last executing test programs: 2.785562667s ago: executing program 0 (id=141): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000e20000001801000020786c2500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0, 0x0, 0xa2bc0000000}, 0x18) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r2, 0xc4c03d09, &(0x7f0000000b00)={0x12}) set_robust_list(0x0, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000480)={0x100, 0x40, '\x00', 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r4, 0x545c, 0x200000000000000) 1.923656346s ago: executing program 0 (id=160): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) getitimer(0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="480000001000010400000000886eda20f3252ce5", @ANYRES32=r4, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x20000890}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), 0x0}, 0x20) gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x8, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000002e40), 0x2, 0x0) write$UHID_CREATE(r7, &(0x7f0000002ec0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002e80)=""/53, 0x35, 0x8, 0x6, 0x7, 0xb, 0x3}}, 0x120) read(r7, &(0x7f00000076c0)=""/252, 0xfc) ioctl$SNAPSHOT_CREATE_IMAGE(r6, 0x40043311, 0x0) process_mrelease(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.591850783s ago: executing program 2 (id=169): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) ioctl$int_in(r1, 0x5452, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r1, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYRES64=r2, @ANYRES32=r2, @ANYBLOB="0400000000001900b7080000000000107b8abdce737a6ff86e5e00000000b703000008005623010d00000000030000009500"/59], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000000), &(0x7f0000000500)}, 0x20) r3 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xffffffff}, @TCA_TBF_PBURST={0x8, 0x7, 0xa0b}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x0, 0x10, 0x6, 0x81, 0x4}, {0xb5, 0x2, 0x986, 0x0, 0xf7, 0x7a}, 0xfffffffd, 0x5, 0x1318}}]}}]}, 0x68}}, 0x44080) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000010000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000c789fdd48ad91c264732d5e1b8120daa8d2346ba012d000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r7, 0x0, 0x0}, 0x20) 1.591130593s ago: executing program 0 (id=170): socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) r1 = open(&(0x7f0000000240)='.\x00', 0x22602, 0xfd) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) acct(&(0x7f0000000340)='\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'ip6erspan0\x00', @remote}) 1.362878111s ago: executing program 2 (id=172): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x3, 0x0}, 0x8) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0x2, r0, 'id1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000600)=ANY=[], 0xd0}}], 0x1, 0x4) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000900)={@mcast1, 0x0}, &(0x7f0000000940)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000009c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000b40)={'sit0\x00', &(0x7f0000000a40)={'syztnl2\x00', 0x0, 0x20, 0x20, 0x7, 0x8, {{0x1d, 0x4, 0x1, 0x14, 0x74, 0x66, 0x0, 0xb, 0x2f, 0x0, @private=0xa010101, @private=0xa010100, {[@lsrr={0x83, 0x1f, 0x93, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x13}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote]}, @cipso={0x86, 0x1d, 0x3, [{0x2, 0x8, "be0fc37a8275"}, {0x3, 0xf, "13d46da66f7218f06c451a29ba"}]}, @timestamp={0x44, 0x8, 0x99, 0x0, 0xf, [0xff]}, @lsrr={0x83, 0x1b, 0xc3, [@rand_addr=0x64010100, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x1b}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x42}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000d00)={'erspan0\x00', &(0x7f0000000bc0)={'syztnl0\x00', 0x0, 0x10, 0x7800, 0x5, 0xffffffff, {{0x3c, 0x4, 0x0, 0x3e, 0xf0, 0x65, 0x0, 0xff, 0x29, 0x0, @remote, @private=0xa010100, {[@timestamp_prespec={0x44, 0xc, 0x9c, 0x3, 0x7, [{@multicast1, 0x8}]}, @ssrr={0x89, 0xb, 0x5f, [@empty, @loopback]}, @generic={0x86, 0xb, "42b98ad637b8f54335"}, @timestamp={0x44, 0x10, 0xb, 0x0, 0x2, [0x7, 0xa, 0x6]}, @timestamp_addr={0x44, 0x34, 0x1b, 0x1, 0x5, [{@multicast2, 0x6}, {@local, 0x2f39}, {@empty, 0x81}, {@loopback, 0x5}, {@broadcast, 0x6}, {@multicast2, 0x4369}]}, @timestamp_addr={0x44, 0x24, 0x40, 0x1, 0xe, [{@rand_addr=0x64010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1000}, {@broadcast, 0x6}]}, @cipso={0x86, 0x45, 0xffffffffffffffff, [{0x1, 0x7, "4babec2eb5"}, {0x7, 0x3, "a7"}, {0x5, 0x11, "b83075674f9abf138ba8fb2ac3ea89"}, {0x5, 0x8, "efa476848cb7"}, {0x0, 0xd, "7f2f25f478ca40eacd0348"}, {0x1, 0x4, "9ffd"}, {0x7, 0xb, "e2cc38484977308d84"}]}, @timestamp_prespec={0x44, 0xc, 0xc6, 0x3, 0xf, [{@private=0xa010100, 0x4}]}]}}}}}) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000d40)={@dev, @dev, 0x0}, &(0x7f0000000d80)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000e00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000f80)={0x5f8, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x67a}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x230, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x71f12c41}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0xfffffffffffffeae}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x71}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r12}}}]}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x1}, 0x0) close(r3) 1.347564892s ago: executing program 0 (id=173): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)='\x00', 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x4, 0x800) r0 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xa, r0, &(0x7f0000000100)="8a510eb48dbdfcb4", 0x8, 0x242b}]) io_getevents(r1, 0x3, 0x3, &(0x7f0000002a00)=[{}, {}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000002900)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x3511, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 1.344738492s ago: executing program 2 (id=174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280080002400000000e080001400000001405000300630000000900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000480)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f00000000c0)) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) 1.309337335s ago: executing program 2 (id=176): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) r2 = timerfd_create(0x0, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @local}, "5613e798"}}}}, 0x0) r3 = syz_io_uring_setup(0x58f7, &(0x7f0000000880)={0x0, 0x0, 0x10100, 0x0, 0x104a}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000002280)=""/4102, 0x1006, 0x1a}) timerfd_settime(r2, 0x3, &(0x7f0000000840)={{0x77359400}, {0x0, 0x3938700}}, 0x0) io_uring_enter(r3, 0x1f82, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8084}, 0x10005) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) symlink(0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x7f, 0x5, 0x9, 0x0, 0x7, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x8, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4000, 0x0, 0xfc, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x9) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x1000004, &(0x7f0000000d40)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x4, 0x7c1, &(0x7f0000001a00)="$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") r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) ioctl$TCSETAF(r6, 0x5408, &(0x7f00000000c0)={0x4e00, 0x0, 0x730, 0xbdff, 0x10, "feeeff000000001b"}) write$binfmt_aout(r6, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r7 = dup3(0xffffffffffffffff, r6, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioperm(0x1, 0x9, 0xfffffffffffffff8) r8 = gettid() getsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x5, 0x9, 0x1}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000380)={r9, 0x7, 0x3f23, 0xb1, 0x7, 0x10000}, 0x14) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1700000078000000ffffffff0100000000000200", @ANYRES32=r0, @ANYBLOB="0f00"/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="010000000000000005000000000000000000000000000000008400006b84a65e34ac8f64cb60896c876f83a8fe2c7e29cd97fc290c70c9cd5916e1b4f25941b772c6c4e33da1c8518ac4ab426c1b5343826b3cdd66b48623b28a50dc8bfa696f26bfde7a2e317df2a088ff82e649d46c8742b0ecf6d4ca24ce148b332df596f4fb71e24a9b26c8e53e27efc891297ca48799752469a04e998b"], 0x50) mq_timedsend(r10, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r10, 0x0, 0x0, 0x0, 0x0) 1.231344701s ago: executing program 1 (id=180): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) (async) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) (async) r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x3e, &(0x7f0000000100)={0x18, 0x0, 0x6}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r6 = syz_io_uring_setup(0x5c2, &(0x7f0000000840)={0x0, 0x0, 0x10, 0x8003}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x2, 0x4) sendmsg$inet6(r9, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0xce27, 0x84, @dev={0xfe, 0x80, '\x00', 0x23}, 0x8}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000640)="2afd9e2091", 0x5}], 0x1}, 0x80001) socket$inet_sctp(0x2, 0x1, 0x84) (async) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000100)={r11, 0x1}, 0x8) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x13, r6, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r6, 