last executing test programs: 6m2.811911895s ago: executing program 32 (id=1258): syz_emit_ethernet(0xfed7, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) 3m20.122433464s ago: executing program 33 (id=4235): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xa, 0x1fffffffffffffcd, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500f146654ecb2140afb7535e373d18bb000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000004}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), 0x0}, 0x20) signalfd4(r2, &(0x7f0000000040)={[0x541]}, 0x8, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe(0x0) shutdown(r3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000010000000000000000008510000006000000180000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x40f00, 0x49}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) unshare(0x2040400) r8 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) unshare(0x2020200) fsmount(r8, 0x0, 0x84) 3m19.379567125s ago: executing program 34 (id=4246): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10044084}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7e, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x79, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000940)={'sit0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x8, 0x20, 0x4, 0x4, {{0x1b, 0x4, 0x0, 0x6, 0x6c, 0x64, 0x0, 0x1, 0x2f, 0x0, @local, @remote, {[@rr={0x7, 0x1b, 0xe3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast1, @private=0xa010101, @loopback, @multicast2]}, @timestamp_prespec={0x44, 0x3c, 0x9c, 0x3, 0x6, [{@local, 0xdfd}, {@loopback, 0xf2}, {@loopback, 0x582e}, {@empty, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@rand_addr=0x64010100, 0x1713}, {@private=0xa010100, 0x1}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000980)={'syztnl0\x00', &(0x7f0000000a00)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x8, 0x2, 0x1, @mcast1, @private2, 0x80, 0x77fe2a36e4e7846b, 0x4, 0x4}}) r12 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x10, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xd}, {0xd, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000a80)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x55, 0x12d4, 0x4, @loopback, @remote, 0x10, 0x8000, 0x800, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000b40)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000d40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d00)={&(0x7f00000011c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r6, @ANYBLOB="00012cbd7000ffdbdf250d0000001800018014000200687372300000000000000000000000003c00018014000200766c616e31000000000000000800030001000000140002006d61637674617030000000000000000008000308020000003c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="14000200697036677265300000000000000000001400020076657468305f746f5f687372000000004800018008000100", @ANYRES32=r9, @ANYBLOB="80c8e9c144977694d5ccd3054d9d1e3ec90fc768e66bf3345fb6dc69056df16fae02e04c3ba5b5636d47ba03ce19109372ccd157058567f139b5d3256d561f7412061b562c33153ea681bfbe49ede7ed7475c1b4aa6d1aef33c20038d071b4e18e9099c93ff1a1aa9340e285990c49f3ce63", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="140002006970366772653000000000000000000008000100", @ANYRES32=r13, @ANYBLOB="08000300010000001400018008000100", @ANYRES16=0x0, @ANYBLOB="080003000200000018000180140002006272696467655f736c6176655f3100003000018014000200767863616e310000000000000000000008000100", @ANYRES32=r14, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="2800018008000100", @ANYRES32=r5, @ANYBLOB="08000300030000001400020070696d72656730000000000000000000", @ANYRESHEX], 0x170}, 0x1, 0x0, 0x0, 0x10}, 0x0) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000d80)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x2, 0x3, 0x7, 0xb0, 0x3}, &(0x7f0000000dc0)=0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r15}, 0x10) ftruncate(0xffffffffffffffff, 0x51a9497) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r5, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="3400000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014003530000000a828641f78e0e49b0053ec3cdfc5702a9a89970058ca2895bd3de973b1f11f1e4828d8a1482bbeceebf724b40f5399ff60fd288764146cc1da2fd00ce6102a13396e5be2c433b6d8b370c5640414f62992638fbbbce08239ebe49e7d8cab9848a002d264d79ffea9f5c2d820aa2aac1ddc32db126a7f59ea134b46abb699c0a5721f4eca4f48a61704bab5255f3a"], 0x34}}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x901, &(0x7f0000000500)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@nobarrier}, {@jqfmt_vfsv1}, {@nojournal_checksum}]}, 0x2, 0x470, &(0x7f0000001f00)="$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") 3m14.500284148s ago: executing program 35 (id=4343): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121000, 0x0) sendto$inet6(r1, &(0x7f0000000180)="19329afa9d25f2ae60a73748e1c6cbab844faffe30b04bfd6e24754f58742d2f5a8508ac8ac8", 0x26, 0x4, &(0x7f0000000200)={0xa, 0x4e22, 0xe0, @remote}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r3, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000), 0x1, 0x514, &(0x7f0000002080)="$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") creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x18) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000002c0)={0x3, 0x0, 0xffffffffffffffff, 0x0, 0x200000004, 0xd833, 0x0, 0x2, 0x4040c425}) 3m13.117419879s ago: executing program 36 (id=4373): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000880)='./file0\x00', 0x800700, &(0x7f0000000640)={[{@errors_remount}, {@bsdgroups}, {@dax}, {@noauto_da_alloc}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@oldalloc}, {@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}]}, 0x2, 0x45d, &(0x7f0000000980)="$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") 3m8.636978757s ago: executing program 37 (id=4469): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81, 0x2000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0) 3m8.636497927s ago: executing program 38 (id=4471): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000003c0)={r1, 0x4, 0x0, 0xfffffffffffffd7f, 0x0, 0x0, 0x200bdd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x32, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="7c00000010000304000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="a5f9ad8800000000540012800b000100697036677265000044000280080005000d00000005000800ff00000014000700fc02000000000000000000000000000108000100", @ANYRES32=0x0, @ANYBLOB="14000600fe8000181c49ef60bddbf20bebaa4a9f31000000003afbff03000900"/42], 0x7c}}, 0x4000005) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xec}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000800000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) ptrace$pokeuser(0x6, r2, 0x1000, 0x79) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m0.306607122s ago: executing program 39 (id=4600): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x0, 0x0}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08001a"], 0x18c0}}, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) sigaltstack(&(0x7f00000008c0)={0x0, 0x80000002}, 0x0) sigaltstack(&(0x7f0000001a00)={0x0, 0x80000002}, &(0x7f0000001b40)={0x0}) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x20, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x40800) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) write$binfmt_script(r5, &(0x7f0000000a00)={'#! ', './file0', [{0x20, 'syzkaller\x00'}, {}, {0x20, 'kfree\x00'}, {0x20, '\xbd*'}, {0x20, '(#&$^/}!(/'}, {0x20, ',{]'}, {0x20, '/dev/loop-control\x00'}, {0x20, '/dev/loop'}], 0xa, "c8ba8d4953c5ae55bb2d711100ca485194888c4073f56baaa061c3f0cff0246407fff42585176135fbe6f86f9dbf31e61bb614d6da546f01941539d4c7ca2d1c64f2246dbadcb635175b6a44a1ab6df3971e2117af2a7fae2af1fd604dcca4952cec9553c085f61dae62ddd72e4f67315f13fa916895827d6ba08a62bce36f2881dcf630803460187457256628b9eb39da2fe7a96c80de998918da1d1020c7"}, 0xec) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) rseq(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000800)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0x2, 0xb2, 0x1, 0x0, 0x0, 0xb32b, 0x0, 0x20009}) 2m24.075417728s ago: executing program 40 (id=5113): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r0, 0x0, 0x0) 2m18.945658875s ago: executing program 0 (id=5180): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b031404e0ff640f020047540ff6a13bb1000e04080008004803", 0x10f6c, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5, 0x0, 0x7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8f, 0x0, 0x7ffc1ffb}]}) process_mrelease(0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a80100001900010000000000000000001d0109005000128049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd00000044010680400175800c0005800400220004009800040008800800e600", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0500de00a800"/17], 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="785a822e4dddc47ab05cee366725cdb748a05dde714d52fba3dd5d197e627ef778d29ffa3a7b5b4609776c11643c0000000000000000c72cb91e51", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf2503000000"], 0x14}}, 0x4004) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f00000004000000040000000401010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000005"], 0x50) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x2) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x4, 0x8000003, 0x9, 0x407, 0x2a, 0x0}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000400)=0x11) 2m18.526524831s ago: executing program 0 (id=5182): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setreuid(0xee01, 0xee01) 2m18.422798313s ago: executing program 0 (id=5184): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRES32=0x0, @ANYRES64=r1, @ANYRES16=r0, @ANYRESHEX=0x0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000000)=@req3={0x9, 0x14, 0x10, 0x4, 0xfffffffc, 0x6, 0x4}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000) 2m18.332300814s ago: executing program 0 (id=5186): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) rt_sigpending(0x0, 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000040)='./file0\x00') 2m18.261772955s ago: executing program 0 (id=5187): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x20, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2m17.94915435s ago: executing program 0 (id=5189): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = memfd_secret(0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r2, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r3, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r1, 0x2e, 0x4608, @void}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r6, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r5, r8, 0xfffffffffffffc01, 0x0) tee(r5, r8, 0x60000000000, 0x0) 2m17.877656781s ago: executing program 41 (id=5189): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = memfd_secret(0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r2, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r3, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r1, 0x2e, 0x4608, @void}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r6, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r5, r8, 0xfffffffffffffc01, 0x0) tee(r5, r8, 0x60000000000, 0x0) 2m17.209703521s ago: executing program 9 (id=5191): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='kfree\x00') r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev, 0x9, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0902000000000000000001000000050002000a000000"], 0x38}}, 0x0) sendto$inet6(r1, &(0x7f0000000440)="4d806da3b234cb63962e0eaec414f8b42a8f944541a15bf91b55e41479d4261d859d361d98725ad81a76de1e835e336293e0345a92770e4bdabdf330b85633d967cf633e12227ad4581917ae65390fa4a5eb9a6dce37d90d5e46176aa9e9d4c0becc67d6203caf5ddce9abf0e1c2a1496657a6b60f", 0x59, 0x22010811, &(0x7f0000000400)={0xa, 0x4e21, 0x4, @empty, 0xa}, 0x1c) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0x9, 0xc) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x7) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000b900fdffffff18110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) socket(0x18, 0x5, 0xfffffffd) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) sendmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{0x0}, {&(0x7f00000005c0)="f1c8e383", 0x4}, {&(0x7f0000001400)="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", 0x1000}], 0x3}}], 0x1, 0x4000) 2m15.982565429s ago: executing program 9 (id=5200): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000001700"/28], 0x50) pipe2(&(0x7f0000001cc0), 0x80000) prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f0000000000)={0x0, 0x0}) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(r0, 0x0, 0x40000000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1df) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0xffff, @multicast1}}, 0x1e) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x0, @empty}}, 0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffb}}], 0x48, 0x8004}, 0x0) 2m15.839227791s ago: executing program 1 (id=5202): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000500)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x64, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x1, "22a836350c91f7ecf9684468c69002698680c4b90c47637ccc5153be82c8a704", "061219571c60c08f7358e70fc2a352a7", {"ccab104756eb9969e5c5ff78cf404010", "39d70a353ad1309fffda08f63a37ba61"}}}}}}}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) close(r2) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r5, &(0x7f0000000080)='./file0\x00') 2m15.794175972s ago: executing program 1 (id=5203): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@errors_remount}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x10}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@nojournal_checksum}]}, 0x1, 0x553, &(0x7f0000001080)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_config_ext={0x2, 0x3}, 0x4008, 0xa88, 0xfffffffd, 0x5, 0x0, 0x3c, 0xfffe}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file1\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) 2m15.793482882s ago: executing program 1 (id=5204): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000b19fe8ad9ef28d86ddd65743d4c365e400711142000000000085100000020000008500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="df5f744605b699fc49a6b66ca4b42a4c37e3bac9bb514ba1a49ebd10041db14a32a2543230ee353419d51fe7c488128fb642f4eb5ffd17584d2f9b6f65691cd840cb56d2f6a17f7224cc9d9fdd2dab1ec7768faa63d9ad093d905d78a5856a9df2b79caeadb86117ef8ecd5295146a9c832dac2d653d73155e568cb8d83f1d3ec849548e7f35a572a4a50375b81001c800d0a90ca98ebfdb0bfe92a3bbc537fd84eb6ae8b0f0fee08a9b3544bfe32f49161d45cdba6e2dcea7f0be3934c944cef1"], 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x2, 0x6, 0x520, 0x370, 0x370, 0x0, 0xd0, 0x370, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff, 0xff000000], [0x0, 0xff000000], 'syzkaller0\x00', 'pimreg0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x8, 0x7}, {}, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3ff}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff], [], 'bond_slave_1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4, 0x0, 0x2b}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'geneve1\x00', 'team_slave_1\x00', {0xff}, {}, 0x32, 0x9, 0x1, 0x40}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x24, 0x1}, {0x4, 0x4}, {0x2, 0x5, 0x5}, 0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) stat(&(0x7f0000000300)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff00001142"], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2m15.698093184s ago: executing program 1 (id=5205): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) rt_sigpending(0x0, 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000040)='./file0\x00') 2m15.653780404s ago: executing program 1 (id=5206): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000040)='./file0\x00') 2m15.571909216s ago: executing program 1 (id=5208): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000900)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="000000a127eee66d123be4180000000000b708000000f86e5f4574e3b8a92afcfd59785a584d41c08008c60ee258ad00000000000702e2fff7ffffffb602fffff9000000b70400"/87], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000600)='./file0\x00') getpeername$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES8, @ANYRES64, @ANYRES32=r1, @ANYRES32, @ANYBLOB="5a02af0de0c0c3dd2818d7504da570b2260790494e787c8dacc0c099860bf6dc8702e55a33dd30aa8817bb5a446d1dcc96d666922d90b1c14f505b6403398a76a4dbb62898461b725c4d0300f77f87d5ffd3336286a06f1ceac20d192102a1d1f7b27938cca71aa8ef2d7466de3660469612da29b89f1d530a1096d3424b30fa3f619104a8fdf49d5dd93cf09f1b18287c9905c3070561efbbacb7726dd143ce54b9062442f544d19cbe351d", @ANYRES16, @ANYRES16, @ANYRESDEC], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000002c0)='sched_switch\x00', r2}, 0x18) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000640)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000680)='kfree\x00', r5}, 0x18) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) write$cgroup_int(r3, &(0x7f0000000000)=0xfffffffffffffffc, 0x12) 2m15.556709176s ago: executing program 42 (id=5208): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000900)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="000000a127eee66d123be4180000000000b708000000f86e5f4574e3b8a92afcfd59785a584d41c08008c60ee258ad00000000000702e2fff7ffffffb602fffff9000000b70400"/87], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000600)='./file0\x00') getpeername$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES8, @ANYRES64, @ANYRES32=r1, @ANYRES32, @ANYBLOB="5a02af0de0c0c3dd2818d7504da570b2260790494e787c8dacc0c099860bf6dc8702e55a33dd30aa8817bb5a446d1dcc96d666922d90b1c14f505b6403398a76a4dbb62898461b725c4d0300f77f87d5ffd3336286a06f1ceac20d192102a1d1f7b27938cca71aa8ef2d7466de3660469612da29b89f1d530a1096d3424b30fa3f619104a8fdf49d5dd93cf09f1b18287c9905c3070561efbbacb7726dd143ce54b9062442f544d19cbe351d", @ANYRES16, @ANYRES16, @ANYRESDEC], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000002c0)='sched_switch\x00', r2}, 