last executing test programs: 2m17.797104241s ago: executing program 32 (id=6891): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f00000000c0)) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) lseek(r2, 0xf2, 0x1) fstat(r1, &(0x7f0000000140)) pwritev2(r2, &(0x7f00000023c0)=[{&(0x7f00000001c0)="1fa3ce971dc0d5262d399ba82a554ee8ff73daf4720cb33fe9b4a52f87a3b8cc3c3f08ea862a1a523f8de464f4076c959a0dad4d3308487eeb3c58ec1a59769ab0b1f40aca", 0x45}, {0x0}, {&(0x7f0000001300)="3bce201e57887e01c9a50125322e04a87f8840f9db7a8cf5c4b462906f25143c3c54f20f22bfca06a5b9355a0c35aa2006646955d06af3de8aea882c9ed24fc3acaf6b55a7bab7230211a493b244ecdf4152dd56d3862fc933266825bf0329a3af298be20391b88f2afa6414cc4657cd9c0d2637d2163942618c542069b92c25e7081f3cd489033fe3eaa2e54af859fa2e", 0x91}, {&(0x7f00000013c0)="1a23d27ec128d6ca109a6b3fb4f3ecc3ca87dc2a90fdf0d1a8050a79ecae87083b69e673e08603f12fd88970b88c422073378bc4f85704157cf06070d0de83d622f9b7ff88a2efe1121bf815bcfdcfa0c59e5c6a2129972d53ad3b6dec1d3fd05675935cd2e53493f56ddabff2dc74bcff60915da4c3a6949fb9f835f71959faebe36819c9a85c8b5e87286df20f869002853bee02ed3e65bca647c5b3c32dbb27e9e3caca915e7d99c58349f043ebd742397a2cc5d889f1b55e8f1870bd6db279ac0354fc7f82612650c287d237f518df64d0ee0ba82ba6160ee64ee4335ff9e7b12c750ee1db38b2bd3a4426c2329bec85d033c71754cbc6ad55fdcd95c9233f29c2b6370f9a4ba3cbefacc7a563f80a1270dbc32d79d90fdb3db8ea6fd2ccd70f91c693a8a4618aced76a24986989062b43f978d46ba8dcd370b719642783f276746ddffe88bcfe5327b5cc84321629b34826380ac5dbdc729015df873b851d774b460d679c26de1e0b3ab6df38885558d73658aa80ebc64d093d225813de288d7588933da77da1d13ceab06d877cde0327dd6f58d9471f525675fb27b80271b91b44afc7ce3a5efdc9e9382f24ddb879eb0758f3004b46b10e322d6738370a2a8ed3a2b94e1d3c59efcbe690dbc53af8aeccf9fda4b58f2af942101331d0936c5a95a36d399acb2a4a23a3d74381b8b2b7d12f433ce76d5dde40a88f170305e0635a1d4f43f39e167002ac39eb71def74dc5c7dba34d9090aa30fea5fc377f3adba4022c5338dc397fede17552d65e8f9fbbc1f8bd71a8e29b73784ad03b9f3f6ea485cdf4d46108f858c038a0fb0df6b6585781e4d3b5574d557a6f3e4c39fb31094e0fd5d57547b24509cc4b050dfaa2dc44fd38442ce897f7e83ee873f23ccbb7bd5b9bafc450bec1ca65798716b3516de09752246d02410cc83344aa769503b0805f3aeb6318671373cbc77ea1cd243c6e47f421e8996ab50778007a524bd6beec8c87f5b92071000fa22337979c873296484deed7348fe6e4408bc6a8a21277755589033cb897eb5197a33355ce5a5d83e1d3f54012f0fee6d1926a6b9c7c82638dc0d5adf1a6cf839367593c800c2833a741f9512e2ee0bf1aeb641de24b49454a3cca9e53187d67f4bedc9b4f28e64d2ed26947c3886320406f3a878a05ad9d9d30702ee226c236aae6bdc0707336bbda98bb82b705c6ee895ce025d0aced68f2cd889fa40315fbde67485eaad7f437c8e8e4b1b3ff9db5db9823159fc03684e85fc2130453bc9051c7ee9f3636448c290477833507d725f1e86bfd8a21306c6954507795b80e91fb4a6e5dbebc3bba453a175ef42d479aaf51e5f5ed1431a40a6ed240f3d320953f0155d22a822e686c784d43c25e935922804bc50c251a703ec5eebf141f40546cbc69cad08082d04f9da855932d93130a9914ed70130a24521c31f20afb292d0aae4ae356a3d57563d90787bb24d436bcca7283ca53afe181c57d5340f914719be0255dccaf4546e9ffccf59795289198c55148f6e5cb5486c89e9491e72b3b64c228ec3e5c34f1da859ecd0d22cf524eadeb9d24cb9085ffce37d1f3b9b2ffd9fb3ad7729674c90c405d184ad402baf715e682394ed9218a00c51d30a0e11307b1f7b2b55a822e425907a5af78cb06618d672e0edabb1281fe66807b8ec70fc5edf661b3e379b2503d0aa7c4eb337dcf4783698ec70b4b8f1ab05f10393613e6b55fdf98c9582fdc4f9abbd8eabc5e7db3f3919ee23f8a041c3c9e018328f8d2aa97ff167a06b2c26232f10120e774991733ffce8000e10b3b01c0bca6a05fdb893be212ad8152187304ca5cc002a12d850195ba148f62fd599227f8bc33765af3620e0bfdeaf72f709db2e327de54fd6288c86f44249bcfec3c848d83e7bf34cc1b20a35369ad287c09b08490cefdcdce2ec469c1bfc1b2b0328f74dca662b9a7e96ca94dfe38c7f91f6500d379cdea3e191c22bcdbbe05d6deb130c73cf679d4b136ab209c07f4f34789a594c12282423881b763f8205eb288e9cb71ae75ed1e4ed7a2449696ab3c801d85417c516ba613c60da14b6b7fd9dcaeabd9e611e517a62d4083fed33474cb645fadee12ac09cafea0ce4e418e9f629f0e947b0e266c532ac7e26e688e7c9f72a5d8a81ae13da7222147e6700612dac7a910b1e2be0774f1bb093b451b2299f5ee03414fb0c17f28f744518bc0eab4f89e7d5642a283572b17e87dfcda4b9c54858b1556f7a6b86e33256d28bd1d30b1d1237b4b11662d5948f11573387842cfb22196f15949ba8c33ae78bbca596f14acadbdd9ac18b284673e37239bb937eeb34813622d2b2bb4bf592f80fd454c605e144514ad109ce5cb6702c4bdd2cb76465858d5bcca1ca71c777522d09287d970d1cf25e4aa2e77deec55d2a5fc7f950c9ac4fc22d9bb72a332ca9664e20e73d73741564ca57d855c826a57acddf12683ad94de26cb9ae07c1aa489d3f992fc0540c1f6c3a3bc805823fd909a95441217d99bdc9c8e9b610483f4ef67f5fc1b006de76e08d79f5b059af937ad10ba9eb2dd8d802a417003b9c755ca60cc82a92f2417270510a117f150732eda5ba68ce35bdcd3f69615f60e5773811917e99dd7ae83e8008ea5cfe93ad72f8bf00f32d1b99714624466fbd948d320ae3a39ff755280717b942ccc39b500902fcf24cbd5af4eeb5eadae6c99f7a0347c2ee12faae7be6d56903a36b2a9505ef09bf82f873c69437736d80b29ef02d2b1fa5659f92e188da2d7ebc0fb85259d9fda430b693ecf9df4126f98389eae0882d78cf472b2fd7ea40c4565c0a16b918f84470e4750052b9565c2a0423741702d8b8e21eec0a40db2d70146011922987c1b833891c6624338fc2574e351435b43227f1084c64e88faea663da59b1a9f2ce712825d7dbf53141b9eadfc5005781089bf657899ee7298d06fb186b89a893f2c30e1571d37c331cf0e42e5409102cd3dfab4215e69034049c0ddd87dc001fdb8898f7580c96526a8b0c617d0aade4265b8b942839c551bd6362205158eef43472f2703b6a23133fabc23108b40c07be3c7c2492bf2f16fb6d9c55516f47b7f188267bac03db6140fff6e5c1fd20e7c214cca5303877baaa48f21fd3f633b4af3c9087a902071d75d631f6e7340eff70eefefb927177bb5a697d7d76fc149c1b9c5403c85152ba9d0c004beef2169d6dbe4a6238d65b23c314b8d0744fcff42f901d57a479660d8cf7f1ebd763bf32b04f4f40a60ec47ee677303603823e958c3b88baa48c37161b65d09706f317f823b5beab99ed30cf991a1fa2f67a7b15602b043130c77143e33b1eccc2b416e83d12935211814fa66ed506765e3d12b97124f128dbc3a0691dbaac561cd6c27f7f9d489fc5deed13cc503b660110757eefc046b96d004c7978cd9efe95ae0efbbc5f15e4c1adea741d411ae7384b91b1c216faa1d25ffe88784ace71dc8970d9268b55a163ea83e44b9dfe8a8334f5efe8b531e83ea18e9c0109f686ad060127583f23e5bfb029b0503299dd46f046fbe1bdac49f07127628641230cf78a43d77a3e97027fbf36cbbe40772ae0f4d1204ce0b6ce38dd0dce8153c757d0a17adf99952fb0393d53838c38f7ba3e214dbcd6e105d33d9fee05a5dffaca10e40a6c0e4b72a3ea8c6687da71b1daadb01c003ca4aa23abfc96872bb31e33270d7d53ce4239f03b71a2aec407ab205eec4be8a060abafc845c4cf78c6234b8a93e144e1622d3d9dc4535f0f81950607b6d990f0a7b3106bcb103ecda720006668a18e1ae617c0484439d98063e60a884e41f1beca7497c83de0f774f16f7ee0586875917d5900987283f3148628564ddca95c61bf72bdadfa3cee6f580f7b8521191c3b74595a1203f33c0f632a47ef9bfa45aa5aaf5f5fe2c3595c2273a2814307f5385de23f091f9822c022a6847c3f32355fa0aa33065b1077bba526392811dca3350985e6f6a087a8078363ab4e14661a1c2a2cd8b2304ac959be2feefe3d20ce9bd5ec9854a54b487f234d71c6358025f8625f4b053d370383eabda0dcc44d79be8706e309f710699bd4839282f6f1acf3eb99ee79a18f2f96c5e372941e2efc37efb141be8cb4ab36b8fc26ddb9297d707a2cd1c9d4ea6eb4e0189bf91fbefd46af435cfdac8aa958ed5a267ae18e01a91f174897c9981d049f30a8beaf367f14521c861907e44fdc8b77bdabf311e99a829634d438dba1adc0dc352d105c18e9aa5f489c9b0e093eaabe108c0a9008ec722db65a6e7d6c09ae61cff5ee87b6a4b04f710d3a66e09a6709bbfe1304ca0c230fc49ef798006d8ea4730ded1858c0b5420e2d8a3f6c15ba2fa97e1df1c55876e1c488754c88b1fe1a10b15f3bce59401fdc88ebf0ab0bf38b76df3539028c381fed197c17d189a22044fc0a0d0a648f74cefa4bf8e5440b15aea5bdf48a6a75553fb007b5a1bd633c6443fdd68b32239bd31bcd250b689e7021a3e1caf5ed3dc2eed19c926a8b31731d1ae82537c8e31e075e205cc4d076cac64c051ffb91f0c2ef599423a65c77108133e8455c43e31f52ca3a786c24afbf8f94fa87d6efbff1e4dbedc75d15ffc6f2519d47f35bc7c034092797eb2332c6d3fc06a14cb0accacb13acd9dbb06eab24892d88aaef0442760a8437fddfefa8ea1e37d04671195807aeee31ebe209e5fa04568896376533984712eaac8695d4e25fa7398a184372f0086a68aeb42525a4ca873a2d49b1c103c88bb15bebec45f9acbb94d61908af6fcf4c354ccd8fa61cb9d72a61607e6718fca19ed7f420269c742e4f5cab0ec27b2a1ac3b48a6a343db082513993f05c5be037bfbd25111e8a78ba17e2b55efc5e1366968ec9987d6e6ec4a056cbd9d617942ce5018dd8a34942ab0e1d9a182e23448533e0bf9e27a78a998ede72a8d3ccd669fdcf8ae009937835854947edd188f4595a0f32082253adb3f6bfc690f1a07180890e06022694bb7b1ab87d78998a08f3964cdb3bdebfe3ab03f7ebf409b8679e4622b91a852606173f31ca064cda4fa2a14c8d0088578944a6e4989daf611f833e1e6759c781fd16402328ddaa17d112c4987d62db0202bbc02334679c0f9b1663a7597245a1bf5a9026af77682b6245f7bafa5dac3bd8346239965879acaa262cdfb3c74b942fcea136947033061084b20c6698a324899c770011fd1cf0055986d97eba03b25ba247b9a085c4e4d13cb061bb3f31cfd9b4786132c53b753a0401a282550f4ca397d73c8eebb6ef93abfe6ea3be1d9f435fa572ad1ee7286f4d7a77ebc54ccd558f23f943d7d883d49c1bab32c7445d915ec0c76cd3c0ed562954c29db229c63568b9d3fd897fd34d03fb143f892f417cd0a2d3ab9b8ff7ba55b876c396022ac4f396a5e8bed3534c9b449299d99bc91e5b638314e9591704c80ec5ec4c901d42112b96a49a727b4ed6d0441e2e4c191f35199beae901b34f690de7db3436c718b3f870dfff22afbc64f21405f496dedf38058f2ae1fd72af9a43c7aa9347ca73a88ad342ee60289aec021ed999c15ffab854d8abd8187a190b3148a24b8af2dbc3169f4384fd255a6e084b0e946ede3995df916b61999d708288ac4e0128ee7b6e8a9179d224fac17f40cf322861c923ce0947aaf604a3913283f29eca4a91bd82ac50717f8a014322f204e22ff2fd4fb6b8c7f9a023c8cb845940cc4141cd07a93176165931d453fca82e5b1b20889ad5cf85bdc3a103f0221578ece2c271fc8afe4cfbd9bec48cfe366814fb3", 0x1000}], 0x4, 0x40, 0x10, 0x1) 56.915638876s ago: executing program 33 (id=8815): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xb470, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003740)={{}, &(0x7f0000000400), &(0x7f0000003700)='%pS \x00'}, 0x20) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffd}]}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 42.155677704s ago: executing program 34 (id=9070): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r4 = socket(0x1, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r4}, 0x20) write$binfmt_script(r2, &(0x7f0000000440), 0x1000a) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)) r5 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x18, r6}) 40.015769824s ago: executing program 4 (id=9114): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="10030600e0fc020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 40.015554104s ago: executing program 35 (id=9114): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="10030600e0fc020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 33.511153142s ago: executing program 7 (id=9238): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80, 0x1, 0x0, &(0x7f0000000000), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) mkdir(&(0x7f0000000100)='./control\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r2 = openat$cgroup_freezer_state(r1, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f00000000c0)='FROZEN\x00', 0x7) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x816744, &(0x7f0000000480)={[{@grpjquota}, {@discard}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x2c}}, {@resgid}, {@dioread_nolock}, {@usrjquota}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@dioread_lock}, {@resuid}, {@noquota}]}, 0x3, 0x46c, &(0x7f0000001380)="$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") chdir(&(0x7f0000000400)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) 33.510907922s ago: executing program 36 (id=9238): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80, 0x1, 0x0, &(0x7f0000000000), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) mkdir(&(0x7f0000000100)='./control\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r2 = openat$cgroup_freezer_state(r1, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f00000000c0)='FROZEN\x00', 0x7) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x816744, &(0x7f0000000480)={[{@grpjquota}, {@discard}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x2c}}, {@resgid}, {@dioread_nolock}, {@usrjquota}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@dioread_lock}, {@resuid}, {@noquota}]}, 0x3, 0x46c, &(0x7f0000001380)="$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") chdir(&(0x7f0000000400)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) 32.395704712s ago: executing program 37 (id=9259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca", 0xe}, {&(0x7f0000000500)="e98314d58ce4b24ee137cea9c243c233bfa2f5fee778bbfc11a66c", 0x1b}], 0x2) 31.475676572s ago: executing program 38 (id=9273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0xf}, {&(0x7f0000000500)="e98314d58ce4b24ee137cea9c243c233bfa2f5fee778bbfc11", 0x19}], 0x2) 29.799615966s ago: executing program 39 (id=9288): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000023c0)}, 0x20001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1d8, 0x178, 0x178, 0x1d8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452729a5afa3851200a44a3d28da04828d1768c081f126a6bc527"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x238) 27.077051453s ago: executing program 40 (id=9315): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000580)='fscache_cache\x00', r0, 0x0, 0x9}, 0x18) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r2, &(0x7f0000000080)='./file0\x00') readlinkat(r2, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x2, 0x0, 0x0, 0x7ffc0002}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x50) accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000180)=0x10) sendmsg$inet(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000880)="31fb0f43ea901540b4dd5cc1221ed729f3eb99a332e38beade4b57f5a67fc934bf20853a2e46ac902c8237461b0670e7d2c4f8565202ac57188be2aff14ee1bb56fbb81aff4fa65ba03d0b05517304b50e77de9bbc9572090843c03a8150a05e91b64cd61a22b7a93c9da1921588de0b15161ee2bcf16dead807e982a92a236e", 0x80}, {&(0x7f00000009c0)}, {&(0x7f0000000900)="a6f659bafcece3e027b3d68e74fff2794afc432654c7a771c4093d25b2bce2c0aae2c00e721b77f59f3b6b340f62565cc6bb47e8df68900e290994ee388082343d45661038a29b63f69d2b6db8044c1db86a89ccb1249537a8763b40f87986f2f186914725ba000cbec935f772686a529ec41add753d2e16bf1e7e33506fc697e3fa75c2653dde5e580ba2163dd1144f77df90e61ef634fbcbfd90e6bff0d79b3e", 0xa1}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x4000) recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r9, 0x4b4a, &(0x7f0000002f80)=""/61) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="100000003d0000082abd7000a226e260b5e8a2741edafcdbdf25"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='discard,nfs,dots,check=strict,uid=', @ANYRESHEX, @ANYBLOB='B\x00'], 0x1, 0x22d, &(0x7f0000000300)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18210aa63e000001008d03000000000000110000", @ANYRES32=r8, @ANYRES64=r4], &(0x7f0000000080)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) 25.405749887s ago: executing program 4 (id=9317): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = io_uring_setup(0x4d3f, &(0x7f0000000200)={0x0, 0xca6a, 0x40, 0x3, 0x6}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000480), 0x66) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r1, &(0x7f00000013c0)=[{&(0x7f0000001400)=""/138, 0x8a}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="20de1b65b59a2d762b6d54b81846", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000ffffffff00"/28], 0x50) socket$rds(0x15, 0x5, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000180)=0x3) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000), 0x1) 24.590235317s ago: executing program 4 (id=9363): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = io_uring_setup(0x4d3f, &(0x7f0000000200)={0x0, 0xca6a, 0x40, 0x3, 0x6}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000480), 0x66) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r1, &(0x7f00000013c0)=[{&(0x7f0000001400)=""/138, 0x8a}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="20de1b65b59a2d762b6d54b81846", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000ffffffff00"/28], 0x50) socket$rds(0x15, 0x5, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000180)=0x3) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000), 0x1) 23.811380064s ago: executing program 41 (id=9374): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, 0x0) 23.761988989s ago: executing program 4 (id=9377): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000000)=""/55, 0x37, 0x0, &(0x7f0000000280)=""/160, 0xa0}}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r2, &(0x7f0000000240)=[{&(0x7f0000000540)="c0d1599a4bd4a4bdcf69063a14ff605d7bf25945e7c4c54fa01d3225ea19188b17367a68043640fd5b2a515279745b29f332b32c4e3ca27445e592fc503fc94609cbaa19b3abc3e96cbdd1abf714a6c6eb71d0ce514926fffe4f402b5892c8208a953c7f4fb1726977d5818ae02410788d046ea593ad28510cd6c102a42364dd1634042c72ece0121f1fec2712152cfeaf1e5d15dbf5421de3dabd47210acded2ff253a1b0aadd5947317c36ff1b4476a399a7a4487b42020eb8d67e2c1cfb2550861d25aa900ad34f0504690b524b1394a0753b7735ee3027c9a1a8c6cee9e0d2cf4c44d534b0833ae2206852699335eeb723fa65204ef7462a2cc1b53a7871bb78bfa75219917ee0ddadd44bb85475552d141d814b7a375f41aa50c52ef5756d", 0x121}, {&(0x7f00000003c0)='=', 0x1}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRES16=r1], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0xa, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpgrp(0xffffffffffffffff) syz_open_pts(0xffffffffffffffff, 0x42) socket$kcm(0x29, 0x2, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x3ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x414}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000000c0)='T', 0x1}], 0x1}}], 0x2, 0x4000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000000) 23.675920437s ago: executing program 4 (id=9379): symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000000) 22.194332052s ago: executing program 4 (id=9396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0xf}, {&(0x7f0000000500)="e98314d58ce4b24ee137cea9c243c233bfa2f5fee7", 0x15}], 0x2) 22.194173982s ago: executing program 42 (id=9396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0xf}, {&(0x7f0000000500)="e98314d58ce4b24ee137cea9c243c233bfa2f5fee7", 0x15}], 0x2) 21.622087348s ago: executing program 9 (id=9402): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21081e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x84}}]}, 0x1, 0x518, &(0x7f0000001780)="$eJzs3c9vHFcdAPDvrLPrjePWaekBEG1DWwgoyjretFHVA5QLCKFKiB5BSo29sSzvei3vutQmB/fMFYlKnODIH8ANqSckjlwQ3LiUAxI/LFCNxGHQzI6dtbMbR7G9G7yfjzSa9+ZN9vt9cea97LO9L4CJdS0idiOiEhHvRcRccT0pjni7d2T3fbp3f2l/7/5SEmn67j+SvD27Fn1/JnOleM1qRHzvWxE/TB6O29neWVtsNhubRX2+29qY72zv3FxtLa40Vhrr9fqdhTu33rz9Rv3M+vpyq1KUXvzk97tf/XGW1mxxpb8fZ6nX9fJhnMyliPjOeQQbg6miP5VxJ8ITKUXE8xHxSv78z8VU/tUEAC6yNJ2LdK6/DgBcdKV8DSwp1Yq1gNkolWq13hreCzFTarY73Rv32lvryxGzScTVKJfurTYbt4q1wqtRTrL6Ql5+UK8fq9+OiOci4qfTl/N6bandXB7nf3wAYIJdOTb//3u6N/8DABdcddwJAAAjZ/4HgMlj/geAyWP+B4DJ05v/L487DQBghLz/B4DJY/4HgIny3XfeyY50v/j86+X3t7fW2u/fXG501mqtraXaUntzo7bSbq/kn9nTOun1mu32xsLrsfXB1a9tdLrzne2du6321nr3bv653ncb5fyu3RH0DAAY5rmXP/5Tks3Ib13Oj+jby6E81syA81YadwLA2EyNOwFgbOz2BZPrFO/xLQ/ABTFgi95Dv/tmmlYH/YJQmqbp+aYFnKPrn7P+D5Oqb/3fTwHDhLH+D5PL+j9MrjRNHrHn/4uVvko84kYA4P+INX5gyPf/ny/Ovyq+OfCD5eN3fHSeWQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDT7WD/31qxF/hslEq1WsQzEXE1ysm91WbjVkQ8GxF/nC5PZ/WFMecMAJxW6a9Jsf/X9bnXZo80vXTlsFiJiB/9/N2ffbDY7W7+IaKS/HP64Hr3o+J6ffTZAwAnO5in83PfG/lP9+4vHRyjzOdv34iIai/+/l4l9g/jX4pL+bka5YiY+VdS1HuSvrWL09j9MCI+O6j/SczmayC9nU+Px89iPzPS+KUj8Ut5W++c/V185gxygUnzcTb+vD3o+SvFtfw8+Pmv5iPU6RXjX/ZSS/v5GPgg/sH4NzVk/Lv2uDFe/+23e6XLD7d9GPH5SxEHsff7xp+D+MmQ+K8df7EhA+Kfv/DSK8NyS38RcT0Gx++PNd9tbcx3tndurrYWVxorjfV6/c7CnVtv3n6jPp+vUc8Pnw3+/taNZ4e1Zf2fGRK/ekL/vzQ04lG//O973//ioIapXvyvvDoofileeET8bE788mPGX5z5dXVYWxZ/eUj/T/r633jM+J/8ZeehbcMBgPHpbO+sLTabjc2hhd/MnHyPgsJICtk/2acgjYGFr48qViUGN/3k1d4zfawpTZ8o1tFx4sE7x7NYdQOeBocPfUT8Z9zJAAAAAAAAAAAAAAAAA43iN5bG3UcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAurv8FAAD//4iL0F8=") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x140, 0x65, 0x2, 0x70bd27, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, {0x7, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_TCP_SRC_MASK={0x6}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xf4, 0x2, [@TCA_BPF_ACT={0xf0, 0x1, [@m_connmark={0xec, 0xa, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x9, 0x3, 0x3, 0x1}}}]}, {0x9d, 0x6, "7d1c2f218ab42f594fe5adbe85eea4a07891f03c95b96ccd9c2cc998aa5257967475522c2ef4397c75e5cd9a15b78828602efb5bb8d8f18605fd1d4ac132fc6229edf4a2184213ba5ea94b254ee4adfe495b418382819811503deec2cd166133b7f5ce1aede8154721099eb87bbdf128c2d67d606cc26e787ce45c03fde1ba3b27d5dee1efa3eda225021429dfdbc555fa38db8cd8c88f8880"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x2, 0x5, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x1, 0x0, 0x1}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r6 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0) sendto$packet(r2, &(0x7f00000002c0)="44c394f305916c4516999da286dd", 0xe, 0x0, &(0x7f0000000340)={0x11, 0x9, 0x0, 0x1, 0x0, 0x6, @random="fb76f11b713b"}, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) fallocate(r0, 0x0, 0x0, 0x1001f3) fallocate(r0, 0x8, 0x0, 0x10000) 21.317468848s ago: executing program 9 (id=9404): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 21.185788671s ago: executing program 9 (id=9406): symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000000) 21.185411152s ago: executing program 9 (id=9407): socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000000)=""/55, 0x37, 0x0, &(0x7f0000000280)=""/160, 