last executing test programs: 5.618414758s ago: executing program 2 (id=150): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x4, 0xb0) listen(r2, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc804f9fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) alarm(0x4000000000002) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) 5.432919291s ago: executing program 2 (id=155): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090e000000000000000000000005000600000000000a00000000000000fc000000000000000000000000000000000000000000000005000500000000000a00000000000000060100000000000000000000000000aa0100000000000000020013"], 0x70}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac1414bb0c0002800500010000000000240002801400018008000100ac1414bb08000200e00000010c00028005000100000000"], 0x90}}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), r4) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000001680)=ANY=[@ANYBLOB="d15fef96adc529fde568550345337c2a56336ea1", @ANYRES64=0x0, @ANYRESDEC=r1], 0x30}, 0x1, 0x0, 0x0, 0x4850}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) 4.559511583s ago: executing program 2 (id=179): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) close(r5) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = timerfd_create(0x0, 0x0) readv(r6, &(0x7f0000000380)=[{&(0x7f0000000d00)=""/161, 0xa1}], 0x1) capset(&(0x7f0000000280)={0x19980330}, &(0x7f0000000300)={0x4, 0xfffffffa, 0x7, 0x6, 0x3, 0xeb64}) 4.194182408s ago: executing program 3 (id=188): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="9f47faf26d314c68f094fdae48b1e45369c9e24b5c873a", 0x17}], 0x1) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = openat$cgroup_type(r2, &(0x7f0000000240), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000340), 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x5, &(0x7f00000003c0)=[{0xfd2e, 0x6, 0x1, 0xa}, {0xa, 0xf0, 0x2, 0xaacd}, {0xfa, 0x8, 0xf7, 0xffff}, {0x1, 0x7, 0x0, 0x5}, {0x1, 0x40, 0x4, 0x1}]}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000380)=0x0) sendto$inet6(r1, &(0x7f0000000580)="010b8218bfa58565c04c737731f16fd47e523ded863a06a11746b4adca25b9710a733ec366236f", 0x27, 0x40, &(0x7f00000005c0)={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5f}, 0x1c) syz_pidfd_open(r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="86cb5b1b51c3559de67317222e41cda686d6a45d21a5c086506df147c091a7ef2ea6c0df57ee1851d1726046341c508969c457df696fd17375939f44efe1dec6479d13dd", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x18) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r10, &(0x7f0000000500)={0xa, 0xdfff, 0x0, @loopback, 0x9}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440), 0x1000a) shmctl$IPC_RMID(0x0, 0xe00) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0x80000000001002) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 4.09259645s ago: executing program 4 (id=189): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090e000000000000000000000005000600000000000a00000000000000fc000000000000000000000000000000000000000000000005000500000000000a00000000000000060100000000000000000000000000aa0100000000000000020013"], 0x70}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac1414bb0c0002800500010000000000240002801400018008000100ac1414bb08000200e00000010c00028005000100000000"], 0x90}}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), r4) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000001680)=ANY=[@ANYBLOB="d15fef96adc529fde568550345337c2a56336ea1", @ANYRES64=0x0, @ANYRESDEC=r1], 0x30}, 0x1, 0x0, 0x0, 0x4850}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) 3.675337046s ago: executing program 2 (id=190): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5c00000014006b04000000d86e6c1d000a847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f000000172f71d34460bc24eab5560000000ebab8bebf9367140051f60a64c9f4d4778037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x141080, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000300)={r1}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x200, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1f, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x3, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00', r3}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newtclass={0x24, 0x28, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa}, {0xffff, 0x4}, {0x0, 0xc}}}, 0x24}}, 0x4000004) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000200)=0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000002c0)=r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) get_mempolicy(&(0x7f0000000200), &(0x7f0000000240), 0x1, &(0x7f0000ffd000/0x2000)=nil, 0xb) 3.674609586s ago: executing program 3 (id=191): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) setreuid(0x0, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) 3.650993946s ago: executing program 3 (id=193): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_read_part_table(0x5be, &(0x7f00000005c0)="$eJzs2z9o02kYB/AnahAUzsXJ4bAOTi6KoxmsJFFRCNEu4qCgiJgpghAhINihzdDSDKVjl1LI0j9T0wwdjpYWOpfSoUehQ6ejXQpdmuOu7+3t9Q8Inw/8ePK+7zd58gy/8Q1+aZfir263m4mI7tWTf7uvlS88u116XH4dkYm3EdHzx28z/5xkUuK/X72T1ptpPTF+rTO49zTb2ni1f/fdYuNSOv+RnuuT7b5TD8e5m8ot3fjZXy0O1XKf14v17YG11ZfTu/ly+0WjOfM8++RDyi2neiXVr1GL7/El3kclKvExqmfUf6y1df/wVrE19+nRQaEzvPAg5UqnnPO4/b/1jLxp1nvvzd4cfVibXynvXD7KVf7H2wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMWbyi3d+NlfLQ7Vcp/Xi/XtgbXVl9O7+XL7RaM58zz75EPKLad6JdWvUYvv8SXeRyUq8TGqZ9R/rLV1//BWsTX36dFBoTO88CDlSqec87j9v/WMvGnWe+/N3hx9WJtfKe9cPspVrp7THwAAAAAAAAAAAAAAAAAAAICIyBee3S49Lr+OyMTbiGj/3vvvVf9uuu+eSbk76cNm2p8Yv9YZ3HuabW282r/7brHxZ9r/kZ7rk+2+i5+Gk/o7AAD//5Yblcc=") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x4, 0xb0) listen(r2, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc804f9fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) alarm(0x4000000000002) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) 3.599909817s ago: executing program 2 (id=194): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="c65dfffffffffffffff1000000000000f60a01000000000000000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000001285000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040004000879cc510f6af7f00897a701", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e000000058baceac2ba0000b6be010008040000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000500"/28], 0x50) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2c"], 0x66) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x2, 0x2}, 0x10) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='vnet_skip_tx_trigger\x00', r6, 0x0, 0x2800000000000004}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r5}, &(0x7f0000000400), &(0x7f0000000300)}, 0x20) syz_read_part_table(0x5c9, &(0x7f0000000880)="$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") r7 = socket(0x10, 0x3, 0x0) socket(0x27, 0x800, 0x10001) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) socket$inet_udplite(0x2, 0x2, 0x88) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fbffffff0000000000000c42"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) 3.42690666s ago: executing program 3 (id=197): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async, rerun: 32) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) (rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0xfffb}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}}, 0x0) (async) r4 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0x3, 0x3}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000}) io_uring_enter(r4, 0x6a4f, 0x4053, 0x22, 0x0, 0x0) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 3.346012291s ago: executing program 3 (id=199): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_emit_ethernet(0x2d4, &(0x7f0000001100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x2, 0x6, 'vNq', 0x29e, 0x2f, 0xff, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xd4, 0x2, [0xe05], "3c5a154c3bbb7e23cc19ca1bc7d356528f684463ace39b6216af03181bd1d8d81a875c84bc24330a11121c534fd849be4bfc52fd6907080b1feb7707460db6fc1a7e3d5918603d108305447a84245798627dee50115578c459a118b8b9f626d81acf04fde51e074c120a220d6307f09f6eb25471edf475f913772fe1dd1cd53b0bb8d7b0e0e8cd12163c0793a814f2848b229fc9772b89cedf63b180f8940c0b0251242f5309c08af3cb7ee609a1240fde97a43167fae0cadf2fc4c5c66faeec2d02adad2273c58da853ed08bc87ef1752a0c69b"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x2, 0x400], "32d45c9e07e54f161d9cc1ed6e5082"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x0, 0x1], "63f77e9b0811a7ae308ae0687086c63d7f6c7af947a58996748f0bb19317161786f67f492538d624001606ed2df540fc0badabba7f7c2c7e055f606c5397696426b5dce8ed761992231481bcb8cb008665f2dbf8d4b3d54c183cfec7531cb1cc461daf5b62d4582452e9e815e9eb048fb9fc5119d7e7b7eee6fc74bb2aab9ff7244f83350f2e01e37ebea379acc7b59c71"}, {0x8, 