0x18) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000640)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000680)='kfree\x00', r5}, 0x18) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) write$cgroup_int(r3, &(0x7f0000000000)=0xfffffffffffffffc, 0x12) 2m15.006888774s ago: executing program 9 (id=5216): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 2m14.791776857s ago: executing program 9 (id=5218): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000040)='./file0\x00') 2m14.774410948s ago: executing program 9 (id=5219): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRES32=0x0, @ANYRES64=r1, @ANYRES16=r0, @ANYRESHEX=0x0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000000)=@req3={0x9, 0x14, 0x10, 0x4, 0xfffffffc, 0x6, 0x4}, 0x1c) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000) 2m14.644446439s ago: executing program 9 (id=5220): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x457) 2m14.644274349s ago: executing program 43 (id=5220): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x457) 2m11.26995827s ago: executing program 7 (id=5242): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg$inet(r1, &(0x7f0000002d80)=[{{&(0x7f0000000280)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x8045) syz_emit_ethernet(0x4e, &(0x7f0000001140)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfd}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0xc6, 0x0, {0x9, 0x4, 0x3, 0x2f, 0x5, 0x66, 0x7cf, 0x6, 0x33, 0x0, @multicast2, @broadcast, {[@rr={0x7, 0x3, 0x96}, @cipso={0x86, 0x8, 0x3, [{0x6, 0x2}]}, @rr={0x7, 0x3, 0xe2}]}}}}}}}, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"}) r2 = syz_open_pts(r0, 0x20800) dup3(r2, r0, 0x200000000000000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x44) 2m10.61795277s ago: executing program 7 (id=5246): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffffff, 0xb, 0x5}}}}]}, 0x40}}, 0x0) (fail_nth: 7) 2m10.324186135s ago: executing program 7 (id=5247): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000080000000a00000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x241, 0x0, 0x0) 2m10.323438584s ago: executing program 7 (id=5249): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000040)='./file0\x00') 2m10.304982725s ago: executing program 7 (id=5250): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRES32=0x0, @ANYRES64=r1, @ANYRES16=r0, @ANYRESHEX=0x0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0x7000000) 2m10.000404079s ago: executing program 7 (id=5254): r0 = socket$inet6(0xa, 0x3, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0xa86, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, {0x0, 0xb5, 0x2}}, {{@in6=@mcast2, 0x0, 0x3c}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec0, 0x0, 0x0, 0x10, 0x7fff}, 0x80) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x18}, 0x2000c084) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) write$binfmt_aout(r6, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ff00"}) r7 = syz_open_pts(r6, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0x12) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r5}, 0x10) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000005304", @ANYRES16], 0x14}}, 0x20000000) 2m10.000164139s ago: executing program 44 (id=5254): r0 = socket$inet6(0xa, 0x3, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0xa86, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, {0x0, 0xb5, 0x2}}, {{@in6=@mcast2, 0x0, 0x3c}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec0, 0x0, 0x0, 0x10, 0x7fff}, 0x80) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x18}, 0x2000c084) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) write$binfmt_aout(r6, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ff00"}) r7 = syz_open_pts(r6, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0x12) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r5}, 0x10) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000005304", @ANYRES16], 0x14}}, 0x20000000) 1m17.266559633s ago: executing program 4 (id=6119): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000040)='./file0\x00') 1m17.253108603s ago: executing program 4 (id=6120): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/217, 0xd9}], 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_clone(0x44208400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r8 = semget(0x0, 0x3, 0x203) semctl$IPC_RMID(r8, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x0) 1m16.379391657s ago: executing program 4 (id=6132): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}}, 0x0) 1m16.358191237s ago: executing program 4 (id=6134): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@init_itable}, {@grpjquota}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x9}}, {@mblk_io_submit}, {@bh}]}, 0x1, 0x553, &(0x7f0000001080)="$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") ftruncate(0xffffffffffffffff, 0x2007ffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000200"/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500211f6c51e68c4fbf0000000000b7080000000000007b8af8ff00000000b7080000008000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r4, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="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", 0x341}], 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000dc0)=ANY=[@ANYRES64=r3, @ANYRES32, @ANYRES16=r2, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0500000001000000020000000b00"/28], 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000020000000000000000000018130000", @ANYRES32=r5, @ANYBLOB="0000000000000000850000001f00000018010000202078250000000000205fbf8b4a677c0e6cab0b20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b30300000f000000850000000600"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) times(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=@delqdisc={0x24, 0x25, 0x400, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xe}, {0xe, 0xb}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) pipe(&(0x7f0000000080)) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000240)={[{@grpid}, {@noquota}, {@jqfmt_vfsv1}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}]}, 0x2, 0x4f3, &(0x7f0000000700)="$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") r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x60) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r8, 0x401c5820, &(0x7f0000000100)=@v1={0x8, @aes256, 0x0, @desc3}) close(r7) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x4007) fcntl$setpipe(r4, 0x407, 0x6) openat$incfs(r0, &(0x7f0000000100)='.log\x00', 0x60000, 0xd866ed50cc9ba4aa) 1m15.955966073s ago: executing program 4 (id=6136): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) syz_io_uring_setup(0x2201, &(0x7f00000004c0)={0x0, 0xc44c, 0x8, 0x0, 0x68}, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8932, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280050001"], 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m4.772303082s ago: executing program 4 (id=6304): prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='\fF\xd3t\x98\xda\x15\r\xca\x04\xbc\x10\f\xf8\xec\xd3\xe5k\xa8^[\x04\x84\x9c\x83n7N4\xcf#\xaeAC\xd7\xb8\x12\xd9d\xa8h!\\\xccq\f\xc9U\\\x8a\x91\xf9\x00\xe1\xd5\xcdw\x85\xa7\x89t\xd5\xa1\x8aT\xe3(\x01g\x12\xfb\xff\x16\fv<\x87=\xe7\xed\x8c\xaf%\xb2\xde\xe0\x9d\x93\xfb\x10\xdc\x1c3\xbe\xad\x9f\xf1\xd3\x1c\x10\xa8;\xbf\xafaB\xb3\xe7L\x84\xdc(x\xe6\xe0+`\x96\x1b\xc8\xff\xaaS\xd1Z\x9e\x05k\x17]F\xa1\xdc\x8a\xb9\x13\xee\xa23%\xc9eT\xd4\xbc\xb7y\xcb\xf5{a\xd0E\x91\x13\xe3\xf3\x9f\xb5AE\xfb}K\x86 =\xb1\x8b%\xe9\xdb?+$\xe4c\xba\xcbE\x1c\x99\xe9\xcc\x90\xaf\x02%\f\xad\x98qM\xb0r\x8bD\x1e\xbf\xfcu\xe9\x98T7^\x8cA\xd1m\xd9\xa93\tz\x98\aX\tR\x14\xfa\xb5\x00\x98\xb9\xf86\x95TL\x8d\xa9\x1dT5&|e\xa6[mqicWjH\xca\xb27\x1b\xe2&\x03\xe7\x06\r\x9d\xab3\xac\vC8mG0\x19\xb1\xeb\xe6{\x10\f\xab\xe6,\xa1\b7?]\xdb+\x81\x84\xd6\x94\t\x9d\xab\x99-\xe3') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x14) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x9, 0x3, 0x2a0, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, &(0x7f00000002c0), {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0xfff, 0x1, 'syz1\x00', {0x5}}}}, {{@ip={@multicast2, @loopback, 0xff000000, 0x0, 'pimreg\x00', 'vlan1\x00', {}, {0xff}, 0xc, 0x1, 0x5}, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xb, 0x0, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xb, 0x80, 0xe082, 0x5264915f, 'pptp\x00', 'syz1\x00', {0xff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r7, 0x0, 0x4ab}, 0x18) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x4000044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) removexattr(0x0, 0x0) 1m4.771798862s ago: executing program 45 (id=6304): prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='\fF\xd3t\x98\xda\x15\r\xca\x04\xbc\x10\f\xf8\xec\xd3\xe5k\xa8^[\x04\x84\x9c\x83n7N4\xcf#\xaeAC\xd7\xb8\x12\xd9d\xa8h!\\\xccq\f\xc9U\\\x8a\x91\xf9\x00\xe1\xd5\xcdw\x85\xa7\x89t\xd5\xa1\x8aT\xe3(\x01g\x12\xfb\xff\x16\fv<\x87=\xe7\xed\x8c\xaf%\xb2\xde\xe0\x9d\x93\xfb\x10\xdc\x1c3\xbe\xad\x9f\xf1\xd3\x1c\x10\xa8;\xbf\xafaB\xb3\xe7L\x84\xdc(x\xe6\xe0+`\x96\x1b\xc8\xff\xaaS\xd1Z\x9e\x05k\x17]F\xa1\xdc\x8a\xb9\x13\xee\xa23%\xc9eT\xd4\xbc\xb7y\xcb\xf5{a\xd0E\x91\x13\xe3\xf3\x9f\xb5AE\xfb}K\x86 =\xb1\x8b%\xe9\xdb?+$\xe4c\xba\xcbE\x1c\x99\xe9\xcc\x90\xaf\x02%\f\xad\x98qM\xb0r\x8bD\x1e\xbf\xfcu\xe9\x98T7^\x8cA\xd1m\xd9\xa93\tz\x98\aX\tR\x14\xfa\xb5\x00\x98\xb9\xf86\x95TL\x8d\xa9\x1dT5&|e\xa6[mqicWjH\xca\xb27\x1b\xe2&\x03\xe7\x06\r\x9d\xab3\xac\vC8mG0\x19\xb1\xeb\xe6{\x10\f\xab\xe6,\xa1\b7?]\xdb+\x81\x84\xd6\x94\t\x9d\xab\x99-\xe3') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x14) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x9, 0x3, 0x2a0, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, &(0x7f00000002c0), {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0xfff, 0x1, 'syz1\x00', {0x5}}}}, {{@ip={@multicast2, @loopback, 0xff000000, 0x0, 'pimreg\x00', 'vlan1\x00', {}, {0xff}, 0xc, 0x1, 0x5}, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xb, 0x0, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xb, 0x80, 0xe082, 0x5264915f, 'pptp\x00', 'syz1\x00', {0xff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r7, 0x0, 0x4ab}, 0x18) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x4000044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) removexattr(0x0, 0x0) 2.168355077s ago: executing program 3 (id=7211): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) 1.948189251s ago: executing program 3 (id=7213): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4062, 0xfde}, {&(0x7f0000002640)=""/4115, 0x1013}, {&(0x7f00000009c0)=""/112, 0x70}, {&(0x7f0000000200)=""/165, 0xa5}], 0x4}, 0x0) 1.909336061s ago: executing program 2 (id=7216): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_io_uring_setup(0x38bf, &(0x7f0000000200)={0x0, 0xcd1d, 0x10100, 0x0, 0xd6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r0, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 1.859458632s ago: executing program 3 (id=7219): socket(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1.797011393s ago: executing program 3 (id=7222): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) write(r1, &(0x7f0000000000)="fc", 0x1) vmsplice(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="af", 0x1}], 0x1, 0x4) 1.192434442s ago: executing program 2 (id=7240): r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) sendto$inet(r0, &(0x7f00000023c0)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 1.192078682s ago: executing program 2 (id=7241): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x8a, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000980)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x800000, 0x22}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x39}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 792.426848ms ago: executing program 3 (id=7250): socket$netlink(0x10, 0x3, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2d, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8d0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 612.858721ms ago: executing program 6 (id=7255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) close(0x3) 612.54123ms ago: executing program 3 (id=7256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000180), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x48240, 0x2) 274.796816ms ago: executing program 5 (id=7261): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000480)={0x9c6, 0x9, 0x0, 'queue1\x00', 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400}, 0x2}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x3, 0x1, 0x44, 0x0, 0xd}) 220.809317ms ago: executing program 2 (id=7262): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 220.502157ms ago: executing program 5 (id=7263): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48890}, 0x0) 160.496038ms ago: executing program 2 (id=7264): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)='o\b', 0x2}], 0x1}}], 0x1, 0x2400c040) 122.444158ms ago: executing program 5 (id=7265): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) 121.980718ms ago: executing program 8 (id=7266): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x2d}, 0x28) 110.508838ms ago: executing program 6 (id=7267): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x60, &(0x7f0000000000)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x2a, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2}]}}}}}}, 0x0) 102.210999ms ago: executing program 2 (id=7268): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, "01000000000e65300000000800000200"}) pipe2(0x0, 0x10000) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000540)=""/239, 0xef}], 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x6) 66.135479ms ago: executing program 8 (id=7269): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) 65.891189ms ago: executing program 5 (id=7270): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x121d, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 65.659809ms ago: executing program 6 (id=7271): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x800455cc, 0x8000000001) 54.024309ms ago: executing program 8 (id=7272): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f00000008c0)) 53.724309ms ago: executing program 5 (id=7273): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000000c0)=ANY=[]) 15.86409ms ago: executing program 6 (id=7274): prctl$PR_SET_SECUREBITS(0x1c, 0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x0) 15.67841ms ago: executing program 8 (id=7275): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 15.55511ms ago: executing program 5 (id=7276): r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 15.40828ms ago: executing program 8 (id=7277): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 15.32833ms ago: executing program 6 (id=7278): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x2400c040) 3.34944ms ago: executing program 8 (id=7279): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) close(0x3) 0s ago: executing program 6 (id=7280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000640)=' hash=', 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x18) symlinkat(&(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000140)='./file0\x00') r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) kernel console output (not intermixed with test programs): 00000293 ORIG_RAX: 0000000000000001 [ 421.783709][T22655] RAX: ffffffffffffffda RBX: 00007f3b0aeb5fa0 RCX: 00007f3b0ac8d3df [ 421.783734][T22655] RDX: 000000000000004a RSI: 0000200000000040 RDI: 00000000000000c8 [ 421.783745][T22655] RBP: 00007f3b092f7090 R08: 0000000000000000 R09: 0000000000000000 [ 421.783759][T22655] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 421.783796][T22655] R13: 0000000000000000 R14: 00007f3b0aeb5fa0 R15: 00007ffecaac37f8 [ 421.783812][T22655] [ 422.150738][T22662] wireguard0: entered promiscuous mode [ 422.156767][T22662] wireguard0: entered allmulticast mode [ 422.204097][T22671] bond0: (slave dummy0): Releasing backup interface [ 422.262976][T22680] netlink: 'syz.8.6389': attribute type 10 has an invalid length. [ 422.272919][T22680] bond0: (slave dummy0): Releasing backup interface [ 422.285611][T22680] team0: Port device dummy0 added [ 422.308183][T22683] dummy0: entered promiscuous mode [ 422.314924][T22683] dummy0: entered allmulticast mode [ 422.320943][T22683] team0: Port device dummy0 added [ 422.331281][T22680] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 422.342894][T22680] team0: Failed to send options change via netlink (err -105) [ 422.352353][T22680] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 422.362129][T22680] team0: Port device dummy0 removed [ 422.370126][T22680] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 422.379269][T22683] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 422.389652][T22683] dummy0: left promiscuous mode [ 422.394677][T22683] dummy0: left allmulticast mode [ 422.400219][T22683] team0: Failed to send options change via netlink (err -105) [ 422.407732][T22683] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 422.417415][T22683] team0: Port device dummy0 removed [ 422.425686][T22683] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 422.551578][T22701] bond0: (slave dummy0): Releasing backup interface [ 422.565932][T22701] team0: Port device dummy0 added [ 422.567146][T22707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6400'. [ 422.594072][T22701] team0: Port device dummy0 removed [ 422.605339][T22701] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 422.621463][T22709] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 422.663601][T22718] bond0: (slave dummy0): Releasing backup interface [ 