0xa0}}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r1, &(0x7f0000000240)=[{&(0x7f0000000540)="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", 0x121}, {&(0x7f00000003c0)='=', 0x1}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRES16=r0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0xa, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpgrp(0xffffffffffffffff) syz_open_pts(0xffffffffffffffff, 0x42) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioprio_set$pid(0x2, 0x0, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r3, 0x0, 0x100000000) 21.175279573s ago: executing program 9 (id=9408): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x80080, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0x40, 0x2, 0xbc}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) socket(0x23, 0x80000, 0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f00000002c0)={0x4}) 20.883690091s ago: executing program 9 (id=9410): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x29c500a, 0x0, 0x4, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x6, 0xff, 0x5e, 0x54, 0x0, 0x7, 0xc9008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0xfffd, 0xfffffffffffffdf5}, 0x1a, 0x81, 0x800, 0x6, 0x8, 0x4002, 0x101, 0x0, 0x2800000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r1, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) r2 = dup(0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000007c0)='kmem_cache_free\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 20.883496591s ago: executing program 43 (id=9410): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x29c500a, 0x0, 0x4, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x6, 0xff, 0x5e, 0x54, 0x0, 0x7, 0xc9008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0xfffd, 0xfffffffffffffdf5}, 0x1a, 0x81, 0x800, 0x6, 0x8, 0x4002, 0x101, 0x0, 0x2800000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r1, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) r2 = dup(0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000007c0)='kmem_cache_free\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 20.860918423s ago: executing program 7 (id=9375): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd2e}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r0}, &(0x7f0000000bc0), &(0x7f0000000c00)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00'}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1ff) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}}) 20.834373545s ago: executing program 7 (id=9412): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000580)='fscache_cache\x00', r0, 0x0, 0x9}, 0x18) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r2, &(0x7f0000000080)='./file0\x00') readlinkat(r2, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x2, 0x0, 0x0, 0x7ffc0002}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x50) accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000180)=0x10) sendmsg$inet(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000880)="31fb0f43ea901540b4dd5cc1221ed729f3eb99a332e38beade4b57f5a67fc934bf20853a2e46ac902c8237461b0670e7d2c4f8565202ac57188be2aff14ee1bb56fbb81aff4fa65ba03d0b05517304b50e77de9bbc9572090843c03a8150a05e91b64cd61a22b7a93c9da1921588de0b15161ee2bcf16dead807e982a92a236e", 0x80}, {&(0x7f00000009c0)="e71d9b3b0f", 0x5}, {&(0x7f0000000900)="a6f659bafcece3e027b3d68e74fff2794afc432654c7a771c4093d25b2bce2c0aae2c00e721b77f59f3b6b340f62565cc6bb47e8df68900e290994ee388082343d45661038a29b63f69d2b6db8044c1db86a89ccb1249537a8763b40f87986f2f186914725ba000cbec935f772686a529ec41add753d2e16bf1e7e33506fc697e3fa75c2653dde5e580ba2163dd1144f77df90e61ef634fbcbfd90e6bff0d79b3e", 0xa1}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x4000) recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r9, 0x4b4a, &(0x7f0000002f80)=""/61) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="100000003d0000082abd7000a226e260b5e8a2741edafcdbdf25"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='discard,nfs,dots,check=strict,uid=', @ANYRESHEX, @ANYBLOB='B\x00'], 0x1, 0x22d, &(0x7f0000000300)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18210aa63e000001008d03000000000000110000", @ANYRES32=r8, @ANYRES64=r4], &(0x7f0000000080)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) 19.968102421s ago: executing program 7 (id=9415): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000000)=""/55, 0x37, 0x0, &(0x7f0000000280)=""/160, 0xa0}}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r2, &(0x7f0000000240)=[{&(0x7f0000000540)="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", 0x121}, {&(0x7f00000003c0)='=', 0x1}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRES16=r1], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0xa, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpgrp(0xffffffffffffffff) syz_open_pts(0xffffffffffffffff, 0x42) socket$kcm(0x29, 0x2, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x3ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x414}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000000c0)='T', 0x1}], 0x1}}], 0x2, 0x4000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r3, r4, 0x0, 0x100000000) 19.878654069s ago: executing program 7 (id=9416): symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000000) 18.507299114s ago: executing program 7 (id=9428): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) futex(&(0x7f000000cffc)=0x1, 0x6, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000170a010400000000000000414267f7f43900070000053400038008007bb16c0affff0800014000000000080002400000000308feffffff00000008000140000000000800014000000000"], 0x48}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4040810) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000004000000e27f00000100000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000808cc6a0657467e176cc8e594122d39870f2a12ca026c1cba1910d1203291d49c64c34ac9eb02a0501b2d1a56f68b13cc24ba633046a49bd4e570d471a11a5578f88a39523eecf974b2126094e7d536516a7a7efc085b144df774d80128d73cf16a947664c7acc30865a335abbc1c1819edd2294bce44a5558c9a27ba0d862ee9a1e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010003000000000000002600000018000180140002006c6f"], 0x2c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f00000000c0)='.\x00', 0xa4000061) read(r5, &(0x7f0000000140)=""/68, 0x44) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 18.507090534s ago: executing program 44 (id=9428): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) futex(&(0x7f000000cffc)=0x1, 0x6, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000170a010400000000000000414267f7f43900070000053400038008007bb16c0affff0800014000000000080002400000000308feffffff00000008000140000000000800014000000000"], 0x48}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4040810) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000004000000e27f00000100000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000808cc6a0657467e176cc8e594122d39870f2a12ca026c1cba1910d1203291d49c64c34ac9eb02a0501b2d1a56f68b13cc24ba633046a49bd4e570d471a11a5578f88a39523eecf974b2126094e7d536516a7a7efc085b144df774d80128d73cf16a947664c7acc30865a335abbc1c1819edd2294bce44a5558c9a27ba0d862ee9a1e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010003000000000000002600000018000180140002006c6f"], 0x2c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f00000000c0)='.\x00', 0xa4000061) read(r5, &(0x7f0000000140)=""/68, 0x44) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 13.697238136s ago: executing program 6 (id=9491): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(r1, &(0x7f0000000c40), 0x0, 0x2, 0x0) 13.611034954s ago: executing program 6 (id=9492): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd2e}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r0}, &(0x7f0000000bc0), &(0x7f0000000c00)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1ff) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}}) 13.576095758s ago: executing program 6 (id=9496): futex(&(0x7f000000cffc)=0x1, 0x6, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000170a010400000000000000414267f7f43900070000053400038008007bb16c0affff0800014000000000080002400000000308feffffff0000000800014000000000080001"], 0x48}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4040810) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0xa4000061) read(0xffffffffffffffff, &(0x7f0000000140)=""/68, 0x44) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 13.558971869s ago: executing program 5 (id=9497): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) 13.516872944s ago: executing program 5 (id=9500): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1040617a725ba43900000004000000040000000200000000000000a7826102931ed52e87428e05dc518e5e8ba933bcd0c02830101d73b46cb5f9e1bbc2e87decdde8aa5ef5f141a2ce", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x2, 0x7ffffffc, 0x7ec, 0x200000fffe, 0xfffffffffffffffe, 0x3, 0x0, 0x7ffd}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x200}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000480)={'nat\x00', 0x0, 0x0, 0x0, [0x6, 0x0, 0x3e89, 0x80000000000b, 0x6, 0x9], 0x0, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="fff586dd0500560008005400000060ec970001983a00fe800000000000000000000000000700ff02000000000000000000000000000180"], 0xfdef) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x5f}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001300)=@newtfilter={0x17c4, 0x11, 0x1, 0x691522ef, 0x0, {0x0, 0x0, 0x74, r8, {0xe, 0x4}, {}, {0xfff1, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x314, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9f8bd069ccf62e34, 0xfff1}}, @TCA_MATCHALL_ACT={0x2f8, 0x2, [@m_gact={0x12c, 0x5, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x3, 0x4, 0x8, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80, 0x0, 0x1, 0x3, 0x9}}]}, {0xcf, 0x6, "ade03fe96032b3caaa863f2c85cb547943219c03f51e40294126103d88983ccffdfae1cc88b816bc19b9cb6fe482a26dd0981118ccc191d4cf0bc8fca5436f2a83bf26e91787d5fa04b9e9c7ade0c27c5ca5a706b3b943be5c92e22fc9b8a098492ebd511c7dcff98e5904cce7ee2a9a621231d44fd2b3c341ac3419f01c4bfbba32f2db91666bb86bcf8ef682be98905fd2739a2a9cd8ef1d43c7b008bdd16453ea197c3baa4f8081a576c7f86895c30441bdb876e4812baadd3ad5c63615b7a401a587de1e0bbc58cafd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0xe8, 0x14, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x40, 0x7, 0x7, 0x8b9, 0x7ff}, 0xe}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0x72, 0x6, "72b3b2f401d4aac3e59d66cf696f0dd9c163ce22028ee8c3ce78cf6486a848314b2dac8f642ba3b33ea442361f7f6ad9e4c523783c0f2decf03bc808f6ef158e14e9e2845fb1233b99137dd29393b1f64554d1054817d7436fdfe173994d5b491152b55718b0b2ef05fb5efd8b21"}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}, @m_ctinfo={0xe0, 0x200a, 0x0, 0x0, {{0xb}, {0x4}, {0xb2, 0x6, "fd0f4d78ab5bcdd284b1bf02705e3138247885c377041380233c3ed018383a02610ce51628e27f5330f974523b7e510294b52a5190345f6a25f4c2630a105edd868a6dc4aa2b6db94c04f33d082c372270adb804de8f1190804a6159a09d20fd6fb54c868e8c7d4073b716cecf1960fd3cbb7fff3616052b48667e28344dfbfb3516047710c30cafd9dc3cf4ac5fe004592aef52563b2f2675e0c0fef46a4f76d42960ecaeda01f3522831ff7c50"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_matchall={{0xd}, {0x1464, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_ACT={0x2d0, 0x2, [@m_nat={0x150, 0x18, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x3, 0x3, 0xaf, 0x800}, @empty, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x1, 0x6, 0x5, 0x5}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, 0xffff00}}]}, {0xd5, 0x6, "a504e8af101f0622d085b30479cef74a2efe8117a15ba1b82ba2aafcb8f693574146e2a71d705d89fce3dd2c632365580f88a6d9e10ae5f120f1a84b9706ec09cbb7933ab5889f6de3c195e2806ba83280963ec54e000416000cca10e95bf6c2975408ec1b542d46cc1f80745f6d2a48059cda7d98b898e2dab870e38af8f655d8a5eb0e421d9fb7e6b9073342ca8b4b24dfa275ba91cd69c1e48235d5ea944be23d97281bcb88f36bf5efc38720283837d0bbe03d5284fd8e6c22d780fdbfe84fc635dd1a9f969bd120fa5f88fdb86530"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x90, 0x6, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xce, 0x12, 0x4, 0x9, 0x1b}, 0x54}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x2, 0x1, 0xfffffffe, 0x3}, 0x74}}]}, {0x2b, 0x6, "47fd8eb36f841bc6f305f0de6658c28f388868a8be835c574c0b504d3e1f5b26c87af4b6db6a66"}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}, @m_ct={0x50, 0xd, 0x0, 0x0, {{0x7}, {0x4}, {0x26, 0x6, "77b30b89af5ccf61f5acd2b7d6b22cdb60bb56072d5b7088151bbc2c5a09937134db"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0x9c, 0x200c, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xf79}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0xb486, 0x7, 0x8}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}]}, {0x3e, 0x6, "1ecf53a8d692efc77fb1459eaccb9e3c6f42725e247f12d0184568f221ef0df60b74db0aa7957773d6dda8d822c11e9ca528b194260d95871db7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_MATCHALL_ACT={0x10d8, 0x2, [@m_sample={0x228, 0x3, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x8e29, 0x0, 0x40, 0x17}}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x3, 0x4, 0x7, 0x2a}}]}, {0x1c4, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0xc24, 0x1a, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}]}, {0xbf2, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x118, 0x1e, 0x0, 0x0, {{0xb}, {0x68, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x10000, 0x9, 0x20000000, 0x20400, 0x92}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x5, 0x6, 0x8, 0x7f}}, @TCA_DEF_DATA={0x13, 0x3, 'errors=continue'}, @TCA_DEF_PARMS={0x18, 0x2, {0xb7, 0x2, 0x7, 0x80000001, 0x861}}, @TCA_DEF_DATA={0x8, 0x3, '^\xf4}\x00'}]}, {0x87, 0x6, "10431e56c2c2f911e8df4bd168f3e5ee9975566f54473f1e950316c4765ea1fe2dad2bf66d774ca0d191eae7c307c0538d199cb6e1884feea813a9c0a9e62c3d9e69da424e27a6d4f18cad0752691c55e53e8fafbce0443de72ba6db173a4751b675e4808919e3278705df1487e41dcb80f0949871c77d0ffa389e12f722aa9b39f2d7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0xc4, 0xd, 0x0, 0x0, {{0x8}, {0x4}, {0x9b, 0x6, "693a8d60bb99d0ad436021f8531bbb27b0ddcb83cb23115aa49eac5f2ccfa9236e0e13c1f32a5816a751d22910455166d9099fa754d2bd69ce29ed3c811094fe9dc1570141ff1e5f3af810c582a3813140d797bb03e2b953ff6bdc3afa181472b9e1246d970cb0d22a714146aaf014b0b24b0be5cbb52f65f1eb9276c278d5c41e4f2d9a2602375e56c35faa6b5711bb6acae82a5834ba"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0xac, 0x15, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x8, 0xffffffffffffffff, 0x9, 0x1}}]}, {0x65, 0x6, "5453f6dc019b8e4b30370d9d3f73d648de32a82a8b782ede7bca973542b410d8abe9ae7f0222e66bf66089af53cb676e9e713abce9c26e03f8601f9c9ca5aa0b885e48a189394b760f11cd3cf95563e2c7d5171d0b8e150382ec683b5ee597027e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x5}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0xa0, 0x2, [@m_ctinfo={0x50, 0x20, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x10001, 0x1, 0x6, 0xa5c, 0x8842}}]}, {0x9, 0x6, "53ddcad594"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0x4c, 0x5, 0x0, 0x0, {{0xf}, {0x1c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1aea}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010101}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x17c4}, 0x1, 0xf0ffffffffffff, 0x0, 0x4008000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001800dd8d0000000000e3a5ea233f39400000a0f2a2c7f4fd040001"], 0x24}, 0x1, 0x0, 0x0, 0x80c0}, 0x200040c1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES64=r5], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x78}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback=0x57, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.45194059s ago: executing program 5 (id=9501): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_DESTROY(r0, 0x0, 0x0) 13.45170266s ago: executing program 5 (id=9502): socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000000)=""/55, 0x37, 0x0, &(0x7f0000000280)=""/160, 0xa0}}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r1, &(0x7f0000000240)=[{&(0x7f0000000540)="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", 0x121}, {&(0x7f00000003c0)='=', 0x1}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRES16=r0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0xa, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpgrp(0xffffffffffffffff) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) ioprio_set$pid(0x2, 0x0, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r3, 0x0, 0x100000000) 13.444838521s ago: executing program 5 (id=9503): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x93254, 0x11b22}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x92) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0xffffffffffffffff, r0, 'id0\x00'}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0xb04ea0aad8902db2, 0x0, 0x7, 0x3e0d0c73, 0x2a, @rand_addr=' \x01\x00', @remote, 0x1, 0x8000, 0x28ae4462, 0x6}}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r4, &(0x7f00000002c0)={0x2c, 0x4, r6, 0x30, r4}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffff01, 0xb7c56ad10922c48a, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x20, 0x1, 0xfffff40c, 0xffffffff, {{0x8, 0x4, 0x2, 0x8, 0x20, 0x64, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@lsrr={0x83, 0xb, 0x9, [@loopback, @local]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x4, 0x8, 0xf3, 0x2, 0x41, @remote, @mcast2, 0x20, 0x8, 0x6, 0x80010}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'gretap0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x1, 0x8, 0x6, 0x7, {{0x42, 0x4, 0x1, 0x7, 0x108, 0x64, 0x0, 0x3, 0x2f, 0x0, @multicast2, @empty, {[@ssrr={0x89, 0x1b, 0x79, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x43}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}, @ssrr={0x89, 0x17, 0xca, [@multicast2, @dev={0xac, 0x14, 0x14, 0x18}, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast1, @remote]}, @timestamp_addr={0x44, 0x4c, 0x69, 0x1, 0x3, [{@loopback, 0x9}, {@multicast2, 0x5}, {@private=0xa010102, 0xffffff00}, {@local, 0xfff}, {@dev={0xac, 0x14, 0x14, 0xc}, 0xc}, {@remote, 0x2}, {@empty, 0x7}, {@rand_addr=0x64010100, 0x5}, {@local, 0x40}]}, @cipso={0x86, 0x73, 0x3, [{0x6, 0x10, "0fa73feeac1e66a214ae2439e021"}, {0x0, 0x4, "1d88"}, {0x1, 0x6, "4a1c7c20"}, {0x0, 0xd, "729ab86fc9a90e4f1cf9a8"}, {0x1, 0xd, "4f0ff7c8158d0ed8d25cb3"}, {0x2, 0x8, "7cd898a98316"}, {0x1, 0xe, "029d77c287312c6d8fe7f63c"}, {0x6, 0x11, "eafad50ec208da2f054a7668ccdccc"}, {0x0, 0x12, "a0b468558011e179463ce693757347af"}]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xd4, r2, 0x100, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xd4}}, 0x4004000) 13.327886292s ago: executing program 5 (id=9505): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13d}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0, 0x0, 0xffffffff}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 13.327758482s ago: executing program 45 (id=9505): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13d}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0, 0x0, 0xffffffff}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12.760805087s ago: executing program 6 (id=9513): socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000000)=""/55, 0x37, 0x0, &(0x7f0000000280)=""/160, 0xa0}}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r1, &(0x7f0000000240)=[{&(0x7f0000000540)="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", 0x121}, {&(0x7f00000003c0)='=', 0x1}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRES16=r0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0xa, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) ioprio_set$pid(0x2, 0x0, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r3, 0x0, 0x100000000) 12.716508942s ago: executing program 6 (id=9514): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r0, r1, 0x0, 0x100000000) 12.32393908s ago: executing program 6 (id=9521): socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket(0xa, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(r5, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getroute={0x1c, 0x1a, 0x1, 0x70bd26, 0x25dfdbfc, {0x2, 0x0, 0x80, 0xb4, 0xfc, 0x2, 0x0, 0x7375da27ee784fdc, 0x2200}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x100}, 0x200080a5) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x8000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)=r2}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r0, r8}, 0xc) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 12.323710521s ago: executing program 46 (id=9521): socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket(0xa, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(r5, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getroute={0x1c, 0x1a, 0x1, 0x70bd26, 0x25dfdbfc, {0x2, 0x0, 0x80, 0xb4, 0xfc, 0x2, 0x0, 0x7375da27ee784fdc, 0x2200}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x100}, 0x200080a5) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x8000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)=r2}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r0, r8}, 0xc) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 2.125426651s ago: executing program 3 (id=9691): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r2}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x80}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e900757c2498e33fe93a0c9001c5c65f7107d0d0000000000000000000037", "ddfb00", "5a3e2c1b40238e79"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace030000f5", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "000000f0", "ffffffff00a4e800"}, 0x38) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=r4], 0x20, 0x2400e044}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100)=0xb08, 0x4) 1.868010426s ago: executing program 8 (id=9699): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd2e}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1ff) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}}) 1.845404009s ago: executing program 8 (id=9700): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) futex(&(0x7f000000cffc)=0x1, 0x6, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000170a010400000000000000414267f7f43900070000053400038008007bb16c0affff0800014000000000080002400000000308feffffff00000008000140000000000800014000000000"], 0x48}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4040810) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000004000000e27f00000100000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000808cc6a0657467e176cc8e594122d39870f2a12ca026c1cba1910d1203291d49c64c34ac9eb02a0501b2d1a56f68b13cc24ba633046a49bd4e570d471a11a5578f88a39523eecf974b2126094e7d536516a7a7efc085b144df774d80128d73cf16a947664c7acc30865a335abbc1c1819edd2294bce44a5558c9a27ba0d862ee9a1e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010003000000000000002600000018000180140002006c6f"], 0x2c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f00000000c0)='.