0x6e2, 0x600, 0x65, 0x0, 0x0) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r12, 0x1, 0x2000000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.230191112s ago: executing program 4 (id=181): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xffffffff}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_bpf={0x2c, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 1.12417649s ago: executing program 4 (id=185): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) fdatasync(0xffffffffffffffff) 1.12247515s ago: executing program 4 (id=187): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) close(r3) 944.977355ms ago: executing program 4 (id=190): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x4, 0x7fe2, 0x1, 0x3000, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r6}, 0x10) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x2, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000002c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r8, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000580)="b91f04076003008cb89e00f086ddae16f132ec26128ff4f6a26116bf24bd3877a940db7844b904ae7daa865a1a27f562d861719de2cb", 0x0, 0x6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 943.803355ms ago: executing program 3 (id=191): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, r0, 0x0) r1 = syz_clone(0xa082200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{0x0, 0x1a}], 0x1, 0x0, 0x0, 0x0) 861.042402ms ago: executing program 3 (id=192): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000bb00551a00000000", @ANYBLOB="abde92f6b90185e3c7055c6167077e9b3fe53499546dc3cfa5bd33490e9e85f57ae18bba57fcb72f32750d430192cedd0188f76b5365185b77906cb2aa4c2e95e7d1b0e987c2a2f53e37781da532973d5b2830011170a8305d768cf3ac4bef608310d7a03c5583dd85b3dff49780e53b6f", @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="2d8d7fb2b1744899cb36ef00921887f51bf15613213c2385c258a0fda3bab19b043b2102feac9b20b53ba3bf7303f9903b0e60a6f82d35e4bd78369d918272c2b4fefba1d85a7fadb12d9693ff6f0f34d1c4ef82f9795014c44b0689b4492d9ebaa2c4f2e836cb5cd4d8bd5d2d7e41c1c7a3c2ec67dd3e63ede88f58798f3c38000000", @ANYRESDEC=r1, @ANYRESDEC=r1, @ANYRES16=0x0, @ANYBLOB="85c6af1588778c8d6ea4e9801643f8d5f38628f50f0aca68084fb172c8bc43352b3a113c0597f3ef4779a856d156447ccc7271928f1fa0852878a14ed8e452f7beb54cd47e421a992ccd856dfe069db6d5a5b4f3bb7f6d9d1b012367b74ee7851076728aa8aad0993474add0902c281c5589c76606faad8a36c5891629891fed068047f354dda49506c264d57fd624c4e2c572763dca3edfac80aaa388d1f4cfb0f28d6ee58342879e80d5a88e319210aaf5fa1273f5a9629fc9b096e85e8df4e4914d2094a4b4cc65594b", @ANYRES32=r1, @ANYBLOB="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", @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES8=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES32=r5, @ANYRES64=r5], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={0x0, r1, 0x0, 0x1000}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000005000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r8}, 0x10) r9 = syz_open_dev$usbfs(&(0x7f0000000000), 0x202, 0x2002) r10 = dup(r9) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000000440)={0x80, 0xc, 0xf00, 0x1, 0x7, 0x5, 0x0}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r11}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0xffffff1c) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r12}, 0x18) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x10) r14 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r14}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r15 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0xcfb45b99770bb43a) fcntl$setown(r15, 0x4, 0x0) 860.590342ms ago: executing program 4 (id=193): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x66, &(0x7f0000000080), &(0x7f0000000000)=0x8) (fail_nth: 10) 573.765964ms ago: executing program 4 (id=194): openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) memfd_create(0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x80090) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000065b14493768cc410a400", @ANYRES16=r1, @ANYBLOB="01000800000000"], 0x4b}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x7, 0x0}, 0x8) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000001e) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x121) unshare(0x22020600) fcntl$notify(r4, 0x402, 0x8000003d) close_range(r3, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020200090c0000000004000000000000030006000000000002000000ffffffff000000000000000002000100000000000000000001000020030005000000000002000000ac1414aa00000000000000000100150000000000010014"], 0x60}, 0x1, 0x7}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000008000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef978617503a6707bb5cb8ffbb640d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749da00000097f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a74e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff472558014391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f048ef6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d74e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c92209283829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00000000000000000000000000c8b8b5b137dcb7a7949e12307d1fce56fe5b76d2f3f5a7692379542e3fd9a5a7dc57e1dec0bdce65b5db59a0733c9b9da612adb91948ecbfaff8fc206b8350fe268b98aaa2e288be77aedddcc7fb7d631e69b176e2e6678fe1237cb20000"], &(0x7f0000000340)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="150a00000000000000180000000000000000000000000000009500"/40], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r6, 0x0, 0xa}, 0x18) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6012000800103aff00000000000000000039000000000000fe8000000000000000000000000000aa8600907800"/70], 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x25, &(0x7f00000000c0)) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000000040)=0x0) timer_settime(r9, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r10, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r10, 0x26, &(0x7f00000000c0)={0x2, 0x0, 0xfffffffffffffffe, 0x8, r8}) 524.649778ms ago: executing program 3 (id=195): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) (fail_nth: 6) 243.812481ms ago: executing program 2 (id=196): r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x10000, &(0x7f0000000d40)=ANY=[@ANYRES16=0x0], 0xfe, 0x2b7, &(0x7f0000001340)="$eJzs3T9vW1UUAPDzHPvFJUMyMCEk3tCBhajpyoArFCREJpAH/khQ0VaqYqtSLFkqIKxOfAIGBr4HGzsSC98AiQ/ARoUqXfT8Xmxju3ad4hSlv9+Sq3PP8T3X7yUerHfzxev90zsPBvceffN7tNtZNDrRicdZHEQjzqVaAABXwuOU4s8Lfb43G9vqCQDYrpnP/9ZTUnYXQ+9suy0AYIs++viTD26dnBx/WBTtiP53w24W1c9q/ta9uB+9uBs3Yj+eTL8LSKkav/f+yXE0i9JBXO+Pht2ysv/5r5PUPMb1R7EfB8vrj4rKTP1o2G3FK7uRZRH3O2UjN2M/Xl2oL+ePby6pj24eb7brTZbrH8Z+/PZlPIhe3Bl/pzFd/9s8infT9399/WmZXNZno2F3d5w3lXYu+9oAAAAAAAAAAAAAAAAAAAAAAHB1HRYTB3G9X4bq83d2noznD/81Pz5fpzGer+qziHw8mDsfaJTix/PzdW4URZGyKn9yvs+1ZrzWjOYL2zgAAAAAAAAAAAAAAAAAAAD8jwwefnV6u9e7e/afDOqH/CeP9V/0dTozkTdidfLuRmvFTp1e9jqfc/TLZ/1JpNzERZoftoqIVT23FiLXyn7Wv/LfKaWUZRHPd5laz7LWmsHe6pzyDf75h723Tm9n697D9vmF+2l2Ko+zwcO5axrZJh2mjW6/fEVOXt8xz/Q6e8/5S/T2H9VidSRbs4vWTKRVD+Jpt197o/v58v4GAQAAAAAAAAAAAAAAAAAAlelDv0smH60sbWytKQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4ZNP//z8dxEJkbjCqi5fnpJRGk0geZ4MXvEUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABeAv8EAAD//yiCbKI=") truncate(&(0x7f0000000000)='./file1\x00', 0x8000) truncate(&(0x7f0000000080)='./file1\x00', 0x8001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x8038, 0x80, 0x6, 0x1, {{0x38, 0x4, 0x1, 0x1d, 0xe0, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @loopback, {[@noop, @generic={0x89, 0xe, "ccc893703f618e2b5ed432c1"}, @timestamp_prespec={0x44, 0x34, 0x89, 0x3, 0xb, [{@rand_addr=0x64010101, 0x9}, {@loopback, 0xaaba}, {@multicast2, 0x3}, {@private=0xa010100, 0x34d5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@remote, 0xf55}]}, @cipso={0x86, 0x45, 0x2, [{0x7, 0x10, "f24d7dd95feab9456a5a436b6aae"}, {0x7, 0xd, "31a1b8c3a93d850221a7cf"}, {0x7, 0x7, "4aaf77c95a"}, {0x7, 0x7, "16cacfbaa6"}, {0x5, 0xa, "c85531cb0a82f297"}, {0x1, 0xa, "6b412780b55328f4"}]}, @end, @timestamp_addr={0x44, 0x3c, 0x91, 0x1, 0x6, [{@multicast2}, {@broadcast, 0xffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc}, {@multicast1, 0xbf7b}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7f}, {@private=0xa010101, 0x8}]}, @ra={0x94, 0x4, 0x1}]}}}}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x979cb87339e6fa4d, 0x0, 0x41000, 0x0, '\x00', r6, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = dup2(r7, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x18) r9 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r9, &(0x7f0000ff1000/0x3000)=nil, 0x400c) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 243.225271ms ago: executing program 1 (id=197): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x7, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0xc, 0x5, 0x0, 0x0, 0xffffffff, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x45c}}, 0x0) 242.491811ms ago: executing program 1 (id=198): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) fdatasync(0xffffffffffffffff) 194.874745ms ago: executing program 3 (id=199): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) fsync(0xffffffffffffffff) 194.266565ms ago: executing program 1 (id=200): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x3, 0x0}, 0x8) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0x2, r0, 