422.670838][T22720] FAULT_INJECTION: forcing a failure. [ 422.670838][T22720] name failslab, interval 1, probability 0, space 0, times 0 [ 422.683609][T22720] CPU: 1 UID: 0 PID: 22720 Comm: syz.3.6405 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 422.683791][T22720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 422.683855][T22720] Call Trace: [ 422.683863][T22720] [ 422.683871][T22720] __dump_stack+0x1d/0x30 [ 422.683894][T22720] dump_stack_lvl+0xe8/0x140 [ 422.683913][T22720] dump_stack+0x15/0x1b [ 422.683930][T22720] should_fail_ex+0x265/0x280 [ 422.683988][T22720] should_failslab+0x8c/0xb0 [ 422.684011][T22720] kmem_cache_alloc_noprof+0x50/0x310 [ 422.684037][T22720] ? __anon_vma_prepare+0x70/0x2f0 [ 422.684114][T22720] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 422.684169][T22720] __anon_vma_prepare+0x70/0x2f0 [ 422.684197][T22720] do_wp_page+0x1838/0x2400 [ 422.684218][T22720] ? __rcu_read_lock+0x37/0x50 [ 422.684253][T22720] handle_mm_fault+0x77d/0x2be0 [ 422.684274][T22720] ? mas_walk+0xf2/0x120 [ 422.684307][T22720] do_user_addr_fault+0x636/0x1090 [ 422.684374][T22720] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 422.684403][T22720] exc_page_fault+0x62/0xa0 [ 422.684429][T22720] asm_exc_page_fault+0x26/0x30 [ 422.684508][T22720] RIP: 0033:0x7f3b0ab50ca3 [ 422.684523][T22720] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 422.684540][T22720] RSP: 002b:00007f3b092f64a0 EFLAGS: 00010202 [ 422.684556][T22720] RAX: 0000000000000400 RBX: 00007f3b092f6540 RCX: 00007f3b00ed7000 [ 422.684569][T22720] RDX: 00007f3b092f66e0 RSI: 0000000000000001 RDI: 00007f3b092f65e0 [ 422.684581][T22720] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000ac [ 422.684594][T22720] R10: 00000000000000c0 R11: 00007f3b092f6540 R12: 0000000000000001 [ 422.684622][T22720] R13: 00007f3b0ad2c200 R14: 0000000000000020 R15: 00007f3b092f65e0 [ 422.684707][T22720] [ 422.684716][T22720] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 422.880189][T22718] team0: Port device dummy0 added [ 422.886034][T22724] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 422.900415][T22724] team0: Failed to send options change via netlink (err -105) [ 422.908094][T22724] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 422.917036][T22724] team0: Port device dummy0 removed [ 422.923880][T22724] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 422.953468][T22725] bond0: (slave dummy0): Releasing backup interface [ 423.014311][T22736] Cannot find map_set index 0 as target [ 423.049283][T22740] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 423.082945][T22742] Cannot find map_set index 0 as target [ 423.088346][T22744] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 423.122264][T22745] lo speed is unknown, defaulting to 1000 [ 423.135996][T22747] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6416'. [ 423.145133][T22747] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6416'. [ 423.355740][T22766] Cannot find map_set index 0 as target [ 423.408686][T22774] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.450817][T22774] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.501302][T22774] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.566063][ T29] kauditd_printk_skb: 534 callbacks suppressed [ 423.566077][ T29] audit: type=1326 audit(1751504184.550:31876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22782 comm="syz.5.6426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772bade929 code=0x7ffc0000 [ 423.595903][ T29] audit: type=1326 audit(1751504184.550:31877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22782 comm="syz.5.6426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f772bade929 code=0x7ffc0000 [ 423.619767][ T29] audit: type=1326 audit(1751504184.550:31878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22782 comm="syz.5.6426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772bade929 code=0x7ffc0000 [ 423.643519][ T29] audit: type=1326 audit(1751504184.550:31879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22782 comm="syz.5.6426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772bade929 code=0x7ffc0000 [ 423.667143][ T29] audit: type=1326 audit(1751504184.550:31880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22782 comm="syz.5.6426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f772bade929 code=0x7ffc0000 [ 423.690807][ T29] audit: type=1326 audit(1751504184.550:31881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22782 comm="syz.5.6426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772bade929 code=0x7ffc0000 [ 423.714523][ T29] audit: type=1326 audit(1751504184.550:31882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22782 comm="syz.5.6426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f772bade929 code=0x7ffc0000 [ 423.738226][ T29] audit: type=1326 audit(1751504184.550:31883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22782 comm="syz.5.6426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772bade929 code=0x7ffc0000 [ 423.761814][ T29] audit: type=1326 audit(1751504184.550:31884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22782 comm="syz.5.6426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f772bade929 code=0x7ffc0000 [ 423.785435][ T29] audit: type=1326 audit(1751504184.550:31885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22782 comm="syz.5.6426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772bade929 code=0x7ffc0000 [ 423.809857][T22774] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.827364][T22787] bond0: (slave dummy0): Releasing backup interface [ 423.838022][T22787] bridge_slave_0: left allmulticast mode [ 423.843758][T22787] bridge_slave_0: left promiscuous mode [ 423.849490][T22787] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.857928][T22787] bridge_slave_1: left allmulticast mode [ 423.863637][T22787] bridge_slave_1: left promiscuous mode [ 423.869380][T22787] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.878271][T22787] bond0: (slave bond_slave_0): Releasing backup interface [ 423.889834][T22787] bond0: (slave bond_slave_1): Releasing backup interface [ 423.902938][T22787] team0: Port device team_slave_0 removed [ 423.912166][T22787] team0: Port device team_slave_1 removed [ 423.930797][T22787] batadv1: left allmulticast mode [ 423.935907][T22787] batadv1: left promiscuous mode [ 423.941066][T22787] bridge0: port 3(batadv1) entered disabled state [ 423.966686][T22774] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.978350][T22774] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.992908][T22774] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.011486][T22774] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.044365][T22796] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6431'. [ 424.053487][T22796] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6431'. [ 424.142085][T22802] 8021q: adding VLAN 0 to HW filter on device bond5 [ 424.170717][T22802] macvlan2: entered promiscuous mode [ 424.176055][T22802] macvlan2: entered allmulticast mode [ 424.212431][T22802] bond5: entered promiscuous mode [ 424.217852][T22802] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 424.246073][T22802] bond5: left promiscuous mode [ 424.260444][T22808] 9pnet_fd: Insufficient options for proto=fd [ 424.268334][T22808] binfmt_misc: register: failed to install interpreter file ./file0 [ 424.318199][T22810] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 424.404525][T22814] pimreg: entered allmulticast mode [ 424.443202][T22813] pimreg: left allmulticast mode [ 424.479325][T22821] bond0: (slave dummy0): Releasing backup interface [ 424.665933][T22831] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6443'. [ 424.914151][T22842] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6444'. [ 425.117141][T22849] lo speed is unknown, defaulting to 1000 [ 425.162019][T22849] validate_nla: 12 callbacks suppressed [ 425.162034][T22849] netlink: 'syz.5.6446': attribute type 1 has an invalid length. [ 425.222270][T22849] gretap1: entered promiscuous mode [ 425.369959][T22852] netlink: 'syz.3.6447': attribute type 10 has an invalid length. [ 425.379737][T22852] bond0: (slave dummy0): Releasing backup interface [ 425.388935][T22852] dummy0: entered promiscuous mode [ 425.394131][T22852] dummy0: entered allmulticast mode [ 425.399713][T22852] team0: Port device dummy0 added [ 425.412775][T22852] netlink: 'syz.3.6447': attribute type 10 has an invalid length. [ 425.421647][T22852] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 425.432206][T22852] dummy0: left promiscuous mode [ 425.437239][T22852] dummy0: left allmulticast mode [ 425.443166][T22852] team0: Failed to send options change via netlink (err -105) [ 425.450814][T22852] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 425.460011][T22852] team0: Port device dummy0 removed [ 425.467607][T22852] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 425.513739][T22860] IPv6: NLM_F_CREATE should be specified when creating new route [ 425.581034][T22874] syz!: rxe_newlink: already configured on team_slave_0 [ 425.590725][T22874] netlink: ' FÓt˜Úʼ øì': attribute type 7 has an invalid length. [ 425.611872][T22876] netlink: 'syz.3.6456': attribute type 1 has an invalid length. [ 425.624434][T22876] 8021q: adding VLAN 0 to HW filter on device bond7 [ 425.639058][T22876] macvlan2: entered promiscuous mode [ 425.644368][T22876] macvlan2: entered allmulticast mode [ 425.650799][T22876] bond7: entered promiscuous mode [ 425.656206][T22876] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 425.664273][T22876] bond7: left promiscuous mode [ 425.705654][T22880] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 425.715768][T22880] netlink: ' FÓt˜Úʼ øì': attribute type 7 has an invalid length. [ 425.748999][T22884] netlink: 'syz.3.6458': attribute type 10 has an invalid length. [ 425.760813][T22884] bond0: (slave dummy0): Releasing backup interface [ 425.773146][T22884] dummy0: entered promiscuous mode [ 425.778453][T22884] dummy0: entered allmulticast mode [ 425.784126][T22884] team0: Port device dummy0 added [ 425.793625][T22883] bond0: (slave dummy0): Releasing backup interface [ 425.800568][T22884] netlink: 'syz.3.6458': attribute type 10 has an invalid length. [ 425.819113][T22884] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 425.830909][T22884] dummy0: left promiscuous mode [ 425.835959][T22884] dummy0: left allmulticast mode [ 425.841539][T22884] team0: Failed to send options change via netlink (err -105) [ 425.849080][T22884] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 425.858044][T22884] team0: Port device dummy0 removed [ 425.866200][T22884] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 425.952015][T22896] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.000975][T22896] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.003844][T22898] __nla_validate_parse: 2 callbacks suppressed [ 426.003859][T22898] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6460'. [ 426.050764][T22896] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.120325][T22896] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.187365][T22896] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.201280][T22896] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.215034][T22896] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.227599][T22896] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.287371][T22909] netlink: 'syz.3.6467': attribute type 1 has an invalid length. [ 426.380455][T22916] lo speed is unknown, defaulting to 1000 [ 426.417844][T22917] netlink: 'syz.3.6469': attribute type 1 has an invalid length. [ 426.565020][T22924] team0: Port device dummy0 added [ 426.572944][T22924] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 426.583728][T22924] team0: Failed to send options change via netlink (err -105) [ 426.591468][T22924] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 426.600438][T22924] team0: Port device dummy0 removed [ 426.607861][T22924] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 426.640887][T22926] bond0: (slave dummy0): Releasing backup interface [ 426.650799][T22926] team0: Port device dummy0 added [ 426.659078][T22926] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 426.671239][T22926] team0: Failed to send options change via netlink (err -105) [ 426.678948][T22926] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 426.687856][T22926] team0: Port device dummy0 removed [ 426.695455][T22926] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 426.755594][T22930] 8021q: adding VLAN 0 to HW filter on device bond5 [ 426.782159][T22930] macvlan2: entered promiscuous mode [ 426.787617][T22930] macvlan2: entered allmulticast mode [ 426.794094][T22930] bond5: entered promiscuous mode [ 426.800904][T22935] serio: Serial port ttyS3 [ 426.801854][T22930] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 426.813723][T22930] bond5: left promiscuous mode [ 426.912804][T22949] team0: Port device dummy0 added [ 426.919635][T22949] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 426.929266][T22949] team0: Failed to send options change via netlink (err -105) [ 426.936789][T22949] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 426.945740][T22949] team0: Port device dummy0 removed [ 426.954856][T22949] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 427.015601][T22957] bond0: (slave dummy0): Releasing backup interface [ 427.061217][T22961] team0: Port device dummy0 added [ 427.067451][T22961] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 427.078741][T22961] team0: Failed to send options change via netlink (err -105) [ 427.087109][T22961] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 427.097845][T22961] team0: Port device dummy0 removed [ 427.105442][T22961] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 427.188779][T22965] bond0: (slave dummy0): Releasing backup interface [ 427.197778][T22965] team0: Port device dummy0 added [ 427.221136][T22965] team0: Port device dummy0 removed [ 427.228529][T22965] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 427.286971][T22976] team0: Port device dummy0 added [ 427.297361][T22976] team0: Port device dummy0 removed [ 427.306282][T22976] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 427.322025][T22977] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6491'. [ 427.337729][T22977] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 427.407968][T22983] bond0: (slave dummy0): Releasing backup interface [ 427.447816][T22985] bond0: (slave dummy0): Releasing backup interface [ 427.503977][T22987] bridge0: port 1(batadv0) entered blocking state [ 427.510808][T22987] bridge0: port 1(batadv0) entered disabled state [ 427.517663][T22987] batadv0: entered allmulticast mode [ 427.525978][T22987] batadv0: entered promiscuous mode [ 427.535403][T22987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6495'. [ 427.545491][T22987] batadv0 (unregistering): left allmulticast mode [ 427.551965][T22987] batadv0 (unregistering): left promiscuous mode [ 427.558344][T22987] bridge0: port 1(batadv0) entered disabled state [ 427.586166][T22989] netlink: 344 bytes leftover after parsing attributes in process `syz.2.6495'. [ 427.703516][ T3415] hid-generic 0003:0004:0000.007F: unknown main item tag 0x0 [ 427.711015][ T3415] hid-generic 0003:0004:0000.007F: unknown main item tag 0x0 [ 427.718406][ T3415] hid-generic 0003:0004:0000.007F: unknown main item tag 0x0 [ 427.726440][ T3415] hid-generic 0003:0004:0000.007F: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 427.798917][T23003] bridge0: port 1(batadv0) entered blocking state [ 427.805424][T23003] bridge0: port 1(batadv0) entered disabled state [ 427.815049][T23003] batadv0: entered allmulticast mode [ 427.823620][T23003] batadv0: entered promiscuous mode [ 427.831902][T23003] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6500'. [ 427.843456][T23008] bridge0: port 1(batadv0) entered blocking state [ 427.849971][T23008] bridge0: port 1(batadv0) entered disabled state [ 427.857132][T23008] batadv0: entered allmulticast mode [ 427.863296][T23008] batadv0: entered promiscuous mode [ 427.872475][T23003] batadv0 (unregistering): left allmulticast mode [ 427.879137][T23003] batadv0 (unregistering): left promiscuous mode [ 427.881938][T23008] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6502'. [ 427.885871][T23003] bridge0: port 1(batadv0) entered disabled state [ 427.896565][T23016] netlink: 344 bytes leftover after parsing attributes in process `syz.6.6500'. [ 427.913545][T23008] batadv0 (unregistering): left allmulticast mode [ 427.920074][T23008] batadv0 (unregistering): left promiscuous mode [ 427.926615][T23008] bridge0: port 1(batadv0) entered disabled state [ 427.933194][T23017] netlink: 344 bytes leftover after parsing attributes in process `syz.5.6502'. [ 427.946255][T23015] bond0: (slave dummy0): Releasing backup interface [ 427.955744][T23015] team0: Port device dummy0 added [ 427.966233][T23015] team0: Port device dummy0 removed [ 427.974629][T23015] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 428.067342][T23028] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6509'. [ 428.076402][T23028] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6509'. [ 428.158344][T23038] block device autoloading is deprecated and will be removed. [ 428.253338][T23028] loop6: detected capacity change from 0 to 1024 [ 428.260903][T23028] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 428.271881][T23028] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 428.282843][T23028] JBD2: no valid journal superblock found [ 428.288953][T23028] EXT4-fs (loop6): Could not load journal inode [ 428.302405][T23028] loop6: detected capacity change from 0 to 128 [ 428.326699][T23055] bond0: (slave dummy0): Releasing backup interface [ 428.381887][T23055] dummy0: entered promiscuous mode [ 428.389035][T23055] dummy0: entered allmulticast mode [ 428.404492][T23055] team0: Port device dummy0 added [ 428.446039][T23055] dummy0: left promiscuous mode [ 428.451402][T23055] dummy0: left allmulticast mode [ 428.457038][T23055] team0: Port device dummy0 removed [ 428.465834][T23055] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 428.489292][T23058] 9pnet_fd: Insufficient options for proto=fd [ 428.619075][T23068] bridge0: port 1(batadv0) entered blocking state [ 428.625543][T23068] bridge0: port 1(batadv0) entered disabled state [ 428.632397][T23068] batadv0: entered allmulticast mode [ 428.638180][T23068] batadv0: entered promiscuous mode [ 428.648250][T23068] batadv0 (unregistering): left allmulticast mode [ 428.654880][T23068] batadv0 (unregistering): left promiscuous mode [ 428.661325][T23068] bridge0: port 1(batadv0) entered disabled state [ 428.740940][T23071] bridge0: port 1(batadv0) entered blocking state [ 428.747464][T23071] bridge0: port 1(batadv0) entered disabled state [ 428.756262][T23071] batadv0: entered allmulticast mode [ 428.762317][T23071] batadv0: entered promiscuous mode [ 428.773067][T23071] batadv0 (unregistering): left allmulticast mode [ 428.779604][T23071] batadv0 (unregistering): left promiscuous mode [ 428.785968][T23071] bridge0: port 1(batadv0) entered disabled state [ 428.920951][ T29] kauditd_printk_skb: 571 callbacks suppressed [ 428.920965][ T29] audit: type=1326 audit(1751504189.911:32457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23075 comm="syz.8.