\x00', 0xa4000061) read(r5, &(0x7f0000000140)=""/68, 0x44) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 1.802229873s ago: executing program 0 (id=9701): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), 0x0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet(r7, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r7, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010020, 0x0) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) 1.077210304s ago: executing program 3 (id=9706): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.076377604s ago: executing program 3 (id=9708): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1ab8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 1.036457438s ago: executing program 3 (id=9710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca", 0xe}, {&(0x7f0000000500)="e98314d58ce4b24ee137cea9c243c233bfa2f5fee778bbfc", 0x18}], 0x2) 1.01736912s ago: executing program 8 (id=9711): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES8, @ANYRES16, @ANYRES16], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x4086, &(0x7f000000c440)="$eJzszzFK9GAQBuB3k/3/BBFBWwuxs5LY2dhYeYG9wHZ2FvauepvFA3giQfAENp9kExFx7RRRnqeZN/lmBib8uMd1P6+T/E8ePpm5n99tZ9qn265L2iTTi63VUxlc7SXpjvJvo62ymeTy45bZ8ivvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfoWnt9gOpZRSkvpdV51MkkWS+W5pkhxXSV9zUz+fj037h0nOdsavRT/xqt+4Mlt+4y0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwB9U5eR0jJMcpBliu7a3eWF3Dm0AhKEggN4XEBQjkBD2YDm2YcqmrrJJ7XvmxIm7bNXzyfdeVUdyn2O/z03+S4cBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMYOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBABgAAAECYv3Ue7QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCgAAAA//9DVh8q") kcmp(r2, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'bridge_slave_0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x80, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e23}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x11}]}, 0x2c}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="68010041", @ANYRES16=r6, @ANYBLOB="00022abd7000fbdbdf2508000000040002805001028004000100c20005009f6e646e0c145cf30a059926748ecdc7d6fdc87bb618368bb01d309ea213bc74cbb6beff1ffe8ded624fb5b6ee9f1e608596188c8e7e1a2c5f7930920c069583f1e9a9daf1ad1827aa07195890f305a7eb8a8ddb8d0cba1ada16246f379737e9c8051abfd194c0614ac433a3668f0aade63e395b86b8ee0637b3989d5636ce3acd4a7addac24dc0f8ef794eaefa5f912a7d5f8b8ed74226fd809affce6a06dbb29a98b7501d430948b5a5ebbb03d14df30e1127e881719179ae2c1a5bdcc000081000500f0f9fd11a13dce26aee51382c9189c8d9b4185b570a6c8fbdc63286033b03eda56dbc56e48fb676963335a4f3da7a1a850605d6f0951b859cd91885b14a97c51f51984de2dc67bfaac9c529728c045ef1b1fd6c7395955cafe4794086a7489cf58859a50c3baa7b24f6d6c9b33dee956671773943b3497d29066bf1fe6000000"], 0x168}, 0x1, 0x0, 0x0, 0x8000}, 0x2000085) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000280)={0x14, r8, 0xb29, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x2404c044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c81be3110a36a27aeffe0ad5a8a7385a1913a64fb2db630e8fc8017828cea60f327c3a510b441d94d32584e55f7c2320d89b2ba3d44d832b8e7c5f45442de9ef37d057e6d0c6664e8d74e23f18336d41a3e38c2cda49050cb32ca7040a388c75741ac07d3befc714df35dc92ff70ad041cf17b70a971c142bb89ecfe25290750e989c8666560a61b62fdc4fadef7f30b6269a669ef99be7e7ba7ddddf99949fedc0c331796988c6eedb5c66cbe2870a2affce0b550c3411a2aaf302481ee93398c0fbc0c815cfe1e78bf8fed7f19f2c2dae17a4533aa85f6b787f8072adda379118d76dbba3cebfc4c8aacbb1f79a28ec3a0ec99816e3c8721ddcde1ce73b0704063474", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) sendto$inet6(r4, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 831.959218ms ago: executing program 3 (id=9712): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r0 = gettid() mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x24, 0x2, 0xfd, 0x5ae9}, {0x20, 0x0, 0x4, 0xfffff010}, {0x6, 0x0, 0x7, 0x5}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 786.443233ms ago: executing program 2 (id=9713): bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2040400) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 765.906455ms ago: executing program 2 (id=9715): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r5 = syz_clone(0x10400, &(0x7f0000000400)="8e07b06e7ee6d38b330fab7ec36a056341aae30fac214ca1e0fb385e0255a981918bfc67a62f3458c96b6b59f417e32775b2fd4f446832f2462abafd6a806e882df85049c1d6126bc4bf06c87e9cda0e7a8df723e95b6ccf0a4cca1fe95b273dc75f8cf143ce1b5ee04d266d719c88ea691ce779d004f79b4507914b9348e6ce9aa93a3a4d38e8a4966a1181cc5da4e2298486cd7e0ca04777b0ac497fea8f54a047bb6866e3bfa006a30e65e48f70a02ad0acd262a0dd19fa41d596db55e07c238ba9d2eb5e4ed2a3fc87217787cd37b6d71eba61bb279ef0f1", 0xda, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000740)="9de38055009e55a155a81ab97b463ad01e19566ab502dda166383b91c326f6985a3fe1d98a8bd38128ffaac9773d0036e636c45bf4784b1d5619750a4712785a981fb8c26fb8868b74d7a56c6b941ed96389c39425db695d82cbe3ca81125c0b973905253d1718d646ab6f18affb18dd470722e30a317e6ed3be9b75d73c0b42bca5f7403ae138043e7c82be0555a55011d588d365649152d973073f9251b137ee656f916d8e01c6ffbfa5d0c5824b9bb01b3958de5c173e2bf2aada2f257f65522e13d253bf07cd24c6") prlimit64(r5, 0xe, &(0x7f0000000300)={0x9b, 0xe878}, &(0x7f0000000380)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) syz_usbip_server_init(0x3) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01005ee1fadefcdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 763.622825ms ago: executing program 0 (id=9716): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x6e}, 0x18) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x11, 0x60, &(0x7f0000000800)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 687.848552ms ago: executing program 0 (id=9717): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_cancel(0x0, 0x0, 0x0) 682.061503ms ago: executing program 0 (id=9718): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) mount$9p_fd(0x200000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 644.473307ms ago: executing program 0 (id=9719): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 601.392011ms ago: executing program 0 (id=9721): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) futex(&(0x7f000000cffc)=0x1, 0x6, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000170a010400000000000000414267f7f43900070000053400038008007bb16c0affff0800014000000000080002400000000308feffffff00000008000140000000000800014000000000"], 0x48}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4040810) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000004000000e27f00000100000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000808cc6a0657467e176cc8e594122d39870f2a12ca026c1cba1910d1203291d49c64c34ac9eb02a0501b2d1a56f68b13cc24ba633046a49bd4e570d471a11a5578f88a39523eecf974b2126094e7d536516a7a7efc085b144df774d80128d73cf16a947664c7acc30865a335abbc1c1819edd2294bce44a5558c9a27ba0d862ee9a1e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000010000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010003000000000000002600000018000180140002006c6f"], 0x2c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f00000000c0)='.\x00', 0xa4000061) read(r5, &(0x7f0000000140)=""/68, 0x44) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 592.483431ms ago: executing program 8 (id=9722): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x18) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) (async) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000980)='./file0\x00', 0x2000000, &(0x7f00000002c0)={[{@nocompress}, {@hide}, {@showassoc}, {@mode={'mode', 0x3d, 0xe}}, {@utf8}, {@mode={'mode', 0x3d, 0x4}}, {@check_strict}, {@gid}, {@nocompress}, {@map_normal}, {@uid}, {@showassoc}, {@unhide}, {@check_strict}, {@showassoc}, {@mode={'mode', 0x3d, 0x1}}, {}], [{@smackfsroot={'smackfsroot', 0x3d, '.#:'}}]}, 0x1, 0x943, &(0x7f0000001500)="$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") (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 585.928632ms ago: executing program 1 (id=9723): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd2e}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{}, &(0x7f0000000bc0), &(0x7f0000000c00)=r0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1ff) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}}) 563.588924ms ago: executing program 1 (id=9724): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 487.985652ms ago: executing program 8 (id=9725): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1d8, 0x178, 0x178, 0x1d8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452729a5afa3851200a44a3d28da04828d1768c081f126a6bc527"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x238) 487.363272ms ago: executing program 8 (id=9726): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040), 0xc) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) getpid() r3 = socket$inet6(0xa, 0x3, 0x3a) close_range(r2, r2, 0x2) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0xd}], 0x1, 0x2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5411, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x6000000, 0x40, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) clock_gettime(0x0, &(0x7f0000004580)) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r7, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 383.027062ms ago: executing program 1 (id=9727): socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000000)=""/55, 0x37, 0x0, &(0x7f0000000280)=""/160, 0xa0}}, 0x10) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r0, &(0x7f0000000240)=[{&(0x7f0000000540)="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", 0x121}, {&(0x7f00000003c0)='=', 0x1}], 0x2) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioprio_set$pid(0x2, 0x0, 0x0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r2, 0x0, 0x100000000) 343.211076ms ago: executing program 1 (id=9728): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x23f}, 0x18) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x5}]}}]}, 0x98}}, 0x0) 328.066757ms ago: executing program 1 (id=9729): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1d8, 0x178, 0x178, 0x1d8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452729a5afa3851200a44a3d28da04828d1768c081f126a6bc527"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x238) 316.040189ms ago: executing program 1 (id=9730): capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000200)={0x200000, 0x200000, 0x20000000}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x2000, 0x7, 0x3, 0x9, 0x9, 0x5955ec84, 0xffff}, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r2, &(0x7f0000002780)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', r2, 0x4000, r0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0xeb, 0x5d, &(0x7f0000000380)="fc2379f38291e9c619b1936cd9f316393f96d297a25c8ac703fa0a6a43eca67205beae5c5f9048a674491f832550853026e6eb36cb1774eebe705a83cc6df91144e280d067e88f9524facd592c66d73e6cc60861b3b4ee9b26d7dde49db620f3039ccc21dddfc27f7d1689f27bf97bcef09ec9c617546c512a63080ecaa25eafb2393d19a0273debc14c57b29eb0ec9cda2d9cab2f9957af3f442afe2745bea9372918c8c0f44fed3c9588f915ce20fb76f076be9399296743c593ae4ba504ad73ea024a27e0380acb6a8276fc9fb5a75c2b9ada24e3220bd31fd8c2d88afaec7fab943f9272a2720ea298", &(0x7f0000000280)=""/93, 0x7, 0x0, 0xb4, 0x0, &(0x7f0000000700)="b6731551a7648b01c090b7b3240f598d8ab109be1584a0548841f593c9198d9e3ee5e92b85bf9c7553bd40659faa3f72cb82cebb1b0290ec75c62646dd67c1755c35460bbce4f8caa104f8d50c42f68af59ffeb7659e3a0c1686c94ddba83b855feb2541cadd6b34052b3f332a20340d7b842609e9e7bdd5801a41c4c23930bccdc2c847ed3655765964ff261ec25eaff704c3235a068a79c9c7a6fc1abb4448e93f492ce188a9e02198faaf87000eb53b8de023", 0x0, 0x4, 0x0, 0xeb}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) write$binfmt_script(r3, &(0x7f0000000680)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4, 0x0, 0xffffffffffffff54}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a1180002000202000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000080)="2e00000038000511d25a99698c63940d0124fc602f6e35400c000200001ec00037153e370400018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x11) 151.636485ms ago: executing program 2 (id=9731): socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket(0xa, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(r5, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getroute={0x1c, 0x1a, 0x1, 0x70bd26, 0x25dfdbfc, {0x2, 0x0, 0x80, 0xb4, 0xfc, 0x2, 0x0, 0x7375da27ee784fdc, 0x2200}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x100}, 0x200080a5) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x8000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)=r2}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r0, r8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() 106.233209ms ago: executing program 2 (id=9732): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x29c500a, 0x0, 0x4, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x6, 0xff, 0x5e, 0x54, 0x0, 0x7, 0xc9008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0xfffd, 0xfffffffffffffdf5}, 0x1a, 0x81, 0x800, 0x6, 0x8, 0x4002, 0x101, 0x0, 0x2800000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) dup(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r2}, 0x18) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 75.220052ms ago: executing program 2 (id=9733): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) ioprio_set$pid(0x2, 0x0, 0x0) r1 = open(0x0, 0x145142, 0x0) sendfile(r0, r1, 0x0, 0x100000000) 11.714738ms ago: executing program 2 (id=9734): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), 0x0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet(r7, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r7, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010020, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) 0s ago: executing program 3 (id=9735): futex(&(0x7f000000cffc)=0x1, 0x6, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000170a010400000000000000414267f7f43900070000053400038008007bb16c0affff0800014000000000080002400000000308feffffff0000000800014000000000080001"], 0x48}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4040810) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x2c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0xa4000061) read(0xffffffffffffffff, &(0x7f0000000140)=""/68, 0x44) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) kernel console output (not intermixed with test programs): ridge_slave_0: entered allmulticast mode [ 439.719830][T28965] bridge_slave_0: entered promiscuous mode [ 439.726894][T28965] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.733954][T28965] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.741255][T28965] bridge_slave_1: entered allmulticast mode [ 439.747614][T28965] bridge_slave_1: entered promiscuous mode [ 439.761832][ T178] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.783985][T28965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.794974][T28965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.827779][T28965] team0: Port device team_slave_0 added [ 439.834413][T28965] team0: Port device team_slave_1 added [ 439.857602][T28965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.864679][T28965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.890711][T28965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.902227][T28965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.909191][T28965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.935123][T28965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.012392][T28965] hsr_slave_0: entered promiscuous mode [ 440.018600][T28965] hsr_slave_1: entered promiscuous mode [ 440.024550][T28965] debugfs: 'hsr0' already exists in 'hsr' [ 440.030322][T28965] Cannot create hsr debugfs directory [ 440.036847][ T178] bridge_slave_1: left allmulticast mode [ 440.042502][ T178] bridge_slave_1: left promiscuous mode [ 440.048270][ T178] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.078678][ T178] bridge_slave_0: left allmulticast mode [ 440.084446][ T178] bridge_slave_0: left promiscuous mode [ 440.090163][ T178] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.115468][T28996] 9pnet_fd: Insufficient options for proto=fd [ 440.185516][T28998] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9282'. [ 440.219541][ T178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.229489][ T178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.238865][ T178] bond0 (unregistering): Released all slaves [ 440.266260][T28989] loop9: detected capacity change from 0 to 512 [ 440.282860][T28989] loop9: detected capacity change from 0 to 512 [ 440.284399][ T178] tipc: Left network mode [ 440.289957][T28989] EXT4-fs: Ignoring removed mblk_io_submit option [ 440.297617][T28897] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 440.307178][T28989] EXT4-fs: journaled quota format not specified [ 440.322040][ T178] hsr_slave_0: left promiscuous mode [ 440.328008][ T178] hsr_slave_1: left promiscuous mode [ 440.333812][ T178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.341235][ T178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.348696][ T178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.356102][ T178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.366875][ T178] veth1_macvtap: left promiscuous mode [ 440.372639][ T178] veth0_macvtap: left promiscuous mode [ 440.378212][ T178] veth1_vlan: left promiscuous mode [ 440.383451][ T178] veth0_vlan: left promiscuous mode [ 440.439963][ T178] team0 (unregistering): Port device team_slave_1 removed [ 440.448919][ T178] team0 (unregistering): Port device team_slave_0 removed [ 440.479078][T28897] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 440.494560][T28897] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 440.509810][T28897] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 440.567282][T28897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.580010][T28897] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.589307][T11179] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.596413][T11179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.609224][T11179] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.616297][T11179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.664032][T29019] loop8: detected capacity change from 0 to 128 [ 440.690507][T28463] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 440.694723][T28897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.698402][T28463] FAT-fs (loop8): Filesystem has been set read-only [ 440.759611][T28897] veth0_vlan: entered promiscuous mode [ 440.766770][T28897] veth1_vlan: entered promiscuous mode [ 440.844247][T28965] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 440.856305][T28897] veth0_macvtap: entered promiscuous mode [ 440.875538][T28897] veth1_macvtap: entered promiscuous mode [ 440.897105][T28965] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 440.913834][T28965] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 440.931432][T28965] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 