0x88be, 0x2, {{0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x5, 0x1}, 0x1, {0x55b}}}, {0x8, 0x22eb, 0x3, {{0x4, 0x2, 0x0, 0x3, 0x0, 0x2, 0x5, 0x4}, 0x2, {0xb, 0xa, 0x2, 0x8, 0x1, 0x0, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "cee15d0a2e112822417dce89bb57a9fdb8e883358a254bd7749aa51f6140341a4206d756a2a719c6373def571fc770ca48e6084d1171dd17800d13d8a561edb45847f35f7165f30a234cf2f52e27afa68bc5dc2ce7fa74a39d08c8753330075ae5ef16cef595fbaa0d55dca820fc59f7774eb9cb5b5f0656cb7933fc701bd769083e089cf6f03453cfccda29876f70ded2a8e72c679001a3ba2da56630cacdba41d4e87ba749a552a05032774ced1ec4bb40de2f3e906eccf6611b525ce8bc3a91d259bef85d2442f818cbcfbbe2163f117bf654f948b95f6314748e"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0xf4, 0x8, 0xe9, 0x1, 0x0}, &(0x7f0000000bc0)=0x10) sendmsg$inet_sctp(r0, &(0x7f0000000c00)={&(0x7f0000000140)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000600)="8f627dafcb9ddb56fab41f37d0017a7dd652600556f9d0b3d268751d62b7cfc225b9ac275050e1bd3bc55edf60eb8e4780b73b6e101ff00bc823eafecd2ba40f1ed70930cb9284740ffa78f22d7a38e61921ea982bf9c797a4", 0x59}, {&(0x7f0000000680)="e75ea9a82c12ad935d221f22dfbf94cc8fdb79e1aefef248beb5623c6968ab07cc33abd42a2ef4d07cfd000b192636becefcd652593d12093ab04dc4d7fb4b3b86cbb8b15e790289c25b0edca42d1eef57751bed67126c64342325c53d36ef8982449fb82bb6948caccba8dd77cd1ed1dfb907077a90b1793448e2003b4ea850d17917e9ec3a7815e6e16d0f44ddc9e1d2ff9234b8b9a1a3666dfa1c7051215b7b586a343abbe0a2decfe9cc58e74483ba5c2ee10c59e959b833be2b6611", 0xbe}, {&(0x7f0000000740)="5d628745c10446c6e50b7ca3467aa915ee9b91ce4eff115999eb20598e07f6373ef6a9a90eaecaeb276dae1e41bde5e652f50d6f56143c95574560b7569511ef9f2b1fdc03787306ed9818264f39beb7b0e2842e8a915f3b7c460c24da6b9c62448c9ccdf0f4f0b0e0fa2712d57bc2d0eb3b5afa8ddc898ffb6c7a069f4b12f07c665bfb", 0x84}, {&(0x7f0000000240)="470ad3243c2ccb52396600ad603e396a282f", 0x12}, {&(0x7f0000000a40)="cd52f87e77dad81c92feaa0998c50439a9979e9a960eb384669f3f49867502d12b33943ecf51ece70cccc4d5e6f7f787f8059f02fb0d0e72471eca0ae78a7ef2a5e75c4db9760c60b13d59418ad085f4126ba8a2390f4b372bccc3df86e4196830dfe16dcbcad8be4f9614b924a69f08143b0179bbe6a14a3777cfbf14eaf18d8018fc7d8697e3f625fbeab84a4c4001cfee2ad6494f9f673f5b88376df1b0a002c1b2523cab8570ec05dfd970ae3f15d78e6612691d02723d08ce6cd7a16a819c", 0xc1}, {&(0x7f0000000800)="8673083edbb2e1af1d3981d283bacb87f18c0d53085f050fa0ecc24bfcd448ed75fa593203bea71c146f7c747e91798d29627f7de59c570b0fa178e9d2ebb2b1e30e2dc00ed2978d48515f00559ae1d3f75988d70fdbbd5f6cd42f6de4b164d2456a39e178361b3d4a928f2907e901901522ab29f9", 0x75}, {&(0x7f0000000940)="23aacef2d2338b6abaad6c8775d1e12519c42eac10943fd268a6de1ecd16727d664f0dbce39bedec42f13a02cbb8788f88645be68702be9b74d245696fc9ca5c9c24e1eeb1640c7b91a4d3dcc34c5db12d242ecf5761ebfc10ba509d97c86158b267bc92222a6a83417e895b48e23a5821394a98e4", 0x75}], 0x7, &(0x7f0000001400)=[@init={0x18, 0x84, 0x0, {0x5, 0x9, 0x0, 0x6}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010100}, @init={0x18, 0x84, 0x0, {0x1000, 0x6, 0x1000, 0x730}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0xbbe9}}, @authinfo={0x18, 0x84, 0x6, {0x89e}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x4, 0x8004, 0x5, 0x7, 0x4, 0x9, 0xff, r1}}], 0xe0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000300), 0x1, 0x440, &(0x7f0000000cc0)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180600000000000016d159d9addfe946f47111dae6024567272dd7161bf77ed48dd3f1e81ce0387091d2064c371cdd5698e9da13d38a00000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x810) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1b, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000180)={0xb, 0x0, 0x3, 0x7fff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0xc, 0x4, 0x5, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00'}, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000104000000260000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000300", @ANYRES32=r5], 0x40}, 0x1, 0xd, 0x0, 0x8004070}, 0x0) 3.254575212s ago: executing program 2 (id=201): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) syz_emit_ethernet(0x82, &(0x7f0000000040)=ANY=[], 0x0) unlink(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x4) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x88001, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_attr(r5, &(0x7f0000000500)='system_u:object_r:crond_initrc_exec_t:s0\x00', 0x29) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) close(r6) socket$caif_stream(0x25, 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESDEC=r7]) pipe2$9p(&(0x7f0000000440), 0x4000) signalfd(r5, &(0x7f00000003c0)={[0x80000002]}, 0x8) r8 = gettid() timer_create(0x7, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r8}, &(0x7f0000000080)) inotify_init1(0x800) 3.234468812s ago: executing program 4 (id=202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c00024000"], 0x118}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) getpeername$unix(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0xf00, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='fscache_active\x00', r7, 0x0, 0xfffffffffffffffc}, 0x18) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x60800, 0x0) sendfile(r6, r8, 0x0, 0x1000000000004) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) r13 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r13, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r13, 0x5437, 0x2) setsockopt$inet_tcp_int(r10, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) 3.124692074s ago: executing program 4 (id=203): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a0000200"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0x0) syz_emit_ethernet(0x308, &(0x7f0000001100)=ANY=[@ANYBLOB="aaaaaaaaaa26ffffffffffff86dd62764e7102d22fff00000000000000000000000000000000200100000000000000000000000000020420884b00f200020e053c5a154c3bbb7e23cc19ca1bc7d356528f684463ace39b6216af03181bd1d8d81a875c84bc24330a11121c534fd849be4bfc52fd6907080b1feb7707460db6fc1a7e3d5918603d108305447a84245798627dee50115578c459a118b8b9f626d81acf04fde51e074c120a220d6307f09f6eb25471edf475f913772fe1dd1cd53b0bb8d7b0e0e8cd12163c0793a814f2848b229fc9772b89cedf63b180f8940c0b0251242f5309c08af3cb7ee609a1240fde97a43167fae0cadf2fc4c5c66faeec2d02adad2273c58da853ed08bc87ef1752a0c69b48a6ad3439a6b7ed1eb05f1701d4e3e5ed9eae5be0b3a513692047679af40400080000080002040032d45c9e07e54f161d9cc1ed6e5082389a2da125963db7450c0086dd00000001100063f77e9b0811a7ae308ae0687086c63d7f6c7af947a58996748f0bb19317161786f67f492538d624001606ed2df540fc0badabba7f7c2c7e055f606c5397696426b5dce8ed761992231481bcb8cb008665f2dbf8d4b3d54c183cfec7531cb1cc461daf5b62d4582452e9e815e9eb048fb9fc5119d7e7b7eee6fc74bb2aab9ff7244f83350f2e01e37ebea379acc7b59c713657aed68d428c7fa2080088be000000021300ad01010000000000055b080022eb000000032400b304020000000000000b000aa2160800655800000004cee15d0a2e112822417dce89bb57a9fdb8e883358a254bd7749aa51f6140341a4206d756a2a719c6373def571fc770ca48e6084d1171dd17800d13d8a561edb45847f35f7165f30a234cf2f52e27afa68bc5dc2ce7fa74a39d08c8753330075ae5ef16cef595fbaa0d55dca820fc59f7774eb9cb5b5f0656cb7933fc701bd769083e089cf6f03453cfccda29876f70ded2a8e72c679001a3ba2da56630cacdba41d4e87ba749a552a05032774ced1ec4bb40de2f3e906eccf6611b525ce8bc3a91d259bef85d2442f818cbcfbbe2163f117bf654f948b95f6314748e"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000300), 0x1, 0x440, &(0x7f0000000cc0)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRESOCT=r3, @ANYBLOB="0000000000ec8b01000000000100000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180600000000000016d159d9addfe946f47111dae6024567272dd7161bf77ed48dd3f1e81ce0387091d2064c371cdd5698e9da13d38a00000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) clock_nanosleep(0x9, 0x0, &(0x7f0000000400)={0x0, 0x3938700}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1b, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000180)={0xb, 0x0, 0x3, 0x7fff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r7}, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000104000000260000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000300", @ANYRES32=r10], 0x40}, 0x1, 0xd, 0x0, 0x8004070}, 0x0) 3.075649455s ago: executing program 3 (id=204): r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000c80)=[{{&(0x7f0000000080)=@xdp, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/220, 0xdc}, {&(0x7f00000002c0)=""/136, 0x88}], 0x2}, 0x9}, {{&(0x7f0000000400)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)=""/167, 0xa7}, {&(0x7f0000000540)=""/198, 0xc6}], 0x2, &(0x7f0000000640)=""/181, 0xb5}, 0xc52}, {{&(0x7f0000000700)=@ax25={{0x3, @rose}, [@bcast, @default, @netrom, @remote, @null, @null, @netrom]}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/150, 0x96}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000380)=""/45, 