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c6e7e929 code=0x7ffc0000 [ 428.959706][ T29] audit: type=1326 audit(1751504189.941:32458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23075 comm="syz.8.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8c6e7e929 code=0x7ffc0000 [ 428.983419][ T29] audit: type=1326 audit(1751504189.941:32459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23075 comm="syz.8.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c6e7e929 code=0x7ffc0000 [ 429.007074][ T29] audit: type=1326 audit(1751504189.941:32460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23075 comm="syz.8.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c6e7e929 code=0x7ffc0000 [ 429.030763][ T29] audit: type=1326 audit(1751504189.941:32461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23075 comm="syz.8.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8c6e7e929 code=0x7ffc0000 [ 429.054482][ T29] audit: type=1326 audit(1751504189.941:32462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23075 comm="syz.8.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c6e7e929 code=0x7ffc0000 [ 429.078080][ T29] audit: type=1326 audit(1751504189.941:32463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23075 comm="syz.8.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c6e7e929 code=0x7ffc0000 [ 429.102067][ T29] audit: type=1326 audit(1751504189.941:32464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23075 comm="syz.8.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8c6e7e929 code=0x7ffc0000 [ 429.125842][ T29] audit: type=1326 audit(1751504189.941:32465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23075 comm="syz.8.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c6e7e929 code=0x7ffc0000 [ 429.149434][ T29] audit: type=1326 audit(1751504189.941:32466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23075 comm="syz.8.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c6e7e929 code=0x7ffc0000 [ 429.299667][T23103] bridge0: port 1(batadv0) entered blocking state [ 429.306121][T23103] bridge0: port 1(batadv0) entered disabled state [ 429.312934][T23103] batadv0: entered allmulticast mode [ 429.318744][T23103] batadv0: entered promiscuous mode [ 429.327066][T23103] batadv0 (unregistering): left allmulticast mode [ 429.333725][T23103] batadv0 (unregistering): left promiscuous mode [ 429.340394][T23103] bridge0: port 1(batadv0) entered disabled state [ 429.435421][T23110] 9pnet_fd: Insufficient options for proto=fd [ 429.446938][T23112] 9pnet_fd: Insufficient options for proto=fd [ 429.617233][T23131] FAULT_INJECTION: forcing a failure. [ 429.617233][T23131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.630363][T23131] CPU: 0 UID: 0 PID: 23131 Comm: syz.6.6542 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 429.630392][T23131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 429.630456][T23131] Call Trace: [ 429.630462][T23131] [ 429.630469][T23131] __dump_stack+0x1d/0x30 [ 429.630549][T23131] dump_stack_lvl+0xe8/0x140 [ 429.630569][T23131] dump_stack+0x15/0x1b [ 429.630650][T23131] should_fail_ex+0x265/0x280 [ 429.630678][T23131] should_fail+0xb/0x20 [ 429.630704][T23131] should_fail_usercopy+0x1a/0x20 [ 429.630734][T23131] _copy_to_user+0x20/0xa0 [ 429.630763][T23131] simple_read_from_buffer+0xb5/0x130 [ 429.630795][T23131] proc_fail_nth_read+0x100/0x140 [ 429.630870][T23131] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 429.631025][T23131] vfs_read+0x1a0/0x6f0 [ 429.631053][T23131] ? __rcu_read_unlock+0x4f/0x70 [ 429.631074][T23131] ? __rcu_read_unlock+0x4f/0x70 [ 429.631094][T23131] ? __fget_files+0x184/0x1c0 [ 429.631150][T23131] ksys_read+0xda/0x1a0 [ 429.631175][T23131] __x64_sys_read+0x40/0x50 [ 429.631203][T23131] x64_sys_call+0x2d77/0x2fb0 [ 429.631225][T23131] do_syscall_64+0xd2/0x200 [ 429.631255][T23131] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 429.631278][T23131] ? clear_bhb_loop+0x40/0x90 [ 429.631295][T23131] ? clear_bhb_loop+0x40/0x90 [ 429.631313][T23131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.631395][T23131] RIP: 0033:0x7f3fff6bd33c [ 429.631409][T23131] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 429.631481][T23131] RSP: 002b:00007f3ffdd27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 429.631501][T23131] RAX: ffffffffffffffda RBX: 00007f3fff8e5fa0 RCX: 00007f3fff6bd33c [ 429.631515][T23131] RDX: 000000000000000f RSI: 00007f3ffdd270a0 RDI: 0000000000000006 [ 429.631528][T23131] RBP: 00007f3ffdd27090 R08: 0000000000000000 R09: 0000000000000000 [ 429.631540][T23131] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 429.631553][T23131] R13: 0000000000000000 R14: 00007f3fff8e5fa0 R15: 00007fff2921a5b8 [ 429.631650][T23131] [ 429.921745][T23140] team0: Port device dummy0 added [ 429.930777][T23140] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 429.952294][T23140] team0: Failed to send options change via netlink (err -105) [ 429.968956][T23140] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 429.978123][T23140] team0: Port device dummy0 removed [ 429.989530][T23140] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 430.041852][T23148] bond0: (slave dummy0): Releasing backup interface [ 430.056124][T23148] team0: Port device dummy0 added [ 430.069995][T23148] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 430.080232][T23148] team0: Failed to send options change via netlink (err -105) [ 430.096218][T23148] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 430.105527][T23148] team0: Port device dummy0 removed [ 430.112313][T23148] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 430.244666][T23155] Cannot find map_set index 0 as target [ 430.448288][T23167] lo speed is unknown, defaulting to 1000 [ 430.498668][T23172] validate_nla: 25 callbacks suppressed [ 430.498683][T23172] netlink: 'syz.5.6554': attribute type 1 has an invalid length. [ 430.526196][T23175] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.563259][T23167] gretap1: entered promiscuous mode [ 430.571770][T23175] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.613630][T23172] macvlan2: entered promiscuous mode [ 430.619118][T23172] macvlan2: entered allmulticast mode [ 430.650001][T23175] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.712055][T23175] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.766085][T23175] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.776861][T23175] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.787964][T23175] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.799798][T23175] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.893664][T23182] netlink: 'syz.2.6560': attribute type 10 has an invalid length. [ 430.903417][T23182] team0: Port device dummy0 added [ 430.910706][T23182] netlink: 'syz.2.6560': attribute type 10 has an invalid length. [ 430.942074][T23182] team0: Port device dummy0 removed [ 430.950417][T23182] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 430.996956][T23187] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 431.008034][T23187] netlink: ' FÓt˜Úʼ øì': attribute type 7 has an invalid length. [ 431.281767][T23208] netlink: 'syz.5.6565': attribute type 1 has an invalid length. [ 431.294427][T23208] 8021q: adding VLAN 0 to HW filter on device bond1 [ 431.317118][T23211] Cannot find map_set index 0 as target [ 431.377446][T23217] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.460289][T23217] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.500540][T23217] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.540955][T23217] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.594959][T23217] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.605835][T23217] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.616740][T23217] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.627824][T23217] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.677853][T23222] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.740214][T23222] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.755026][T23226] bridge0: port 1(batadv0) entered blocking state [ 431.761619][T23226] bridge0: port 1(batadv0) entered disabled state [ 431.768479][T23226] batadv0: entered allmulticast mode [ 431.774335][T23226] batadv0: entered promiscuous mode [ 431.781590][T23226] __nla_validate_parse: 6 callbacks suppressed [ 431.781608][T23226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6573'. [ 431.798067][T23222] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.810064][T23226] batadv0 (unregistering): left allmulticast mode [ 431.816526][T23226] batadv0 (unregistering): left promiscuous mode [ 431.822944][T23226] bridge0: port 1(batadv0) entered disabled state [ 431.832157][T23232] netlink: 344 bytes leftover after parsing attributes in process `syz.3.6573'. [ 431.849214][T23231] lo speed is unknown, defaulting to 1000 [ 431.870633][T23222] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.882706][T23233] netlink: 'syz.8.6574': attribute type 1 has an invalid length. [ 431.896682][T23233] 8021q: adding VLAN 0 to HW filter on device bond7 [ 431.914752][T23233] 8021q: adding VLAN 0 to HW filter on device bond7 [ 431.924927][T23233] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 431.936851][T23233] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 431.940917][T23238] netlink: 'syz.6.6576': attribute type 1 has an invalid length. [ 431.963492][T23239] macvlan2: entered promiscuous mode [ 431.968944][T23239] macvlan2: entered allmulticast mode [ 431.975182][T23239] bond7: entered promiscuous mode [ 431.980607][T23239] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 431.989009][T23239] bond7: left promiscuous mode [ 432.002240][T23238] 8021q: adding VLAN 0 to HW filter on device bond6 [ 432.034454][T23246] netlink: 'syz.2.6575': attribute type 1 has an invalid length. [ 432.049301][T23241] lo speed is unknown, defaulting to 1000 [ 432.070418][T23248] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6578'. [ 432.090126][T23246] 8021q: adding VLAN 0 to HW filter on device bond6 [ 432.091614][T23248] netlink: 'syz.6.6578': attribute type 1 has an invalid length. [ 432.108782][T23250] 8021q: adding VLAN 0 to HW filter on device bond6 [ 432.116085][T23250] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 432.129970][T23250] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 432.152422][T23246] macvlan2: entered promiscuous mode [ 432.157747][T23246] macvlan2: entered allmulticast mode [ 432.172350][T23246] bond6: entered promiscuous mode [ 432.178313][T23246] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 432.209710][T23246] bond6: left promiscuous mode [ 432.267383][T23255] netlink: 'syz.6.6580': attribute type 10 has an invalid length. [ 432.276419][T23255] bond0: (slave dummy0): Releasing backup interface [ 432.293746][T23255] team0: Port device dummy0 added [ 432.304694][T23255] team0: Port device dummy0 removed [ 432.312919][T23255] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 432.350220][T23262] bond0: (slave dummy0): Releasing backup interface [ 433.253934][T23290] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 433.482233][T23302] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 433.519465][T23306] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.560781][T23306] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.620363][T23306] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.670514][T23306] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.738652][T23306] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.751613][T23306] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.762662][T23306] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.773548][T23306] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.803375][T23313] 8021q: adding VLAN 0 to HW filter on device bond8 [ 433.837798][T23319] 8021q: adding VLAN 0 to HW filter on device bond9 [ 434.011575][ T29] kauditd_printk_skb: 414 callbacks suppressed [ 434.011588][ T29] audit: type=1326 audit(1751504195.001:32881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23331 comm="syz.3.6604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0ac8e929 code=0x7ffc0000 [ 434.041516][ T29] audit: type=1326 audit(1751504195.001:32882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23331 comm="syz.3.6604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0ac8e929 code=0x7ffc0000 [ 434.065780][ T29] audit: type=1326 audit(1751504195.001:32883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23331 comm="syz.3.6604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3b0ac8d197 code=0x7ffc0000 [ 434.067486][T23332] bond0: (slave dummy0): Releasing backup interface [ 434.089401][ T29] audit: type=1326 audit(1751504195.001:32884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23331 comm="syz.3.6604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0ac8e929 code=0x7ffc0000 [ 434.089434][ T29] audit: type=1326 audit(1751504195.001:32885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23331 comm="syz.3.6604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0ac8e929 code=0x7ffc0000 [ 434.089540][ T29] audit: type=1326 audit(1751504195.001:32886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23331 comm="syz.3.6604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f3b0ac8e929 code=0x7ffc0000 [ 434.089568][ T29] audit: type=1326 audit(1751504195.001:32887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23331 comm="syz.3.6604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0ac8e929 code=0x7ffc0000 [ 434.190567][ T29] audit: type=1326 audit(1751504195.001:32888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23331 comm="syz.3.6604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f3b0ac8e929 code=0x7ffc0000 [ 434.214215][ T29] audit: type=1326 audit(1751504195.001:32889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23331 comm="syz.3.6604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0ac8e929 code=0x7ffc0000 [ 434.237895][ T29] audit: type=1326 audit(1751504195.001:32890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23331 comm="syz.3.6604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3b0ac8e929 code=0x7ffc0000 [ 434.297600][T23334] syz!: rxe_newlink: already configured on team_slave_0 [ 434.339377][T23336] dummy0: entered promiscuous mode [ 434.344627][T23336] dummy0: entered allmulticast mode [ 434.351874][T23336] team0: Port device dummy0 added [ 434.364327][T23336] dummy0: left promiscuous mode [ 434.372648][T23336] dummy0: left allmulticast mode [ 434.378249][T23336] team0: Port device dummy0 removed [ 434.386248][T23336] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 434.765080][T23347] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.840660][T23347] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.890587][T23347] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.950742][T23347] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.322311][T23357] FAULT_INJECTION: forcing a failure. [ 435.322311][T23357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.335524][T23357] CPU: 1 UID: 0 PID: 23357 Comm: syz.3.6614 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 435.335548][T23357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 435.335560][T23357] Call Trace: [ 435.335566][T23357] [ 435.335574][T23357] __dump_stack+0x1d/0x30 [ 435.335660][T23357] dump_stack_lvl+0xe8/0x140 [ 435.335681][T23357] dump_stack+0x15/0x1b [ 435.335735][T23357] should_fail_ex+0x265/0x280 [ 435.335758][T23357] should_fail+0xb/0x20 [ 435.335778][T23357] should_fail_usercopy+0x1a/0x20 [ 435.335817][T23357] _copy_from_user+0x1c/0xb0 [ 435.335833][T23357] ___sys_sendmsg+0xc1/0x1d0 [ 435.335871][T23357] __x64_sys_sendmsg+0xd4/0x160 [ 435.335898][T23357] x64_sys_call+0x2999/0x2fb0 [ 435.335914][T23357] do_syscall_64+0xd2/0x200 [ 435.335987][T23357] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 435.336007][T23357] ? clear_bhb_loop+0x40/0x90 [ 435.336023][T23357] ? clear_bhb_loop+0x40/0x90 [ 435.336056][T23357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.336189][T23357] RIP: 0033:0x7f3b0ac8e929 [ 435.336202][T23357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.336216][T23357] RSP: 002b:00007f3b092f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.336231][T23357] RAX: ffffffffffffffda RBX: 00007f3b0aeb5fa0 RCX: 00007f3b0ac8e929 [ 435.336241][T23357] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 435.336250][T23357] RBP: 00007f3b092f7090 R08: 0000000000000000 R09: 0000000000000000 [ 435.336369][T23357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.336378][T23357] R13: 