][ T8032] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.422906][ T8032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.452223][ T8032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.463902][ T5500] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.474622][ T5500] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.505243][ T8032] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.511163][ T8126] netlink: 'syz.2.1494': attribute type 10 has an invalid length. [ 102.522002][ T5500] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.529066][ T5500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.538458][ T5500] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.545519][ T5500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.561985][ T8126] veth0_macvtap: left promiscuous mode [ 102.625871][ T8032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.662157][ T8137] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1496'. [ 102.674394][ T8137] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 102.692032][ T8140] syzkaller1: entered promiscuous mode [ 102.698825][ T8140] syzkaller1: entered allmulticast mode [ 102.745498][ T8032] veth0_vlan: entered promiscuous mode [ 102.753098][ T8032] veth1_vlan: entered promiscuous mode [ 102.764751][ T8032] veth0_macvtap: entered promiscuous mode [ 102.772385][ T8032] veth1_macvtap: entered promiscuous mode [ 102.782064][ T8032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.792556][ T8032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.802504][ T8032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.812955][ T8032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.822963][ T8032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.833503][ T8032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.843461][ T8032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.853917][ T8032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.863931][ T8032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.874615][ T8032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.885351][ T8032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.893651][ T8032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.904125][ T8032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.914041][ T8032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.924474][ T8032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.934339][ T8032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.944754][ T8032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.954603][ T8032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.965147][ T8032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.975085][ T8032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.985543][ T8032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.996099][ T8032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.998601][ T29] audit: type=1326 audit(1735817270.840:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.2.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aacda5d29 code=0x7ffc0000 [ 103.019446][ T8157] syzkaller1: entered promiscuous mode [ 103.026769][ T29] audit: type=1326 audit(1735817270.840:4690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.2.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aacda5d29 code=0x7ffc0000 [ 103.032151][ T8157] syzkaller1: entered allmulticast mode [ 103.036436][ T8032] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.056833][ T29] audit: type=1326 audit(1735817270.840:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.2.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5aacda5d29 code=0x7ffc0000 [ 103.062401][ T8032] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.062455][ T8032] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.062487][ T8032] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.124707][ T29] audit: type=1326 audit(1735817270.840:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.2.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aacda5d29 code=0x7ffc0000 [ 103.149383][ T29] audit: type=1326 audit(1735817270.840:4693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.2.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aacda5d29 code=0x7ffc0000 [ 103.172825][ T29] audit: type=1326 audit(1735817270.840:4694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.2.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5aacda5d29 code=0x7ffc0000 [ 103.197572][ T29] audit: type=1326 audit(1735817270.840:4695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.2.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aacda5d29 code=0x7ffc0000 [ 103.281771][ T8171] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1460'. [ 103.286099][ T8172] loop6: detected capacity change from 0 to 1024 [ 103.315782][ T8172] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.331181][ T8183] syz.9.1510 (8183): attempted to duplicate a private mapping with mremap. This is not supported. [ 103.377600][ T8191] loop0: detected capacity change from 0 to 4096 [ 103.384868][ T4399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.396896][ T8191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.400559][ T8195] loop4: detected capacity change from 0 to 1024 [ 103.418013][ T8195] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 103.429511][ T8195] JBD2: no valid journal superblock found [ 103.435289][ T8195] EXT4-fs (loop4): Could not load journal inode [ 103.446118][ T8195] loop4: detected capacity change from 0 to 256 [ 103.465109][ T6324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.533985][ T8205] wireguard0: entered promiscuous mode [ 103.540160][ T8205] wireguard0: entered allmulticast mode [ 103.594197][ T8208] syzkaller1: entered promiscuous