0x2d}, {&(0x7f0000000840)=""/178, 0xb2}, {&(0x7f0000000900)=""/178, 0xb2}], 0x5, &(0x7f0000002180)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000000a40)=@ax25={{}, [@bcast, @null, @rose, @netrom, @rose, @netrom, @null, @bcast]}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000ac0)=""/67, 0x43}, {&(0x7f0000000b40)=""/102, 0x66}, {&(0x7f0000000bc0)=""/47, 0x2f}], 0x3, &(0x7f0000000c40)=""/2, 0x2}, 0x7}], 0x4, 0x20, &(0x7f0000000d80)={0x77359400}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0xc}, 0x4c58, 0x5, 0x2b6, 0x1, 0xc, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[], 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x34, 0x0, 0x820, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x8015}, 0x800) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, 0x0, 0x0, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x400000, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xd, 0x8000}, 0x0, 0xc8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000c76d000000000000008100000081"], 0x48) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0x15) 2.72852711s ago: executing program 0 (id=210): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="000000b70300000000000085000000830000080000000000000000550901000000000095000000000100000091000000000000b702000000000000850000008500040000000000000000009500"/89], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigaction(0xc, &(0x7f0000000940)={0x0, 0xd8000003, 0x0, {[0xd2]}}, 0x0, 0x8, &(0x7f0000000a80)) r3 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) sendfile(r3, r3, 0x0, 0x800000009) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r6 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="08001c00", @ANYRES32=r6], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r6, r3, 0x0, 0x8, &(0x7f0000000000)='skbedit\x00'}, 0x30) write$selinux_user(r3, &(0x7f0000000100)={'system_u:object_r:checkpolicy_exec_t:s0', 0x20, 'root\x00'}, 0x2d) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(r6, 0x6, &(0x7f00000001c0)=0xfff) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000140)="24000000010006", 0x7) 2.667743571s ago: executing program 0 (id=212): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090e000000000000000000000005000600000000000a00000000000000fc000000000000000000000000000000000000000000000005000500000000000a00000000000000060100000000000000000000000000aa0100000000000000020013"], 0x70}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac1414bb0c0002800500010000000000240002801400018008000100ac1414bb08000200e00000010c00028005000100000000"], 0x90}}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), r4) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000001680)=ANY=[@ANYBLOB="d15fef96adc529fde568550345337c2a56336ea1", @ANYRES64=0x0, @ANYRESDEC=r1], 0x30}, 0x1, 0x0, 0x0, 0x4850}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) 1.784654954s ago: executing program 0 (id=215): clock_gettime(0x0, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="d15fb592adc5336ea1c40a80f3dffae630000000", @ANYRES16=r4, @ANYBLOB="21002cbd7000ffdbdf25010000000c0009000201aaaaaaaaaaaa06000a00000000000500070000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4850}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r7, 0x5425, 0x0) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x100, 0x0, "7a58beca3900000000000000000000000200"}) 1.628545996s ago: executing program 4 (id=217): r0 = socket$inet6(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000640)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}, {@inode_readahead_blks}, {@resuid={'resuid', 0x3d, 0xee00}}]}, 0x3, 0x440, &(0x7f0000000a00)="$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") syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000240), 0x36, 0xcc800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000700)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100cb3a, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x5ac5269f9babb2bb, 0x70, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) chroot(&(0x7f0000000200)='./cgroup\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r7}, &(0x7f0000000800), &(0x7f0000000840)=r8}, 0x20) syz_clone3(&(0x7f00000002c0)={0x24806980, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 1.476436708s ago: executing program 0 (id=221): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000400c) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0xab, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000504000000000000000001000000", @ANYRES32=0x0, @ANYBLOB="0200000000000200240012800b00010065727370616e000014000280050016000000000006000e0058200000"], 0x44}}, 0x20000010) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES32=r3, @ANYBLOB="0f"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmmsg$inet6(r2, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) mmap(&(0x7f0000491000/0x3000)=nil, 0x3000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r9) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000001700000018130000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) msync(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x6) 1.162667793s ago: executing program 1 (id=225): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@oldalloc}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x47c, &(0x7f0000000a80)="$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") r0 = open(&(0x7f0000000000)='.\x00', 0x410002, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.108322893s ago: executing program 1 (id=226): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, r0, 0x2, {0x1, 0x0, 0x3}, 0xfd}, 0x18) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}], 0x206c, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xa, 0xfffffffffffffffc}, 0x7200, 0x1, 0x840000, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ed1d5b5bd37f9f3f943ff5155a0b06314000009e", @ANYRES16=r2, @ANYBLOB="01000000000000000000020000000900010073797a3200000000140002"], 0x40}}, 0xc800) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r2, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4208, r4) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket(0x6, 0xa, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_io_uring_setup(0x2f90, 0x0, &(0x7f0000000100), 0x0) r7 = epoll_create(0xaf2) epoll_pwait2(r7, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='sched_switch\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) pipe2$9p(0x0, 0x84000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 589.165461ms ago: executing program 0 (id=227): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, r0, 0x2, {0x1, 0x0, 0x3}, 0xfd}, 0x18) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}], 0x206c, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xa, 0xfffffffffffffffc}, 0x7200, 0x1, 0x840000, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ed1d5b5bd37f9f3f943ff5155a0b06314000009e", @ANYRES16=r2, @ANYBLOB="01000000000000000000020000000900010073797a3200000000140002"], 0x40}}, 0xc800) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r2, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4208, r4) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket(0x6, 0xa, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_io_uring_setup(0x2f90, 0x0, &(0x7f0000000100), 0x0) r7 = epoll_create(0xaf2) epoll_pwait2(r7, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='sched_switch\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) pipe2$9p(0x0, 0x84000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 565.707932ms ago: executing program 1 (id=228): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 471.676783ms ago: executing program 1 (id=229): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000000)={0x2a, 0x3}, 0xc) bind$qrtr(r1, &(0x7f00000000c0)={0x2a, 0x1, 0xf0ff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet6(0xa, 0x802, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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") truncate(&(0x7f0000000080)='./file2\x00', 0x1ff) 456.546463ms ago: executing program 1 (id=230): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r2, &(0x7f0000000440)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000400)=""/39, 0x27}, 0x0) close(r2) syz_mount_image$ext4(&(0x7f0000001140)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x410c84, &(0x7f0000000500)={[{@errors_remount}, {@nodiscard}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@subj_role={'subj_role', 0x3d, '@.M[%.