'id1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000600)=ANY=[], 0xd0}}], 0x1, 0x4) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000900)={@mcast1, 0x0}, &(0x7f0000000940)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000009c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000b40)={'sit0\x00', &(0x7f0000000a40)={'syztnl2\x00', 0x0, 0x20, 0x20, 0x7, 0x8, {{0x1d, 0x4, 0x1, 0x14, 0x74, 0x66, 0x0, 0xb, 0x2f, 0x0, @private=0xa010101, @private=0xa010100, {[@lsrr={0x83, 0x1f, 0x93, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x13}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote]}, @cipso={0x86, 0x1d, 0x3, [{0x2, 0x8, "be0fc37a8275"}, {0x3, 0xf, "13d46da66f7218f06c451a29ba"}]}, @timestamp={0x44, 0x8, 0x99, 0x0, 0xf, [0xff]}, @lsrr={0x83, 0x1b, 0xc3, [@rand_addr=0x64010100, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x1b}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x42}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000d00)={'erspan0\x00', &(0x7f0000000bc0)={'syztnl0\x00', 0x0, 0x10, 0x7800, 0x5, 0xffffffff, {{0x3c, 0x4, 0x0, 0x3e, 0xf0, 0x65, 0x0, 0xff, 0x29, 0x0, @remote, @private=0xa010100, {[@timestamp_prespec={0x44, 0xc, 0x9c, 0x3, 0x7, [{@multicast1, 0x8}]}, @ssrr={0x89, 0xb, 0x5f, [@empty, @loopback]}, @generic={0x86, 0xb, "42b98ad637b8f54335"}, @timestamp={0x44, 0x10, 0xb, 0x0, 0x2, [0x7, 0xa, 0x6]}, @timestamp_addr={0x44, 0x34, 0x1b, 0x1, 0x5, [{@multicast2, 0x6}, {@local, 0x2f39}, {@empty, 0x81}, {@loopback, 0x5}, {@broadcast, 0x6}, {@multicast2, 0x4369}]}, @timestamp_addr={0x44, 0x24, 0x40, 0x1, 0xe, [{@rand_addr=0x64010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1000}, {@broadcast, 0x6}]}, @cipso={0x86, 0x45, 0xffffffffffffffff, [{0x1, 0x7, "4babec2eb5"}, {0x7, 0x3, "a7"}, {0x5, 0x11, "b83075674f9abf138ba8fb2ac3ea89"}, {0x5, 0x8, "efa476848cb7"}, {0x0, 0xd, "7f2f25f478ca40eacd0348"}, {0x1, 0x4, "9ffd"}, {0x7, 0xb, "e2cc38484977308d84"}]}, @timestamp_prespec={0x44, 0xc, 0xc6, 0x3, 0xf, [{@private=0xa010100, 0x4}]}]}}}}}) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000d40)={@dev, @dev, 0x0}, &(0x7f0000000d80)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000e00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000f80)={0x5f8, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x67a}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x230, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x71f12c41}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0xfffffffffffffeae}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x71}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r12}}}]}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x1}, 0x0) close(r3) 193.849875ms ago: executing program 0 (id=201): setresuid(0xee00, 0xee00, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r4 = socket$netlink(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000022657a6e8b48b9000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0) splice(r2, 0x0, r4, 0x0, 0x10d00, 0xf) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x6, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x5, &(0x7f0000f53000/0x4000)=nil, 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/90, 0x5a}], &(0x7f00000001c0)=[0x2, 0x7, 0xfffffffffffffffc, 0x1, 0x6, 0x7f], 0x1}, 0x20) 192.633635ms ago: executing program 1 (id=202): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) clock_gettime(0xa000000, &(0x7f0000000000)) 150.762678ms ago: executing program 0 (id=203): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000140), 0x4d) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1}, 0x80) socket$kcm(0x1e, 0x4, 0x0) close(r0) socket$kcm(0x1e, 0x4, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffffc, 0x0, 0x10000000, 0x1000000}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6b}]}, {0x4}, {0xc}, {0x57, 0x4, {0x2}}}}]}]}, 0x70}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x180, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1a, 0x0, 0x0, 0x0}, 0x30) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount(0x0, &(0x7f0000c7f000)='./file0\x00', 0x0, 0x24000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="040100001a0007000000000000000000fe800000000000000000c51936aa00000000001be0000002000000000000000000000000ffff00000000000000ab000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000b4000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x4004000) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_clone3(&(0x7f0000004300)={0x200000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) 115.291211ms ago: executing program 1 (id=204): socket$inet6(0xa, 0x3, 0xff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000900641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000005c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@grpid}]}, 0x1, 0x4f2, &(0x7f0000000600)="$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") bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x3, 0x0}, 0x8) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0x2, r0, 'id1\x00'}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000004c0)={0x3, &(0x7f0000000040)=[{0xce2, 0x4, 0x9, 0x7}, {0x6, 0x4, 0x10, 0x9}, {0x7, 0x2, 0x0, 0x3}]}) fcntl$setsig(r4, 0xa, 0x1b) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="00000000000085a96479e080541000000000000054ace47a9c75c7d2dc5092521cd2fb6521fdb51142dfedfc86cafafb25b1799f84079710e9c2b77a7b01ae518ee0c738fce2fc1b7b21a61903d37247270c77d0d6dd356bcefc0d27b368f91547f31beb61c9b3f8b4924cebb00e732e8d5585c2cb1d22a6ccac95603b3bee00242905a97e05a86fe6acb6320cf202d6c443b1a8832c9329c2c2dccd291454a72068f2ea9e1ddcb9ac96be3ca554770f05bd67f5481fd672c91070713257b76812e3a6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x18) r6 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000600)=ANY=[], 0xd0}}], 0x1, 0x4) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000900)={@mcast1}, &(0x7f0000000940)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000980)) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000009c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000a00)={'vxcan1\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000b40)={'sit0\x00', &(0x7f0000000a40)={'syztnl2\x00', 0x0, 0x20, 0x20, 0x7, 0x8, {{0x1d, 0x4, 0x1, 0x14, 0x74, 0x66, 0x0, 0xb, 0x2f, 0x0, @private=0xa010101, @private=0xa010100, {[@lsrr={0x83, 0x1f, 0x93, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x13}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote]}, @cipso={0x86, 0x1d, 0x3, [{0x2, 0x8, "be0fc37a8275"}, {0x3, 0xf, "13d46da66f7218f06c451a29ba"}]}, @timestamp={0x44, 0x8, 0x99, 0x0, 0xf, [0xff]}, @lsrr={0x83, 0x1b, 0xc3, [@rand_addr=0x64010100, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x1b}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x42}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000b80)) close(r6) 114.323711ms ago: executing program 2 (id=205): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x14, r3, 0x1, 0x0, 0xffffffff, {0x54}}, 0x14}, 0x1, 0x30000, 0x0, 0x300}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x30, r3, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x4}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r5, @ANYBLOB="080002004784967f8b7ddda8c623b2e8ac1414aa"], 0x20}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x7f, 0xca, 0x78, 0x2, 0x9, 0x79, 0xd, 0x7, 0x7f, 0x4, 0x12}, 0xe) r6 = socket(0x10, 0x803, 0x4) r7 = fsopen(&(0x7f0000001500)='devtmpfs\x00', 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='kfree\x00', r8, 0x0, 0x1}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x6) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r8, 0x40047211, &(0x7f0000000400)=0x8) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) chdir(&(0x7f0000000540)='./cgroup\x00') setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xcb) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}}}, 0x24}}, 0x1000000) sendto$inet6(r1, &(0x7f0000000380)="08dd494af803e67ef5f8ec", 0xb, 0x4008014, &(0x7f00000003c0)={0xa, 0x4e24, 0x8, @empty, 0x6}, 0x1c) 113.926961ms ago: executing program 3 (id=206): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x7, 0x8, 0x81, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', 0x700, 0x20, 0x401, 0x9}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000b4513376dcf47c54efa19435090000000000131b0000850000006d000000850000002300000009"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x105480, 0x0) lsm_get_self_attr(0x64, &(0x7f00000000c0)={0x0, 0x0, 0x70, 0x50, ""/80}, &(0x7f0000000000)=0x70, 0x1) 0s ago: executing program 3 (id=207): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x204000, 0x1000, 0x0, 0xf00}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.230' (ED25519) to the list of known hosts. [ 26.943566][ T29] audit: type=1400 audit(1754300838.865:62): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.944437][ T3290] cgroup: Unknown subsys name 'net' [ 26.966369][ T29] audit: type=1400 audit(1754300838.865:63): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.993718][ T29] audit: type=1400 audit(1754300838.895:64): avc: denied { unmount } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.130889][ T3290] cgroup: Unknown subsys name 'cpuset' [ 27.137002][ T3290] cgroup: Unknown subsys name 'rlimit' [ 27.226690][ T29] audit: type=1400 audit(1754300839.145:65): avc: denied { setattr } for pid=3290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.249989][ T29] audit: type=1400 audit(1754300839.145:66): avc: denied { create } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.270553][ T29] audit: type=1400 audit(1754300839.145:67): avc: denied { write } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.277092][ T3292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.290895][ T29] audit: type=1400 audit(1754300839.145:68): avc: denied { read } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.320145][ T29] audit: type=1400 audit(1754300839.155:69): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.345520][ T29] audit: type=1400 audit(1754300839.155:70): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.368871][ T29] audit: type=1400 audit(1754300839.225:71): avc: denied { relabelto } for pid=3292 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.405313][ T3290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.566592][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 28.661368][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 28.673343][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 28.682072][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.689701][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.697069][ T3298] bridge_slave_0: entered allmulticast mode [ 28.703537][ T3298] bridge_slave_0: entered promiscuous mode [ 28.710261][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.717586][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.724826][ T3298] bridge_slave_1: entered allmulticast mode [ 28.731294][ T3298] bridge_slave_1: entered promiscuous mode [ 28.768084][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.797308][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.824264][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 28.857780][ T3298] team0: Port device team_slave_0 added [ 28.878411][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.885485][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.892727][ T3306] bridge_slave_0: entered allmulticast mode [ 28.898982][ T3306] bridge_slave_0: entered promiscuous mode [ 28.905964][ T3298] team0: Port device team_slave_1 added [ 28.919470][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.926648][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.933849][ T3306] bridge_slave_1: entered allmulticast mode [ 28.940184][ T3306] bridge_slave_1: entered promiscuous mode [ 28.951331][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.958379][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.965675][ T3304] bridge_slave_0: entered allmulticast mode [ 28.972030][ T3304] bridge_slave_0: entered promiscuous mode [ 28.982264][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 29.000338][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.007379][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.015021][ T3304] bridge_slave_1: entered allmulticast mode [ 29.021232][ T3304] bridge_slave_1: entered promiscuous mode [ 29.042780][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.049731][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.075665][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.097747][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.104865][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.111977][ T3305] bridge_slave_0: entered allmulticast mode [ 29.118386][ T3305] bridge_slave_0: entered promiscuous mode [ 29.125958][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.135504][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.142502][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.168520][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.191183][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.198292][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.206518][ T3305] bridge_slave_1: entered allmulticast mode [ 29.212908][ T3305] bridge_slave_1: entered promiscuous mode [ 29.220372][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.232945][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.261863][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.281471][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.291558][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.322826][ T3306] team0: Port device team_slave_0 added [ 29.339115][ T3298] hsr_slave_0: entered promiscuous mode [ 29.345145][ T3298] hsr_slave_1: entered promiscuous mode [ 29.351050][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.358130][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.365703][ T3300] bridge_slave_0: entered allmulticast mode [ 29.372684][ T3300] bridge_slave_0: entered promiscuous mode [ 29.379794][ T3306] team0: Port device team_slave_1 added [ 29.386075][ T3305] team0: Port device team_slave_0 added [ 29.392352][ T3304] team0: Port device team_slave_0 added [ 29.398677][ T3305] team0: Port device team_slave_1 added [ 29.415156][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.422239][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.429417][ T3300] bridge_slave_1: entered allmulticast mode [ 29.435896][ T3300] bridge_slave_1: entered promiscuous mode [ 29.447942][ T3304] team0: Port device team_slave_1 added [ 29.458085][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.465042][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.490955][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.510851][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.517794][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.543880][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.563968][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.570994][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.597137][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.617154][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.624118][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.650039][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.660990][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.667908][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.693810][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.712912][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.725720][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.735184][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.742150][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.768038][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.796194][ T3305] hsr_slave_0: entered promiscuous mode [ 29.802201][ T3305] hsr_slave_1: entered promiscuous mode [ 29.807995][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 29.813730][ T3305] Cannot create hsr debugfs directory [ 29.841241][ T3300] team0: Port device team_slave_0 added [ 29.859853][ T3304] hsr_slave_0: entered promiscuous mode [ 29.865870][ T3304] hsr_slave_1: entered promiscuous mode [ 29.872352][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 29.878060][ T3304] Cannot create hsr debugfs directory [ 29.888571][ T3300] team0: Port device team_slave_1 added [ 29.908048][ T3306] hsr_slave_0: entered promiscuous mode [ 29.914314][ T3306] hsr_slave_1: entered promiscuous mode [ 29.920114][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 29.925857][ T3306] Cannot create hsr debugfs directory [ 29.964713][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.971760][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.997693][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.020920][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.027948][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.053913][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.098076][ T3300] hsr_slave_0: entered promiscuous mode [ 30.104137][ T3300] hsr_slave_1: entered promiscuous mode [ 30.109967][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 30.115738][ T3300] Cannot create hsr debugfs directory [ 30.195030][ T3298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.213960][ T3298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.228440][ T3298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.239195][ T3298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.264684][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.273075][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.290457][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.304453][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.325609][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.336309][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.348222][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.358658][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.392022][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.401916][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.410453][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.419127][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.449836][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.459876][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.479951][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.488828][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.504772][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.517506][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.541859][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.548913][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.557330][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.564472][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.609987][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.624440][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.646175][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.657275][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.666236][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.673401][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.683597][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.699385][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.709847][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.728224][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.735386][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.752819][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.766115][ T1450] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.773285][ T1450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.788483][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.799226][ T1450] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.806363][ T1450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.819549][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.826677][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.839014][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.849092][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.856371][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.877433][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.885573][ T1929] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.892642][ T1929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.908320][ T1929] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.915485][ T1929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.926649][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.944872][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.955370][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.993552][ T3300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.003951][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.075899][ T3305] veth0_vlan: entered promiscuous mode [ 31.102297][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.111452][ T3305] veth1_vlan: entered promiscuous mode [ 31.124975][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.135012][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.150914][ T3298] veth0_vlan: entered promiscuous mode [ 31.167335][ T3305] veth0_macvtap: entered promiscuous mode [ 31.182144][ T3305] veth1_macvtap: entered promiscuous mode [ 31.196370][ T3298] veth1_vlan: entered promiscuous mode [ 31.221469][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.231280][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.246197][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.280495][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.305797][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.315263][ T3298] veth0_macvtap: entered promiscuous mode [ 31.336831][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.337351][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.346287][ T3298] veth1_macvtap: entered promiscuous mode [ 31.381544][ T3306] veth0_vlan: entered promiscuous mode [ 31.391191][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.413986][ T3306] veth1_vlan: entered promiscuous mode [ 31.425396][ T3467] vhci_hcd: invalid port number 224 [ 31.428946][ T3306] veth0_macvtap: entered promiscuous mode [ 31.439464][ T3304] veth0_vlan: entered promiscuous mode [ 31.446526][ T3306] veth1_macvtap: entered promiscuous mode [ 31.454502][ T3467] loop2: detected capacity change from 0 to 128 [ 31.459927][ T3300] veth0_vlan: entered promiscuous mode [ 31.472275][ T3304] veth1_vlan: entered promiscuous mode [ 31.480091][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.488460][ T3396] Process accounting resumed [ 31.491197][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.493319][ T3396] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 31.507932][ T3396] FAT-fs (loop2): Filesystem has been set read-only [ 31.509907][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.532879][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.546263][ T3300] veth1_vlan: entered promiscuous mode [ 31.557862][ T3304] veth0_macvtap: entered promiscuous mode [ 31.564071][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.572872][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.587884][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.597108][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.606110][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.627785][ T3304] veth1_macvtap: entered promiscuous mode [ 31.644802][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.664530][ T3300] veth0_macvtap: entered promiscuous mode [ 31.679124][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.687312][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.698236][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.706565][ T3300] veth1_macvtap: entered promiscuous mode [ 31.742499][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.755799][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.769385][ T3484] loop3: detected capacity change from 0 to 512 [ 31.775775][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.800606][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.812280][ T3484] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 31.824839][ T3484] EXT4-fs (loop3): invalid journal inode [ 31.839348][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.852463][ T3484] EXT4-fs (loop3): can't get journal size [ 31.860866][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.882842][ T3484] EXT4-fs (loop3): 1 truncate cleaned up [ 31.884246][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.901192][ T3484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.921331][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.930411][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.959084][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.968300][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 31.968358][ T29] audit: type=1400 audit(1754300843.885:133): avc: denied { mount } for pid=3483 comm="syz.3.4" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.996064][ T29] audit: type=1400 audit(1754300843.895:134): avc: denied { create } for pid=3500 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.015540][ T29] audit: type=1400 audit(1754300843.905:135): avc: denied { setopt } for pid=3500 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.034770][ T29] audit: type=1400 audit(1754300843.905:136): avc: denied { bind } for pid=3500 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.050078][ T3501] loop1: detected capacity change from 0 to 1024 [ 32.053982][ T29] audit: type=1400 audit(1754300843.905:137): avc: denied { name_bind } for pid=3500 comm="syz.1.13" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 32.081746][ T29] audit: type=1400 audit(1754300843.905:138): avc: denied { node_bind } for pid=3500 comm="syz.1.13" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 32.103170][ T29] audit: type=1326 audit(1754300843.955:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3483 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58507aeb69 code=0x7ffc0000 [ 32.126317][ T29] audit: type=1326 audit(1754300843.955:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3483 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58507aeb69 code=0x7ffc0000 [ 32.149462][ T29] audit: type=1326 audit(1754300843.955:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3483 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58507aeb69 code=0x7ffc0000 [ 32.172638][ T29] audit: type=1326 audit(1754300843.955:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3483 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58507aeb69 code=0x7ffc0000 [ 32.222270][ T3501] ext4: Unknown parameter 'uid<00000000000000000000' [ 32.248484][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.295093][ T3507] loop4: detected capacity change from 0 to 512 [ 32.313596][ T3507] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 32.337869][ T3508] loop3: detected capacity change from 0 to 512 [ 32.347651][ T3507] EXT4-fs (loop4): mount failed [ 32.370449][ T3508] EXT4-fs: Ignoring removed nobh option [ 32.396441][ T3508] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.409760][ T3508] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 32.432388][ T3501] syz.1.13 (3501) used greatest stack depth: 10960 bytes left [ 32.479793][ C1] hrtimer: interrupt took 37611 ns [ 32.495981][ T3508] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.528032][ T3508] EXT4-fs (loop3): 1 truncate cleaned up [ 32.542457][ T3508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.694426][ T3507] netlink: 830 bytes leftover after parsing attributes in process `syz.4.14'. [ 32.781659][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.828440][ T3541] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22'. [ 32.838193][ T3540] mmap: syz.1.23 (3540) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.879643][ T3541] Zero length message leads to an empty skb [ 32.886401][ T3541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 32.963528][ T3544] loop3: detected capacity change from 0 to 8192 [ 32.996627][ T3544] lo speed is unknown, defaulting to 1000 [ 33.002575][ T3544] lo speed is