mode [ 103.600477][ T8208] syzkaller1: entered allmulticast mode [ 103.633084][ T8218] loop0: detected capacity change from 0 to 1024 [ 103.648844][ T8218] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.709747][ T6324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.727017][ T8222] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1519'. [ 103.782461][ T8224] loop9: detected capacity change from 0 to 256 [ 103.801081][ T8224] FAT-fs (loop9): Directory bread(block 64) failed [ 103.810783][ T8224] FAT-fs (loop9): Directory bread(block 65) failed [ 103.817430][ T8224] FAT-fs (loop9): Directory bread(block 66) failed [ 103.824256][ T8224] FAT-fs (loop9): Directory bread(block 67) failed [ 103.832262][ T8224] FAT-fs (loop9): Directory bread(block 68) failed [ 103.856369][ T8224] FAT-fs (loop9): Directory bread(block 69) failed [ 103.882281][ T8224] FAT-fs (loop9): Directory bread(block 70) failed [ 103.909571][ T8224] FAT-fs (loop9): Directory bread(block 71) failed [ 103.934032][ T8224] FAT-fs (loop9): Directory bread(block 72) failed [ 103.955951][ T8224] FAT-fs (loop9): Directory bread(block 73) failed [ 103.982560][ T8224] +}[@: attempt to access beyond end of device [ 103.982560][ T8224] loop9: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 104.001344][ T8224] +}[@: attempt to access beyond end of device [ 104.001344][ T8224] loop9: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 104.019047][ T8232] loop0: detected capacity change from 0 to 164 [ 104.251631][ T8244] loop9: detected capacity change from 0 to 1024 [ 104.260358][ T8244] EXT4-fs: inline encryption not supported [ 104.266431][ T8244] EXT4-fs: Ignoring removed orlov option [ 104.273439][ T8244] EXT4-fs (loop9): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 104.439307][ T8244] EXT4-fs (loop9): warning: checktime reached, running e2fsck is recommended [ 104.454975][ T8244] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.588467][ T8262] ALSA: seq fatal error: cannot create timer (-19) [ 104.691112][ T8267] ALSA: seq fatal error: cannot create timer (-16) [ 104.963628][ T4882] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.003070][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1542'. [ 105.029625][ T8277] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8277 comm=syz.9.1543 [ 105.047266][ T8279] loop6: detected capacity change from 0 to 1024 [ 105.072016][ T8279] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.093787][ T8277] hub 6-0:1.0: USB hub found [ 105.105769][ T8277] hub 6-0:1.0: 8 ports detected [ 105.110363][ T4399] EXT4-fs error (device loop6): ext4_readdir:261: inode #11: block 38: comm syz-executor: path /279/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 105.136625][ T4399] EXT4-fs error (device loop6): ext4_empty_dir:3135: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 105.162447][ T4399] EXT4-fs error (device loop6): ext4_readdir:261: inode #11: block 38: comm syz-executor: path /279/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 105.185376][ T4399] EXT4-fs error (device loop6): ext4_empty_dir:3135: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 105.206360][ T4399] EXT4-fs error (device loop6): ext4_readdir:261: inode #11: block 38: comm syz-executor: path /279/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 105.230159][ T4399] EXT4-fs error (device loop6): ext4_empty_dir:3135: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 105.254635][ T4399] EXT4-fs error (device loop6): ext4_readdir:261: inode #11: block 38: comm syz-executor: path /279/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 105.281055][ T8291] loop0: detected capacity change from 0 to 512 [ 105.285208][ T4399] EXT4-fs error (device loop6): ext4_empty_dir:3135: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 105.292483][ T8291] EXT4-fs: Ignoring removed oldalloc option [ 105.310474][ T4399] EXT4-fs error (device loop6): ext4_readdir:261: inode #11: block 38: comm syz-executor: path /279/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 105.321999][ T8291] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 105.335476][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1557'. [ 105.346515][ T4399] EXT4-fs error (device loop6): ext4_empty_dir:3135: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 105.371305][ T8291] EXT4-fs (loop0): 1 truncate cleaned up [ 105.381259][ T8291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.437714][ T8301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.446129][ T8301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.467897][ T6324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.502792][ T8305] loop0: detected capacity change from 0 to 512 [ 105.509382][ T8305] ext4: Unknown parameter 'euid' [ 105.572399][ T8307] geneve0: entered allmulticast mode [ 105.694477][ T8309] loop0: detected capacity change from 0 to 128 [ 105.729132][ T8309] FAT-fs (loop0): bogus number of reserved sectors [ 105.735690][ T8309] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 105.745076][ T8309] FAT-fs (loop0): Can't find a valid FAT filesystem [ 105.825345][ T5507] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.836084][ T4399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.889324][ T5507] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.948736][ T5507] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.001619][ T5507] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.023223][ T8301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.033084][ T8301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.056682][ T5507] bridge_slave_1: left allmulticast mode [ 106.063400][ T5507] bridge_slave_1: left promiscuous mode [ 106.069153][ T5507] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.076888][ T5507] bridge_slave_0: left allmulticast mode [ 106.082614][ T5507] bridge_slave_0: left promiscuous mode [ 106.088408][ T5507] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.110408][ T8324] loop4: detected capacity change from 0 to 1024 [ 106.124564][ T5507] ip6gretap0 (unregistering): left allmulticast mode [ 106.129298][ T8324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.161302][ T8032] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 38: comm syz-executor: path /4/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 106.184096][ T8032] EXT4-fs error (device loop4): ext4_empty_dir:3135: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 106.204561][ T8032] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 38: comm syz-executor: path /4/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 106.227609][ T8032] EXT4-fs error (device loop4): ext4_empty_dir:3135: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 106.248596][ T8032] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 38: comm syz-executor: path /4/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 106.270848][ T5507] 0000000000000 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.270904][ T8032] EXT4-fs error (device loop4): ext4_empty_dir:3135: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 106.301670][ T8032] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 38: comm syz-executor: path /4/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 106.323744][ T8032] EXT4-fs error (device loop4): ext4_empty_dir:3135: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 106.324081][ T5507] 0000000000000 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.355196][ T8032] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 38: comm syz-executor: path /4/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 106.380401][ T8032] EXT4-fs error (device loop4): ext4_empty_dir:3135: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 106.401391][ T5507] 0000000000000 (unregistering): Released all slaves [ 106.461894][ T5507] hsr_slave_0: left promiscuous mode [ 106.469841][ T5507] hsr_slave_1: left promiscuous mode [ 106.475610][ T5507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.483221][ T5507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.491048][ T5507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.499242][ T5507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.507854][ T5507] veth1_macvtap: left promiscuous mode [ 106.513313][ T5507] veth0_macvtap: left promiscuous mode [ 106.518816][ T5507] veth1_vlan: left promiscuous mode [ 106.524001][ T5507] veth0_vlan: left promiscuous mode [ 106.633571][ T8311] chnl_net:caif_netlink_parms(): no params data found [ 106.670274][ T8311] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.677457][ T8311] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.684814][ T8311] bridge_slave_0: entered allmulticast mode [ 106.691311][ T8311] bridge_slave_0: entered promiscuous mode [ 106.698052][ T8311] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.705123][ T8311] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.712422][ T8311] bridge_slave_1: entered allmulticast mode [ 106.718788][ T8311] bridge_slave_1: entered promiscuous mode [ 106.733724][ T8311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.743959][ T8311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.761931][ T8311] team0: Port device team_slave_0 added [ 106.768383][ T8311] team0: Port device team_slave_1 added [ 106.782467][ T8311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.789465][ T8311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.815386][ T8311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.826459][ T8311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.833461][ T8311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.859407][ T8311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.883453][ T8311] hsr_slave_0: entered promiscuous mode [ 106.889441][ T8311] hsr_slave_1: entered promiscuous mode [ 106.895299][ T8311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.902890][ T8311] Cannot create hsr debugfs directory [ 107.170190][ T8350] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1565'. [ 107.173791][ T8351] syzkaller1: entered promiscuous mode [ 107.184623][ T8351] syzkaller1: entered allmulticast mode [ 107.315913][ T8311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.324807][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 107.324820][ T29] audit: type=1326 audit(1735817275.189:4969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8353 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aacda5d29 code=0x7ffc0000 [ 107.332646][ T8356] loop9: detected capacity change from 0 to 1024 [ 107.363724][ T8311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.378575][ T29] audit: type=1326 audit(1735817275.219:4970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8353 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5aacda5d29 code=0x7ffc0000 [ 107.401965][ T29] audit: type=1326 audit(1735817275.219:4971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8353 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aacda5d29 code=0x7ffc0000 [ 107.426148][ T29] audit: type=1326 audit(1735817275.219:4972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8353 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f5aacda5d29 code=0x7ffc0000 [ 107.436380][ T8356] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.450258][ T29] audit: type=1326 audit(1735817275.219:4973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8353 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aacda5d29 code=0x7ffc0000 [ 107.485809][ T29] audit: type=1326 