0000000000000000 R14: 00007f3b0aeb5fa0 R15: 00007ffecaac37f8 [ 435.336393][T23357] [ 435.533841][T23361] syz!: rxe_newlink: already configured on team_slave_0 [ 435.543857][T23361] validate_nla: 8 callbacks suppressed [ 435.543872][T23361] netlink: ' FÓt˜Úʼ øì': attribute type 7 has an invalid length. [ 435.552579][T23363] loop6: detected capacity change from 0 to 1024 [ 435.581690][T23363] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.593967][T23363] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.608108][T23363] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 435.625049][T23363] EXT4-fs (loop6): Remounting filesystem read-only [ 435.628301][T23222] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.643416][T23222] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.662382][T23222] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.671057][T23369] lo speed is unknown, defaulting to 1000 [ 435.673827][T23222] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.687887][T23363] bridge0: port 1(batadv0) entered blocking state [ 435.694424][T23363] bridge0: port 1(batadv0) entered disabled state [ 435.702696][T23363] batadv0: entered allmulticast mode [ 435.708347][T23363] batadv0: entered promiscuous mode [ 435.717457][T23363] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6617'. [ 435.729554][T23363] batadv0 (unregistering): left allmulticast mode [ 435.736015][T23363] batadv0 (unregistering): left promiscuous mode [ 435.742485][T23363] bridge0: port 1(batadv0) entered disabled state [ 435.779074][T23379] netlink: 344 bytes leftover after parsing attributes in process `syz.6.6617'. [ 435.809276][T23382] bond0: (slave dummy0): Releasing backup interface [ 435.841482][T19067] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.864248][T23384] FAULT_INJECTION: forcing a failure. [ 435.864248][T23384] name failslab, interval 1, probability 0, space 0, times 0 [ 435.876921][T23384] CPU: 0 UID: 0 PID: 23384 Comm: syz.6.6622 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 435.876946][T23384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 435.876958][T23384] Call Trace: [ 435.876966][T23384] [ 435.876975][T23384] __dump_stack+0x1d/0x30 [ 435.877022][T23384] dump_stack_lvl+0xe8/0x140 [ 435.877105][T23384] dump_stack+0x15/0x1b [ 435.877123][T23384] should_fail_ex+0x265/0x280 [ 435.877280][T23384] should_failslab+0x8c/0xb0 [ 435.877300][T23384] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 435.877324][T23384] ? shmem_alloc_inode+0x34/0x50 [ 435.877342][T23384] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 435.877427][T23384] shmem_alloc_inode+0x34/0x50 [ 435.877442][T23384] alloc_inode+0x40/0x170 [ 435.877470][T23384] new_inode+0x1d/0xe0 [ 435.877488][T23384] shmem_get_inode+0x244/0x750 [ 435.877505][T23384] ? __se_sys_memfd_create+0x1cc/0x590 [ 435.877543][T23384] __shmem_file_setup+0x113/0x210 [ 435.877618][T23384] shmem_file_setup+0x3b/0x50 [ 435.877647][T23384] __se_sys_memfd_create+0x2c3/0x590 [ 435.877672][T23384] __x64_sys_memfd_create+0x31/0x40 [ 435.877697][T23384] x64_sys_call+0x122f/0x2fb0 [ 435.877810][T23384] do_syscall_64+0xd2/0x200 [ 435.877829][T23384] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 435.877851][T23384] ? clear_bhb_loop+0x40/0x90 [ 435.877869][T23384] ? clear_bhb_loop+0x40/0x90 [ 435.877967][T23384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.877984][T23384] RIP: 0033:0x7f3fff6be929 [ 435.877998][T23384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.878083][T23384] RSP: 002b:00007f3ffdd26d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 435.878100][T23384] RAX: ffffffffffffffda RBX: 0000000000000593 RCX: 00007f3fff6be929 [ 435.878112][T23384] RDX: 00007f3ffdd26dec RSI: 0000000000000000 RDI: 00007f3fff7414cc [ 435.878184][T23384] RBP: 00002000000005c0 R08: 00007f3ffdd26b07 R09: 0000000000000000 [ 435.878197][T23384] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 435.878209][T23384] R13: 00007f3ffdd26dec R14: 00007f3ffdd26df0 R15: 00007fff2921a5b8 [ 435.878228][T23384] [ 436.210211][T23395] loop6: detected capacity change from 0 to 1024 [ 436.217042][T23395] EXT4-fs: Ignoring removed bh option [ 436.222623][T23395] EXT4-fs: Ignoring removed mblk_io_submit option [ 436.229168][T23395] EXT4-fs: Ignoring removed bh option [ 436.250407][T23395] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.575705][T23407] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 436.585146][T23407] netlink: ' FÓt˜Úʼ øì': attribute type 7 has an invalid length. [ 436.915992][T23419] bridge0: port 1(batadv0) entered blocking state [ 436.922597][T23419] bridge0: port 1(batadv0) entered disabled state [ 436.929265][T23419] batadv0: entered allmulticast mode [ 436.934879][T23419] batadv0: entered promiscuous mode [ 436.942308][T23419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6633'. [ 436.952060][T23419] batadv0 (unregistering): left allmulticast mode [ 436.958556][T23419] batadv0 (unregistering): left promiscuous mode [ 436.965025][T23419] bridge0: port 1(batadv0) entered disabled state [ 436.993101][T23421] netlink: 344 bytes leftover after parsing attributes in process `syz.2.6633'. [ 437.077432][T23423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6634'. [ 437.093831][T23423] hsr_slave_0 (unregistering): left promiscuous mode [ 437.103572][T19067] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.658431][T23457] lo speed is unknown, defaulting to 1000 [ 437.704378][T23457] netlink: 'syz.5.6645': attribute type 1 has an invalid length. [ 437.716890][T23457] 8021q: adding VLAN 0 to HW filter on device bond2 [ 437.729133][T23457] 8021q: adding VLAN 0 to HW filter on device bond2 [ 437.736274][T23457] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 437.747557][T23457] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 437.779123][T23460] gretap1: entered promiscuous mode [ 437.787811][T23460] macvlan2: entered promiscuous mode [ 437.793278][T23460] macvlan2: entered allmulticast mode [ 437.799011][T23460] bond2: entered promiscuous mode [ 437.804225][T23460] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 437.812408][T23460] bond2: left promiscuous mode [ 437.996002][T23347] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.008333][T23347] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.016878][T23465] lo speed is unknown, defaulting to 1000 [ 438.020059][T23347] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.033797][T23347] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.046943][T23466] netlink: 'syz.2.6647': attribute type 1 has an invalid length. [ 438.067231][T23466] 8021q: adding VLAN 0 to HW filter on device bond7 [ 438.101715][T23469] bond0: (slave dummy0): Releasing backup interface [ 438.135662][T23466] 8021q: adding VLAN 0 to HW filter on device bond7 [ 438.146731][T23466] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 438.160606][T23466] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 438.185556][T23472] macvlan2: entered promiscuous mode [ 438.191005][T23472] macvlan2: entered allmulticast mode [ 438.196859][T23472] bond7: entered promiscuous mode [ 438.202230][T23472] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 438.211092][T23472] bond7: left promiscuous mode [ 438.793184][T23500] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.860468][T23500] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.910675][T23500] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.960648][T23500] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.025652][T23500] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.036348][T23500] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.048085][T23500] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.059329][T23500] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.068215][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 439.068229][ T29] audit: type=1326 audit(1751504200.051:33236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23499 comm="syz.2.6659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8d8de929 code=0x7ffc0000 [ 439.098148][ T29] audit: type=1326 audit(1751504200.051:33237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23499 comm="syz.2.6659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8d8de929 code=0x7ffc0000 [ 439.129294][T23503] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 439.138646][T23503] netlink: ' FÓt˜Úʼ øì': attribute type 7 has an invalid length. [ 439.185181][ T29] audit: type=1326 audit(1751504200.171:33238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23508 comm="syz.2.6663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8d8de929 code=0x7ffc0000 [ 439.209139][ T29] audit: type=1326 audit(1751504200.171:33239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23508 comm="syz.2.6663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8d8de929 code=0x7ffc0000 [ 439.233591][ T29] audit: type=1326 audit(1751504200.171:33240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23508 comm="syz.2.6663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fbc8d8dd197 code=0x7ffc0000 [ 439.235837][T23509] bond0: (slave dummy0): Releasing backup interface [ 439.257367][ T29] audit: type=1326 audit(1751504200.171:33241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23508 comm="syz.2.6663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8d8de929 code=0x7ffc0000 [ 439.287628][ T29] audit: type=1326 audit(1751504200.171:33242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23508 comm="syz.2.6663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fbc8d8de929 code=0x7ffc0000 [ 439.311439][ T29] audit: type=1326 audit(1751504200.171:33243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23508 comm="syz.2.6663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8d8de929 code=0x7ffc0000 [ 439.335009][ T29] audit: type=1326 audit(1751504200.171:33244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23508 comm="syz.2.6663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fbc8d8de929 code=0x7ffc0000 [ 439.358592][ T29] audit: type=1326 audit(1751504200.171:33245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23508 comm="syz.2.6663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8d8de929 code=0x7ffc0000 [ 439.410618][T23511] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6664'. [ 439.489510][T23524] netlink: 'syz.8.6670': attribute type 10 has an invalid length. [ 439.499278][T23524] team0: Port device dummy0 added [ 439.508657][T23524] netlink: 'syz.8.6670': attribute type 10 has an invalid length. [ 439.518212][T23526] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.536974][T23524] team0: Port device dummy0 removed [ 439.544936][T23524] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 439.552675][T23529] netlink: 'syz.2.6668': attribute type 1 has an invalid length. [ 439.555800][T23527] lo speed is unknown, defaulting to 1000 [ 439.583279][T23529] 8021q: adding VLAN 0 to HW filter on device bond8 [ 439.594470][T23526] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.611663][T23529] 8021q: adding VLAN 0 to HW filter on device bond8 [ 439.619024][T23529] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 439.631723][T23529] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 439.648520][T23526] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.666676][T23535] macvlan2: entered promiscuous mode [ 439.672010][T23535] macvlan2: entered allmulticast mode [ 439.677768][T23535] bond8: entered promiscuous mode [ 439.683677][T23535] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 439.691989][T23535] bond8: left promiscuous mode [ 439.710881][T23526] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.785399][T23526] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.796682][T23526] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.807565][T23526] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.818491][T23526] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.863610][T23538] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 439.880774][T23538] netlink: ' FÓt˜Úʼ øì': attribute type 7 has an invalid length. [ 439.907471][T23540] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.982371][T23540] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.040895][T23540] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.090329][T23540] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.479702][T23555] lo speed is unknown, defaulting to 1000 [ 440.558737][T23564] loop6: detected capacity change from 0 to 512 [ 440.576534][T23564] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.590859][T23564] ext4 filesystem being mounted at /327/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 440.603422][T23564] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.6681: corrupted inode contents [ 440.616859][T23564] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.6681: mark_inode_dirty error [ 440.628404][T23564] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.6681: corrupted inode contents [ 440.643479][T23564] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.6681: mark_inode_dirty error [ 440.669213][T19067] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.686355][T23574] netlink: 'syz.8.6685': attribute type 10 has an invalid length. [ 440.699321][T23574] bond0: (slave dummy0): Releasing backup interface [ 440.709418][T23574] team0: Port device dummy0 added [ 440.716748][T23574] netlink: 'syz.8.6685': attribute type 10 has an invalid length. [ 440.729250][T23574] team0: Port device dummy0 removed [ 440.737065][T23574] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 440.805173][T23585] lo speed is unknown, defaulting to 1000 [ 440.853367][T23585] netlink: 'syz.6.6686': attribute type 1 has an invalid length. [ 440.866904][T23585] 8021q: adding VLAN 0 to HW filter on device bond7 [ 440.877952][T23585] 8021q: adding VLAN 0 to HW filter on device bond7 [ 440.885186][T23585] bond7: (slave vxcan7): The slave device specified does not support setting the MAC address [ 440.896722][T23585] bond7: (slave vxcan7): Error -95 calling set_mac_address [ 440.928739][T23587] macvlan2: entered promiscuous mode [ 440.934107][T23587] macvlan2: entered allmulticast mode [ 440.940125][T23587] bond7: entered promiscuous mode [ 440.945491][T23587] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 440.953640][T23587] bond7: left promiscuous mode [ 441.336479][T23597] veth0: entered promiscuous mode [ 441.432185][T23596] veth0: left promiscuous mode [ 441.670818][T23611] bond0: (slave dummy0): Releasing backup interface [ 441.726235][T23614] netlink: 'syz.8.6698': attribute type 10 has an invalid length. [ 441.735550][T23614] team0: Port device dummy0 added [ 441.742089][T23614] netlink: 'syz.8.6698': attribute type 10 has an invalid length. [ 441.752046][T23614] team0: Port device dummy0 removed [ 441.759512][T23614] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 441.900331][T23618] random: crng reseeded on system resumption [ 441.962360][T23626] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.020504][T23626] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.045543][T23630] lo speed is unknown, defaulting to 1000 [ 442.070517][T23626] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.089505][T23631] netlink: 'syz.2.6704': attribute type 1 has an invalid length. [ 442.103637][T23631] 8021q: adding VLAN 0 to HW filter on device bond9 [ 442.120257][T23626] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.148179][T23630] 8021q: adding VLAN 0 to HW filter on device bond9 [ 442.155328][T23630] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 442.166815][T23630] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 442.185131][T23626] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.196577][T23626] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.207994][T23626] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.219844][T23626] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.230623][T23631] macvlan2: entered promiscuous mode [ 442.235955][T23631] macvlan2: entered allmulticast mode [ 442.243713][T23631] bond9: entered promiscuous mode [ 442.249575][T23631] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 442.261311][T23631] bond9: left promiscuous mode [ 442.294227][T23635] bond0: (slave dummy0): Releasing backup interface [ 442.476667][T23650] loop6: detected capacity change from 0 to 1024 [ 442.490207][T23650] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.502821][T23650] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.514760][T23650] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 442.529691][T23650] EXT4-fs (loop6): Remounting filesystem read-only [ 442.546495][T23650] bridge0: port 1(batadv0) entered blocking state [ 442.553076][T23650] bridge0: port 1(batadv0) entered disabled state [ 442.560056][T23650] batadv0: entered allmulticast mode [ 442.565815][T23650] batadv0: entered promiscuous mode [ 442.573052][T23650] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6710'. [ 442.582567][T23650] batadv0 (unregistering): left allmulticast mode [ 442.589023][T23650] batadv0 (unregistering): left promiscuous mode [ 442.595447][T23650] bridge0: port 1(batadv0) entered disabled state [ 442.624066][T23658] netlink: 344 bytes leftover after parsing attributes in process `syz.6.6710'. [ 442.667386][T19067] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.684081][T23660] netlink: 'syz.6.6711': attribute type 1 has an invalid length. [ 442.697155][T23660] 8021q: adding VLAN 0 to HW filter on device bond8 [ 442.935331][T23671] lo speed is unknown, defaulting to 1000 [ 443.385378][T23678] syz!: rxe_newlink: already configured on team_slave_0 [ 443.398366][T23678] netlink: ' FÓt˜Úʼ øì': attribute type 7 has an invalid length. [ 