unknown, defaulting to 1000 [ 33.008615][ T3544] lo speed is unknown, defaulting to 1000 [ 33.015254][ T3544] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 33.023067][ T3544] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 33.034047][ T3544] lo speed is unknown, defaulting to 1000 [ 33.040684][ T3544] lo speed is unknown, defaulting to 1000 [ 33.049831][ T3544] lo speed is unknown, defaulting to 1000 [ 33.056503][ T3544] lo speed is unknown, defaulting to 1000 [ 33.062857][ T3544] lo speed is unknown, defaulting to 1000 [ 33.091796][ T3544] syz.3.24 (3544) used greatest stack depth: 10712 bytes left [ 34.314721][ T3586] netlink: 24 bytes leftover after parsing attributes in process `syz.1.35'. [ 34.326720][ T3586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'. [ 34.337567][ T3586] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.348741][ T3586] bridge_slave_0 (unregistering): left allmulticast mode [ 34.355883][ T3586] bridge_slave_0 (unregistering): left promiscuous mode [ 34.363488][ T3586] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.677815][ T3597] netlink: 'syz.2.39': attribute type 4 has an invalid length. [ 34.685496][ T3597] netlink: 17 bytes leftover after parsing attributes in process `syz.2.39'. [ 34.887738][ T3603] loop4: detected capacity change from 0 to 512 [ 34.928528][ T3603] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 34.952341][ T3603] EXT4-fs (loop4): invalid journal inode [ 34.969640][ T3605] loop1: detected capacity change from 0 to 2048 [ 34.974535][ T3603] EXT4-fs (loop4): can't get journal size [ 34.995318][ T3603] EXT4-fs (loop4): 1 truncate cleaned up [ 35.015407][ T3603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.083055][ T3605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.171108][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.270621][ T3304] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 35.371667][ T3304] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 35.442618][ T41] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xff [ 35.540921][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.750403][ T3636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.46'. [ 35.785490][ T3636] hsr_slave_0: left promiscuous mode [ 35.803239][ T3636] hsr_slave_1: left promiscuous mode [ 36.256739][ T3649] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.581227][ T3652] batadv_slave_1: entered promiscuous mode [ 36.589467][ T3652] batadv_slave_1: left promiscuous mode [ 36.633592][ T3658] loop3: detected capacity change from 0 to 512 [ 36.640726][ T3658] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.652072][ T3658] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.57: bad orphan inode 16 [ 36.658624][ T3655] syz.4.56 (3655) used greatest stack depth: 8952 bytes left [ 36.663920][ T3658] ext4_test_bit(bit=15, block=4) = 0 [ 36.675858][ T3658] EXT4-fs (loop3): 1 orphan inode deleted [ 36.682090][ T3658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.904393][ T3669] loop4: detected capacity change from 0 to 164 [ 37.015663][ T3669] iso9660: Unknown parameter 'hMde' [ 37.143157][ T3672] loop4: detected capacity change from 0 to 512 [ 37.215248][ T3672] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 37.237068][ T3672] EXT4-fs (loop4): invalid journal inode [ 37.270595][ T3672] EXT4-fs (loop4): can't get journal size [ 37.293970][ T3672] EXT4-fs (loop4): 1 truncate cleaned up [ 37.355956][ T3672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.449521][ T29] kauditd_printk_skb: 507 callbacks suppressed [ 37.449536][ T29] audit: type=1326 audit(1754300849.365:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff956a2eb69 code=0x7ffc0000 [ 37.500141][ T29] audit: type=1326 audit(1754300849.375:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff956a2eb69 code=0x7ffc0000 [ 37.523849][ T29] audit: type=1326 audit(1754300849.375:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff956a2eb69 code=0x7ffc0000 [ 37.546978][ T29] audit: type=1326 audit(1754300849.375:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff956a2eb69 code=0x7ffc0000 [ 37.570859][ T29] audit: type=1326 audit(1754300849.375:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff956a2eb69 code=0x7ffc0000 [ 37.594207][ T29] audit: type=1326 audit(1754300849.375:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff956a2eb69 code=0x7ffc0000 [ 37.618147][ T29] audit: type=1326 audit(1754300849.375:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff956a2eb69 code=0x7ffc0000 [ 37.641598][ T29] audit: type=1326 audit(1754300849.375:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff956a2eb69 code=0x7ffc0000 [ 37.665678][ T29] audit: type=1326 audit(1754300849.375:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7ff956a2eb69 code=0x7ffc0000 [ 37.689013][ T29] audit: type=1326 audit(1754300849.375:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff956a2eb69 code=0x7ffc0000 [ 37.715129][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.741181][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.812041][ T3677] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 37.967617][ T3675] capability: warning: `syz.3.62' uses 32-bit capabilities (legacy support in use) [ 38.051865][ T3692] netlink: 28 bytes leftover after parsing attributes in process `syz.3.69'. [ 38.060912][ T3692] netlink: 28 bytes leftover after parsing attributes in process `syz.3.69'. [ 38.163795][ T3696] loop3: detected capacity change from 0 to 512 [ 38.176936][ T3696] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.202784][ T3696] EXT4-fs (loop3): 1 truncate cleaned up [ 38.220632][ T3696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.344039][ T3704] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 38.350664][ T3704] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 38.358282][ T3704] vhci_hcd vhci_hcd.0: Device attached [ 38.382181][ T3704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.73'. [ 38.516904][ T3705] vhci_hcd: connection closed [ 38.521292][ T51] vhci_hcd: stop threads [ 38.530904][ T51] vhci_hcd: release socket [ 38.535437][ T51] vhci_hcd: disconnect device [ 38.545247][ T36] vhci_hcd: vhci_device speed not set [ 38.857393][ T3721] loop1: detected capacity change from 0 to 512 [ 38.869732][ T3716] netlink: 'syz.4.74': attribute type 1 has an invalid length. [ 38.877528][ T3716] netlink: 'syz.4.74': attribute type 2 has an invalid length. [ 38.885121][ T3716] netlink: 268 bytes leftover after parsing attributes in process `syz.4.74'. [ 38.928340][ T3721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.949562][ T3721] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.023785][ T3721] process 'syz.1.77' launched './mnt' with NULL argv: empty string added [ 39.104210][ T3726] loop4: detected capacity change from 0 to 512 [ 39.115367][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.127572][ T3730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.78'. [ 39.136532][ T3730] netlink: 48 bytes leftover after parsing attributes in process `syz.0.78'. [ 39.146409][ T3726] ======================================================= [ 39.146409][ T3726] WARNING: The mand mount option has been deprecated and [ 39.146409][ T3726] and is ignored by this kernel. Remove the mand [ 39.146409][ T3726] option from the mount to silence this warning. [ 39.146409][ T3726] ======================================================= [ 39.231484][ T3726] EXT4-fs: Ignoring removed oldalloc option [ 39.275089][ T3726] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.74: Parent and EA inode have the same ino 15 [ 39.334947][ T3726] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.74: Parent and EA inode have the same ino 15 [ 39.352692][ T3726] EXT4-fs (loop4): 1 orphan inode deleted [ 39.359037][ T3726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.395470][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.440823][ T3747] syz.2.85 uses obsolete (PF_INET,SOCK_PACKET) [ 39.484667][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.539390][ T3756] loop1: detected capacity change from 0 to 1024 [ 39.546734][ T3756] EXT4-fs: inline encryption not supported [ 39.552596][ T3756] EXT4-fs: Ignoring removed i_version option [ 39.596416][ T3756] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.665749][ T3756] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.86: lblock 2 mapped to illegal pblock 2 (length 1) [ 39.680725][ T3756] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.86: lblock 0 mapped to illegal pblock 48 (length 1) [ 39.695001][ T3756] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.86: Failed to acquire dquot type 0 [ 39.707158][ T3756] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 39.718690][ T3756] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.86: mark_inode_dirty error [ 39.749571][ T3759] program syz.4.88 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.758918][ T3756] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 39.769743][ T3756] EXT4-fs (loop1): 1 orphan inode deleted [ 39.776192][ T3756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.792342][ T51] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 39.824554][ T51] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 39.881107][ T3767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.84'. [ 40.281650][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.293667][ T3304] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 40.307427][ T3304] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 40.334206][ T3304] EXT4-fs error (device loop1): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 40.807288][ T3798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.99'. [ 40.816994][ T3798] hsr_slave_0: left promiscuous mode [ 40.823055][ T3798] hsr_slave_1: left promiscuous mode [ 40.923901][ T3806] loop0: detected capacity change from 0 to 512 [ 40.972545][ T3806] EXT4-fs (loop0): too many log groups per flexible block group [ 40.980532][ T3806] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 40.988192][ T3806] EXT4-fs (loop0): mount failed [ 41.013301][ T51] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xff [ 41.156451][ T3827] program syz.0.108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.198464][ T3825] bridge_slave_0: left allmulticast mode [ 41.204168][ T3825] bridge_slave_0: left promiscuous mode [ 41.210030][ T3825] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.232981][ T3825] bridge_slave_1: left allmulticast mode [ 41.238670][ T3825] bridge_slave_1: left promiscuous mode [ 41.244441][ T3825] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.283219][ T3825] bond0: (slave bond_slave_0): Releasing backup interface [ 41.293531][ T3825] bond0: (slave bond_slave_1): Releasing backup interface [ 41.306594][ T3825] team0: Port device team_slave_0 removed [ 41.315810][ T3825] team0: Port device team_slave_1 removed [ 41.324005][ T3825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.331602][ T3825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.343437][ T3825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.351054][ T3825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.351829][ T3829] loop3: detected capacity change from 0 to 512 [ 41.373835][ T3829] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.385267][ T3823] netlink: 36 bytes leftover after parsing attributes in process `syz.3.107'. [ 41.420286][ T3829] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002c018, mo2=0002] [ 41.434553][ T3829] System zones: 0-7 [ 41.441511][ T3837] loop1: detected capacity change from 0 to 512 [ 41.448551][ T3829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.473583][ T3841] FAULT_INJECTION: forcing a failure. [ 41.473583][ T3841] name failslab, interval 1, probability 0, space 0, times 1 [ 41.474357][ T3837] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 41.487011][ T3841] CPU: 1 UID: 0 PID: 3841 Comm: syz.4.113 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 41.487042][ T3841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 41.487130][ T3841] Call Trace: [ 41.487136][ T3841] [ 41.487143][ T3841] __dump_stack+0x1d/0x30 [ 41.487170][ T3841] dump_stack_lvl+0xe8/0x140 [ 41.487190][ T3841] dump_stack+0x15/0x1b [ 41.487207][ T3841] should_fail_ex+0x265/0x280 [ 41.487318][ T3841] should_failslab+0x8c/0xb0 [ 41.487410][ T3841] kmem_cache_alloc_noprof+0x50/0x310 [ 41.487439][ T3841] ? __se_sys_mbind+0x3d7/0xac0 [ 41.487539][ T3841] __se_sys_mbind+0x3d7/0xac0 [ 41.487654][ T3841] __x64_sys_mbind+0x78/0x90 [ 41.487699][ T3841] x64_sys_call+0x2932/0x2ff0 [ 41.487720][ T3841] do_syscall_64+0xd2/0x200 [ 41.487744][ T3841] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 41.487776][ T3841] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 41.487797][ T3841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.487819][ T3841] RIP: 0033:0x7ff956a2eb69 [ 41.487838][ T3841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.487856][ T3841] RSP: 002b:00007ff95508f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 41.487874][ T3841] RAX: ffffffffffffffda RBX: 00007ff956c55fa0 RCX: 00007ff956a2eb69 [ 41.487916][ T3841] RDX: 0000000000000005 RSI: 0000000000600000 RDI: 0000200000000000 [ 41.487928][ T3841] RBP: 00007ff95508f090 R08: 000000000000000b R09: 0000000000000001 [ 41.487940][ T3841] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.487952][ T3841] R13: 0000000000000000 R14: 00007ff956c55fa0 R15: 00007ffe66dbce08 [ 41.487970][ T3841] [ 41.668691][ T3837] EXT4-fs (loop1): invalid journal inode [ 41.674557][ T3837] EXT4-fs (loop1): can't get journal size [ 41.684233][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.694973][ T3837] EXT4-fs (loop1): 1 truncate cleaned up [ 41.701815][ T3837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.764803][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.892835][ T3872] netlink: 24 bytes leftover after parsing attributes in process `syz.3.125'. [ 41.971720][ T3878] loop3: detected capacity change from 0 to 512 [ 41.979010][ T3878] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 41.988978][ T3878] EXT4-fs (loop3): invalid journal inode [ 41.995575][ T3878] EXT4-fs (loop3): can't get journal size [ 42.003745][ T3878] EXT4-fs (loop3): 1 truncate cleaned up [ 42.009770][ T3878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.039365][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.518415][ T3902] lo speed is unknown, defaulting to 1000 [ 42.528837][ T3903] lo speed is unknown, defaulting to 1000 [ 42.627448][ T29] kauditd_printk_skb: 315 callbacks suppressed [ 42.627461][ T29] audit: type=1400 audit(42.608:971): avc: denied { create } for pid=3906 comm="syz.0.138" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.654647][ T29] audit: type=1400 audit(42.638:972): avc: denied { write } for pid=3906 comm="syz.0.138" name="file0" dev="tmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.676134][ T29] audit: type=1400 audit(42.638:973): avc: denied { open } for pid=3906 comm="syz.0.138" path="/15/file0" dev="tmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.708065][ T29] audit: type=1400 audit(42.688:974): avc: denied { ioctl } for pid=3906 comm="syz.0.138" path="/15/file0" dev="tmpfs" ino=98 ioctlcmd=0x1286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.731862][ T29] audit: type=1400 audit(42.688:975): avc: denied { write } for pid=3906 comm="syz.0.138" name="ip6_flowlabel" dev="proc" ino=4026532458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 42.754624][ T29] audit: type=1400 audit(42.688:976): avc: denied { connect } for pid=3906 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.846138][ T29] audit: type=1400 audit(42.818:977): avc: denied { unlink } for pid=3298 comm="syz-executor" name="file0" dev="tmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.917016][ T3921] loop1: detected capacity change from 0 to 128 [ 43.004361][ T29] audit: type=1400 audit(42.988:978): avc: denied { ioctl } for pid=3927 comm="syz.2.148" path="socket:[5674]" dev="sockfs" ino=5674 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.029651][ T3928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.037107][ T3928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.072982][ T3928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.080475][ T3928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.137862][ T3943] loop3: detected capacity change from 0 to 1024 [ 43.153345][ T3943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 43.170430][ T3943] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 43.251820][ T29] audit: type=1400 audit(43.238:979): avc: denied { setopt } for pid=3939 comm="syz.4.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.303269][ T3950] sctp: [Deprecated]: syz.4.153 (pid 3950) Use of int in max_burst socket option. [ 43.303269][ T3950] Use struct sctp_assoc_value instead [ 43.320826][ T3950] __nla_validate_parse: 3 callbacks suppressed [ 43.320843][ T3950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.153'. [ 43.426235][ T29] audit: type=1400 audit(43.408:980): avc: denied { create } for pid=3951 comm="syz.3.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.751864][ T3968] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 43.796039][ T3407] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 43.803509][ T3407] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 43.811166][ T3407] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 43.819186][ T3407] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 43.826759][ T3407] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 43.834268][ T3407] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 43.841859][ T3407] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 43.849335][ T3407] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 43.856774][ T3407] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 43.864303][ T3407] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 43.876906][ T3975] netlink: 268 bytes leftover after parsing attributes in process `syz.2.164'. [ 43.885943][ T3975] unsupported nla_type 65024 [ 43.900607][ T3407] hid-generic 0008:0006:0007.0001: hidraw0: HID v0.0b Device [syz1] on syz1 [ 43.965217][ T3979] fido_id[3979]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 44.029892][ T3984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.167'. [ 44.062396][ T3987] FAULT_INJECTION: forcing a failure. [ 44.062396][ T3987] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 44.075585][ T3987] CPU: 0 UID: 0 PID: 3987 Comm: syz.1.168 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 44.075616][ T3987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 44.075629][ T3987] Call Trace: [ 44.075636][ T3987] [ 44.075644][ T3987] __dump_stack+0x1d/0x30 [ 44.075738][ T3987] dump_stack_lvl+0xe8/0x140 [ 