-,:'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x35, 0x39, 0x65, 0x38, 0x6f, 0x31, 0x63], 0x2d, [0x62, 0x63, 0x61, 0x37], 0x2d, [0x34, 0x33, 0x61, 0x34], 0x2d, [0x65, 0xc4b7a36d3eefda9d, 0x63, 0x30], 0x2d, [0x66, 0x64, 0x34, 0x62, 0x0, 0x61, 0x30, 0x65]}}}]}, 0x1, 0x775, &(0x7f0000001b80)="$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") r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000000)={0x0, r4, 0x1000, 0x8, 0xa, 0x8}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback, 0x1}, 0x1c) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(r6, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1], 0x50) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="a1ab00000000000000003200000008001701"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) listen(r5, 0x0) r10 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$SG_IO(r11, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffd, 0x2, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="2593", 0x0, 0xfffffdfd, 0x0, 0x0, 0x0}) 268.322786ms ago: executing program 4 (id=231): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x4, 0xb0) listen(r2, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, 0x0, 0xffe) alarm(0x4000000000002) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) 223.849606ms ago: executing program 1 (id=232): clock_gettime(0x0, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="d15fb592adc5336ea1c40a80f3dffae630000000", @ANYRES16=r4, @ANYBLOB="21002cbd7000ffdbdf25010000000c0009000201aaaaaaaaaaaa06000a00000000000500070000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4850}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r7, 0x5425, 0x0) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x100, 0x0, "7a58beca3900000000000000000000000200"}) 90.686268ms ago: executing program 0 (id=233): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x100}, 0x18) r3 = socket$packet(0x11, 0x2, 0x300) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008800c0007800800060000000000240007"], 0x108}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x18) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0xef, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x8004) r11 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0xb23, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000000004, 0x2ffffffff}, 0x1904, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f00000017c0)='kfree\x00', r12, 0x0, 0xffffffffffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r13, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x5e, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x4000, &(0x7f00000004c0)={[{@xattr}, {@cpuset_v2_mode}, {@release_agent={'release_agent', 0x3d, './file0'}}], [{@dont_measure}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@appraise}]}) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r14}, 0x10) fstat(r11, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 0s ago: executing program 4 (id=234): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r3 = syz_open_pts(r2, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_pts(r4, 0x80000) r5 = dup(r3) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) dup3(r2, r5, 0x0) r6 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r7, &(0x7f0000000080)=[{&(0x7f0000000100)="39ac", 0x2}, {&(0x7f0000000340)="a4ce", 0x2}], 0x2, 0xffffffff, 0x4) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.154' (ED25519) to the list of known hosts. [ 25.902333][ T29] audit: type=1400 audit(1749160545.351:62): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.903068][ T3307] cgroup: Unknown subsys name 'net' [ 25.925052][ T29] audit: type=1400 audit(1749160545.351:63): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.952415][ T29] audit: type=1400 audit(1749160545.381:64): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.068170][ T3307] cgroup: Unknown subsys name 'cpuset' [ 26.074159][ T3307] cgroup: Unknown subsys name 'rlimit' [ 26.163258][ T29] audit: type=1400 audit(1749160545.611:65): avc: denied { setattr } for pid=3307 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.186514][ T29] audit: type=1400 audit(1749160545.611:66): avc: denied { create } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.207265][ T29] audit: type=1400 audit(1749160545.611:67): avc: denied { write } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.227760][ T29] audit: type=1400 audit(1749160545.611:68): avc: denied { read } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.248048][ T29] audit: type=1400 audit(1749160545.621:69): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.255004][ T3309] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.272804][ T29] audit: type=1400 audit(1749160545.621:70): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.304671][ T29] audit: type=1400 audit(1749160545.731:71): avc: denied { relabelto } for pid=3309 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.333868][ T3307] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.485965][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 27.543623][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 27.577777][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.584888][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.592089][ T3316] bridge_slave_0: entered allmulticast mode [ 27.598389][ T3316] bridge_slave_0: entered promiscuous mode [ 27.604884][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.612013][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.619398][ T3316] bridge_slave_1: entered allmulticast mode [ 27.625778][ T3316] bridge_slave_1: entered promiscuous mode [ 27.644362][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 27.660888][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.679355][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.723091][ T3316] team0: Port device team_slave_0 added [ 27.730546][ T3316] team0: Port device team_slave_1 added [ 27.752365][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.759473][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.766617][ T3317] bridge_slave_0: entered allmulticast mode [ 27.773129][ T3317] bridge_slave_0: entered promiscuous mode [ 27.791564][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.798646][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.805840][ T3317] bridge_slave_1: entered allmulticast mode [ 27.812532][ T3317] bridge_slave_1: entered promiscuous mode [ 27.826045][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 27.841628][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.848726][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.855810][ T3324] bridge_slave_0: entered allmulticast mode [ 27.862182][ T3324] bridge_slave_0: entered promiscuous mode [ 27.872340][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.879365][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.905309][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.923329][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.930437][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.937591][ T3324] bridge_slave_1: entered allmulticast mode [ 27.944049][ T3324] bridge_slave_1: entered promiscuous mode [ 27.950401][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.957395][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.983486][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.001920][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 28.011542][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.037982][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.053051][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.076473][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.086021][ T3317] team0: Port device team_slave_0 added [ 28.108580][ T3317] team0: Port device team_slave_1 added [ 28.119533][ T3316] hsr_slave_0: entered promiscuous mode [ 28.125586][ T3316] hsr_slave_1: entered promiscuous mode [ 28.155458][ T3324] team0: Port device team_slave_0 added [ 28.179002][ T3324] team0: Port device team_slave_1 added [ 28.187659][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.194608][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.220655][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.231412][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.238530][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.245738][ T3322] bridge_slave_0: entered allmulticast mode [ 28.252274][ T3322] bridge_slave_0: entered promiscuous mode [ 28.258728][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.265783][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.273085][ T3322] bridge_slave_1: entered allmulticast mode [ 28.279451][ T3322] bridge_slave_1: entered promiscuous mode [ 28.292099][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.299193][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.306228][ T3318] bridge_slave_0: entered allmulticast mode [ 28.312614][ T3318] bridge_slave_0: entered promiscuous mode [ 