440.957443][T28897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.983762][T28897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.029994][T11171] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.059632][ T178] bridge_slave_1: left allmulticast mode [ 441.065395][ T178] bridge_slave_1: left promiscuous mode [ 441.071032][ T178] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.079004][ T178] bridge_slave_0: left allmulticast mode [ 441.084767][ T178] bridge_slave_0: left promiscuous mode [ 441.090411][ T178] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.160665][ T178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.169906][ T178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.179157][ T178] bond0 (unregistering): Released all slaves [ 441.186469][T11171] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.195244][T11171] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.208710][T29040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.216114][T29040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.223676][T29040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.231100][T29040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.245146][T11171] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.255237][ T178] tipc: Left network mode [ 441.269629][ T178] hsr_slave_0: left promiscuous mode [ 441.275376][ T178] hsr_slave_1: left promiscuous mode [ 441.280947][ T178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.288718][ T178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.316912][ T178] team0 (unregistering): Port device team_slave_1 removed [ 441.326564][ T178] team0 (unregistering): Port device team_slave_0 removed [ 441.373165][T28965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.394107][T29060] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9260'. [ 441.413395][T28965] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.427759][T11171] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.434831][T11171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.456964][T11171] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.464044][T11171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.481265][T28965] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 441.491821][T28965] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 441.513271][T29063] loop1: detected capacity change from 0 to 128 [ 441.532072][T29034] chnl_net:caif_netlink_parms(): no params data found [ 441.576326][T28897] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 441.584225][T28897] FAT-fs (loop1): Filesystem has been set read-only [ 441.603699][T29034] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.610955][T29034] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.618221][T29034] bridge_slave_0: entered allmulticast mode [ 441.624664][T29034] bridge_slave_0: entered promiscuous mode [ 441.631419][T29034] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.638580][T29034] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.645708][T29034] bridge_slave_1: entered allmulticast mode [ 441.652137][T29034] bridge_slave_1: entered promiscuous mode [ 441.661980][T28965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.683304][T29034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.693793][T29034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.732405][T29034] team0: Port device team_slave_0 added [ 441.739042][T29034] team0: Port device team_slave_1 added [ 441.758498][T29034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.765479][T29034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.791543][T29034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.803201][T29034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.810165][T29034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.836087][T29034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.872215][T29034] hsr_slave_0: entered promiscuous mode [ 441.878465][T29034] hsr_slave_1: entered promiscuous mode [ 441.902258][T28965] veth0_vlan: entered promiscuous mode [ 441.909332][T28965] veth1_vlan: entered promiscuous mode [ 441.930187][T28965] veth0_macvtap: entered promiscuous mode [ 441.952534][T28965] veth1_macvtap: entered promiscuous mode [ 441.962935][ T3400] hid_parser_main: 19 callbacks suppressed [ 441.962954][ T3400] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 441.976205][ T3400] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 441.983643][ T3400] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 441.991255][ T3400] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 441.992591][T28965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.998786][ T3400] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 441.998814][ T3400] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 441.998838][ T3400] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 442.010507][T28965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.013620][ T3400] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 442.025179][T11179] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.028169][ T3400] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 442.041580][T11179] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.042713][ T3400] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 442.075859][ T3400] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 442.076387][T11179] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.100803][T11179] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.136287][ T29] kauditd_printk_skb: 316 callbacks suppressed [ 442.136302][ T29] audit: type=1326 audit(1759981982.625:48661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29088 comm="syz.0.9300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb754d7eec9 code=0x7ffc0000 [ 442.166109][ T29] audit: type=1326 audit(1759981982.625:48662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29088 comm="syz.0.9300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb754d7eec9 code=0x7ffc0000 [ 442.194099][ T29] audit: type=1326 audit(1759981982.688:48663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29088 comm="syz.0.9300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb754d7eec9 code=0x7ffc0000 [ 442.217740][ T29] audit: type=1326 audit(1759981982.688:48664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29088 comm="syz.0.9300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb754d7eec9 code=0x7ffc0000 [ 442.220855][T29095] netlink: 'syz.2.9301': attribute type 13 has an invalid length. [ 442.241392][ T29] audit: type=1326 audit(1759981982.688:48665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29088 comm="syz.0.9300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb754d7eec9 code=0x7ffc0000 [ 442.241423][ T29] audit: type=1326 audit(1759981982.688:48666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29088 comm="syz.0.9300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fb754d7eec9 code=0x7ffc0000 [ 442.296504][ T29] audit: type=1326 audit(1759981982.688:48667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29088 comm="syz.0.9300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb754d7eec9 code=0x7ffc0000 [ 442.297354][ T29] audit: type=1326 audit(1759981982.751:48668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29096 comm="syz.0.9303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb754d7eec9 code=0x7ffc0000 [ 442.343816][ T29] audit: type=1326 audit(1759981982.751:48669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29096 comm="syz.0.9303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb754d7eec9 code=0x7ffc0000 [ 442.367403][ T29] audit: type=1326 audit(1759981982.751:48670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29096 comm="syz.0.9303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fb754d7eec9 code=0x7ffc0000 [ 442.409204][T29095] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.416431][T29095] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.484595][T29095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.494734][T29095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.589876][T11226] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.609125][T11226] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.618623][T11226] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.629758][T11226] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.640201][T29104] FAULT_INJECTION: forcing a failure. [ 442.640201][T29104] name failslab, interval 1, probability 0, space 0, times 0 [ 442.652951][T29104] CPU: 0 UID: 0 PID: 29104 Comm: syz.2.9304 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 442.652988][T29104] Tainted: [W]=WARN [ 442.653047][T29104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 442.653061][T29104] Call Trace: [ 442.653067][T29104] [ 442.653073][T29104] __dump_stack+0x1d/0x30 [ 442.653096][T29104] dump_stack_lvl+0xe8/0x140 [ 442.653117][T29104] dump_stack+0x15/0x1b [ 442.653136][T29104] should_fail_ex+0x265/0x280 [ 442.653223][T29104] ? audit_log_d_path+0x8d/0x150 [ 442.653241][T29104] should_failslab+0x8c/0xb0 [ 442.653269][T29104] __kmalloc_cache_noprof+0x4c/0x4a0 [ 442.653349][T29104] audit_log_d_path+0x8d/0x150 [ 442.653373][T29104] audit_log_d_path_exe+0x42/0x70 [ 442.653406][T29104] audit_log_task+0x1e9/0x250 [ 442.653436][T29104] ? kstrtouint+0x76/0xc0 [ 442.653469][T29104] audit_seccomp+0x61/0x100 [ 442.653528][T29104] ? __seccomp_filter+0x82d/0x1250 [ 442.653557][T29104] __seccomp_filter+0x83e/0x1250 [ 442.653585][T29104] ? vfs_write+0x7e8/0x960 [ 442.653614][T29104] __secure_computing+0x82/0x150 [ 442.653684][T29104] syscall_trace_enter+0xcf/0x1e0 [ 442.653721][T29104] do_syscall_64+0xac/0x200 [ 442.653770][T29104] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 442.653865][T29104] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 442.653891][T29104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.653915][T29104] RIP: 0033:0x7fd761b0d710 [ 442.653931][T29104] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 442.653956][T29104] RSP: 002b:00007fd760576f70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 442.653978][T29104] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd761b0d710 [ 442.654044][T29104] RDX: 0000000000000000 RSI: 00007fd761b9207e RDI: 00000000ffffff9c [ 442.654059][T29104] RBP: 00007fd761b9207e R08: 0000000000000000 R09: 0000000000000000 [ 442.654075][T29104] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 442.654170][T29104] R13: 00007fd761d66038 R14: 00007fd761d65fa0 R15: 00007fffb1e11788 [ 442.654192][T29104] [ 442.918349][T29114] tipc: Enabling of bearer rejected, failed to enable media [ 442.982881][T29034] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 442.992190][T29034] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 443.001424][T29034] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 443.011072][T29034] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 443.045876][T29034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.057493][T29034] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.066633][T11226] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.073723][T11226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.090633][T11226] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.097704][T11226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.171253][T29034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.277937][T29034] veth0_vlan: entered promiscuous mode [ 443.289452][T29034] veth1_vlan: entered promiscuous mode [ 443.303749][T29034] veth0_macvtap: entered promiscuous mode [ 443.310798][T29034] veth1_macvtap: entered promiscuous mode [ 443.321105][T29034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.331393][T29034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.342312][T11171] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.351200][T11171] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.362029][T11171] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.372811][T11161] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.404399][T29152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9289'. [ 443.413391][T29152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9289'. [ 443.422890][T29152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9289'. [ 443.437480][T29152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9289'. [ 443.446406][T29152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9289'. [ 443.456535][T29152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9289'. [ 443.477167][T29152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9289'. [ 443.486092][T29152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9289'. [ 443.495205][T29152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9289'. [ 443.552944][T29163] netlink: 'syz.5.9318': attribute type 13 has an invalid length. [ 443.563624][T11171] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.722485][T29164] chnl_net:caif_netlink_parms(): no params data found [ 443.756590][T29164] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.763729][T29164] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.770954][T29164] bridge_slave_0: entered allmulticast mode [ 443.777220][T29164] bridge_slave_0: entered promiscuous mode [ 443.784187][T29164] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.791314][T29164] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.798667][T29164] bridge_slave_1: entered allmulticast mode [ 443.805044][T29164] bridge_slave_1: entered promiscuous mode [ 443.821151][T29164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.831552][T29164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.850743][T29164] team0: Port device team_slave_0 added [ 443.857471][T29164] team0: Port device team_slave_1 added [ 443.871756][T29164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.878752][T29164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.904657][T29164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.915989][T29164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.923018][T29164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.949050][T29164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.977773][T29164] hsr_slave_0: entered promiscuous mode [ 443.983936][T29164] hsr_slave_1: entered promiscuous mode [ 443.989949][T29164] debugfs: 'hsr0' already exists in 'hsr' [ 443.995749][T29164] Cannot create hsr debugfs directory [ 444.020868][T29188] 9pnet_fd: Insufficient options for proto=fd [ 444.038916][T29191] loop9: detected capacity change from 0 to 1024 [ 444.047917][T29191] EXT4-fs: Ignoring removed orlov option [ 444.054017][T29191] EXT4-fs: Invalid want_extra_isize 32768 [ 444.076188][T29195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9326'. [ 444.394460][T29164] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 444.403293][T29164] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 444.412343][T29164] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 444.417152][T29227] loop9: detected capacity change from 0 to 1024 [ 444.425867][T29227] EXT4-fs: Ignoring removed orlov option [ 444.427892][T29164] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 444.437179][T29227] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.484894][T29164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.508898][T29164] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.522729][ T1855] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.529824][ T1855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.544237][ T1855] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.551321][ T1855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.665143][ T3421] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 444.729424][T29164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.744654][T29251] lo speed is unknown, defaulting to 1000 [ 444.777952][T29251] lo speed is unknown, defaulting to 1000 [ 444.816023][T29251] lo speed is unknown, defaulting to 1000 [ 444.829252][T29251] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 444.866334][T29227] pimreg: entered allmulticast mode [ 444.871607][T29251] lo speed is unknown, defaulting to 1000 [ 444.887690][T29251] lo speed is unknown, defaulting to 1000 [ 444.900568][T29251] lo speed is unknown, defaulting to 1000 [ 444.920944][T29251] lo speed is unknown, defaulting to 1000 [ 444.927452][T29251] lo speed is unknown, defaulting to 1000 [ 444.934958][T29251] lo speed is unknown, defaulting to 1000 [ 444.986269][T29226] pimreg: left allmulticast mode [ 445.015006][T29164] veth0_vlan: entered promiscuous mode [ 445.023377][T29164] veth1_vlan: entered promiscuous mode [ 445.042489][T29164] veth0_macvtap: entered promiscuous mode [ 445.054378][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v8.00 Device [syz0] on syz0 [ 445.076229][T29164] veth1_macvtap: entered promiscuous mode [ 445.096324][T29164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.108595][T29164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.123127][T28835] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.132670][ T178] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.144249][ T178] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.155778][ T178] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.165038][ T178] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.343178][T11171] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.400562][T11171] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.448337][T11171] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.500035][T11171] bridge_slave_1: left allmulticast mode [ 445.505787][T11171] bridge_slave_1: left promiscuous mode [ 445.511445][T11171] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.519654][T11171] bridge_slave_0: left allmulticast mode [ 445.525549][T11171] bridge_slave_0: left promiscuous mode [ 445.531248][T11171] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.627666][T11171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.638676][T11171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.650983][T11171] bond0 (unregistering): Released all slaves [ 445.663834][T29311] netlink: 'syz.5.9356': attribute type 12 has an invalid length. [ 445.708809][T11171] hsr_slave_0: left promiscuous mode [ 445.717178][T11171] hsr_slave_1: left promiscuous mode [ 445.727127][T11171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.734640][T11171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.742379][T11171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.749897][T11171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.760578][T11171] veth1_macvtap: left promiscuous mode [ 445.766049][T11171] veth0_macvtap: left promiscuous mode [ 445.771608][T11171] veth1_vlan: left promiscuous mode [ 445.776868][T11171] veth0_vlan: left promiscuous mode [ 445.828688][T11171] team0 (unregistering): Port device team_slave_1 removed [ 445.840658][T11171] team0 (unregistering): Port device team_slave_0 removed [ 446.009283][T29317] loop2: detected capacity change from 0 to 512 [ 446.324080][T29335] loop5: detected capacity change from 0 to 512 [ 446.342266][T29335] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 446.350934][T29335] EXT4-fs (loop5): orphan cleanup on readonly fs [ 446.365429][T29335] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #16: comm syz.5.9368: corrupted inode contents [ 446.378059][T29335] EXT4-fs (loop5): Remounting filesystem read-only [ 446.385268][T29335] EXT4-fs (loop5): 1 truncate cleaned up [ 446.391252][ T178] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 446.401830][ T178] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 446.412421][ T178] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 446.424756][T29335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 446.440129][T29335] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.714767][T29346] loop2: detected capacity change from 0 to 128 [ 446.733117][T28965] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 446.740985][T28965] FAT-fs (loop2): Filesystem has been set read-only [ 446.857936][T29354] loop4: detected capacity change from 0 to 128 [ 446.902748][T29164] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 446.910680][T29164] FAT-fs (loop4): Filesystem has been set read-only [ 446.954480][T29351] lo speed is unknown, defaulting to 1000 [ 447.001021][T29351] chnl_net:caif_netlink_parms(): no params data found [ 447.010243][ T29] kauditd_printk_skb: 463 callbacks suppressed [ 447.010270][ T29] audit: type=1326 audit(1759981987.749:49124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29365 comm="syz.9.9380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e03cbeec9 code=0x7ffc0000 [ 447.040092][ T29] audit: type=1326 audit(1759981987.749:49125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29365 comm="syz.9.9380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e03cbeec9 code=0x7ffc0000 [ 447.063787][ T29] audit: type=1326 audit(1759981987.749:49126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29365 comm="syz.9.9380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e03cbeec9 