audit(1735817275.219:4974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8353 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aacda5d29 code=0x7ffc0000 [ 107.509969][ T29] audit: type=1326 audit(1735817275.219:4975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8353 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5aacda5d29 code=0x7ffc0000 [ 107.533373][ T29] audit: type=1326 audit(1735817275.219:4976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8353 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aacda5d29 code=0x7ffc0000 [ 107.555836][ T4882] EXT4-fs error (device loop9): ext4_readdir:261: inode #11: block 38: comm syz-executor: path /264/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 107.557372][ T29] audit: type=1326 audit(1735817275.219:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8353 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5aacda5d29 code=0x7ffc0000 [ 107.602901][ T29] audit: type=1326 audit(1735817275.219:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8353 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aacda5d29 code=0x7ffc0000 [ 107.616735][ T4882] EXT4-fs error (device loop9): ext4_empty_dir:3135: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 107.651468][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1569'. [ 107.660801][ T8311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.668006][ T4882] EXT4-fs error (device loop9): ext4_readdir:261: inode #11: block 38: comm syz-executor: path /264/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 107.669735][ T8311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.701442][ T4882] EXT4-fs error (device loop9): ext4_empty_dir:3135: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 107.723765][ T4882] EXT4-fs error (device loop9): ext4_readdir:261: inode #11: block 38: comm syz-executor: path /264/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 107.747078][ T4882] EXT4-fs error (device loop9): ext4_empty_dir:3135: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 107.776160][ T8311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.786056][ T4882] EXT4-fs error (device loop9): ext4_readdir:261: inode #11: block 38: comm syz-executor: path /264/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 107.788168][ T8311] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.821211][ T5495] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.823786][ T4882] EXT4-fs error (device loop9): ext4_empty_dir:3135: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 107.828282][ T5495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.838761][ T5495] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.853248][ T4882] EXT4-fs error (device loop9): ext4_readdir:261: inode #11: block 38: comm syz-executor: path /264/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 107.855448][ T5495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.862628][ T4882] EXT4-fs error (device loop9): ext4_empty_dir:3135: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 107.920542][ T8311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.930931][ T8311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.985896][ T8032] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.020560][ T5495] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.036710][ T8311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.048916][ T7596] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.071990][ T5495] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.131507][ T5495] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.154562][ T8311] veth0_vlan: entered promiscuous mode [ 108.162565][ T8311] veth1_vlan: entered promiscuous mode [ 108.179890][ T8311] veth0_macvtap: entered promiscuous mode [ 108.191162][ T8311] veth1_macvtap: entered promiscuous mode [ 108.204578][ T5495] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.238599][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.249126][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.259077][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.269523][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.279479][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.289966][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.299961][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.310935][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.321067][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.331619][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.344005][ T8311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.365555][ T8398] syzkaller1: entered promiscuous mode [ 108.371119][ T8398] syzkaller1: entered allmulticast mode [ 108.386874][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.398090][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.407910][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.418332][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.428822][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.439382][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.449231][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.460425][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.470386][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.480835][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.491757][ T8311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.505066][ T8382] chnl_net:caif_netlink_parms(): no params data found [ 108.520944][ T8311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.529761][ T8311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.538532][ T8311] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.547226][ T8311] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.594937][ T8415] loop0: detected capacity change