443.606102][T23540] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.618255][T23540] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.632416][T23540] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.646808][T23540] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.678050][T23689] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.720736][T23689] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.752175][T23692] bridge0: port 1(batadv0) entered blocking state [ 443.758614][T23692] bridge0: port 1(batadv0) entered disabled state [ 443.765665][T23692] batadv0: entered allmulticast mode [ 443.771890][T23692] batadv0: entered promiscuous mode [ 443.781656][T23692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6722'. [ 443.782549][T23689] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.802163][T23692] batadv0 (unregistering): left allmulticast mode [ 443.808604][T23692] batadv0 (unregistering): left promiscuous mode [ 443.815061][T23692] bridge0: port 1(batadv0) entered disabled state [ 443.871866][T23689] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.965588][T23712] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 443.975400][T23712] netlink: ' FÓt˜Úʼ øì': attribute type 7 has an invalid length. [ 444.069254][ T29] kauditd_printk_skb: 521 callbacks suppressed [ 444.069266][ T29] audit: type=1400 audit(1751504205.061:33767): avc: denied { ioctl } for pid=23713 comm="syz.2.6728" path="socket:[87216]" dev="sockfs" ino=87216 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 444.123498][ T29] audit: type=1326 audit(1751504205.111:33768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23720 comm="syz.2.6730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8d8de929 code=0x7ffc0000 [ 444.147365][ T29] audit: type=1326 audit(1751504205.111:33769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23720 comm="syz.2.6730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8d8de929 code=0x7ffc0000 [ 444.148445][T23721] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.170993][ T29] audit: type=1326 audit(1751504205.111:33770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23720 comm="syz.2.6730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc8d8de929 code=0x7ffc0000 [ 444.171029][ T29] audit: type=1326 audit(1751504205.111:33771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23720 comm="syz.2.6730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8d8de929 code=0x7ffc0000 [ 444.171126][ T29] audit: type=1326 audit(1751504205.111:33772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23720 comm="syz.2.6730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8d8de929 code=0x7ffc0000 [ 444.171148][ T29] audit: type=1326 audit(1751504205.111:33773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23720 comm="syz.2.6730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc8d8de929 code=0x7ffc0000 [ 444.275493][ T29] audit: type=1326 audit(1751504205.111:33774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23720 comm="syz.2.6730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8d8de929 code=0x7ffc0000 [ 444.299088][ T29] audit: type=1326 audit(1751504205.111:33775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23720 comm="syz.2.6730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8d8de929 code=0x7ffc0000 [ 444.322640][ T29] audit: type=1326 audit(1751504205.111:33776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23720 comm="syz.2.6730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fbc8d8e07bc code=0x7ffc0000 [ 444.380617][T23721] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.413224][T23728] netlink: 'syz.3.6733': attribute type 10 has an invalid length. [ 444.422813][T23728] dummy0: entered promiscuous mode [ 444.428105][T23728] dummy0: entered allmulticast mode [ 444.434275][T23728] team0: Port device dummy0 added [ 444.443899][T23721] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.457596][T23730] bridge0: port 1(batadv0) entered blocking state [ 444.464137][T23730] bridge0: port 1(batadv0) entered disabled state [ 444.470715][T23730] batadv0: entered allmulticast mode [ 444.476442][T23730] batadv0: entered promiscuous mode [ 444.485893][T23728] dummy0: left promiscuous mode [ 444.486456][T23730] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6734'. [ 444.495066][T23728] dummy0: left allmulticast mode [ 444.505554][T23728] team0: Port device dummy0 removed [ 444.514128][T23728] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 444.528738][T23730] batadv0 (unregistering): left allmulticast mode [ 444.535232][T23730] batadv0 (unregistering): left promiscuous mode [ 444.541897][T23730] bridge0: port 1(batadv0) entered disabled state [ 444.554214][T23721] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.592002][T23740] syz!: rxe_newlink: already configured on team_slave_0 [ 444.627442][T23721] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.642477][T23721] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.665787][T23721] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.679627][T23721] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.692521][T23748] loop6: detected capacity change from 0 to 512 [ 444.701178][T23748] EXT4-fs: inline encryption not supported [ 444.707134][T23748] ext4: Unknown parameter 'permit_directio' [ 444.722370][T23748] pimreg: entered allmulticast mode [ 444.735210][T23747] pimreg: left allmulticast mode [ 444.745624][T23750] lo speed is unknown, defaulting to 1000 [ 444.784232][T23755] program syz.2.6745 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 444.787144][T23756] 8021q: adding VLAN 0 to HW filter on device bond10 [ 444.824869][T23756] 8021q: adding VLAN 0 to HW filter on device bond10 [ 444.833990][T23756] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 444.846032][T23756] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 444.871474][T23764] macvlan2: entered promiscuous mode [ 444.876984][T23764] macvlan2: entered allmulticast mode [ 444.883733][T23764] bond10: entered promiscuous mode [ 444.891235][T23764] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 444.900285][T23764] bond10: left promiscuous mode [ 444.917193][T23770] team0: Port device dummy0 added [ 444.927631][T23770] team0: Port device dummy0 removed [ 444.935984][T23770] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 444.960602][T23773] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 445.538442][T23783] bridge0: port 1(batadv0) entered blocking state [ 445.544951][T23783] bridge0: port 1(batadv0) entered disabled state [ 445.551754][T23783] batadv0: entered allmulticast mode [ 445.557496][T23783] batadv0: entered promiscuous mode [ 445.564426][T23783] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6752'. [ 445.574099][T23783] batadv0 (unregistering): left allmulticast mode [ 445.580616][T23783] batadv0 (unregistering): left promiscuous mode [ 445.587002][T23783] bridge0: port 1(batadv0) entered disabled state [ 445.675058][T23794] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6757'. [ 445.685807][T23794] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6757'. [ 445.711584][T23794] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6757'. [ 445.725167][T23794] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6757'. [ 445.746313][T23795] lo speed is unknown, defaulting to 1000 [ 445.755117][T23805] syz!: rxe_newlink: already configured on team_slave_0 [ 445.766339][T23805] validate_nla: 6 callbacks suppressed [ 445.766353][T23805] netlink: ' FÓt˜Úʼ øì': attribute type 7 has an invalid length. [ 445.780446][T23794] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6757'. [ 445.806426][T23807] loop6: detected capacity change from 0 to 512 [ 445.822526][T23813] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 445.830987][T23813] tipc: Enabled bearer , priority 10 [ 445.833053][T23807] EXT4-fs (loop6): 1 orphan inode deleted [ 445.843710][T23807] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.856654][T23807] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.857086][ T1015] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 445.888949][T19067] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.994435][T23826] bond0: (slave dummy0): Releasing backup interface [ 446.042959][T23830] bond0: (slave dummy0): Releasing backup interface [ 446.103576][T23839] syz!: rxe_newlink: already configured on team_slave_0 [ 446.113462][T23839] netlink: ' FÓt˜Úʼ øì': attribute type 7 has an invalid length. [ 446.153460][T23843] netlink: 'syz.3.6775': attribute type 10 has an invalid length. [ 446.162804][T23843] dummy0: entered promiscuous mode [ 446.168091][T23843] dummy0: entered allmulticast mode [ 446.174138][T23843] team0: Port device dummy0 added [ 446.180725][T23843] netlink: 'syz.3.6775': attribute type 10 has an invalid length. [ 446.190451][T23843] dummy0: left promiscuous mode [ 446.195495][T23843] dummy0: left allmulticast mode [ 446.201983][T23843] team0: Port device dummy0 removed [ 446.216430][T23843] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 447.000774][T23865] FAULT_INJECTION: forcing a failure. [ 447.000774][T23865] name failslab, interval 1, probability 0, space 0, times 0 [ 447.013454][T23865] CPU: 0 UID: 0 PID: 23865 Comm: syz.8.6780 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 447.013493][T23865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 447.013504][T23865] Call Trace: [ 447.013511][T23865] [ 447.013545][T23865] __dump_stack+0x1d/0x30 [ 447.013559][T23865] dump_stack_lvl+0xe8/0x140 [ 447.013570][T23865] dump_stack+0x15/0x1b [ 447.013580][T23865] should_fail_ex+0x265/0x280 [ 447.013670][T23865] should_failslab+0x8c/0xb0 [ 447.013683][T23865] kmem_cache_alloc_noprof+0x50/0x310 [ 447.013699][T23865] ? getname_flags+0x80/0x3b0 [ 447.013712][T23865] getname_flags+0x80/0x3b0 [ 447.013794][T23865] do_sys_openat2+0x60/0x110 [ 447.013815][T23865] __x64_sys_openat+0xf2/0x120 [ 447.013830][T23865] x64_sys_call+0x1af/0x2fb0 [ 447.013842][T23865] do_syscall_64+0xd2/0x200 [ 447.013853][T23865] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 447.013869][T23865] ? clear_bhb_loop+0x40/0x90 [ 447.013881][T23865] ? clear_bhb_loop+0x40/0x90 [ 447.013957][T23865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.013983][T23865] RIP: 0033:0x7ff8c6e7e929 [ 447.013992][T23865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.014030][T23865] RSP: 002b:00007ff8c54e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 447.014041][T23865] RAX: ffffffffffffffda RBX: 00007ff8c70a5fa0 RCX: 00007ff8c6e7e929 [ 447.014049][T23865] RDX: 000000000000275a RSI: 0000200000000000 RDI: ffffffffffffff9c [ 447.014056][T23865] RBP: 00007ff8c54e7090 R08: 0000000000000000 R09: 0000000000000000 [ 447.014105][T23865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.014112][T23865] R13: 0000000000000000 R14: 00007ff8c70a5fa0 R15: 00007ffedfe0dcf8 [ 447.014122][T23865] [ 447.263550][T23877] syz!: rxe_newlink: already configured on team_slave_0 [ 447.310621][T23879] netlink: 'syz.2.6787': attribute type 10 has an invalid length. [ 447.312176][T23877] netlink: ' FÓt˜Úʼ øì': attribute type 7 has an invalid length. [ 447.320279][T23879] team0: Port device dummy0 added [ 447.335347][T23879] netlink: 'syz.2.6787': attribute type 10 has an invalid length. [ 447.346096][T23879] team0: Port device dummy0 removed [ 447.354425][T23879] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 447.445374][T23887] bond0: (slave dummy0): Releasing backup interface [ 447.724276][T23895] lo speed is unknown, defaulting to 1000 [ 447.768239][T23689] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.768408][T23898] netlink: 'syz.3.6791': attribute type 1 has an invalid length. [ 447.790669][T23898] 8021q: adding VLAN 0 to HW filter on device bond8 [ 447.800540][T23689] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.811717][T23689] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.823224][T23895] 8021q: adding VLAN 0 to HW filter on device bond8 [ 447.830290][T23895] bond8: (slave vxcan9): The slave device specified does not support setting the MAC address [ 447.842312][T23895] bond8: (slave vxcan9): Error -95 calling set_mac_address [ 447.855234][T23689] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.866781][T23898] macvlan2: entered promiscuous mode [ 447.872210][T23898] macvlan2: entered allmulticast mode [ 447.878248][T23898] bond8: entered promiscuous mode [ 447.883827][T23898] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 447.892217][T23898] bond8: left promiscuous mode [ 447.896543][T23906] netlink: 'syz.5.6793': attribute type 13 has an invalid length. [ 447.987422][T23906] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.995855][T23906] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.004393][T23906] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.012863][T23906] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.129486][T23920] netlink: 'syz.5.6798': attribute type 10 has an invalid length. [ 448.138553][T23920] team0: Port device dummy0 added [ 448.147640][T23920] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 448.157258][T23920] team0: Failed to send options change via netlink (err -105) [ 448.164948][T23920] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 448.173883][T23920] team0: Port device dummy0 removed [ 448.180524][T23920] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 448.205986][T23922] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 448.261516][T23926] 8021q: adding VLAN 0 to HW filter on device bond11 [ 448.272461][T23926] macvlan2: entered promiscuous mode [ 448.277829][T23926] macvlan2: entered allmulticast mode [ 448.284456][T23926] bond11: entered promiscuous mode [ 448.289855][T23926] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 448.298106][T23926] bond11: left promiscuous mode [ 448.463395][T23934] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.510561][T23934] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.571391][T23934] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.609500][T23945] __nla_validate_parse: 4 callbacks suppressed [ 448.609517][T23945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6808'. [ 448.627804][T23934] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.664704][T23955] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6813'. [ 448.688038][T23934] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.700186][T23934] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.711738][T23934] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.723556][T23934] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.779466][T23965] usb usb8: usbfs: process 23965 (syz.2.6817) did not claim interface 0 before use [ 448.814346][T23970] lo speed is unknown, defaulting to 1000 [ 448.864793][T23970] 8021q: adding VLAN 0 to HW filter on device bond9 [ 448.876921][T23970] 8021q: adding VLAN 0 to HW filter on device bond9 [ 448.884285][T23970] bond9: (slave vxcan9): The slave device specified does not support setting the MAC address [ 448.895930][T23970] bond9: (slave vxcan9): Error -95 calling set_mac_address [ 448.927109][T23977] macvlan2: entered promiscuous mode [ 448.932629][T23977] macvlan2: entered allmulticast mode [ 448.938920][T23977] bond9: entered promiscuous mode [ 448.944383][T23977] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 448.952664][T23977] bond9: left promiscuous mode [ 448.954041][T23979] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6820'. [ 449.668500][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 449.668516][ T29] audit: type=1400 audit(1751504210.621:34096): avc: denied { create } for pid=23991 comm="syz.2.6825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 449.694543][ T29] audit: type=1400 audit(1751504210.621:34097): avc: denied { write } for pid=23991 comm="syz.2.6825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 449.728388][ T29] audit: type=1400 audit(1751504210.711:34098): avc: denied { create } for pid=23994 comm="syz.3.6826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 449.765499][ T29] audit: type=1400 audit(1751504210.751:34099): avc: denied { create } for pid=23994 comm="syz.3.6826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 449.777071][T23997] lo speed is unknown, defaulting to 1000 [ 449.835947][ T29] audit: type=1400 audit(1751504210.781:34100): avc: denied { write } for pid=23994 comm="syz.3.6826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 449.856560][ T29] audit: type=1400 audit(1751504210.781:34101): avc: denied { read } for pid=23994 comm="syz.3.6826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 449.877061][ T29] audit: type=1400 audit(1751504210.781:34102): avc: denied { getopt } for pid=23994 comm="syz.3.6826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 449.896643][ T29] audit: type=1400 audit(1751504210.781:34103): avc: denied { name_bind } for pid=23994 comm="syz.3.6826" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 449.918639][ T29] audit: type=1400 audit(1751504210.781:34104): avc: denied { node_bind } for pid=23994 comm="syz.3.6826" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 449.939821][ T29] audit: type=1400 audit(1751504210.781:34105): avc: denied { setopt } for pid=23994 comm="syz.3.6826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 449.964186][T23998] wg2: entered promiscuous mode [ 449.969086][T23998] wg2: entered allmulticast mode [ 450.041847][T24003] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.088747][T24017] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.100665][T24003] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.128236][T24019] loop6: detected capacity change from 0 to 128 [ 450.136375][T24017] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.170998][T24003] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.200504][T24017] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.220075][T24003] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.250259][T24017] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.285122][T24003] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.295865][T24003] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.307212][T24003] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.318028][T24003] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.416618][T24027] lo