code=0x7ffc0000 [ 447.087398][ T29] audit: type=1326 audit(1759981987.760:49127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29365 comm="syz.9.9380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e03cbeec9 code=0x7ffc0000 [ 447.111010][ T29] audit: type=1326 audit(1759981987.760:49128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29365 comm="syz.9.9380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e03cbeec9 code=0x7ffc0000 [ 447.134663][ T29] audit: type=1326 audit(1759981987.760:49129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29365 comm="syz.9.9380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e03cbeec9 code=0x7ffc0000 [ 447.158244][ T29] audit: type=1326 audit(1759981987.760:49130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29365 comm="syz.9.9380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f4e03cbeec9 code=0x7ffc0000 [ 447.181881][ T29] audit: type=1326 audit(1759981987.760:49131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29365 comm="syz.9.9380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e03cbeec9 code=0x7ffc0000 [ 447.205485][ T29] audit: type=1326 audit(1759981987.760:49132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29365 comm="syz.9.9380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f4e03cbeec9 code=0x7ffc0000 [ 447.229110][ T29] audit: type=1326 audit(1759981987.760:49133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29365 comm="syz.9.9380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e03cbeec9 code=0x7ffc0000 [ 447.276314][T29351] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.283510][T29351] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.290751][T29351] bridge_slave_0: entered allmulticast mode [ 447.297420][T29351] bridge_slave_0: entered promiscuous mode [ 447.304167][T29351] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.311207][T29351] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.318385][T29351] bridge_slave_1: entered allmulticast mode [ 447.324720][T29351] bridge_slave_1: entered promiscuous mode [ 447.344420][T29351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.370120][T29351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.379357][T29378] tipc: Enabled bearer , priority 0 [ 447.393108][T29377] tipc: Resetting bearer [ 447.410954][T29377] tipc: Disabling bearer [ 447.428729][T29351] team0: Port device team_slave_0 added [ 447.438264][T29351] team0: Port device team_slave_1 added [ 447.448479][ T178] bridge_slave_1: left allmulticast mode [ 447.454427][ T178] bridge_slave_1: left promiscuous mode [ 447.460083][ T178] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.477457][ T178] bridge_slave_0: left allmulticast mode [ 447.483146][ T178] bridge_slave_0: left promiscuous mode [ 447.488853][ T178] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.540992][ T178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.551648][ T178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.560802][ T178] bond0 (unregistering): Released all slaves [ 447.574309][T29351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.581344][T29351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.607289][T29351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.618559][T29351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.625534][T29351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.651567][T29351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.679449][ T178] hsr_slave_0: left promiscuous mode [ 447.685265][ T178] hsr_slave_1: left promiscuous mode [ 447.690886][ T178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.698321][ T178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.727963][ T178] team0 (unregistering): Port device team_slave_1 removed [ 447.737566][ T178] team0 (unregistering): Port device team_slave_0 removed [ 447.777680][T29351] hsr_slave_0: entered promiscuous mode [ 447.783720][T29351] hsr_slave_1: entered promiscuous mode [ 447.790029][T29351] debugfs: 'hsr0' already exists in 'hsr' [ 447.795786][T29351] Cannot create hsr debugfs directory [ 447.839447][T29386] tipc: Started in network mode [ 447.844704][T29386] tipc: Node identity 32d145e564eb, cluster identity 4711 [ 447.851908][T29386] tipc: Enabled bearer , priority 0 [ 447.861330][T29385] tipc: Resetting bearer [ 447.879817][T29385] tipc: Disabling bearer [ 447.998738][T29389] tipc: Enabled bearer , priority 0 [ 448.005858][T29388] tipc: Resetting bearer [ 448.024255][T29388] tipc: Disabling bearer [ 448.195240][T29351] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 448.203875][T29351] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 448.212572][T29351] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 448.221775][T29351] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 448.236162][T29351] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.243281][T29351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.250611][T29351] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.257672][T29351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.274338][T11226] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.282393][T11226] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.327851][T29351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.346405][T29351] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.357827][T11226] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.357797][T29418] loop5: detected capacity change from 0 to 128 [ 448.364893][T11226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.374363][T29351] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 448.388919][T29351] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 448.419085][T11226] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.426187][T11226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.461713][T11161] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.506154][T11161] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.523014][T29351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.560947][T11161] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.603143][T11161] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.653782][T29427] chnl_net:caif_netlink_parms(): no params data found [ 448.712139][T29427] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.719195][T29427] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.726579][T29427] bridge_slave_0: entered allmulticast mode [ 448.733675][T29427] bridge_slave_0: entered promiscuous mode [ 448.747793][T29351] veth0_vlan: entered promiscuous mode [ 448.753680][T29427] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.760762][T29427] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.767920][T29427] bridge_slave_1: entered allmulticast mode [ 448.774641][T29427] bridge_slave_1: entered promiscuous mode [ 448.792356][T11161] bridge_slave_1: left allmulticast mode [ 448.798118][T11161] bridge_slave_1: left promiscuous mode [ 448.803820][T11161] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.814019][T11161] bridge_slave_0: left allmulticast mode [ 448.819676][T11161] bridge_slave_0: left promiscuous mode [ 448.825432][T11161] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.904111][T11161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.914107][T11161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.923550][T11161] bond0 (unregistering): Released all slaves [ 448.934126][T29427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.945933][T29427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.960927][T29351] veth1_vlan: entered promiscuous mode [ 448.978817][T29427] team0: Port device team_slave_0 added [ 448.985824][T29427] team0: Port device team_slave_1 added [ 448.997647][T11161] hsr_slave_0: left promiscuous mode [ 449.003581][T11161] hsr_slave_1: left promiscuous mode [ 449.006018][T29461] loop9: detected capacity change from 0 to 512 [ 449.009445][T11161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.022596][T11161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.027471][T29461] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.042558][T11161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.042613][T29461] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.049983][T11161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.070919][T11161] veth1_macvtap: left promiscuous mode [ 449.076644][T11161] veth0_macvtap: left promiscuous mode [ 449.082346][T11161] veth1_vlan: left promiscuous mode [ 449.087719][T11161] veth0_vlan: left promiscuous mode [ 449.139165][T29465] __nla_validate_parse: 28 callbacks suppressed [ 449.139184][T29465] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9402'. [ 449.158646][T11161] team0 (unregistering): Port device team_slave_1 removed [ 449.176021][T11161] team0 (unregistering): Port device team_slave_0 removed [ 449.246937][T29427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.253902][T29427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.279965][T29427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.303104][T28835] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.308902][T29351] veth0_macvtap: entered promiscuous mode [ 449.320439][T29427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.327484][T29427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.330849][T29472] netlink: 'syz.5.9405': attribute type 13 has an invalid length. [ 449.353544][T29427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.413277][T29478] loop9: detected capacity change from 0 to 128 [ 449.416756][T29472] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.426814][T29472] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.437510][T28835] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 449.445407][T28835] FAT-fs (loop9): Filesystem has been set read-only [ 449.476128][T29472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.485567][T29472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.527240][T29351] veth1_macvtap: entered promiscuous mode [ 449.556474][T11179] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.565601][T11179] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.577709][T29427] hsr_slave_0: entered promiscuous mode [ 449.583765][T29427] hsr_slave_1: entered promiscuous mode [ 449.589792][T29427] debugfs: 'hsr0' already exists in 'hsr' [ 449.595494][T29427] Cannot create hsr debugfs directory [ 449.602572][T11179] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.618486][T29351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.625940][T11179] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.639347][T29351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.657814][ T178] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.666826][ T178] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.675895][ T178] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.684628][ T178] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.768024][T29491] 9pnet_fd: Insufficient options for proto=fd [ 449.791922][T11171] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.865045][T11171] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.907916][T29488] chnl_net:caif_netlink_parms(): no params data found [ 449.934091][T11171] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.969687][T29488] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.976775][T29488] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.990746][T29488] bridge_slave_0: entered allmulticast mode [ 449.997611][T29488] bridge_slave_0: entered promiscuous mode [ 450.005574][T29488] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.012697][T29488] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.036407][T29488] bridge_slave_1: entered allmulticast mode [ 450.052512][T29488] bridge_slave_1: entered promiscuous mode [ 450.061940][T11171] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.072821][T29501] loop7: detected capacity change from 0 to 512 [ 450.079356][T29501] msdos: Bad value for 'uid' [ 450.083960][T29501] msdos: Bad value for 'uid' [ 450.102861][T29488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.114715][T29488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.147723][T29488] team0: Port device team_slave_0 added [ 450.153708][T29427] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 450.162367][T29427] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 450.171363][T29488] team0: Port device team_slave_1 added [ 450.185889][T29427] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 450.200268][T11171] bridge_slave_1: left allmulticast mode [ 450.205961][T11171] bridge_slave_1: left promiscuous mode [ 450.211634][T11171] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.219621][T11171] bridge_slave_0: left allmulticast mode [ 450.225312][T11171] bridge_slave_0: left promiscuous mode [ 450.231096][T11171] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.313306][T11171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.323681][T11171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.333409][T11171] bond0 (unregistering): Released all slaves [ 450.341651][T29427] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 450.357841][T29488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.364871][T29488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.390893][T29488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.412966][T29488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.420075][T29488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.446233][T29488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.457552][T11171] tipc: Left network mode [ 450.458441][T29515] netlink: 96 bytes leftover after parsing attributes in process `syz.5.9414'. [ 450.476144][T29515] blktrace: Concurrent blktraces are not allowed on loop11 [ 450.485549][T11171] hsr_slave_0: left promiscuous mode [ 450.491304][T11171] hsr_slave_1: left promiscuous mode [ 450.499430][T11171] veth1_macvtap: left promiscuous mode [ 450.505043][T11171] veth0_macvtap: left promiscuous mode [ 450.510590][T11171] veth1_vlan: left promiscuous mode [ 450.516106][T11171] veth0_vlan: left promiscuous mode [ 450.581348][T11171] team0 (unregistering): Port device team_slave_1 removed [ 450.592428][T11171] team0 (unregistering): Port device team_slave_0 removed [ 450.637752][T29488] hsr_slave_0: entered promiscuous mode [ 450.643785][T29488] hsr_slave_1: entered promiscuous mode [ 450.661232][T29523] loop7: detected capacity change from 0 to 128 [ 450.665184][T29488] debugfs: 'hsr0' already exists in 'hsr' [ 450.673200][T29488] Cannot create hsr debugfs directory [ 450.719317][T29351] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 450.725977][T29427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.727234][T29351] FAT-fs (loop7): Filesystem has been set read-only [ 450.744240][T29427] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.773949][T11161] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.781027][T11161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.797462][T11226] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.804538][T11226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.843673][T29427] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 450.864586][T27635] hid_parser_main: 49 callbacks suppressed [ 450.864606][T27635] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 450.877919][T27635] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 450.885482][T27635] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 450.893433][T27635] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 450.898672][T29427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.900818][T27635] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 450.915071][T27635] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 450.922549][T27635] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 450.929939][T27635] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 450.937427][T27635] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 450.944836][T27635] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 450.953089][T27635] hid-generic 0000:0000:0000.0005: hidraw0: HID v8.00 Device [syz0] on syz0 [ 450.991150][T29427] veth0_vlan: entered promiscuous mode [ 450.999238][T29427] veth1_vlan: entered promiscuous mode [ 451.020702][T29427] veth0_macvtap: entered promiscuous mode [ 451.028223][T29427] veth1_macvtap: entered promiscuous mode [ 451.038806][T29427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.049785][T29427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.060530][T11161] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.073275][T11161] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.094063][T11161] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.103113][T11161] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.155023][T29488] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 451.170803][T29488] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 451.179525][T29488] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 451.196394][T29488] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 451.235155][T29488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.249573][T29556] netlink: 'syz.3.9397': attribute type 12 has an invalid length. [ 451.260741][T29488] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.274643][T11226] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.281829][T11226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.301197][T11226] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.308330][T11226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.325328][T29488] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 451.335725][T29488] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 451.399526][T29488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.407571][T29572] xt_TPROXY: Can be used only with -p tcp or -p udp [ 451.521723][T29488] veth0_vlan: entered promiscuous mode [ 451.529403][T29488] veth1_vlan: entered promiscuous mode [ 451.548296][T29488] veth0_macvtap: entered promiscuous mode [ 451.561325][T29488] veth1_macvtap: entered promiscuous mode [ 451.571209][T29488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.581457][T29488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.591863][T11161] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.607147][T11161] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.621883][T11171] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.643205][T11171] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.955170][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 451.955183][ T29] audit: type=1326 audit(1759981992.936:49233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29594 comm="syz.3.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874556eec9 code=0x7ffc0000 [ 451.985534][ T29] audit: type=1326 audit(1759981992.936:49234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29594 comm="syz.3.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874556eec9 code=0x7ffc0000 [ 451.988798][T29597] netlink: 'syz.3.9427': attribute type 1 has an invalid length. [ 452.009531][ T29] audit: type=1326 audit(1759981992.946:49235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29594 comm="syz.3.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f874556eec9 code=0x7ffc0000 [ 452.041121][ T29] audit: type=1326 audit(1759981992.946:49236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29594 comm="syz.3.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874556eec9 code=0x7ffc0000 [ 452.064842][ T29] audit: type=1326 audit(1759981992.946:49237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29594 comm="syz.3.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f874556eec9 code=0x7ffc0000 [ 452.088560][ T29] audit: type=1326 audit(1759981992.946:49238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29594 comm="syz.3.