28.322879][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.329844][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.355825][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.378134][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.385186][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.392400][ T3318] bridge_slave_1: entered allmulticast mode [ 28.398738][ T3318] bridge_slave_1: entered promiscuous mode [ 28.412255][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.419279][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.445301][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.459168][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.477828][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.484773][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.510800][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.526793][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.542381][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.567195][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.577028][ T3322] team0: Port device team_slave_0 added [ 28.598578][ T3324] hsr_slave_0: entered promiscuous mode [ 28.604450][ T3324] hsr_slave_1: entered promiscuous mode [ 28.610662][ T3324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.618230][ T3324] Cannot create hsr debugfs directory [ 28.629077][ T3322] team0: Port device team_slave_1 added [ 28.652642][ T3318] team0: Port device team_slave_0 added [ 28.659082][ T3318] team0: Port device team_slave_1 added [ 28.670843][ T3317] hsr_slave_0: entered promiscuous mode [ 28.676718][ T3317] hsr_slave_1: entered promiscuous mode [ 28.682697][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.690302][ T3317] Cannot create hsr debugfs directory [ 28.709366][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.716400][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.742431][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.757926][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.764861][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.790819][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.802144][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.809138][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.835172][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.853333][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.860321][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.886234][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.942568][ T3318] hsr_slave_0: entered promiscuous mode [ 28.948663][ T3318] hsr_slave_1: entered promiscuous mode [ 28.954624][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.962233][ T3318] Cannot create hsr debugfs directory [ 28.995574][ T3322] hsr_slave_0: entered promiscuous mode [ 29.001513][ T3322] hsr_slave_1: entered promiscuous mode [ 29.007348][ T3322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.014994][ T3322] Cannot create hsr debugfs directory [ 29.021013][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.029360][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.059741][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.085579][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.137405][ T3317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.162125][ T3317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.170831][ T3317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.187962][ T3317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.226211][ T3324] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.236587][ T3324] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.245534][ T3324] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.254230][ T3324] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.279967][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.297713][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.306200][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.315028][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.331608][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.352273][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.372744][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.379869][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.394973][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.403724][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.410832][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.435126][ T3322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.446197][ T3322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.454965][ T3322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.464238][ T3322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.478704][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.490279][ T3316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.500711][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.524522][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.538977][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.546115][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.557264][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.564329][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.597832][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.611486][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.618613][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.632949][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.639996][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.650135][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.680510][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.689894][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.703148][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.722367][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.734659][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.741764][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.759393][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.766539][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.774981][ T168] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.782068][ T168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.801572][ T580] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.808770][ T580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.847006][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.883243][ T3318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.893710][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.907175][ T3316] veth0_vlan: entered promiscuous mode [ 29.933244][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.943256][ T3316] veth1_vlan: entered promiscuous mode [ 29.989441][ T3316] veth0_macvtap: entered promiscuous mode [ 30.006855][ T3316] veth1_macvtap: entered promiscuous mode [ 30.033252][ T3317] veth0_vlan: entered promiscuous mode [ 30.056192][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.066378][ T3317] veth1_vlan: entered promiscuous mode [ 30.076316][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.087212][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.101255][ T3317] veth0_macvtap: entered promiscuous mode [ 30.119703][ T3316] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.128575][ T3316] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.137266][ T3316] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.146039][ T3316] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.162501][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.173570][ T3317] veth1_macvtap: entered promiscuous mode [ 30.191994][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.218956][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.240333][ T3317] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.249220][ T3317] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.258096][ T3317] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.266796][ T3317] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.293018][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.321312][ T3324] veth0_vlan: entered promiscuous mode [ 30.338558][ T3318] veth0_vlan: entered promiscuous mode [ 30.349131][ T3324] veth1_vlan: entered promiscuous mode [ 30.358187][ T3454] Zero length message leads to an empty skb [ 30.374268][ T3318] veth1_vlan: entered promiscuous mode [ 30.405946][ T3324] veth0_macvtap: entered promiscuous mode [ 30.416860][ T3324] veth1_macvtap: entered promiscuous mode [ 30.433802][ T3322] veth0_vlan: entered promiscuous mode [ 30.446124][ T3318] veth0_macvtap: entered promiscuous mode [ 30.452323][ T3461] loop1: detected capacity change from 0 to 512 [ 30.459950][ T3461] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.473049][ T3461] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 