speed is unknown, defaulting to 1000 [ 450.467225][T24027] 8021q: adding VLAN 0 to HW filter on device bond10 [ 450.479593][T24027] macvlan2: entered promiscuous mode [ 450.484907][T24027] macvlan2: entered allmulticast mode [ 450.491368][T24027] bond10: entered promiscuous mode [ 450.496720][T24027] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 450.504743][T24027] bond10: left promiscuous mode [ 450.883639][T24034] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.940318][T24034] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.020056][T24034] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.053130][T24040] lo speed is unknown, defaulting to 1000 [ 451.072018][T24034] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.096131][T24041] validate_nla: 5 callbacks suppressed [ 451.096144][T24041] netlink: 'syz.6.6841': attribute type 1 has an invalid length. [ 451.114292][T24041] 8021q: adding VLAN 0 to HW filter on device bond9 [ 451.153489][T24040] 8021q: adding VLAN 0 to HW filter on device bond9 [ 451.160811][T24040] bond9: (slave vxcan7): The slave device specified does not support setting the MAC address [ 451.172607][T24040] bond9: (slave vxcan7): Error -95 calling set_mac_address [ 451.187091][T24034] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.198201][T24034] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.210854][T24034] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.222373][T24034] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.243150][T24040] macvlan2: entered promiscuous mode [ 451.248557][T24040] macvlan2: entered allmulticast mode [ 451.256561][T24040] bond9: entered promiscuous mode [ 451.266272][T24040] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 451.280960][T24040] bond9: left promiscuous mode [ 451.293701][T24045] bridge0: port 1(batadv0) entered blocking state [ 451.300300][T24045] bridge0: port 1(batadv0) entered disabled state [ 451.306970][T24045] batadv0: entered allmulticast mode [ 451.313232][T24045] batadv0: entered promiscuous mode [ 451.334012][T24045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6842'. [ 451.350159][T24045] batadv0 (unregistering): left allmulticast mode [ 451.356618][T24045] batadv0 (unregistering): left promiscuous mode [ 451.363075][T24045] bridge0: port 1(batadv0) entered disabled state [ 451.505491][T24059] syz!: rxe_newlink: already configured on team_slave_0 [ 451.514877][T24059] netlink: ' FÓt˜Úʼ øì': attribute type 7 has an invalid length. [ 451.539273][T24061] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.590156][T24061] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.640169][T24061] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.680328][T24061] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.882486][T24068] bridge0: port 1(batadv0) entered blocking state [ 451.889160][T24068] bridge0: port 1(batadv0) entered disabled state [ 451.895779][T24068] batadv0: entered allmulticast mode [ 451.901716][T24068] batadv0: entered promiscuous mode [ 451.910344][T24068] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6850'. [ 451.920199][T24068] batadv0 (unregistering): left allmulticast mode [ 451.926652][T24068] batadv0 (unregistering): left promiscuous mode [ 451.933281][T24068] bridge0: port 1(batadv0) entered disabled state [ 451.961120][T24070] netlink: 344 bytes leftover after parsing attributes in process `syz.6.6850'. [ 452.873338][T24017] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.884367][T24017] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.894973][T24017] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.905878][T24017] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.058082][T24084] bridge0: port 1(batadv0) entered blocking state [ 453.064587][T24084] bridge0: port 1(batadv0) entered disabled state [ 453.071426][T24084] batadv0: entered allmulticast mode [ 453.077229][T24084] batadv0: entered promiscuous mode [ 453.084279][T24084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6855'. [ 453.094612][T24084] batadv0 (unregistering): left allmulticast mode [ 453.101315][T24084] batadv0 (unregistering): left promiscuous mode [ 453.107681][T24084] bridge0: port 1(batadv0) entered disabled state [ 453.251354][T24092] netlink: 'syz.2.6858': attribute type 10 has an invalid length. [ 453.260850][T24092] team0: Port device dummy0 added [ 453.268668][T24092] netlink: 'syz.2.6858': attribute type 10 has an invalid length. [ 453.278923][T24092] team0: Port device dummy0 removed [ 453.286588][T24092] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 453.327343][T24094] bond0: (slave dummy0): Releasing backup interface [ 453.375417][T24096] netlink: 'syz.2.6860': attribute type 1 has an invalid length. [ 453.388559][T24096] 8021q: adding VLAN 0 to HW filter on device bond10 [ 453.400386][T24096] macvlan2: entered promiscuous mode [ 453.405722][T24096] macvlan2: entered allmulticast mode [ 453.412146][T24096] bond10: entered promiscuous mode [ 453.417568][T24096] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 453.425489][T24096] bond10: left promiscuous mode [ 453.873084][T24061] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.884807][T24061] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.897665][T24061] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.914011][T24061] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.922472][T24109] lo speed is unknown, defaulting to 1000 [ 453.929719][T24113] netlink: 'syz.8.6864': attribute type 1 has an invalid length. [ 453.951923][T24113] 8021q: adding VLAN 0 to HW filter on device bond12 [ 453.970256][T24113] 8021q: adding VLAN 0 to HW filter on device bond12 [ 453.977725][T24113] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 453.989675][T24113] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 454.014559][T24118] lo speed is unknown, defaulting to 1000 [ 454.049818][T24121] netlink: 'syz.3.6866': attribute type 1 has an invalid length. [ 454.072370][T24121] 8021q: adding VLAN 0 to HW filter on device bond11 [ 454.083723][T24109] macvlan2: entered promiscuous mode [ 454.089389][T24109] macvlan2: entered allmulticast mode [ 454.095213][T24109] bond12: entered promiscuous mode [ 454.100679][T24109] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 454.108446][T24109] bond12: left promiscuous mode [ 454.119426][T24118] macvlan2: entered promiscuous mode [ 454.124754][T24118] macvlan2: entered allmulticast mode [ 454.130897][T24118] bond11: entered promiscuous mode [ 454.136248][T24118] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 454.144895][T24118] bond11: left promiscuous mode [ 454.696905][T24134] bridge0: port 1(batadv0) entered blocking state [ 454.703622][T24134] bridge0: port 1(batadv0) entered disabled state [ 454.710310][T24134] batadv0: entered allmulticast mode [ 454.716013][T24134] batadv0: entered promiscuous mode [ 454.722299][T24135] netlink: 'syz.8.6871': attribute type 10 has an invalid length. [ 454.725337][T24134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6872'. [ 454.732074][T24135] team0: Port device dummy0 added [ 454.746765][T24134] batadv0 (unregistering): left allmulticast mode [ 454.753361][T24134] batadv0 (unregistering): left promiscuous mode [ 454.754671][T24135] netlink: 'syz.8.6871': attribute type 10 has an invalid length. [ 454.759747][T24134] bridge0: port 1(batadv0) entered disabled state [ 454.781207][T24135] team0: Port device dummy0 removed [ 454.790092][T24135] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 454.812869][T24140] bond0: (slave dummy0): Releasing backup interface [ 454.882010][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 454.882025][ T29] audit: type=1326 audit(1751504215.871:34404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24143 comm="syz.8.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c6e7e929 code=0x7ffc0000 [ 454.913921][ T29] audit: type=1326 audit(1751504215.871:34405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24143 comm="syz.8.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c6e7e929 code=0x7ffc0000 [ 454.937644][ T29] audit: type=1326 audit(1751504215.871:34406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24143 comm="syz.8.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8c6e7e929 code=0x7ffc0000 [ 454.961283][ T29] audit: type=1326 audit(1751504215.871:34407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24143 comm="syz.8.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c6e7e929 code=0x7ffc0000 [ 454.985120][ T29] audit: type=1326 audit(1751504215.871:34408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24143 comm="syz.8.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c6e7e929 code=0x7ffc0000 [ 455.008820][ T29] audit: type=1326 audit(1751504215.871:34409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24143 comm="syz.8.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8c6e7e929 code=0x7ffc0000 [ 455.032459][ T29] audit: type=1326 audit(1751504215.871:34410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24143 comm="syz.8.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c6e7e929 code=0x7ffc0000 [ 455.056131][ T29] audit: type=1326 audit(1751504215.871:34411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24143 comm="syz.8.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c6e7e929 code=0x7ffc0000 [ 455.079729][ T29] audit: type=1326 audit(1751504215.871:34412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24143 comm="syz.8.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8c6e7e929 code=0x7ffc0000 [ 455.103358][ T29] audit: type=1326 audit(1751504215.871:34413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24143 comm="syz.8.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c6e7e929 code=0x7ffc0000 [ 455.151268][T24161] netlink: 'syz.2.6881': attribute type 2 has an invalid length. [ 455.159105][T24161] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.6881'. [ 455.325346][T24175] lo speed is unknown, defaulting to 1000 [ 455.373324][T24176] 8021q: adding VLAN 0 to HW filter on device bond3 [ 455.412573][T24175] 8021q: adding VLAN 0 to HW filter on device bond3 [ 455.419935][T24175] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 455.431386][T24175] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 455.463631][T24176] macvlan2: entered promiscuous mode [ 455.468978][T24176] macvlan2: entered allmulticast mode [ 455.474786][T24176] bond3: entered promiscuous mode [ 455.480193][T24176] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 455.488224][T24176] bond3: left promiscuous mode [ 455.722053][T24184] bond0: (slave dummy0): Releasing backup interface [ 455.760999][T24186] lo speed is unknown, defaulting to 1000 [ 455.826647][T24189] bridge0: port 1(batadv0) entered blocking state [ 455.833144][T24189] bridge0: port 1(batadv0) entered disabled state [ 455.839862][T24189] batadv0: entered allmulticast mode [ 455.845654][T24189] batadv0: entered promiscuous mode [ 455.854959][T24189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6888'. [ 455.864598][T24189] batadv0 (unregistering): left allmulticast mode [ 455.871148][T24189] batadv0 (unregistering): left promiscuous mode [ 455.877490][T24189] bridge0: port 1(batadv0) entered disabled state [ 456.001685][T24194] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.042346][T24198] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6891'. [ 456.042590][T24194] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.090787][T24200] loop6: detected capacity change from 0 to 128 [ 456.097837][T24200] vfat: Unknown parameter 'kfree' [ 456.104265][T24194] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.192479][T24194] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.211085][T24198] lo speed is unknown, defaulting to 1000 [ 456.252715][T24204] sctp: [Deprecated]: syz.2.6891 (pid 24204) Use of int in max_burst socket option. [ 456.252715][T24204] Use struct sctp_assoc_value instead [ 456.352576][T24210] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.400586][T24210] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.450897][T24210] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.510522][T24210] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.576748][T24210] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.590584][T24210] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.615263][T24210] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.629434][T24210] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.666426][T24222] validate_nla: 2 callbacks suppressed [ 456.666441][T24222] netlink: 'syz.2.6897': attribute type 10 has an invalid length. [ 456.678561][T24219] ip6tnl1: entered allmulticast mode [ 456.695301][T24222] team0: Port device dummy0 added [ 456.706231][T24222] netlink: 'syz.2.6897': attribute type 10 has an invalid length. [ 456.715532][T24222] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 456.726581][T24222] team0: Failed to send options change via netlink (err -105) [ 456.736110][T24222] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 456.745157][T24222] team0: Port device dummy0 removed [ 456.755493][T24222] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 456.806815][T24228] netlink: 'syz.2.6898': attribute type 10 has an invalid length. [ 456.817243][T24228] bond0: (slave dummy0): Releasing backup interface [ 456.827288][T24228] team0: Port device dummy0 added [ 456.907652][T24232] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(17) [ 456.914279][T24232] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 456.923963][T24232] vhci_hcd vhci_hcd.0: Device attached [ 456.986675][T24235] usbip_core: unknown command [ 456.991439][T24235] vhci_hcd: unknown pdu 0 [ 456.996179][T24235] usbip_core: unknown command [ 457.002632][ T12] vhci_hcd: stop threads [ 457.006904][ T12] vhci_hcd: release socket [ 457.011359][ T12] vhci_hcd: disconnect device [ 457.254115][T24194] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.264986][T24194] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.275883][T24194] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.286871][T24194] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.315157][T24240] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.360802][T24240] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.393370][T24243] 8021q: adding VLAN 0 to HW filter on device bond4 [ 457.405943][T24243] macvlan2: entered promiscuous mode [ 457.411414][T24243] macvlan2: entered allmulticast mode [ 457.420369][T24243] bond4: entered promiscuous mode [ 457.425791][T24243] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 457.439475][T24243] bond4: left promiscuous mode [ 457.486429][T24240] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.532709][T24253] netlink: 'syz.6.6907': attribute type 1 has an invalid length. [ 457.546735][T24253] 8021q: adding VLAN 0 to HW filter on device bond10 [ 457.555655][T24240] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.584998][T24259] 8021q: adding VLAN 0 to HW filter on device bond11 [ 457.595814][T24257] lo speed is unknown, defaulting to 1000 [ 457.601151][T24259] macvlan2: entered promiscuous mode [ 457.606888][T24259] macvlan2: entered allmulticast mode [ 457.613196][T24259] bond11: entered promiscuous mode [ 457.618525][T24259] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 457.626032][T24259] bond11: left promiscuous mode [ 457.650477][T24261] lo speed is unknown, defaulting to 1000 [ 457.658629][T24263] netlink: 'syz.5.6908': attribute type 1 has an invalid length. [ 457.703062][T24263] 8021q: adding VLAN 0 to HW filter on device bond5 [ 457.734514][T24268] netlink: 'syz.6.6911': attribute type 10 has an invalid length. [ 457.745620][T24269] 8021q: adding VLAN 0 to HW filter on device bond5 [ 457.753037][T24269] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 457.764628][T24269] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 457.780919][T24268] team0: Port device dummy0 added [ 457.794521][T24263] macvlan2: entered promiscuous mode [ 457.799937][T24263] macvlan2: entered allmulticast mode [ 457.805693][T24263] bond5: entered promiscuous mode [ 457.811121][T24263] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 457.819520][T24263] bond5: left promiscuous mode [ 458.406776][T24289] netlink: ' FÓt˜Úʼ øì': attribute type 7 has an invalid length. [ 458.465223][T24295] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(17) [ 458.471856][T24295] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 458.485866][T24295] vhci_hcd vhci_hcd.0: Device attached [ 458.561418][T24296] usbip_core: unknown command [ 458.566163][T24296] vhci_hcd: unknown pdu 0 [ 458.570547][T24296] usbip_core: unknown command [ 458.580435][ T12] vhci_hcd: stop threads [ 458.584722][ T12] vhci_hcd: release socket [ 458.589183][ T12] vhci_hcd: disconnect device [ 459.137253][T24313] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 459.137783][T24314] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6931'. [ 459.149290][T24313] netlink: ' FÓt˜Úʼ øì': attribute type 7 has an invalid length. [ 459.207993][T24314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.216613][T24314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.369734][T24321] 8021q: adding VLAN 0 to HW filter on device bond13 [ 459.382168][T24324] netlink: 'syz.6.6924': attribute type 3 has an invalid length. [ 459.387252][T24321] macvlan2: entered promiscuous mode [ 459.395417][T24321] macvlan2: entered allmulticast mode [ 459.402366][T24321] bond13: entered promiscuous mode [ 459.407739][T24321] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 459.415497][T24321] bond13: left promiscuous mode [ 459.491651][T24329] lo speed is unknown, defaulting to 1000 [ 459.540924][T24333] netlink: 'syz.2.6925': attribute type 1 has an invalid length. [ 459.574496][T24333] 8021q: adding VLAN 0 to HW filter on device bond11 [ 459.632986][T24332] loop6: detected capacity change from 0 to 128 [ 459.640158][T24332] vfat: Unknown parameter '0xffffffffffffffff0000000000000000000018446744073709551615™<‹á(‡K†÷4vi1Œ0ƒmÌ$›pé^Ü|Ù}Žo³_ê±¾Ô+ýq£¢°ÎÖ¿, priority 0 [ 463.090769][T24492] syzkaller0: entered promiscuous mode [ 463.096307][T24492] syzkaller0: entered allmulticast mode [ 463.113140][T24492] tipc: Resetting bearer [ 463.122090][T24490] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.134364][T24492] tipc: Resetting bearer [ 463.135597][T24499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.148688][T24499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.157244][T24492] tipc: Disabling bearer [ 463.170157][T24490] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.184669][T24500] loop6: detected capacity change from 0 to 128 [ 463.191530][T24500] vfat: Unknown parameter 'kfree' [ 463.220375][T24490] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.285359][T24490] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.296846][T24490] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.308124][T24490] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.319140][T24490] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.601913][T24514] netlink: 'syz.5.6992': attribute type 10 has an invalid length. [ 463.611181][T24514] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 463.622487][T24514] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 463.634921][T24514] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 463.844050][T24519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.852643][T24519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.988349][T24524] netlink: 68 bytes leftover after parsing attributes in process `syz.8.6994'. [ 464.545085][T24551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.558972][T24551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.933003][T24556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.944056][T24556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.102317][ T29] kauditd_printk_skb: 4549 callbacks suppressed [ 465.102333][ T29] audit: type=1400 audit(1751504226.091:39414): avc: denied { map } for pid=24559 comm="syz.8.7007" path="socket:[91418]" dev="sockfs" ino=91418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 465.132309][ T29] audit: type=1400 audit(1751504226.091:39415): avc: denied { read } for pid=24559 comm="syz.8.7007" path="socket:[91418]" dev="sockfs" ino=91418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 465.238188][ T29] audit: type=1400 audit(1751504226.221:39416): avc: denied { shutdown } for pid=24561 comm="syz.6.7008" lport=44063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 465.297173][T24569] syzkaller1: entered promiscuous mode [ 465.302763][T24569] syzkaller1: entered allmulticast mode [ 465.337704][ T29] audit: type=1400 audit(1751504226.321:39417): avc: denied { sqpoll } for pid=24574 comm="syz.6.7014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 465.390538][T24577] veth0: entered promiscuous mode [ 465.429897][T24574] veth0: left promiscuous mode [ 465.674415][T24590] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7020'. [ 465.697863][T24592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.706471][T24592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.392040][T24604] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 466.413677][T24606] program syz.3.7028 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 466.442708][ T29] audit: type=1326 audit(1751504227.431:39418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24608 comm="syz.3.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0ac8e929 code=0x7ffc0000 [ 466.474409][ T29] audit: type=1326 audit(1751504227.431:39419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24608 comm="syz.3.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0ac8e929 code=0x7ffc0000 [ 466.498165][ T29] audit: type=1326 audit(1751504227.431:39420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24608 comm="syz.3.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b0ac8e929 code=0x7ffc0000 [ 466.521837][ T29] audit: type=1326 audit(1751504227.431:39421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24608 comm="syz.3.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0ac8e929 code=0x7ffc0000 [ 466.545449][ T29] audit: type=1326 audit(1751504227.431:39422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24608 comm="syz.3.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b0ac8e929 code=0x7ffc0000 [ 466.569157][ T29] audit: type=1326 audit(1751504227.451:39423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24608 comm="syz.3.7030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b0ac8e929 code=0x7ffc0000 [ 466.593552][T24610] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.640312][T24610] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.680343][T24610] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.740636][T24610] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.796133][T24610] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.807816][T24610] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.820212][T24622] netlink: 'syz.2.7034': attribute type 10 has an invalid length. [ 466.821154][T24610] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.836883][T24622] veth1_macvtap: left promiscuous mode [ 466.846209][T24610] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.866694][T24622] macsec2: entered allmulticast mode [ 466.992357][T24635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7039'. [ 467.533003][T24666] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 467.544935][T24666] netlink: ' FÓt˜Úʼ øì': attribute type 7 has an invalid length. [ 467.602927][T24671] macsec1: entered allmulticast mode [ 467.929525][T24680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.948254][T24680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.370003][T24693] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7058'. [ 468.750186][T24696] tipc: Started in network mode [ 468.755101][T24696] tipc: Node identity 1ac18c889a58, cluster identity 4711 [ 468.762299][T24696] tipc: Enabled bearer , priority 0 [ 468.770792][T24696] syzkaller0: entered promiscuous mode [ 468.776363][T24696] syzkaller0: entered allmulticast mode [ 468.784386][T24696] tipc: Resetting bearer [ 468.791292][T24696] tipc: Resetting bearer [ 468.797597][T24696] tipc: Disabling bearer [ 468.939736][T24703] macsec1: entered allmulticast mode [ 469.193006][T24719] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7069'. [ 469.337612][T24719] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7069'. [ 469.349092][T24719] netlink: 'syz.6.7069': attribute type 10 has an invalid length. [ 469.510555][T24737] tipc: Enabling of bearer rejected, failed to enable media [ 469.858220][T24751] loop6: detected capacity change from 0 to 512 [ 469.865295][T24751] EXT4-fs: Ignoring removed oldalloc option [ 469.873389][T24751] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 469.884659][T24751] EXT4-fs (loop6): 1 truncate cleaned up [ 469.892520][T24751] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.157407][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 470.157420][ T29] audit: type=1400 audit(1751504231.141:39448): avc: denied { bind } for pid=24769 comm="syz.8.7089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 470.185166][ T29] audit: type=1400 audit(1751504231.141:39449): avc: denied { listen } for pid=24769 comm="syz.8.7089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 470.771450][T19067] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.093757][T24787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7094'. [ 471.241550][T24787] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7094'. [ 471.252565][T24787] netlink: 'syz.5.7094': attribute type 10 has an invalid length. [ 471.378435][T24810] syz_tun: entered allmulticast mode [ 471.384467][T24806] syz_tun: left allmulticast mode [ 471.474396][ T29] audit: type=1400 audit(1751504232.461:39450): avc: denied { create } for pid=24798 comm="syz.5.7096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 471.494284][ T29] audit: type=1400 audit(1751504232.461:39451): avc: denied { ioctl } for pid=24798 comm="syz.5.7096" path="socket:[91819]" dev="sockfs" ino=91819 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 472.345587][T24835] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7107'. [ 472.700900][T24853] syz_tun: entered allmulticast mode [ 472.706691][T24851] syz_tun: left allmulticast mode [ 472.734967][ T29] audit: type=1400 audit(1751504233.721:39452): avc: denied { create } for pid=24849 comm="syz.8.7113" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 472.770244][T24852] block device autoloading is deprecated and will be removed. [ 472.797297][ T29] audit: type=1400 audit(1751504233.741:39453): avc: denied { write } for pid=24849 comm="syz.8.7113" name="file0" dev="tmpfs" ino=1994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 472.799713][T24857] tipc: Enabled bearer , priority 0 [ 472.820267][ T29] audit: type=1400 audit(1751504233.741:39454): avc: denied { open } for pid=24849 comm="syz.8.7113" path="/369/file0" dev="tmpfs" ino=1994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 472.849550][ T29] audit: type=1400 audit(1751504233.781:39455): avc: denied { ioctl } for pid=24849 comm="syz.8.7113" path="/369/file0" dev="tmpfs" ino=1994 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 472.853574][T24857] syzkaller0: entered promiscuous mode [ 472.879629][T24857] syzkaller0: entered allmulticast mode [ 472.906916][T24857] tipc: Resetting bearer [ 472.917355][T24857] tipc: Resetting bearer [ 472.924154][T24857] tipc: Disabling bearer [ 472.994481][T24866] netlink: 'syz.3.7119': attribute type 13 has an invalid length. [ 473.077724][T24869] netlink: 48 bytes leftover after parsing attributes in process `syz.8.7113'. [ 473.358422][T24866] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.367127][T24866] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.375767][T24866] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.384347][T24866] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.499003][ T29] audit: type=1400 audit(1751504234.471:39456): avc: denied { unlink } for pid=19150 comm="syz-executor" name="file0" dev="tmpfs" ino=1994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 473.530555][T24890] syz_tun: entered allmulticast mode [ 473.538217][T24885] syz_tun: left allmulticast mode [ 473.574241][ T29] audit: type=1400 audit(1751504234.561:39457): avc: denied { getopt } for pid=24888 comm="syz.6.7128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 473.843563][T24917] tipc: Started in network mode [ 473.848484][T24917] tipc: Node identity de90ad56a08, cluster identity 4711 [ 473.855648][T24917] tipc: Enabled bearer , priority 0 [ 473.862788][T24917] syzkaller0: entered promiscuous mode [ 473.868265][T24917] syzkaller0: entered allmulticast mode [ 473.875866][T24917] tipc: Resetting bearer [ 473.883719][T24917] tipc: Disabling bearer [ 475.720583][T25014] bridge0: port 1(batadv0) entered blocking state [ 475.727128][T25014] bridge0: port 1(batadv0) entered disabled state [ 475.737519][T25014] batadv0: entered allmulticast mode [ 475.743846][T25014] batadv0: entered promiscuous mode [ 475.753332][T25004] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7176'. [ 475.770826][T25004] batadv0 (unregistering): left allmulticast mode [ 475.777316][T25004] batadv0 (unregistering): left promiscuous mode [ 475.783874][T25004] bridge0: port 1(batadv0) entered disabled state [ 476.531491][T25040] hub 9-0:1.0: USB hub found [ 476.560971][T25040] hub 9-0:1.0: 8 ports detected [ 476.995381][T25066] tipc: Started in network mode [ 477.000337][T25066] tipc: Node identity 36b987544e1a, cluster identity 4711 [ 477.007549][T25066] tipc: Enabled bearer , priority 0 [ 477.018823][T25066] syzkaller0: entered promiscuous mode [ 477.024312][T25066] syzkaller0: entered allmulticast mode [ 477.046957][T25066] tipc: Resetting bearer [ 477.054367][T25066] tipc: Disabling bearer [ 477.159243][T25089] tipc: Enabling of bearer rejected, failed to enable media [ 477.296629][T25093] hub 9-0:1.0: USB hub found [ 477.301340][T25093] hub 9-0:1.0: 8 ports detected [ 478.137678][T25108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.146342][T25108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.186124][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 478.186137][ T29] audit: type=1400 audit(1751504239.171:39531): avc: denied { bind } for pid=25115 comm="syz.6.7220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 478.260114][T25129] tipc: Enabled bearer , priority 0 [ 478.267252][T25129] syzkaller0: entered promiscuous mode [ 478.272846][T25129] syzkaller0: entered allmulticast mode [ 478.282426][T25129] tipc: Resetting bearer [ 478.310404][T25129] tipc: Disabling bearer [ 478.951091][T25173] netlink: 'syz.6.7245': attribute type 1 has an invalid length. [ 479.208432][T25183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7250'. [ 479.236398][ T29] audit: type=1400 audit(1751504240.191:39532): avc: denied { create } for pid=25182 comm="syz.3.7250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 479.288191][T25184] bridge1: port 1(veth0_to_bond) entered blocking state [ 479.295248][T25184] bridge1: port 1(veth0_to_bond) entered disabled state [ 479.312635][T25184] veth0_to_bond: entered allmulticast mode [ 479.319305][T25184] veth0_to_bond: entered promiscuous mode [ 479.338858][T25183] vlan3: entered allmulticast mode [ 479.344095][T25183] veth1: entered allmulticast mode [ 479.351558][T25183] bridge1: port 2(vlan3) entered blocking state [ 479.357853][T25183] bridge1: port 2(vlan3) entered disabled state [ 479.366445][T25183] vlan3: entered promiscuous mode [ 479.371594][T25183] veth1: entered promiscuous mode [ 479.397776][T25195] tipc: Enabled bearer , priority 0 [ 479.409222][T25195] syzkaller0: entered promiscuous mode [ 479.414730][T25195] syzkaller0: entered allmulticast mode [ 479.421825][T25195] tipc: Resetting bearer [ 479.434673][T25195] tipc: Disabling bearer [ 480.027295][T25250] tipc: Started in network mode [ 480.032270][T25252] loop6: detected capacity change from 0 to 512 [ 480.032358][T25250] ================================================================== [ 480.038852][T25252] EXT4-fs: Ignoring removed nobh option [ 480.046593][T25250] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 480.054008][T25252] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.7280: iget: bad i_size value: 38620345925642 [ 480.059117][T25250] [ 480.059125][T25250] write to 0xffffffff868998c8 of 88 bytes by task 25252 on cpu 0: [ 480.059141][T25250] prb_reserve+0x696/0xaf0 [ 480.059169][T25250] vprintk_store+0x56d/0x860 [ 480.059185][T25250] vprintk_emit+0x178/0x650 [ 480.059202][T25250] vprintk_default+0x26/0x30 [ 480.059217][T25250] vprintk+0x1d/0x30 [ 480.059240][T25250] _printk+0x79/0xa0 [ 480.059263][T25250] set_capacity_and_notify+0x14c/0x1f0 [ 480.059291][T25250] loop_set_size+0x2e/0x70 [ 480.072797][T25252] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.7280: couldn't read orphan inode 15 (err -117) [ 480.074162][T25250] loop_configure+0x8d3/0xa50 [ 480.082738][T25252] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.086355][T25250] lo_ioctl+0x559/0x15d0 [ 480.150685][T25250] blkdev_ioctl+0x34f/0x440 [ 480.155180][T25250] __se_sys_ioctl+0xce/0x140 [ 480.159756][T25250] __x64_sys_ioctl+0x43/0x50 [ 480.164331][T25250] x64_sys_call+0x19a8/0x2fb0 [ 480.168993][T25250] do_syscall_64+0xd2/0x200 [ 480.173482][T25250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.179356][T25250] [ 480.181661][T25250] read to 0xffffffff868998c8 of 8 bytes by task 25250 on cpu 1: [ 480.189276][T25250] _prb_read_valid+0x1c4/0x920 [ 480.194054][T25250] prb_read_valid+0x3c/0x60 [ 480.198554][T25250] console_unlock+0x164/0x330 [ 480.203224][T25250] vprintk_emit+0x388/0x650 [ 480.207709][T25250] vprintk_default+0x26/0x30 [ 480.212280][T25250] vprintk+0x1d/0x30 [ 480.216158][T25250] _printk+0x79/0xa0 [ 480.220037][T25250] tipc_net_init+0xc5/0x170 [ 480.224518][T25250] tipc_enable_l2_media+0x1dd/0x600 [ 480.229700][T25250] __tipc_nl_bearer_enable+0x942/0xda0 [ 480.235145][T25250] tipc_nl_compat_doit+0x277/0x360 [ 480.240242][T25250] tipc_nl_compat_recv+0x689/0x800 [ 480.245349][T25250] genl_family_rcv_msg_doit+0x140/0x1b0 [ 480.250879][T25250] genl_rcv_msg+0x422/0x460 [ 480.255361][T25250] netlink_rcv_skb+0x123/0x220 [ 480.260115][T25250] genl_rcv+0x28/0x40 [ 480.264093][T25250] netlink_unicast+0x59e/0x670 [ 480.268840][T25250] netlink_sendmsg+0x58b/0x6b0 [ 480.273593][T25250] __sock_sendmsg+0x145/0x180 [ 480.278270][T25250] ____sys_sendmsg+0x31e/0x4e0 [ 480.283030][T25250] ___sys_sendmsg+0x17b/0x1d0 [ 480.287694][T25250] __x64_sys_sendmsg+0xd4/0x160 [ 480.292543][T25250] x64_sys_call+0x2999/0x2fb0 [ 480.297215][T25250] do_syscall_64+0xd2/0x200 [ 480.301696][T25250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.307573][T25250] [ 480.309892][T25250] value changed: 0x000000000000200f -> 0x000000000000400f [ 480.316986][T25250] [ 480.319289][T25250] Reported by Kernel Concurrency Sanitizer on: [ 480.325419][T25250] CPU: 1 UID: 0 PID: 25250 Comm: syz.8.7279 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 480.337937][T25250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 480.347982][T25250] ================================================================== [ 480.356140][T25250] tipc: Node identity 627c512165f8, cluster identity 4711 [ 480.363953][T25250] tipc: Enabled bearer , priority 0 [ 480.392283][T25256] syzkaller0: entered promiscuous mode [ 480.397779][T25256] syzkaller0: entered allmulticast mode [ 480.416809][T25250] tipc: Resetting bearer [ 480.435652][T25250] tipc: Disabling bearer [ 480.992968][T19067] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.