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874556eec9 code=0x7ffc0000 [ 452.113101][ T29] audit: type=1326 audit(1759981993.083:49239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29596 comm="syz.3.9427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874556eec9 code=0x7ffc0000 [ 452.136713][ T29] audit: type=1326 audit(1759981993.083:49240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29596 comm="syz.3.9427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874556eec9 code=0x7ffc0000 [ 452.160375][ T29] audit: type=1326 audit(1759981993.083:49241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29596 comm="syz.3.9427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f874556eec9 code=0x7ffc0000 [ 452.184149][ T29] audit: type=1326 audit(1759981993.093:49242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29596 comm="syz.3.9427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874556eec9 code=0x7ffc0000 [ 452.210076][T29597] 8021q: adding VLAN 0 to HW filter on device bond1 [ 452.222569][T11171] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.370147][T29605] loop5: detected capacity change from 0 to 512 [ 452.404398][T29625] loop3: detected capacity change from 0 to 512 [ 452.417329][T29625] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.9436: missing EA_INODE flag [ 452.426524][T29602] chnl_net:caif_netlink_parms(): no params data found [ 452.434015][T29625] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.9436: error while reading EA inode 12 err=-117 [ 452.449459][T29625] EXT4-fs (loop3): 1 orphan inode deleted [ 452.457833][T29625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.496530][T29602] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.503669][T29602] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.517592][T29602] bridge_slave_0: entered allmulticast mode [ 452.531226][T29602] bridge_slave_0: entered promiscuous mode [ 452.538144][T29602] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.545264][T29602] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.559385][T29602] bridge_slave_1: entered allmulticast mode [ 452.565891][T29602] bridge_slave_1: entered promiscuous mode [ 452.571180][T29645] netlink: 'syz.6.9441': attribute type 1 has an invalid length. [ 452.581844][T29640] netlink: 'syz.0.9437': attribute type 12 has an invalid length. [ 452.594701][T29645] 8021q: adding VLAN 0 to HW filter on device bond1 [ 452.613576][T11171] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.635910][T29602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.650945][T29602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.662717][T11171] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.684166][T29602] team0: Port device team_slave_0 added [ 452.691044][T29602] team0: Port device team_slave_1 added [ 452.708561][T29602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.715643][T29602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.741917][T29602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.754001][T29602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.761013][T29602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.786932][T29602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.800652][T11171] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.832531][T29602] hsr_slave_0: entered promiscuous mode [ 452.838799][T29602] hsr_slave_1: entered promiscuous mode [ 452.844550][T29602] debugfs: 'hsr0' already exists in 'hsr' [ 452.850284][T29602] Cannot create hsr debugfs directory [ 452.864828][T29654] loop6: detected capacity change from 0 to 128 [ 452.912890][T11171] bridge_slave_1: left allmulticast mode [ 452.918593][T11171] bridge_slave_1: left promiscuous mode [ 452.924291][T11171] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.932205][T11171] bridge_slave_0: left allmulticast mode [ 452.937899][T11171] bridge_slave_0: left promiscuous mode [ 452.943545][T11171] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.037052][T11171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.046931][T11171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.056418][T11171] bond0 (unregistering): Released all slaves [ 453.110984][T11171] hsr_slave_0: left promiscuous mode [ 453.116712][T11171] hsr_slave_1: left promiscuous mode [ 453.122685][T11171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.130051][T11171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.138109][T11171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.145528][T11171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.155496][T11171] veth1_macvtap: left promiscuous mode [ 453.161111][T11171] veth0_macvtap: left promiscuous mode [ 453.166704][T11171] veth1_vlan: left promiscuous mode [ 453.171973][T11171] veth0_vlan: left promiscuous mode [ 453.192975][T29427] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.259764][T11171] team0 (unregistering): Port device team_slave_1 removed [ 453.270599][T11171] team0 (unregistering): Port device team_slave_0 removed [ 453.356713][T29669] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9449'. [ 453.369343][T29669] blktrace: Concurrent blktraces are not allowed on loop7 [ 453.487949][T29673] loop6: detected capacity change from 0 to 512 [ 453.504034][T29673] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.516621][T29673] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.545056][T29602] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 453.554027][T29602] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 453.562874][T29602] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 453.571529][T29602] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 453.614226][T29488] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.621743][T29602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.637631][T29602] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.647566][T11226] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.654649][T11226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.667770][T11226] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.674863][T11226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.744139][T29602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.847129][T29707] serio: Serial port ptm0 [ 453.850622][T29602] veth0_vlan: entered promiscuous mode [ 453.859237][T29602] veth1_vlan: entered promiscuous mode [ 453.871822][T29689] loop6: detected capacity change from 0 to 512 [ 453.873744][T29602] veth0_macvtap: entered promiscuous mode [ 453.885216][T29602] veth1_macvtap: entered promiscuous mode [ 453.895454][T29602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.906594][T29602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.916769][ T1855] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.925796][ T1855] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.934927][ T1855] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.944911][ T1855] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.977433][T29711] netlink: 'syz.8.9429': attribute type 13 has an invalid length. [ 454.007347][T29711] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.014486][T29711] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.049028][T29711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.058579][T29711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.097060][T11161] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.111632][T11161] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.131547][T11161] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.140973][T11161] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.144244][T29716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29716 comm=syz.8.9456 [ 454.267942][T29727] netlink: 'syz.0.9457': attribute type 12 has an invalid length. [ 454.553546][T29730] loop6: detected capacity change from 0 to 1024 [ 454.560159][T29730] EXT4-fs: inline encryption not supported [ 454.568523][T29730] EXT4-fs (loop6): orphan cleanup on readonly fs [ 454.575869][T29730] EXT4-fs (loop6): 1 truncate cleaned up [ 454.581938][T29730] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 454.603457][T29488] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.708538][T29739] loop5: detected capacity change from 0 to 1024 [ 455.005337][T29744] netlink: 'syz.8.9466': attribute type 13 has an invalid length. [ 455.063203][T29752] lo speed is unknown, defaulting to 1000 [ 455.069588][T29752] lo speed is unknown, defaulting to 1000 [ 455.078120][T29752] lo speed is unknown, defaulting to 1000 [ 455.088257][T29752] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 455.107783][T29752] lo speed is unknown, defaulting to 1000 [ 455.114525][T29752] lo speed is unknown, defaulting to 1000 [ 455.122803][T29752] lo speed is unknown, defaulting to 1000 [ 455.129725][T29752] lo speed is unknown, defaulting to 1000 [ 455.136095][T29752] lo speed is unknown, defaulting to 1000 [ 455.313584][T29756] loop8: detected capacity change from 0 to 512 [ 455.574139][T29771] loop6: detected capacity change from 0 to 512 [ 455.581161][T29771] EXT4-fs (loop6): Filesystem with casefold feature cannot be mounted without CONFIG_UNICODE [ 455.685580][T29769] loop6: detected capacity change from 0 to 512 [ 455.703639][T29769] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.716345][T29769] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.845635][T29778] netlink: 'syz.0.9476': attribute type 12 has an invalid length. [ 455.969526][T29780] netlink: 'syz.8.9477': attribute type 13 has an invalid length. [ 455.995981][T29782] 9pnet_fd: Insufficient options for proto=fd [ 456.024487][T29788] 9pnet_fd: Insufficient options for proto=fd [ 456.152897][T29799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.161674][T29799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.265229][T29488] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.283124][T29801] FAULT_INJECTION: forcing a failure. [ 456.283124][T29801] name failslab, interval 1, probability 0, space 0, times 0 [ 456.295947][T29801] CPU: 1 UID: 0 PID: 29801 Comm: syz.6.9486 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 456.295968][T29801] Tainted: [W]=WARN [ 456.296013][T29801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 456.296020][T29801] Call Trace: [ 456.296024][T29801] [ 456.296028][T29801] __dump_stack+0x1d/0x30 [ 456.296049][T29801] dump_stack_lvl+0xe8/0x140 [ 456.296081][T29801] dump_stack+0x15/0x1b [ 456.296109][T29801] should_fail_ex+0x265/0x280 [ 456.296128][T29801] should_failslab+0x8c/0xb0 [ 456.296208][T29801] __kvmalloc_node_noprof+0x12e/0x670 [ 456.296304][T29801] ? xt_alloc_table_info+0x40/0x80 [ 456.296399][T29801] xt_alloc_table_info+0x40/0x80 [ 456.296414][T29801] do_ip6t_set_ctl+0x5a5/0x840 [ 456.296487][T29801] ? kstrtoull+0x111/0x140 [ 456.296513][T29801] ? __rcu_read_unlock+0x4f/0x70 [ 456.296545][T29801] nf_setsockopt+0x196/0x1b0 [ 456.296573][T29801] ipv6_setsockopt+0x11a/0x130 [ 456.296627][T29801] tcp_setsockopt+0x98/0xb0 [ 456.296644][T29801] sock_common_setsockopt+0x66/0x80 [ 456.296657][T29801] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 456.296669][T29801] __sys_setsockopt+0x181/0x200 [ 456.296773][T29801] __x64_sys_setsockopt+0x64/0x80 [ 456.296846][T29801] x64_sys_call+0x20ec/0x3000 [ 456.296859][T29801] do_syscall_64+0xd2/0x200 [ 456.296906][T29801] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 456.296922][T29801] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 456.296983][T29801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.296996][T29801] RIP: 0033:0x7fafc408eec9 [ 456.297006][T29801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.297047][T29801] RSP: 002b:00007fafc2af7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 456.297087][T29801] RAX: ffffffffffffffda RBX: 00007fafc42e5fa0 RCX: 00007fafc408eec9 [ 456.297095][T29801] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 456.297103][T29801] RBP: 00007fafc2af7090 R08: 00000000000004b8 R09: 0000000000000000 [ 456.297110][T29801] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 456.297118][T29801] R13: 00007fafc42e6038 R14: 00007fafc42e5fa0 R15: 00007ffc1b9c7f38 [ 456.297203][T29801] [ 456.746045][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 456.746058][ T29] audit: type=1326 audit(1759981997.965:49524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29805 comm="syz.0.9488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb754d7eec9 code=0x7ffc0000 [ 456.776104][ T29] audit: type=1326 audit(1759981997.965:49525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29805 comm="syz.0.9488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb754d7eec9 code=0x7ffc0000 [ 456.799771][ T29] audit: type=1326 audit(1759981997.965:49526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29805 comm="syz.0.9488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb754d7eec9 code=0x7ffc0000 [ 456.826511][ T29] audit: type=1326 audit(1759981997.965:49527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29805 comm="syz.0.9488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb754d7eec9 code=0x7ffc0000 [ 456.850274][ T29] audit: type=1326 audit(1759981997.965:49528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29805 comm="syz.0.9488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb754d7eec9 code=0x7ffc0000 [ 456.874045][ T29] audit: type=1326 audit(1759981997.965:49529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29805 comm="syz.0.9488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb754d7eec9 code=0x7ffc0000 [ 456.897826][ T29] audit: type=1326 audit(1759981998.049:49530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29805 comm="syz.0.9488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb754d7eec9 code=0x7ffc0000 [ 456.921426][ T29] audit: type=1326 audit(1759981998.049:49531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29805 comm="syz.0.9488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb754d7eec9 code=0x7ffc0000 [ 456.945029][ T29] audit: type=1326 audit(1759981998.049:49532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29805 comm="syz.0.9488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb754d7eec9 code=0x7ffc0000 [ 456.968855][ T29] audit: type=1326 audit(1759981998.049:49533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29805 comm="syz.0.9488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fb754d7eec9 code=0x7ffc0000 [ 457.008008][T29816] 9pnet_fd: Insufficient options for proto=fd [ 457.061037][T29827] pimreg: entered allmulticast mode [ 457.067314][T29826] pimreg: left allmulticast mode [ 457.083040][T29829] loop7: detected capacity change from 128 to 0 [ 457.126789][T29829] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9498'. [ 457.154746][T29839] loop5: detected capacity change from 0 to 128 [ 457.174158][T29034] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 457.182038][T29034] FAT-fs (loop5): Filesystem has been set read-only [ 457.199834][T29841] netlink: 'syz.3.9499': attribute type 12 has an invalid length. [ 457.348783][T29846] lo speed is unknown, defaulting to 1000 [ 457.398104][T29846] chnl_net:caif_netlink_parms(): no params data found [ 457.441537][T29846] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.448728][T29846] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.456222][T29846] bridge_slave_0: entered allmulticast mode [ 457.462954][T29846] bridge_slave_0: entered promiscuous mode [ 457.471801][T29846] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.479011][T29846] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.486249][T29846] bridge_slave_1: entered allmulticast mode [ 457.492666][T29846] bridge_slave_1: entered promiscuous mode [ 457.492725][T29864] program syz.0.9508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 457.515304][T29846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.525968][T29846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.555293][T29846] team0: Port device team_slave_0 added [ 457.561935][T29846] team0: Port device team_slave_1 added [ 457.586344][T29846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.593428][T29846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.619452][T29846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.630728][T29846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.637705][T29846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.663701][T29846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.674551][T11226] bridge_slave_1: left allmulticast mode [ 457.680230][T11226] bridge_slave_1: left promiscuous mode [ 457.685873][T11226] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.693956][T11226] bridge_slave_0: left allmulticast mode [ 457.699621][T11226] bridge_slave_0: left promiscuous mode [ 457.705396][T11226] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.751012][T11226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.760279][T11226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.769215][T11226] bond0 (unregistering): Released all slaves [ 457.793055][T29846] hsr_slave_0: entered promiscuous mode [ 457.801479][T29846] hsr_slave_1: entered promiscuous mode [ 457.807407][T29846] debugfs: 'hsr0' already exists in 'hsr' [ 457.813121][T29846] Cannot create hsr debugfs directory [ 457.820769][T11226] hsr_slave_0: left promiscuous mode [ 457.826483][T11226] hsr_slave_1: left promiscuous mode [ 457.832120][T11226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.839832][T11226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.865996][T29875] loop6: detected capacity change from 0 to 128 [ 457.875270][T11226] team0 (unregistering): Port device team_slave_1 removed [ 457.890016][T29488] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 457.897994][T29488] FAT-fs (loop6): Filesystem has been set read-only [ 457.904792][T11226] team0 (unregistering): Port device team_slave_0 removed [ 457.932182][T29878] netlink: 'syz.3.9515': attribute type 13 has an invalid length. [ 457.943337][T29873] pimreg: entered allmulticast mode [ 457.991606][T29878] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.998827][T29878] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.041624][T29878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.051291][T29878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.099240][T29872] pimreg: left allmulticast mode [ 458.110693][T27635] lo speed is unknown, defaulting to 1000 [ 458.116629][T27635] syz0: Port: 1 Link DOWN [ 458.131267][T11171] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.144600][T11171] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.153622][T11171] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.167694][T11171] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.209223][T29892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9520'. [ 458.218656][T29892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.314625][T29896] lo speed is unknown, defaulting to 1000 [ 458.353201][T29896] netlink: 'syz.8.9523': attribute type 2 has an invalid length. [ 458.360998][T29896] netlink: 'syz.8.9523': attribute type 8 has an invalid length. [ 458.368756][T29896] netlink: 132 bytes leftover after parsing attributes in process `syz.8.9523'. [ 458.377419][T29897] lo speed is unknown, defaulting to 1000 [ 458.448400][T11226] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.472988][T29897] chnl_net:caif_netlink_parms(): no params data found [ 458.481895][T29920] netlink: 'syz.0.9528': attribute type 13 has an invalid length. [ 458.516969][T29922] loop8: detected capacity change from 0 to 1024 [ 458.523972][T29922] EXT4-fs: Ignoring removed orlov option [ 458.540536][T29922] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.558896][T11226] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.603769][T11226] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.618772][T29846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 458.635270][T29846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 458.659924][T11226] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.677910][T29846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 458.694956][T29897] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.702257][T29897] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.717286][T29897] bridge_slave_0: entered allmulticast mode [ 458.729577][T29897] bridge_slave_0: entered promiscuous mode [ 458.739300][T29846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 458.751530][ T3373] hid_parser_main: 19 callbacks suppressed [ 458.751549][ T3373] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 458.764809][ T3373] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 458.772251][ T3373] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 458.779938][T29897] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.787040][T29897] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.794529][T29897] bridge_slave_1: entered allmulticast mode [ 458.800533][ T3373] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 458.808057][ T3373] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 458.815438][ T3373] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 458.822842][ T3373] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 458.830242][ T3373] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 458.837675][ T3373] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 458.845129][ T3373] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 458.853542][T29897] bridge_slave_1: entered promiscuous mode [ 458.891874][ T3373] hid-generic 0000:0000:0000.0006: hidraw0: HID v8.00 Device [syz0] on syz0 [ 458.892176][T29928] pimreg: entered allmulticast mode [ 458.919929][T29897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.951060][T29897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.960359][T29921] pimreg: left allmulticast mode [ 458.965834][T29944] netlink: 256 bytes leftover after parsing attributes in process `syz.3.9532'. [ 458.974928][T29944] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9532'. [ 459.029615][T29897] team0: Port device team_slave_0 added [ 459.035754][T29948] loop3: detected capacity