44.075759][ T3987] dump_stack+0x15/0x1b [ 44.075774][ T3987] should_fail_ex+0x265/0x280 [ 44.075809][ T3987] should_fail+0xb/0x20 [ 44.076026][ T3987] should_fail_usercopy+0x1a/0x20 [ 44.076043][ T3987] _copy_from_user+0x1c/0xb0 [ 44.076066][ T3987] __sys_bpf+0x178/0x7b0 [ 44.076097][ T3987] __x64_sys_bpf+0x41/0x50 [ 44.076124][ T3987] x64_sys_call+0x2aea/0x2ff0 [ 44.076174][ T3987] do_syscall_64+0xd2/0x200 [ 44.076195][ T3987] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 44.076271][ T3987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.076292][ T3987] RIP: 0033:0x7f0df8b5eb69 [ 44.076305][ T3987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.076321][ T3987] RSP: 002b:00007f0df71c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 44.076340][ T3987] RAX: ffffffffffffffda RBX: 00007f0df8d85fa0 RCX: 00007f0df8b5eb69 [ 44.076352][ T3987] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000001 [ 44.076365][ T3987] RBP: 00007f0df71c7090 R08: 0000000000000000 R09: 0000000000000000 [ 44.076400][ T3987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.076412][ T3987] R13: 0000000000000000 R14: 00007f0df8d85fa0 R15: 00007ffd36fabac8 [ 44.076429][ T3987] [ 44.244724][ T3984] hsr_slave_0: left promiscuous mode [ 44.252370][ T3984] hsr_slave_1: left promiscuous mode [ 44.429419][ T4021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.181'. [ 44.454382][ T4029] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 44.465107][ T4029] SELinux: failed to load policy [ 44.515617][ T4040] tipc: Started in network mode [ 44.520609][ T4040] tipc: Node identity ac14140f, cluster identity 4711 [ 44.534444][ T4040] tipc: New replicast peer: 255.255.255.255 [ 44.540660][ T4040] tipc: Enabled bearer , priority 10 [ 44.547401][ T4040] netlink: 24 bytes leftover after parsing attributes in process `syz.3.186'. [ 44.557269][ T4023] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.623371][ T4023] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.673787][ T4023] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.724032][ T4023] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.762333][ T4056] netlink: 40 bytes leftover after parsing attributes in process `syz.3.192'. [ 44.778449][ T4058] FAULT_INJECTION: forcing a failure. [ 44.778449][ T4058] name failslab, interval 1, probability 0, space 0, times 0 [ 44.791150][ T4058] CPU: 1 UID: 0 PID: 4058 Comm: syz.4.193 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 44.791176][ T4058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 44.791189][ T4058] Call Trace: [ 44.791195][ T4058] [ 44.791202][ T4058] __dump_stack+0x1d/0x30 [ 44.791220][ T4058] dump_stack_lvl+0xe8/0x140 [ 44.791318][ T4058] dump_stack+0x15/0x1b [ 44.791346][ T4058] should_fail_ex+0x265/0x280 [ 44.791444][ T4058] ? selinux_netlbl_sock_genattr+0x88/0x260 [ 44.791477][ T4058] should_failslab+0x8c/0xb0 [ 44.791501][ T4058] __kmalloc_cache_noprof+0x4c/0x320 [ 44.791535][ T4058] selinux_netlbl_sock_genattr+0x88/0x260 [ 44.791587][ T4058] selinux_netlbl_socket_post_create+0x68/0x100 [ 44.791617][ T4058] selinux_socket_post_create+0x214/0x2a0 [ 44.791711][ T4058] security_socket_post_create+0x5d/0xb0 [ 44.791739][ T4058] __sock_create+0x362/0x5b0 [ 44.791785][ T4058] sock_create+0x5c/0x70 [ 44.791811][ T4058] sctp_getsockopt_peeloff_common+0x240/0x4a0 [ 44.791844][ T4058] sctp_getsockopt_peeloff+0xa5/0x170 [ 44.791881][ T4058] sctp_getsockopt+0x146/0xaa0 [ 44.791933][ T4058] sock_common_getsockopt+0x5d/0x70 [ 44.791959][ T4058] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 44.792031][ T4058] do_sock_getsockopt+0x1fd/0x240 [ 44.792063][ T4058] __x64_sys_getsockopt+0x11e/0x1a0 [ 44.792135][ T4058] x64_sys_call+0x2bc6/0x2ff0 [ 44.792155][ T4058] do_syscall_64+0xd2/0x200 [ 44.792176][ T4058] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 44.792210][ T4058] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 44.792231][ T4058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.792258][ T4058] RIP: 0033:0x7ff956a2eb69 [ 44.792342][ T4058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.792358][ T4058] RSP: 002b:00007ff95508f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 44.792376][ T4058] RAX: ffffffffffffffda RBX: 00007ff956c55fa0 RCX: 00007ff956a2eb69 [ 44.792390][ T4058] RDX: 0000000000000066 RSI: 0000000000000084 RDI: 0000000000000003 [ 44.792403][ T4058] RBP: 00007ff95508f090 R08: 0000200000000000 R09: 0000000000000000 [ 44.792450][ T4058] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 44.792460][ T4058] R13: 0000000000000000 R14: 00007ff956c55fa0 R15: 00007ffe66dbce08 [ 44.792474][ T4058] [ 45.060821][ T4059] vhci_hcd: default hub control req: 800c v0f00 i0001 l7 [ 45.092577][ T51] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.120231][ T51] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.135115][ T51] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.146918][ T4063] FAULT_INJECTION: forcing a failure. [ 45.146918][ T4063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.160131][ T4063] CPU: 0 UID: 0 PID: 4063 Comm: syz.3.195 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 45.160159][ T4063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 45.160172][ T4063] Call Trace: [ 45.160178][ T4063] [ 45.160185][ T4063] __dump_stack+0x1d/0x30 [ 45.160268][ T4063] dump_stack_lvl+0xe8/0x140 [ 45.160286][ T4063] dump_stack+0x15/0x1b [ 45.160302][ T4063] should_fail_ex+0x265/0x280 [ 45.160418][ T4063] should_fail+0xb/0x20 [ 45.160447][ T4063] should_fail_usercopy+0x1a/0x20 [ 45.160467][ T4063] _copy_to_user+0x20/0xa0 [ 45.160490][ T4063] simple_read_from_buffer+0xb5/0x130 [ 45.160537][ T4063] proc_fail_nth_read+0x10e/0x150 [ 45.160566][ T4063] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 45.160649][ T4063] vfs_read+0x1a0/0x6f0 [ 45.160682][ T4063] ? __rcu_read_unlock+0x4f/0x70 [ 45.160756][ T4063] ? __fget_files+0x184/0x1c0 [ 45.160779][ T4063] ksys_read+0xda/0x1a0 [ 45.160803][ T4063] __x64_sys_read+0x40/0x50 [ 45.160826][ T4063] x64_sys_call+0x27bc/0x2ff0 [ 45.160857][ T4063] do_syscall_64+0xd2/0x200 [ 45.160983][ T4063] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 45.161004][ T4063] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 45.161023][ T4063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.161079][ T4063] RIP: 0033:0x7f58507ad57c [ 45.161093][ T4063] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 45.161110][ T4063] RSP: 002b:00007f584ee17030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 45.161130][ T4063] RAX: ffffffffffffffda RBX: 00007f58509d5fa0 RCX: 00007f58507ad57c [ 45.161143][ T4063] RDX: 000000000000000f RSI: 00007f584ee170a0 RDI: 0000000000000008 [ 45.161213][ T4063] RBP: 00007f584ee17090 R08: 0000000000000000 R09: 0000000000000000 [ 45.161224][ T4063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.161237][ T4063] R13: 0000000000000000 R14: 00007f58509d5fa0 R15: 00007ffe7da67c68 [ 45.161263][ T4063] [ 45.388588][ T4066] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 45.400562][ T51] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.492418][ T4070] 9pnet: Could not find request transport: 0xffffffffffffffff [ 45.517666][ T4082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.205'. [ 45.554646][ T4082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.205'. [ 45.568955][ T4087] loop1: detected capacity change from 0 to 512 [ 45.595686][ T4090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.203'. [ 45.604714][ T4090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.203'. [ 45.615386][ T4087] EXT4-fs (loop1): too many log groups per flexible block group [ 45.623469][ T4087] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 45.730092][ T3396] tipc: Node number set to 2886997007 [ 45.737521][ T3964] ================================================================== [ 45.745623][ T3964] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 45.752306][ T3964] [ 45.754619][ T3964] write to 0xffff888106e136d0 of 8 bytes by task 2990 on cpu 0: [ 45.762237][ T3964] __dentry_kill+0x142/0x4b0 [ 45.766824][ T3964] dput+0x5e/0xd0 [ 45.770459][ T3964] terminate_walk+0x103/0x2a0 [ 45.775129][ T3964] path_lookupat+0x1fc/0x2a0 [ 45.779711][ T3964] filename_lookup+0x147/0x340 [ 45.784468][ T3964] do_readlinkat+0x7d/0x320 [ 45.788970][ T3964] __x64_sys_readlink+0x47/0x60 [ 45.793908][ T3964] x64_sys_call+0x28da/0x2ff0 [ 45.798594][ T3964] do_syscall_64+0xd2/0x200 [ 45.803092][ T3964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.809074][ T3964] [ 45.811378][ T3964] read to 0xffff888106e136d0 of 8 bytes by task 3964 on cpu 1: [ 45.818900][ T3964] fast_dput+0x5f/0x2c0 [ 45.823052][ T3964] dput+0x24/0xd0 [ 45.826671][ T3964] do_unlinkat+0x259/0x480 [ 45.831159][ T3964] __x64_sys_unlink+0x2e/0x40 [ 45.835821][ T3964] x64_sys_call+0x2dc0/0x2ff0 [ 45.840486][ T3964] do_syscall_64+0xd2/0x200 [ 45.844974][ T3964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.850876][ T3964] [ 45.853181][ T3964] value changed: 0xffff88823775f040 -> 0x0000000000000000 [ 45.860269][ T3964] [ 45.862593][ T3964] Reported by Kernel Concurrency Sanitizer on: [ 45.868722][ T3964] CPU: 1 UID: 0 PID: 3964 Comm: udevd Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 45.880347][ T3964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 45.890394][ T3964] ================================================================== [ 45.898571][ T4087] EXT4-fs (loop1): mount failed