30.488516][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.496142][ T3461] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 30.498630][ T3318] veth1_macvtap: entered promiscuous mode [ 30.515284][ T3461] EXT4-fs (loop1): 1 truncate cleaned up [ 30.522986][ T3461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.537430][ T3322] veth1_vlan: entered promiscuous mode [ 30.550231][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.561829][ T3322] veth0_macvtap: entered promiscuous mode [ 30.570975][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.578935][ T3324] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.587756][ T3324] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.596507][ T3324] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.605329][ T3324] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.673950][ T3465] FAULT_INJECTION: forcing a failure. [ 30.673950][ T3465] name failslab, interval 1, probability 0, space 0, times 1 [ 30.686720][ T3465] CPU: 1 UID: 0 PID: 3465 Comm: syz.3.7 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(voluntary) [ 30.686828][ T3465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 30.686841][ T3465] Call Trace: [ 30.686848][ T3465] [ 30.686856][ T3465] __dump_stack+0x1d/0x30 [ 30.686881][ T3465] dump_stack_lvl+0xe8/0x140 [ 30.686901][ T3465] dump_stack+0x15/0x1b [ 30.686929][ T3465] should_fail_ex+0x265/0x280 [ 30.687016][ T3465] should_failslab+0x8c/0xb0 [ 30.687044][ T3465] kmem_cache_alloc_noprof+0x50/0x310 [ 30.687075][ T3465] ? skb_clone+0x151/0x1f0 [ 30.687108][ T3465] skb_clone+0x151/0x1f0 [ 30.687150][ T3465] __netlink_deliver_tap+0x2c9/0x500 [ 30.687196][ T3465] netlink_unicast+0x64c/0x670 [ 30.687225][ T3465] netlink_sendmsg+0x58b/0x6b0 [ 30.687312][ T3465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 30.687350][ T3465] __sock_sendmsg+0x145/0x180 [ 30.687374][ T3465] ____sys_sendmsg+0x31e/0x4e0 [ 30.687407][ T3465] ___sys_sendmsg+0x17b/0x1d0 [ 30.687497][ T3465] __x64_sys_sendmsg+0xd4/0x160 [ 30.687531][ T3465] x64_sys_call+0x2999/0x2fb0 [ 30.687556][ T3465] do_syscall_64+0xd2/0x200 [ 30.687596][ T3465] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 30.687624][ T3465] ? clear_bhb_loop+0x40/0x90 [ 30.687660][ T3465] ? clear_bhb_loop+0x40/0x90 [ 30.687685][ T3465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 30.687709][ T3465] RIP: 0033:0x7ff90170e929 [ 30.687727][ T3465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 30.687758][ T3465] RSP: 002b:00007ff8ffd77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 30.687781][ T3465] RAX: ffffffffffffffda RBX: 00007ff901935fa0 RCX: 00007ff90170e929 [ 30.687793][ T3465] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 30.687804][ T3465] RBP: 00007ff8ffd77090 R08: 0000000000000000 R09: 0000000000000000 [ 30.687815][ T3465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.687826][ T3465] R13: 0000000000000000 R14: 00007ff901935fa0 R15: 00007fff9804fe98 [ 30.687843][ T3465] [ 30.697142][ T3322] veth1_macvtap: entered promiscuous mode [ 30.920371][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.930366][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.938788][ T3318] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.947561][ T3318] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.956358][ T3318] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.965161][ T3318] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.979052][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.008062][ T3322] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.016812][ T3322] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.025693][ T3322] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.034571][ T3322] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.068056][ T3470] loop4: detected capacity change from 0 to 128 [ 31.111445][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 31.111462][ T29] audit: type=1400 audit(1749160550.561:217): avc: denied { create } for pid=3477 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.165966][ T29] audit: type=1400 audit(1749160550.561:218): avc: denied { write } for pid=3477 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.186071][ T29] audit: type=1400 audit(1749160550.611:219): avc: denied { create } for pid=3479 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.206435][ T29] audit: type=1400 audit(1749160550.611:220): avc: denied { write } for pid=3479 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.239176][ T29] audit: type=1400 audit(1749160550.681:221): avc: denied { create } for pid=3483 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.258528][ T29] audit: type=1400 audit(1749160550.681:222): avc: denied { setopt } for pid=3483 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.277769][ T29] audit: type=1400 audit(1749160550.681:223): avc: denied { write } for pid=3483 comm="syz.0.1" name="packet" dev="proc" ino=4026532978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 31.300372][ T29] audit: type=1400 audit(1749160550.681:224): avc: denied { open } for pid=3483 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.319361][ T29] audit: type=1400 audit(1749160550.681:225): avc: denied { kernel } for pid=3483 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.357213][ T29] audit: type=1400 audit(1749160550.781:226): avc: denied { create } for pid=3483 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.377839][ T3488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10'. [ 31.386641][ T3488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10'. [ 31.408883][ T3490] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 31.495810][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.563662][ T3492] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=3492 comm=syz.3.10 [ 31.593682][ T3494] netlink: 'syz.2.13': attribute type 13 has an invalid length. [ 31.641598][ T3496] loop1: detected capacity change from 0 to 8192 [ 31.653102][ T3503] loop0: detected capacity change from 0 to 8192 [ 31.683527][ T3494] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.690081][ T3501] usb usb7: usbfs: process 3501 (syz.4.14) did not claim interface 0 before use [ 31.690789][ T3494] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.722905][ T3508] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 31.736950][ T3509] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 31.776133][ T3494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 31.776406][ T3508] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 31.796665][ T3494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 31.842843][ T3494] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.851843][ T3494] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.860769][ T3494] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.869668][ T3494] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.296493][ T3516] loop4: detected capacity change from 0 to 2048 [ 32.310631][ T3517] netlink: 'syz.3.16': attribute type 39 has an invalid length. [ 32.358619][ T3310] GPT:first_usable_lbas don't match. [ 32.363969][ T3310] GPT:34 != 290 [ 32.367504][ T3310] GPT: Use GNU Parted to correct GPT errors. [ 32.373579][ T3310] loop4: p1 p2 p3 [ 32.452580][ T3516] GPT:first_usable_lbas don't match. [ 32.457978][ T3516] GPT:34 != 290 [ 32.461459][ T3516] GPT: Use GNU Parted to correct GPT errors. [ 32.467690][ T3516] loop4: p1 p2 p3 [ 32.563660][ T3516] syz.4.17 uses obsolete (PF_INET,SOCK_PACKET) [ 32.640430][ T3523] bond1: entered promiscuous mode [ 32.645534][ T3523] bond1: entered allmulticast mode [ 32.652793][ T3523] 8021q: adding VLAN 0 to HW filter on device bond1 [ 32.662985][ T3523] bond1 (unregistering): Released all slaves [ 32.689504][ T3527] lo speed is unknown, defaulting to 1000 [ 32.695287][ T3527] lo speed is unknown, defaulting to 1000 [ 32.701235][ T3527] lo speed is unknown, defaulting to 1000 [ 32.707296][ T3527] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 32.715121][ T3527] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 32.725009][ T3527] lo speed is unknown, defaulting to 1000 [ 32.732590][ T3527] lo speed is unknown, defaulting to 1000 [ 32.738931][ T3527] lo speed is unknown, defaulting to 1000 [ 32.746162][ T3527] lo speed is unknown, defaulting to 1000 [ 32.758928][ T3527] lo speed is unknown, defaulting to 1000 [ 32.780915][ T3527] syz.0.18 (3527) used greatest stack depth: 10712 bytes left [ 32.831310][ C0] hrtimer: interrupt took 31659 ns [ 32.842461][ T3532] lo speed is unknown, defaulting to 1000 [ 33.019386][ T3533] loop0: detected capacity change from 0 to 8192 [ 33.039759][ T3533] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777ÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿ0xffffffffffffffff' [ 