change from 0 to 128 [ 459.054307][T29846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.068968][T11226] bridge_slave_1: left allmulticast mode [ 459.074679][T11226] bridge_slave_1: left promiscuous mode [ 459.080352][T11226] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.122162][T11226] bridge_slave_0: left allmulticast mode [ 459.127821][T11226] bridge_slave_0: left promiscuous mode [ 459.133557][T11226] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.142418][T29602] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.177445][T29957] loop8: detected capacity change from 0 to 1024 [ 459.207124][T29957] EXT4-fs: Ignoring removed orlov option [ 459.229681][T29957] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.352571][T11226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.388072][T11226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.415124][T11226] bond0 (unregistering): Released all slaves [ 459.451247][T11226] bond1 (unregistering): Released all slaves [ 459.488787][T29897] team0: Port device team_slave_1 added [ 459.508980][T29846] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.531078][T29897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.538056][T29897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.564070][T29897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.575688][T29897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.582701][T29897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.608663][T29897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.620204][T29602] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.629581][T29954] loop3: detected capacity change from 0 to 32768 [ 459.642873][T11226] hsr_slave_0: left promiscuous mode [ 459.649862][T11226] hsr_slave_1: left promiscuous mode [ 459.657133][T11226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.659862][T29967] netlink: 36 bytes leftover after parsing attributes in process `syz.8.9538'. [ 459.664647][T11226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.673618][T29966] netlink: 36 bytes leftover after parsing attributes in process `syz.8.9538'. [ 459.683316][T29954] loop3: p1 p2 p3 < p5 p6 > [ 459.694588][T29954] loop3: p1 size 242222080 extends beyond EOD, truncated [ 459.702270][T11226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.702427][T29954] loop3: p2 start 4294967295 is beyond EOD, [ 459.709647][T11226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.722789][T29954] truncated [ 459.729190][T11226] veth1_macvtap: left promiscuous mode [ 459.734829][T11226] veth0_macvtap: left promiscuous mode [ 459.740605][T11226] veth1_vlan: left promiscuous mode [ 459.745933][T11226] veth0_vlan: left promiscuous mode [ 459.812709][T29973] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9540'. [ 459.836552][T11226] team0 (unregistering): Port device team_slave_1 removed [ 459.846318][T11226] team0 (unregistering): Port device team_slave_0 removed [ 459.930862][ T178] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.938034][ T178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.957019][T11922] hid-generic 0000:0000:0000.0007: hidraw0: HID v8.00 Device [syz0] on syz0 [ 459.957063][ T178] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.973635][ T178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.000327][T29897] hsr_slave_0: entered promiscuous mode [ 460.016447][T29897] hsr_slave_1: entered promiscuous mode [ 460.030294][T29991] loop3: detected capacity change from 0 to 128 [ 460.041145][T29989] loop8: detected capacity change from 0 to 512 [ 460.053095][T29989] EXT4-fs: Ignoring removed nobh option [ 460.091690][T29989] EXT4-fs error (device loop8): ext4_do_update_inode:5624: inode #3: comm syz.8.9543: corrupted inode contents [ 460.120214][T29989] EXT4-fs error (device loop8): ext4_dirty_inode:6509: inode #3: comm syz.8.9543: mark_inode_dirty error [ 460.165459][T29989] EXT4-fs error (device loop8): ext4_do_update_inode:5624: inode #3: comm syz.8.9543: corrupted inode contents [ 460.200397][T29989] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.9543: mark_inode_dirty error [ 460.243352][T29989] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.9543: Failed to acquire dquot type 0 [ 460.260418][T29989] EXT4-fs error (device loop8): ext4_do_update_inode:5624: inode #16: comm syz.8.9543: corrupted inode contents [ 460.278882][T29846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.297100][T29989] EXT4-fs error (device loop8): ext4_dirty_inode:6509: inode #16: comm syz.8.9543: mark_inode_dirty error [ 460.309373][T29989] EXT4-fs error (device loop8): ext4_do_update_inode:5624: inode #16: comm syz.8.9543: corrupted inode contents [ 460.329104][T29989] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.9543: mark_inode_dirty error [ 460.342636][T29989] EXT4-fs error (device loop8): ext4_do_update_inode:5624: inode #16: comm syz.8.9543: corrupted inode contents [ 460.366185][T29989] EXT4-fs error (device loop8) in ext4_orphan_del:301: Corrupt filesystem [ 460.378778][T29989] EXT4-fs error (device loop8): ext4_do_update_inode:5624: inode #16: comm syz.8.9543: corrupted inode contents [ 460.391420][T29989] EXT4-fs error (device loop8): ext4_truncate:4637: inode #16: comm syz.8.9543: mark_inode_dirty error [ 460.404137][T29989] EXT4-fs error (device loop8) in ext4_process_orphan:343: Corrupt filesystem [ 460.416791][T29989] EXT4-fs (loop8): 1 truncate cleaned up [ 460.425270][T29989] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.431610][T29846] veth0_vlan: entered promiscuous mode [ 460.443284][T29989] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.460014][T29989] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.491813][T29897] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 460.503779][T29846] veth1_vlan: entered promiscuous mode [ 460.512140][T29897] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 460.534482][T29846] veth0_macvtap: entered promiscuous mode [ 460.541463][T29897] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 460.554074][T29846] veth1_macvtap: entered promiscuous mode [ 460.561633][T29897] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 460.576258][T29846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.596628][T29846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.619230][T11226] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.628552][T11226] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.653740][T11226] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.666206][T29897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.678994][T11226] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.694090][T29897] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.704045][T11226] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.711189][T11226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.728062][T29897] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 460.738484][T29897] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 460.768254][T11226] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.775408][T11226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.883516][T30032] tipc: Started in network mode [ 460.888415][T30032] tipc: Node identity fec72ddad70e, cluster identity 4711 [ 460.895627][T30032] tipc: Enabled bearer , priority 0 [ 460.908739][T29897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.932286][T30023] tipc: Resetting bearer [ 460.951599][T30023] tipc: Disabling bearer [ 461.103274][T29897] veth0_vlan: entered promiscuous mode [ 461.130754][T30059] FAULT_INJECTION: forcing a failure. [ 461.130754][T30059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.133140][T29897] veth1_vlan: entered promiscuous mode [ 461.143946][T30059] CPU: 1 UID: 0 PID: 30059 Comm: syz.1.9560 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 461.144008][T30059] Tainted: [W]=WARN [ 461.144016][T30059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 461.144030][T30059] Call Trace: [ 461.144036][T30059] [ 461.144044][T30059] __dump_stack+0x1d/0x30 [ 461.144141][T30059] dump_stack_lvl+0xe8/0x140 [ 461.144162][T30059] dump_stack+0x15/0x1b [ 461.144180][T30059] should_fail_ex+0x265/0x280 [ 461.144273][T30059] should_fail+0xb/0x20 [ 461.144345][T30059] should_fail_usercopy+0x1a/0x20 [ 461.144368][T30059] _copy_from_user+0x1c/0xb0 [ 461.144395][T30059] __x64_sys_epoll_ctl+0x92/0x100 [ 461.144465][T30059] x64_sys_call+0x706/0x3000 [ 461.144490][T30059] do_syscall_64+0xd2/0x200 [ 461.144517][T30059] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 461.144547][T30059] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 461.144651][T30059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.144679][T30059] RIP: 0033:0x7f01f775eec9 [ 461.144695][T30059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.144716][T30059] RSP: 002b:00007f01f61c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 461.144798][T30059] RAX: ffffffffffffffda RBX: 00007f01f79b5fa0 RCX: 00007f01f775eec9 [ 461.144813][T30059] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000003 [ 461.144827][T30059] RBP: 00007f01f61c7090 R08: 0000000000000000 R09: 0000000000000000 [ 461.144901][T30059] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 461.144915][T30059] R13: 00007f01f79b6038 R14: 00007f01f79b5fa0 R15: 00007ffe192651e8 [ 461.144935][T30059] [ 461.333404][T29897] veth0_macvtap: entered promiscuous mode [ 461.343952][T29897] veth1_macvtap: entered promiscuous mode [ 461.350243][T30068] loop1: detected capacity change from 0 to 1024 [ 461.358024][T30068] EXT4-fs: Ignoring removed orlov option [ 461.366263][T29897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.376715][T30068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.398088][T29897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.419378][ T178] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.440371][ T178] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.462148][T11226] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.479305][T11226] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.507999][ T3400] hid-generic 0000:0000:0000.0008: hidraw0: HID v8.00 Device [syz0] on syz0 [ 461.520035][ T29] kauditd_printk_skb: 922 callbacks suppressed [ 461.520049][ T29] audit: type=1326 audit(1759982002.974:50454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30072 comm="syz.0.9564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb754d7eec9 code=0x7ffc0000 [ 461.550874][ T29] audit: type=1326 audit(1759982003.016:50455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30072 comm="syz.0.9564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb754d7eec9 code=0x7ffc0000 [ 461.606468][T30086] loop2: detected capacity change from 0 to 256 [ 461.613364][ T29] audit: type=1400 audit(1759982003.079:50456): avc: denied { remount } for pid=30085 comm="syz.2.9567" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 461.691557][T30090] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9569'. [ 461.702106][T29846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.808351][T30095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9567'. [ 461.823700][ T29] audit: type=1326 audit(1759982003.299:50457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30098 comm="syz.1.9573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f775eec9 code=0x7ffc0000 [ 461.847579][ T29] audit: type=1326 audit(1759982003.299:50458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30098 comm="syz.1.9573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01f775eec9 code=0x7ffc0000 [ 461.871392][ T29] audit: type=1326 audit(1759982003.299:50459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30098 comm="syz.1.9573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f775eec9 code=0x7ffc0000 [ 461.894960][ T29] audit: type=1326 audit(1759982003.299:50460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30098 comm="syz.1.9573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f775eec9 code=0x7ffc0000 [ 461.918549][ T29] audit: type=1326 audit(1759982003.299:50461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30098 comm="syz.1.9573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f01f775eec9 code=0x7ffc0000 [ 461.942122][ T29] audit: type=1326 audit(1759982003.299:50462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30098 comm="syz.1.9573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f775eec9 code=0x7ffc0000 [ 461.965795][ T29] audit: type=1326 audit(1759982003.299:50463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30098 comm="syz.1.9573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f01f775eec9 code=0x7ffc0000 [ 462.083020][T30103] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9574'. [ 462.112840][T30107] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9576'. [ 462.141418][T11922] hid-generic 0000:0000:0000.0009: hidraw0: HID v8.00 Device [syz0] on syz0 [ 462.145958][T30113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=30113 comm=syz.2.9579 [ 462.163850][T30113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=30113 comm=syz.2.9579 [ 462.175283][T30116] loop3: detected capacity change from 0 to 512 [ 462.176622][T30113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=30113 comm=syz.2.9579 [ 462.184598][T30116] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 462.221258][T30116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9580'. [ 462.232143][T30116] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 462.249755][T30120] loop2: detected capacity change from 0 to 1024 [ 462.256352][T30120] EXT4-fs: Ignoring removed orlov option [ 462.264375][T30120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.320121][T30127] 9pnet_fd: Insufficient options for proto=fd [ 462.451819][T30136] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9587'. [ 462.469387][T30129] loop3: detected capacity change from 0 to 32768 [ 462.510055][T30139] tipc: Started in network mode [ 462.515072][T30139] tipc: Node identity 963ec09367bc, cluster identity 4711 [ 462.522257][T30139] tipc: Enabled bearer , priority 0 [ 462.530227][T30138] tipc: Resetting bearer [ 462.530910][T29897] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.536924][T30129] loop3: p1 p2 p3 < p5 p6 > [ 462.549557][T30129] loop3: p1 size 242222080 extends beyond EOD, truncated [ 462.557626][T30129] loop3: p2 start 4294967295 is beyond EOD, truncated [ 462.575585][T30138] tipc: Disabling bearer [ 462.645283][T30141] tipc: Started in network mode [ 462.650196][T30141] tipc: Node identity 7e7f2104aca4, cluster identity 4711 [ 462.657379][T30141] tipc: Enabled bearer , priority 0 [ 462.666553][T30145] vlan2: entered allmulticast mode [ 462.687907][T30140] tipc: Resetting bearer [ 462.702722][T30153] loop8: detected capacity change from 0 to 1024 [ 462.712008][T30153] EXT4-fs: Ignoring removed orlov option [ 462.712831][T30140] tipc: Disabling bearer [ 462.751530][T30153] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.768524][T30160] loop3: detected capacity change from 0 to 512 [ 462.814588][T30160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.829429][T30160] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.870252][T30169] loop2: detected capacity change from 0 to 1024 [ 462.914913][T30169] EXT4-fs: Ignoring removed orlov option [ 462.939151][T30169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.006960][T30174] pimreg: entered allmulticast mode [ 463.022372][T29427] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.091823][T30152] pimreg: left allmulticast mode [ 463.195376][T30178] loop3: detected capacity change from 0 to 128 [ 463.205971][T30176] pimreg: entered allmulticast mode [ 463.212213][T29602] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.261710][T30185] FAULT_INJECTION: forcing a failure. [ 463.261710][T30185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.274829][T30185] CPU: 1 UID: 0 PID: 30185 Comm: syz.8.9602 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 463.274904][T30185] Tainted: [W]=WARN [ 463.274911][T30185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 463.274925][T30185] Call Trace: [ 463.274931][T30185] [ 463.275016][T30185] __dump_stack+0x1d/0x30 [ 463.275098][T30185] dump_stack_lvl+0xe8/0x140 [ 463.275170][T30185] dump_stack+0x15/0x1b [ 463.275190][T30185] should_fail_ex+0x265/0x280 [ 463.275223][T30185] should_fail+0xb/0x20 [ 463.275253][T30185] should_fail_usercopy+0x1a/0x20 [ 463.275352][T30185] _copy_from_user+0x1c/0xb0 [ 463.275375][T30185] __sys_bpf+0x183/0x7c0 [ 463.275419][T30185] __x64_sys_bpf+0x41/0x50 [ 463.275501][T30185] x64_sys_call+0x2aee/0x3000 [ 463.275527][T30185] do_syscall_64+0xd2/0x200 [ 463.275551][T30185] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 463.275625][T30185] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 463.275646][T30185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.275667][T30185] RIP: 0033:0x7f230743eec9 [ 463.275681][T30185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.275746][T30185] RSP: 002b:00007f2305ea7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 463.275769][T30185] RAX: ffffffffffffffda RBX: 00007f2307695fa0 RCX: 00007f230743eec9 [ 463.275808][T30185] RDX: 0000000000000050 RSI: 0000200000001a00 RDI: 0700000000000000 [ 463.275820][T30185] RBP: 00007f2305ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 463.275835][T30185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.275850][T30185] R13: 00007f2307696038 R14: 00007f2307695fa0 R15: 00007fffe680f2a8 [ 463.275871][T30185] [ 463.493378][T30189] tipc: Started in network mode [ 463.498325][T30189] tipc: Node identity 5a28e35b784a, cluster identity 4711 [ 463.505579][T30189] tipc: Enabled bearer , priority 0 [ 463.522671][T11161] tipc: Resetting bearer [ 463.552735][T30187] tipc: Resetting bearer [ 463.574949][T30187] tipc: Disabling bearer [ 463.590306][T30188] loop8: detected capacity change from 0 to 32768 [ 463.615109][T30193] 9pnet_fd: Insufficient options for proto=fd [ 463.615364][T30168] pimreg: left allmulticast mode [ 463.648450][T30188] loop8: p1 p2 p3 < p5 p6 > [ 463.653090][T30188] loop8: p1 size 242222080 extends beyond EOD, truncated [ 463.661771][T30188] loop8: p2 start 4294967295 is beyond EOD, truncated [ 463.677795][T30197] lo speed is unknown, defaulting to 1000 [ 463.711976][T30201] loop3: detected capacity change from 0 to 512 [ 463.722839][T29897] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.733886][T30203] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 463.745345][T30201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.766798][T30201] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.794613][T30210] loop8: detected capacity change from 0 to 1024 [ 463.802901][T30210] EXT4-fs: Ignoring removed orlov option [ 463.810280][T30213] loop2: detected capacity change from 0 to 128 [ 463.829087][T30210] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.845071][T29427] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.998204][T30217] loop2: detected capacity change from 0 to 512 [ 464.026737][T30224] pimreg: entered allmulticast mode [ 464.047949][T30230] 9pnet_fd: Insufficient options for proto=fd [ 464.098174][T30209] pimreg: left allmulticast mode [ 464.104791][T30232] tipc: Enabled bearer , priority 0 [ 464.112315][T30231] tipc: Resetting bearer [ 464.123291][T30231] tipc: Disabling bearer [ 464.160238][T29602] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.356146][T30238] loop1: detected capacity change from 0 to 32768 [ 464.416995][T30238] loop1: p1 p2 p3 < p5 p6 > [ 464.421758][T30238] loop1: p1 size 242222080 extends beyond EOD, truncated [ 464.430367][T30238] loop1: p2 start 4294967295 is beyond EOD, truncated [ 464.459033][T30247] lo speed is unknown, defaulting to 1000 [ 464.590180][T30252] loop1: detected capacity change from 0 to 128 [ 464.756015][T30254] netlink: 'syz.1.9627': attribute type 13 has an invalid length. [ 464.776217][T30261] FAULT_INJECTION: forcing a failure. [ 464.776217][T30261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.789320][T30261] CPU: 1 UID: 0 PID: 30261 Comm: syz.3.9630 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 464.789415][T30261] Tainted: [W]=WARN [ 464.789422][T30261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 464.789495][T30261] Call Trace: [ 464.789501][T30261] [ 464.789508][T30261] __dump_stack+0x1d/0x30 [ 464.789530][T30261] dump_stack_lvl+0xe8/0x140 [ 464.789551][T30261] dump_stack+0x15/0x1b [ 464.789569][T30261] should_fail_ex+0x265/0x280 [ 464.789607][T30261] should_fail+0xb/0x20 [ 464.789689][T30261] should_fail_usercopy+0x1a/0x20 [ 464.789711][T30261] _copy_from_user+0x1c/0xb0 [ 464.789737][T30261] get_user_ifreq+0x53/0x110 [ 464.789768][T30261] sock_ioctl+0x54e/0x610 [ 464.789840][T30261] ? __pfx_sock_ioctl+0x10/0x10 [ 464.789882][T30261] __se_sys_ioctl+0xcb/0x140 [ 464.789985][T30261] __x64_sys_ioctl+0x43/0x50 [ 464.790020][T30261] x64_sys_call+0x1816/0x3000 [ 464.790045][T30261] do_syscall_64+0xd2/0x200 [ 464.790073][T30261] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 