from 0 to 1024 [ 108.611224][ T8415] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.632435][ T8382] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.639563][ T8382] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.648244][ T8382] bridge_slave_0: entered allmulticast mode [ 108.651614][ T6324] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 38: comm syz-executor: path /132/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 108.654779][ T8382] bridge_slave_0: entered promiscuous mode [ 108.682703][ T6324] EXT4-fs error (device loop0): ext4_empty_dir:3135: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 108.682788][ T5495] bridge_slave_1: left allmulticast mode [ 108.708849][ T5495] bridge_slave_1: left promiscuous mode [ 108.711290][ T6324] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 38: comm syz-executor: path /132/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 108.714648][ T5495] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.738710][ T6324] EXT4-fs error (device loop0): ext4_empty_dir:3135: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 108.764284][ T6324] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 38: comm syz-executor: path /132/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 108.786680][ T6324] EXT4-fs error (device loop0): ext4_empty_dir:3135: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 108.788079][ T5495] bridge_slave_0: left allmulticast mode [ 108.810086][ T6324] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 38: comm syz-executor: path /132/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 108.812433][ T5495] bridge_slave_0: left promiscuous mode [ 108.837792][ T6324] EXT4-fs error (device loop0): ext4_empty_dir:3135: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 108.839948][ T5495] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.867551][ T6324] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 38: comm syz-executor: path /132/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 108.891949][ T6324] EXT4-fs error (device loop0): ext4_empty_dir:3135: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 108.896353][ T8] kernel write not supported for file /245/attr/exec (pid: 8 comm: kworker/0:0) [ 108.974208][ T7446] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.989557][ T5500] ================================================================== [ 108.997668][ T5500] BUG: KCSAN: data-race in batadv_hard_if_event / batadv_mcast_mla_update [ 109.006159][ T5500] [ 109.008466][ T5500] write to 0xffff88811d0f8a10 of 1 bytes by task 5495 on cpu 0: [ 109.016080][ T5500] batadv_hard_if_event+0x896/0xfb0 [ 109.021265][ T5500] raw_notifier_call_chain+0x6f/0x1d0 [ 109.026631][ T5500] call_netdevice_notifiers_info+0xae/0x100 [ 109.032526][ T5500] unregister_netdevice_many_notify+0x8b7/0x11b0 [ 109.038862][ T5500] unregister_netdevice_many+0x19/0x20 [ 109.044327][ T5500] cleanup_net+0x417/0x860 [ 109.048754][ T5500] process_scheduled_works+0x483/0x9a0 [ 109.054233][ T5500] worker_thread+0x51d/0x6f0 [ 109.058837][ T5500] kthread+0x1d1/0x210 [ 109.062908][ T5500] ret_from_fork+0x4b/0x60 [ 109.067341][ T5500] ret_from_fork_asm+0x1a/0x30 [ 109.072106][ T5500] [ 109.074433][ T5500] read to 0xffff88811d0f8a10 of 1 bytes by task 5500 on cpu 1: [ 109.081971][ T5500] batadv_mcast_mla_update+0x21b/0x1700 [ 109.087532][ T5500] process_scheduled_works+0x483/0x9a0 [ 109.092998][ T5500] worker_thread+0x51d/0x6f0 [ 109.097600][ T5500] kthread+0x1d1/0x210 [ 109.101665][ T5500] ret_from_fork+0x4b/0x60 [ 109.106072][ T5500] ret_from_fork_asm+0x1a/0x30 [ 109.110830][ T5500] [ 109.113142][ T5500] value changed: 0x00 -> 0x01 [ 109.117803][ T5500] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 109.120115][ T5500] Reported by Kernel Concurrency Sanitizer on: [ 109.126257][ T5500] CPU: 1 UID: 0 PID: 5500 Comm: kworker/u8:27 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 109.137186][ T5500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 109.147234][ T5500] Workqueue: bat_events batadv_mcast_mla_update [ 109.153487][ T5500] ================================================================== [ 109.171954][ T5495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.192307][ T5495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.203418][ T5495] bond0 (unregistering): Released all slaves [ 109.223334][ T8382] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.230495][ T8382] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.237661][ T8382] bridge_slave_1: entered allmulticast mode [ 109.245622][ T8382] bridge_slave_1: entered promiscuous mode [ 109.303250][ T5495] hsr_slave_0: left promiscuous mode [ 109.308917][ T5495] hsr_slave_1: left promiscuous mode [ 109.314778][ T5495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.322286][ T5495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.329851][ T5495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.337237][ T5495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.346833][ T5495] veth1_macvtap: left promiscuous mode [ 109.352405][ T5495] veth0_macvtap: left promiscuous mode [ 109.357874][ T5495] veth1_vlan: left promiscuous mode [ 109.363084][ T5495] veth0_vlan: left promiscuous mode [ 109.419145][ T5495] team0 (unregistering): Port device team_slave_1 removed [ 109.429259][ T5495] team0 (unregistering): Port device team_slave_0 removed [ 109.852106][ T5495] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.899092][ T5495] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.949306][ T5495] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.050005][ T5495] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.121016][ T5495] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.190947][ T5495] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.280226][ T5495] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.350292][ T5495] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.420717][ T5495] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.480544][ T5495] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.530261][ T5495] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.600497][ T5495] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.669433][ T5495] bridge_slave_1: left allmulticast mode [ 110.675103][ T5495] bridge_slave_1: left promiscuous mode [ 110.680708][ T5495] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.689077][ T5495] bridge_slave_0: left allmulticast mode [ 110.694708][ T5495] bridge_slave_0: left promiscuous mode [ 110.700376][ T5495] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.709355][ T5495] bridge_slave_1: left allmulticast mode [ 110.714989][ T5495] bridge_slave_1: left promiscuous mode [ 110.721134][ T5495] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.729290][ T5495] bridge_slave_0: left allmulticast mode [ 110.734941][ T5495] bridge_slave_0: left promiscuous mode [ 110.740697][ T5495] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.749930][ T5495] bridge_slave_1: left allmulticast mode [ 110.755555][ T5495] bridge_slave_1: left promiscuous mode [ 110.761248][ T5495] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.769097][ T5495] bridge_slave_0: left allmulticast mode [ 110.774829][ T5495] bridge_slave_0: left promiscuous mode [ 110.780898][ T5495] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.789054][ T5495] bridge_slave_1: left allmulticast mode [ 110.794737][ T5495] bridge_slave_1: left promiscuous mode [ 110.800465][ T5495] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.810000][ T5495] bridge_slave_0: left allmulticast mode [ 110.815624][ T5495] bridge_slave_0: left promiscuous mode [ 110.821393][ T5495] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.928958][ T5495] dvmrp5 (unregistering): left allmulticast mode [ 111.239861][ T5495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.249671][ T5495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.259516][ T5495] bond0 (unregistering): Released all slaves [ 111.267823][ T5495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.277564][ T5495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.286996][ T5495] bond0 (unregistering): Released all slaves [ 111.294799][ T5495] bond0 (unregistering): Released all slaves [ 111.303393][ T5495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.313043][ T5495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.322744][ T5495] bond0 (unregistering): Released all slaves [ 111.360908][ T5495] tipc: Disabling bearer [ 111.366277][ T5495] tipc: Left network mode [ 111.374424][ T5495] hsr_slave_0: left promiscuous mode [ 111.380050][ T5495] hsr_slave_1: left promiscuous mode [ 111.385725][ T5495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.393207][ T5495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.400651][ T5495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.408010][ T5495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.415771][ T5495] hsr_slave_0: left promiscuous mode [ 111.421511][ T5495] hsr_slave_1: left promiscuous mode [ 111.427172][ T5495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.434643][ T5495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.442084][ T5495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.449519][ T5495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.457588][ T5495] hsr_slave_0: left promiscuous mode [ 111.463304][ T5495] hsr_slave_1: left promiscuous mode [ 111.472271][ T5495] veth1_macvtap: left promiscuous mode [ 111.477744][ T5495] veth0_macvtap: left promiscuous mode [ 111.483311][ T5495] veth1_vlan: left promiscuous mode [ 111.488532][ T5495] veth0_vlan: left promiscuous mode [ 111.494185][ T5495] veth1_macvtap: left promiscuous mode [ 111.499936][ T5495] veth1_macvtap: left promiscuous mode [ 111.505382][ T5495] veth0_macvtap: left promiscuous mode [ 111.656204][ T5495] pim6reg (unregistering): left allmulticast mode [ 112.451472][ T5495] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.500990][ T5495] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.560992][ T5495] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.600758][ T5495] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.658147][ T5495] bridge_slave_1: left allmulticast mode [ 112.663868][ T5495] bridge_slave_1: left promiscuous mode [ 112.669546][ T5495] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.677152][ T5495] bridge_slave_0: left allmulticast mode [ 112.682927][ T5495] bridge_slave_0: left promiscuous mode [ 112.688640][ T5495] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.781193][ T5495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.791014][ T5495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.800303][ T5495] bond0 (unregistering): Released all slaves [ 112.841839][ T5495] hsr_slave_0: left promiscuous mode [ 112.847560][ T5495] hsr_slave_1: left promiscuous mode [ 112.853221][ T5495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.860669][ T5495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.868242][ T5495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.876156][ T5495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.884704][ T5495] veth1_macvtap: left promiscuous mode [ 112.890182][ T5495] veth0_macvtap: left promiscuous mode [ 112.895688][ T5495] veth1_vlan: left promiscuous mode [ 112.901399][ T5495] veth0_vlan: left promiscuous mode [ 112.952801][ T5495] team0 (unregistering): Port device team_slave_1 removed [ 112.964039][ T5495] team0 (unregistering): Port device team_slave_0 removed