464.790100][T30261] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 464.790120][T30261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.790142][T30261] RIP: 0033:0x7f874556eec9 [ 464.790223][T30261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.790241][T30261] RSP: 002b:00007f8743fd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 464.790260][T30261] RAX: ffffffffffffffda RBX: 00007f87457c5fa0 RCX: 00007f874556eec9 [ 464.790273][T30261] RDX: 00002000000004c0 RSI: 00000000000089f1 RDI: 0000000000000003 [ 464.790364][T30261] RBP: 00007f8743fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 464.790378][T30261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.790392][T30261] R13: 00007f87457c6038 R14: 00007f87457c5fa0 R15: 00007ffeb530f038 [ 464.790425][T30261] [ 464.810769][T30260] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 464.996691][T30264] loop3: detected capacity change from 0 to 1024 [ 465.000678][T30254] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.094761][T30264] EXT4-fs: Ignoring removed orlov option [ 465.101411][T30254] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.156220][T30269] netlink: 'syz.0.9632': attribute type 13 has an invalid length. [ 465.169228][T30264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.213778][T30254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.224279][T30254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.320332][ T1855] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.354441][T30271] tipc: Enabled bearer , priority 0 [ 465.361295][ T1855] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.381371][T30276] pimreg: entered allmulticast mode [ 465.386809][T30270] tipc: Resetting bearer [ 465.415295][T30270] tipc: Disabling bearer [ 465.424946][ T1855] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.434131][ T1855] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.516885][T30263] pimreg: left allmulticast mode [ 465.596190][T30296] 9pnet_fd: Insufficient options for proto=fd [ 465.637132][T30288] loop8: detected capacity change from 0 to 512 [ 465.647115][T29427] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.795655][T30304] lo speed is unknown, defaulting to 1000 [ 465.918237][T30310] netlink: 'syz.1.9645': attribute type 13 has an invalid length. [ 466.105191][T30313] netlink: 'syz.1.9646': attribute type 13 has an invalid length. [ 466.258117][ T3421] hid_parser_main: 106 callbacks suppressed [ 466.258216][ T3421] hid-generic 0000:0000:0000.000A: unknown main item tag 0x2 [ 466.271559][ T3421] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 466.279094][ T3421] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 466.286590][ T3421] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 466.294065][ T3421] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 466.301499][ T3421] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 466.308912][ T3421] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 466.316357][ T3421] hid-generic 0000:0000:0000.000A: unknown main item tag 0x4 [ 466.323864][ T3421] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 466.331342][ T3421] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 466.388175][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 466.388191][ T29] audit: type=1326 audit(1759982008.076:50734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30293 comm="syz.2.9641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548edbeec9 code=0x7ffc0000 [ 466.426933][ T3421] hid-generic 0000:0000:0000.000A: hidraw0: HID v8.00 Device [syz0] on syz0 [ 466.462987][T30329] loop2: detected capacity change from 0 to 1024 [ 466.469696][T30329] EXT4-fs: Ignoring removed orlov option [ 466.479574][T30331] 9pnet_fd: Insufficient options for proto=fd [ 466.493636][T30329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.541670][T30333] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9652'. [ 466.580181][ T3421] hid-generic FFFF:0000:0000.000B: hidraw0: HID v0.10 Device [syz0] on syz0 [ 466.597598][T30341] loop1: detected capacity change from 0 to 512 [ 466.677179][T30341] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 466.689008][T30341] EXT4-fs (loop1): 1 truncate cleaned up [ 466.695071][T30341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.695942][T30343] pimreg: entered allmulticast mode [ 466.717963][T30341] EXT4-fs (loop1): shut down requested (1) [ 466.737961][ T29] audit: type=1400 audit(1759982008.454:50735): avc: denied { mount } for pid=30348 comm="syz.8.9659" name="/" dev="autofs" ino=113272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 466.764165][T30341] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 466.773308][T30341] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 466.796596][T30328] pimreg: left allmulticast mode [ 466.817634][ T29] audit: type=1400 audit(1759982008.517:50736): avc: denied { setattr } for pid=30337 comm="syz.1.9657" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 466.851546][T30344] loop3: detected capacity change from 0 to 32768 [ 466.862417][T29846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.883916][T30344] loop3: p1 p2 p3 < p5 p6 > [ 466.889826][T30344] loop3: p1 size 242222080 extends beyond EOD, truncated [ 466.901369][T30344] loop3: p2 start 4294967295 is beyond EOD, truncated [ 466.909249][T29897] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.994699][T30363] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9664'. [ 467.004108][T30363] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9664'. [ 467.017001][T30355] loop8: detected capacity change from 0 to 512 [ 467.035129][ T29] audit: type=1400 audit(1759982008.769:50737): avc: denied { write } for pid=30364 comm=77DEA305FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 467.076412][T30369] netlink: 'syz.1.9661': attribute type 12 has an invalid length. [ 467.106209][T30372] loop3: detected capacity change from 0 to 128 [ 467.131095][T30374] FAULT_INJECTION: forcing a failure. [ 467.131095][T30374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.135723][ T29] audit: type=1400 audit(1759982008.874:50738): avc: denied { watch watch_reads } for pid=30364 comm="syz.2.9665" path="/proc/51/task" dev="proc" ino=112482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 467.144239][T30374] CPU: 1 UID: 0 PID: 30374 Comm: syz.3.9668 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 467.144416][T30374] Tainted: [W]=WARN [ 467.144424][T30374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 467.144438][T30374] Call Trace: [ 467.144445][T30374] [ 467.144452][T30374] __dump_stack+0x1d/0x30 [ 467.144475][T30374] dump_stack_lvl+0xe8/0x140 [ 467.144525][T30374] dump_stack+0x15/0x1b [ 467.144543][T30374] should_fail_ex+0x265/0x280 [ 467.144623][T30374] should_fail+0xb/0x20 [ 467.144656][T30374] should_fail_usercopy+0x1a/0x20 [ 467.144678][T30374] _copy_from_user+0x1c/0xb0 [ 467.144705][T30374] tun_set_ebpf+0x4c/0x190 [ 467.144800][T30374] __tun_chr_ioctl+0xbf6/0x14c0 [ 467.144833][T30374] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 467.144900][T30374] tun_chr_ioctl+0x27/0x40 [ 467.144927][T30374] __se_sys_ioctl+0xcb/0x140 [ 467.145053][T30374] __x64_sys_ioctl+0x43/0x50 [ 467.145089][T30374] x64_sys_call+0x1816/0x3000 [ 467.145174][T30374] do_syscall_64+0xd2/0x200 [ 467.145211][T30374] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 467.145298][T30374] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 467.145322][T30374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.145345][T30374] RIP: 0033:0x7f874556eec9 [ 467.145362][T30374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.145383][T30374] RSP: 002b:00007f8743fd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 467.145443][T30374] RAX: ffffffffffffffda RBX: 00007f87457c5fa0 RCX: 00007f874556eec9 [ 467.145457][T30374] RDX: 0000200000000400 RSI: 00000000800454e1 RDI: 0000000000000003 [ 467.145471][T30374] RBP: 00007f8743fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 467.145484][T30374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.145498][T30374] R13: 00007f87457c6038 R14: 00007f87457c5fa0 R15: 00007ffeb530f038 [ 467.145518][T30374] [ 467.512527][T30379] FAULT_INJECTION: forcing a failure. [ 467.512527][T30379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.525564][T30379] CPU: 1 UID: 0 PID: 30379 Comm: syz.3.9670 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 467.525612][T30379] Tainted: [W]=WARN [ 467.525616][T30379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 467.525669][T30379] Call Trace: [ 467.525673][T30379] [ 467.525678][T30379] __dump_stack+0x1d/0x30 [ 467.525692][T30379] dump_stack_lvl+0xe8/0x140 [ 467.525704][T30379] dump_stack+0x15/0x1b [ 467.525714][T30379] should_fail_ex+0x265/0x280 [ 467.525738][T30379] should_fail+0xb/0x20 [ 467.525756][T30379] should_fail_usercopy+0x1a/0x20 [ 467.525768][T30379] _copy_from_iter+0xd2/0xe80 [ 467.525783][T30379] ? __pfx_woken_wake_function+0x10/0x10 [ 467.525840][T30379] file_tty_write+0x322/0x690 [ 467.525853][T30379] ? __pfx_tty_write+0x10/0x10 [ 467.525904][T30379] tty_write+0x25/0x30 [ 467.525930][T30379] vfs_write+0x52a/0x960 [ 467.525947][T30379] ksys_write+0xda/0x1a0 [ 467.525961][T30379] __x64_sys_write+0x40/0x50 [ 467.526044][T30379] x64_sys_call+0x2802/0x3000 [ 467.526057][T30379] do_syscall_64+0xd2/0x200 [ 467.526071][T30379] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 467.526114][T30379] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 467.526127][T30379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.526157][T30379] RIP: 0033:0x7f874556eec9 [ 467.526167][T30379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.526179][T30379] RSP: 002b:00007f8743fd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 467.526191][T30379] RAX: ffffffffffffffda RBX: 00007f87457c5fa0 RCX: 00007f874556eec9 [ 467.526199][T30379] RDX: 0000000000001006 RSI: 0000200000002080 RDI: 0000000000000008 [ 467.526262][T30379] RBP: 00007f8743fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 467.526269][T30379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.526276][T30379] R13: 00007f87457c6038 R14: 00007f87457c5fa0 R15: 00007ffeb530f038 [ 467.526365][T30379] [ 467.745978][T30391] pimreg: entered allmulticast mode [ 467.841834][T30397] 9pnet_fd: Insufficient options for proto=fd [ 467.892170][T30399] 9pnet_fd: Insufficient options for proto=fd [ 467.955390][T30407] loop2: detected capacity change from 0 to 1024 [ 467.969888][T30407] EXT4-fs (loop2): invalid inodes per group: 67108896 [ 467.969888][T30407] [ 468.000375][ T29] audit: type=1400 audit(1759982009.777:50739): avc: denied { write } for pid=30400 comm="syz.1.9678" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 468.024919][ T29] audit: type=1400 audit(1759982009.777:50740): avc: denied { open } for pid=30400 comm="syz.1.9678" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 468.026826][T30405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9680'. [ 468.123553][T30405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9680'. [ 468.149175][T30394] loop8: detected capacity change from 0 to 32768 [ 468.195038][ T3421] hid-generic 0000:0000:0000.000C: item fetching failed at offset 41/43 [ 468.207455][ T3421] hid-generic 0000:0000:0000.000C: probe with driver hid-generic failed with error -22 [ 468.226960][T30394] loop8: p1 p2 p3 < p5 p6 > [ 468.232001][T30394] loop8: p1 size 242222080 extends beyond EOD, truncated [ 468.245741][T30394] loop8: p2 start 4294967295 is beyond EOD, truncated [ 468.326772][T30422] 9pnet_fd: Insufficient options for proto=fd [ 468.370172][T30388] pimreg: left allmulticast mode [ 468.385707][ T29] audit: type=1326 audit(1759982010.187:50741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30423 comm="syz.3.9689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874556eec9 code=0x7ffc0000 [ 468.427686][ T29] audit: type=1326 audit(1759982010.187:50742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30423 comm="syz.3.9689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874556eec9 code=0x7ffc0000 [ 468.451321][ T29] audit: type=1326 audit(1759982010.187:50743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30423 comm="syz.3.9689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f874556eec9 code=0x7ffc0000 [ 468.544056][T30436] geneve2: entered promiscuous mode [ 468.549300][T30436] geneve2: entered allmulticast mode [ 468.571421][T30434] lo speed is unknown, defaulting to 1000 [ 468.642898][T30442] siw: device registration error -23 [ 468.756982][T30451] 9pnet_fd: Insufficient options for proto=fd [ 469.007245][T30459] pimreg: entered allmulticast mode [ 469.116422][T30465] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9703'. [ 469.125448][T30465] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9703'. [ 469.165268][T30465] raw_sendmsg: syz.2.9703 forgot to set AF_INET. Fix it! [ 469.223632][T30468] FAULT_INJECTION: forcing a failure. [ 469.223632][T30468] name failslab, interval 1, probability 0, space 0, times 0 [ 469.236330][T30468] CPU: 1 UID: 0 PID: 30468 Comm: syz.2.9704 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 469.236364][T30468] Tainted: [W]=WARN [ 469.236371][T30468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 469.236383][T30468] Call Trace: [ 469.236390][T30468] [ 469.236397][T30468] __dump_stack+0x1d/0x30 [ 469.236434][T30468] dump_stack_lvl+0xe8/0x140 [ 469.236456][T30468] dump_stack+0x15/0x1b [ 469.236476][T30468] should_fail_ex+0x265/0x280 [ 469.236569][T30468] should_failslab+0x8c/0xb0 [ 469.236599][T30468] __kmalloc_noprof+0xa5/0x570 [ 469.236642][T30468] ? security_sk_alloc+0x52/0x120 [ 469.236669][T30468] ? should_failslab+0x8c/0xb0 [ 469.236746][T30468] security_sk_alloc+0x52/0x120 [ 469.236771][T30468] sk_prot_alloc+0xc2/0x190 [ 469.236803][T30468] sk_alloc+0x34/0x360 [ 469.236853][T30468] ? __pfx_genl_release+0x10/0x10 [ 469.236874][T30468] ? __pfx_genl_release+0x10/0x10 [ 469.236899][T30468] netlink_create+0x32a/0x460 [ 469.236943][T30468] ? __pfx_genl_unbind+0x10/0x10 [ 469.236960][T30468] ? __pfx_genl_bind+0x10/0x10 [ 469.236978][T30468] __sock_create+0x2e9/0x5b0 [ 469.237005][T30468] __sys_socket+0xb0/0x180 [ 469.237048][T30468] __x64_sys_socket+0x3f/0x50 [ 469.237069][T30468] x64_sys_call+0x1147/0x3000 [ 469.237090][T30468] do_syscall_64+0xd2/0x200 [ 469.237125][T30468] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 469.237157][T30468] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 469.237181][T30468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.237235][T30468] RIP: 0033:0x7f548edc0de7 [ 469.237250][T30468] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.237268][T30468] RSP: 002b:00007f548d81dfa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 469.237343][T30468] RAX: ffffffffffffffda RBX: 00007f548f015fa0 RCX: 00007f548edc0de7 [ 469.237356][T30468] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 469.237368][T30468] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 469.237380][T30468] R10: 0000200000000140 R11: 0000000000000286 R12: 0000000000000001 [ 469.237392][T30468] R13: 00007f548f016038 R14: 00007f548f015fa0 R15: 00007fff41c4d048 [ 469.237441][T30468] [ 469.587931][T30478] loop2: detected capacity change from 0 to 512 [ 469.609432][T30478] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.9709: casefold flag without casefold feature [ 469.641654][T30478] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.9709: couldn't read orphan inode 15 (err -117) [ 469.654353][T30478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.674837][T30454] pimreg: left allmulticast mode [ 469.691691][T30478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9709'. [ 469.700673][T30478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9709'. [ 469.709656][T30478] netlink: 'syz.2.9709': attribute type 20 has an invalid length. [ 469.721908][T11179] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.721942][T30478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9709'. [ 469.739569][T30478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9709'. [ 469.748519][T30478] netlink: 'syz.2.9709': attribute type 20 has an invalid length. [ 469.757388][T11179] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.766320][T11179] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.775077][T11179] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.812942][T29897] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.855716][T30490] netlink: 'syz.1.9714': attribute type 1 has an invalid length. [ 469.891721][T30496] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 469.898283][T30496] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 469.905959][T30496] vhci_hcd vhci_hcd.0: Device attached [ 469.912284][T30482] loop8: detected capacity change from 0 to 32768 [ 469.941002][T30497] vhci_hcd: connection closed [ 469.943659][T11179] vhci_hcd: stop threads [ 469.950814][T30482] loop8: p1 p2 p3 < p5 p6 > [ 469.952633][T11179] vhci_hcd: release socket [ 469.959746][T30482] loop8: p1 size 242222080 extends beyond EOD, truncated [ 469.961597][T11179] vhci_hcd: disconnect device [ 469.969101][T30482] loop8: p2 start 4294967295 is beyond EOD, truncated [ 470.001032][T30509] 9pnet_fd: Insufficient options for proto=fd [ 470.038956][T30513] 9pnet_fd: Insufficient options for proto=fd [ 470.064375][T30515] loop1: detected capacity change from 0 to 1024 [ 470.074125][T30515] EXT4-fs: Ignoring removed orlov option [ 470.082236][T30515] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.094855][T30521] loop8: detected capacity change from 0 to 2364 [ 470.234619][T30530] netlink: 'syz.8.9726': attribute type 12 has an invalid length. [ 470.243285][T29846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.258889][T30532] loop1: detected capacity change from 0 to 128 [ 470.455949][T30539] can0: slcan on ptm0. [ 470.518877][ T3400] hid-generic 0000:0000:0000.000D: hidraw0: HID v8.00 Device [syz0] on syz0 [ 470.547156][T30549] loop2: detected capacity change from 0 to 128 [ 470.570361][T30551] loop2: detected capacity change from 0 to 1024 [ 470.576992][T30551] EXT4-fs: Ignoring removed orlov option [ 470.584485][T30551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.706659][T30555] ================================================================== [ 470.714769][T30555] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / redirty_tail_locked [ 470.723734][T30555] [ 470.726047][T30555] read-write to 0xffff8881004a9758 of 4 bytes by task 30551 on cpu 0: [ 470.734194][T30555] redirty_tail_locked+0x56/0x280 [ 470.739209][T30555] writeback_single_inode+0x224/0x3f0 [ 470.744585][T30555] sync_inode_metadata+0x5b/0x90 [ 470.749511][T30555] generic_buffers_fsync_noflush+0xd9/0x120 [ 470.755396][T30555] ext4_sync_file+0x1ab/0x690 [ 470.760083][T30555] vfs_fsync_range+0x10a/0x130 [ 470.764846][T30555] ext4_buffered_write_iter+0x34f/0x3c0 [ 470.770403][T30555] ext4_file_write_iter+0x387/0xf60 [ 470.775617][T30555] iter_file_splice_write+0x666/0xa60 [ 470.780981][T30555] direct_splice_actor+0x156/0x2a0 [ 470.786081][T30555] splice_direct_to_actor+0x312/0x680 [ 470.791444][T30555] do_splice_direct+0xda/0x150 [ 470.796195][T30555] do_sendfile+0x380/0x650 [ 470.800613][T30555] __x64_sys_sendfile64+0x105/0x150 [ 470.805843][T30555] x64_sys_call+0x2bb4/0x3000 [ 470.810521][T30555] do_syscall_64+0xd2/0x200 [ 470.815015][T30555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.820898][T30555] [ 470.823206][T30555] read to 0xffff8881004a9758 of 4 bytes by task 30555 on cpu 1: [ 470.830819][T30555] generic_buffers_fsync_noflush+0x80/0x120 [ 470.836705][T30555] ext4_sync_file+0x1ab/0x690 [ 470.841371][T30555] vfs_fsync_range+0x10a/0x130 [ 470.846129][T30555] ext4_buffered_write_iter+0x34f/0x3c0 [ 470.851676][T30555] ext4_file_write_iter+0x387/0xf60 [ 470.856879][T30555] iter_file_splice_write+0x666/0xa60 [ 470.862242][T30555] direct_splice_actor+0x156/0x2a0 [ 470.867346][T30555] splice_direct_to_actor+0x312/0x680 [ 470.872707][T30555] do_splice_direct+0xda/0x150 [ 470.877467][T30555] do_sendfile+0x380/0x650 [ 470.881883][T30555] __x64_sys_sendfile64+0x105/0x150 [ 470.887076][T30555] x64_sys_call+0x2bb4/0x3000 [ 470.891742][T30555] do_syscall_64+0xd2/0x200 [ 470.896238][T30555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.902207][T30555] [ 470.904512][T30555] value changed: 0x00000072 -> 0x00000002 [ 470.910210][T30555] [ 470.912522][T30555] Reported by Kernel Concurrency Sanitizer on: [ 470.918665][T30555] CPU: 1 UID: 0 PID: 30555 Comm: syz.2.9734 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 470.930025][T30555] Tainted: [W]=WARN [ 470.933810][T30555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 470.943851][T30555] ================================================================== [ 470.973467][T30551] pimreg: entered allmulticast mode [ 471.140737][T30537] can0 (unregistered): slcan off ptm0. [ 471.361302][T30550] pimreg: left allmulticast mode [ 471.405520][T29897] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.