33.092560][ T3530] lo speed is unknown, defaulting to 1000 [ 33.697960][ T3540] xt_hashlimit: max too large, truncated to 1048576 [ 33.780190][ T3544] netlink: 'syz.1.22': attribute type 46 has an invalid length. [ 33.820086][ T3547] loop0: detected capacity change from 0 to 512 [ 33.827161][ T3547] ======================================================= [ 33.827161][ T3547] WARNING: The mand mount option has been deprecated and [ 33.827161][ T3547] and is ignored by this kernel. Remove the mand [ 33.827161][ T3547] option from the mount to silence this warning. [ 33.827161][ T3547] ======================================================= [ 33.904585][ T3546] FAULT_INJECTION: forcing a failure. [ 33.904585][ T3546] name failslab, interval 1, probability 0, space 0, times 0 [ 33.909500][ T3551] loop1: detected capacity change from 0 to 512 [ 33.917366][ T3546] CPU: 0 UID: 0 PID: 3546 Comm: syz.4.25 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(voluntary) [ 33.917438][ T3546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 33.917456][ T3546] Call Trace: [ 33.917463][ T3546] [ 33.917470][ T3546] __dump_stack+0x1d/0x30 [ 33.917491][ T3546] dump_stack_lvl+0xe8/0x140 [ 33.917510][ T3546] dump_stack+0x15/0x1b [ 33.917527][ T3546] should_fail_ex+0x265/0x280 [ 33.917616][ T3546] should_failslab+0x8c/0xb0 [ 33.917639][ T3546] kmem_cache_alloc_node_noprof+0x57/0x320 [ 33.917726][ T3546] ? alloc_vmap_area+0x231/0xe50 [ 33.917789][ T3546] alloc_vmap_area+0x231/0xe50 [ 33.917817][ T3546] ? should_failslab+0x8c/0xb0 [ 33.917840][ T3546] ? __kmalloc_cache_node_noprof+0x18a/0x320 [ 33.917876][ T3546] __get_vm_area_node+0x173/0x1d0 [ 33.917904][ T3546] __vmalloc_node_range_noprof+0x273/0xe00 [ 33.917934][ T3546] ? sel_write_load+0x158/0x380 [ 33.917974][ T3546] ? common_lsm_audit+0x1ca/0x230 [ 33.917996][ T3546] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 33.918030][ T3546] ? sel_write_load+0x158/0x380 [ 33.918056][ T3546] vmalloc_noprof+0x82/0xc0 [ 33.918136][ T3546] ? sel_write_load+0x158/0x380 [ 33.918163][ T3546] sel_write_load+0x158/0x380 [ 33.918190][ T3546] ? __pfx_sel_write_load+0x10/0x10 [ 33.918241][ T3546] vfs_write+0x269/0x8e0 [ 33.918262][ T3546] ? __rcu_read_unlock+0x4f/0x70 [ 33.918284][ T3546] ? __fget_files+0x184/0x1c0 [ 33.918345][ T3546] ksys_write+0xda/0x1a0 [ 33.918366][ T3546] __x64_sys_write+0x40/0x50 [ 33.918387][ T3546] x64_sys_call+0x2cdd/0x2fb0 [ 33.918522][ T3546] do_syscall_64+0xd2/0x200 [ 33.918549][ T3546] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 33.918675][ T3546] ? clear_bhb_loop+0x40/0x90 [ 33.918696][ T3546] ? clear_bhb_loop+0x40/0x90 [ 33.918717][ T3546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.918738][ T3546] RIP: 0033:0x7f18c0d6e929 [ 33.918773][ T3546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.918817][ T3546] RSP: 002b:00007f18bf3d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 33.918837][ T3546] RAX: ffffffffffffffda RBX: 00007f18c0f95fa0 RCX: 00007f18c0d6e929 [ 33.918850][ T3546] RDX: 0000000000006000 RSI: 0000200000000000 RDI: 0000000000000006 [ 33.918942][ T3546] RBP: 00007f18bf3d7090 R08: 0000000000000000 R09: 0000000000000000 [ 33.918954][ T3546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.918967][ T3546] R13: 0000000000000000 R14: 00007f18c0f95fa0 R15: 00007ffcad60ad98 [ 33.918983][ T3546] [ 33.918992][ T3546] syz.4.25: vmalloc error: size 24576, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 33.943829][ T3547] EXT4-fs (loop0): orphan cleanup on readonly fs [ 33.945533][ T3546] ,cpuset= [ 33.975263][ T3547] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.24: bad orphan inode 13 [ 33.980178][ T3546] /,mems_allowed=0 [ 33.999933][ T3551] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 34.000771][ T3546] [ 34.006331][ T3547] ext4_test_bit(bit=12, block=18) = 1 [ 34.011642][ T3546] CPU: 0 UID: 0 PID: 3546 Comm: syz.4.25 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(voluntary) [ 34.011746][ T3546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 34.011758][ T3546] Call Trace: [ 34.011765][ T3546] [ 34.011773][ T3546] __dump_stack+0x1d/0x30 [ 34.011794][ T3546] dump_stack_lvl+0xe8/0x140 [ 34.011813][ T3546] dump_stack+0x15/0x1b [ 34.011830][ T3546] warn_alloc+0x12b/0x1a0 [ 34.011895][ T3546] __vmalloc_node_range_noprof+0x297/0xe00 [ 34.011997][ T3546] ? common_lsm_audit+0x1ca/0x230 [ 34.012020][ T3546] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 34.012055][ T3546] ? sel_write_load+0x158/0x380 [ 34.012082][ T3546] vmalloc_noprof+0x82/0xc0 [ 34.012188][ T3546] ? sel_write_load+0x158/0x380 [ 34.012250][ T3546] sel_write_load+0x158/0x380 [ 34.012277][ T3546] ? __pfx_sel_write_load+0x10/0x10 [ 34.012313][ T3546] vfs_write+0x269/0x8e0 [ 34.012333][ T3546] ? __rcu_read_unlock+0x4f/0x70 [ 34.012403][ T3546] ? __fget_files+0x184/0x1c0 [ 34.012465][ T3546] ksys_write+0xda/0x1a0 [ 34.012487][ T3546] __x64_sys_write+0x40/0x50 [ 34.012508][ T3546] x64_sys_call+0x2cdd/0x2fb0 [ 34.012529][ T3546] do_syscall_64+0xd2/0x200 [ 34.012582][ T3546] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 34.012624][ T3546] ? clear_bhb_loop+0x40/0x90 [ 34.012645][ T3546] ? clear_bhb_loop+0x40/0x90 [ 34.012666][ T3546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.012687][ T3546] RIP: 0033:0x7f18c0d6e929 [ 34.012702][ T3546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.012719][ T3546] RSP: 002b:00007f18bf3d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 34.012811][ T3546] RAX: ffffffffffffffda RBX: 00007f18c0f95fa0 RCX: 00007f18c0d6e929 [ 34.012823][ T3546] RDX: 0000000000006000 RSI: 0000200000000000 RDI: 0000000000000006 [ 34.012835][ T3546] RBP: 00007f18bf3d7090 R08: 0000000000000000 R09: 0000000000000000 [ 34.012847][ T3546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.012860][ T3546] R13: 0000000000000000 R14: 00007f18c0f95fa0 R15: 00007ffcad60ad98 [ 34.012876][ T3546] [ 34.012883][ T3546] Mem-Info: [ 34.016441][ T3547] is_bad_inode(inode)=0 [ 34.021477][ T3546] active_anon:5966 inactive_anon:0 isolated_anon:0 [ 34.021477][ T3546] active_file:15934 inactive_file:2178 isolated_file:0 [ 34.021477][ T3546] unevictable:2 dirty:1447 writeback:0 [ 34.021477][ T3546] slab_reclaimable:2968 slab_unreclaimable:29701 [ 34.021477][ T3546] mapped:29055 shmem:307 pagetables:1086 [ 34.021477][ T3546] sec_pagetables:0 bounce:0 [ 34.021477][ T3546] kernel_misc_reclaimable:0 [ 34.021477][ T3546] free:1870680 free_pcp:18529 free_cma:0 [ 34.027460][ T3547] NEXT_ORPHAN(inode)=2130706432 [ 34.027471][ T3547] max_ino=32 [ 34.032342][ T3546] Node 0 active_anon:23864kB inactive_anon:0kB active_file:63736kB inactive_file:8712kB unevictable:8kB isolated(anon):0kB isolated(file):0kB mapped:116220kB dirty:5788kB writeback:0kB shmem:1228kB writeback_tmp:0kB kernel_stack:2976kB pagetables:4344kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 34.036835][ T3547] i_nlink=1 [ 34.051316][ T3538] lo speed is unknown, defaulting to 1000 [ 34.051649][ T3546] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 34.051734][ T3546] lowmem_reserve[]: 0 2882 7860 7860 [ 34.051765][ T3546] Node 0 DMA32 free:2947872kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951400kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 34.051906][ T3546] lowmem_reserve[]: 0 0 4978 4978 [ 34.051937][ T3546] Node 0 Normal free:4519488kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23864kB inactive_anon:0kB active_file:63736kB inactive_file:8712kB unevictable:8kB writepending:5788kB present:5242880kB managed:5098232kB mlocked:8kB bounce:0kB free_pcp:70548kB local_pcp:4536kB free_cma:0kB [ 34.052085][ T3546] lowmem_reserve[]: 0 0 0 0 [ 34.052115][ T3546] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 34.052377][ T3546] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947872kB [ 34.052590][ T3546] Node 0 [ 34.142802][ T3547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.146771][ T3546] Normal: 2*4kB (UE) [ 34.183403][ T3547] random: crng reseeded on system resumption [ 34.193628][ T3546] 1*8kB (U) 1*16kB [ 34.267626][ T3549] loop3: detected capacity change from 0 to 1024 [ 34.271693][ T3546] (E) 2*32kB (UE) 2*64kB (ME) 2*128kB (UM) [ 34.447967][ T3551] EXT4-fs (loop1): 1 truncate cleaned up [ 34.450826][ T3546] 2*256kB (UM) [ 34.454450][ T3551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.458693][ T3546] 3*512kB (UE) 3*1024kB (U) 6*2048kB [ 34.527290][ T3549] EXT4-fs error (device loop3): __ext4_fill_super:5500: inode #2: comm syz.3.27: casefold flag without casefold feature [ 34.540671][ T3546] (UME) 1099*4096kB (M) = 4519392kB [ 34.540721][ T3546] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 34.540740][ T3546] 18589 total pagecache pages [ 34.540749][ T3546] 0 pages in swap cache [ 34.540756][ T3546] Free swap = 124996kB [ 34.540764][ T3546] Total swap = 124996kB [ 34.559762][ T3549] EXT4-fs (loop3): get root inode failed [ 34.578163][ T3546] 2097051 pages RAM [ 34.578176][ T3546] 0 pages HighMem/MovableOnly [ 34.578183][ T3546] 80803 pages reserved [ 34.815822][ T3549] EXT4-fs (loop3): mount failed [ 34.826422][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.905324][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.920115][ T3570] loop3: detected capacity change from 0 to 512 [ 34.967243][ T3570] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 34.981885][ T3563] loop2: detected capacity change from 0 to 8192 [ 35.006286][ T3565] netlink: 'syz.4.30': attribute type 13 has an invalid length. [ 35.007941][ T3563] /dev/loop2: Can't open blockdev [ 35.017963][ T3570] EXT4-fs (loop3): 1 truncate cleaned up [ 35.060483][ T3570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.111944][ T3580] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 35.128258][ T3565] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.135484][ T3565] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.167692][ T3579] usb usb7: usbfs: process 3579 (syz.1.33) did not claim interface 0 before use [ 35.190529][ T3582] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 35.239012][ T3565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.290212][ T3565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.310396][ T3585] xt_hashlimit: max too large, truncated to 1048576 [ 35.411029][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.420158][ T3565] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.429315][ T3565] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.438433][ T3565] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.447458][ T3565] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.471011][ T3599] FAULT_INJECTION: forcing a failure. [ 35.471011][ T3599] name failslab, interval 1, probability 0, space 0, times 0 [ 35.483725][ T3599] CPU: 0 UID: 0 PID: 3599 Comm: syz.1.36 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(voluntary) [ 35.483800][ T3599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 35.483811][ T3599] Call Trace: [ 35.483817][ T3599] [ 35.483826][ T3599] __dump_stack+0x1d/0x30 [ 35.483850][ T3599] dump_stack_lvl+0xe8/0x140 [ 35.483877][ T3599] dump_stack+0x15/0x1b [ 35.483896][ T3599] should_fail_ex+0x265/0x280 [ 35.483914][ T3599] should_failslab+0x8c/0xb0 [ 35.483998][ T3599] kmem_cache_alloc_noprof+0x50/0x310 [ 35.484021][ T3599] ? skb_clone+0x151/0x1f0 [ 35.484088][ T3599] skb_clone+0x151/0x1f0 [ 35.484117][ T3599] nfnetlink_rcv+0x305/0x1690 [ 35.484137][ T3599] ? __kfree_skb+0x109/0x150 [ 35.484159][ T3599] ? nlmon_xmit+0x4f/0x60 [ 35.484185][ T3599] ? nlmon_xmit+0x4f/0x60 [ 35.484281][ T3599] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 35.484313][ T3599] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 35.484338][ T3599] ? __dev_queue_xmit+0x182/0x1fb0 [ 35.484444][ T3599] ? __account_obj_stock+0x211/0x350 [ 35.484503][ T3599] ? ref_tracker_free+0x37d/0x3e0 [ 35.484538][ T3599] netlink_unicast+0x59e/0x670 [ 35.484563][ T3599] netlink_sendmsg+0x58b/0x6b0 [ 35.484770][ T3599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 35.484795][ T3599] __sock_sendmsg+0x145/0x180 [ 35.484813][ T3599] ____sys_sendmsg+0x31e/0x4e0 [ 35.484833][ T3599] ___sys_sendmsg+0x17b/0x1d0 [ 35.484885][ T3599] __x64_sys_sendmsg+0xd4/0x160 [ 35.484909][ T3599] x64_sys_call+0x2999/0x2fb0 [ 35.484926][ T3599] do_syscall_64+0xd2/0x200 [ 35.484950][ T3599] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 35.485050][ T3599] ? clear_bhb_loop+0x40/0x90 [ 35.485106][ T3599] ? clear_bhb_loop+0x40/0x90 [ 35.485124][ T3599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.485137][ T3599] RIP: 0033:0x7f92562ee929 [ 35.485148][ T3599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.485160][ T3599] RSP: 002b:00007f9254957038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.485246][ T3599] RAX: ffffffffffffffda RBX: 00007f9256515fa0 RCX: 00007f92562ee929 [ 35.485254][ T3599] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 35.485263][ T3599] RBP: 00007f9254957090 R08: 0000000000000000 R09: 0000000000000000 [ 35.485270][ T3599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.485291][ T3599] R13: 0000000000000000 R14: 00007f9256515fa0 R15: 00007ffe1e5aaee8 [ 35.485303][ T3599] [ 36.005926][ T3609] capability: warning: `+}[@' uses 32-bit capabilities (legacy support in use) [ 36.012855][ T3568] lo speed is unknown, defaulting to 1000 [ 36.043081][ T3611] usb usb8: usbfs: process 3611 (syz.1.41) did not claim interface 0 before use [ 36.073198][ T3613] netlink: 'syz.2.40': attribute type 13 has an invalid length. [ 36.086180][ T3617] usb usb7: usbfs: process 3617 (syz.3.42) did not claim interface 0 before use [ 36.135417][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 36.135434][ T29] audit: type=1400 audit(1749160555.581:310): avc: denied { create } for pid=3610 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 36.164082][ T3394] kernel write not supported for file task/31/attr/exec (pid: 3394 comm: kworker/1:3) [ 36.174532][ T29] audit: type=1400 audit(1749160555.611:311): avc: denied { mounton } for pid=3610 comm="syz.1.41" path="/10/file1" dev="tmpfs" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 36.498751][ T29] audit: type=1400 audit(1749160555.951:312): avc: denied { write } for pid=3631 comm="syz.0.46" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.521546][ T29] audit: type=1400 audit(1749160555.951:313): avc: denied { open } for pid=3631 comm="syz.0.46" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.544819][ T29] audit: type=1400 audit(1749160555.951:314): avc: denied { ioctl } for pid=3631 comm="syz.0.46" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.620039][ T3642] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.621703][ T29] audit: type=1400 audit(1749160556.071:315): avc: denied { bind } for pid=3635 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.742228][ T3646] xt_hashlimit: max too large, truncated to 1048576 [ 36.750660][ T3636] pim6reg: entered allmulticast mode [ 36.758114][ T29] audit: type=1400 audit(1749160556.111:316): avc: denied { ioctl } for pid=3641 comm="syz.4.49" path="socket:[5374]" dev="sockfs" ino=5374 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.782556][ T29] audit: type=1400 audit(1749160556.121:317): avc: denied { node_bind } for pid=3635 comm="syz.0.48" saddr=224.0.0.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 36.803570][ T29] audit: type=1404 audit(1749160556.121:318): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 36.809073][ T3650] pim6reg: left allmulticast mode [ 36.818511][ T29] audit: type=1404 audit(1749160556.131:319): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 36.876136][ T3654] loop1: detected capacity change from 0 to 256 [ 36.881131][ T3652] loop2: detected capacity change from 0 to 512 [ 36.934175][ T3652] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 36.952557][ T3654] : renamed from bond0 (while UP) [ 36.968815][ T3652] EXT4-fs (loop2): 1 truncate cleaned up [ 36.977218][ T3652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.992717][ T3645] loop4: detected capacity change from 0 to 512 [ 37.039031][ T3645] EXT4-fs (loop4): 1 orphan inode deleted [ 37.141056][ T3662] bond0: entered promiscuous mode [ 37.146297][ T3662] bond0: entered allmulticast mode [ 37.152434][ T3645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.167482][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 37.174500][ T3662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.194709][ T3645] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.211107][ T3662] bond0 (unregistering): Released all slaves [ 37.220584][ T3645] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.50: iget: bad i_size value: 360287970189639690 [ 37.316335][ T3666] siw: device registration error -23 [ 37.347536][ T3647] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.50: iget: bad i_size value: 360287970189639690 [ 37.429071][ T3645] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.50: iget: bad i_size value: 360287970189639690 [ 37.585827][ T3647] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.50: iget: bad i_size value: 360287970189639690 [ 37.634595][ T3674] loop0: detected capacity change from 0 to 2048 [ 37.702064][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.711254][ T3676] lo speed is unknown, defaulting to 1000 [ 37.741662][ T3310] GPT:first_usable_lbas don't match. [ 37.746992][ T3310] GPT:34 != 290 [ 37.750533][ T3310] GPT: Use GNU Parted to correct GPT errors. [ 37.756731][ T3310] loop0: p1 p2 p3 [ 37.804449][ T3674] GPT:first_usable_lbas don't match. [ 37.809897][ T3674] GPT:34 != 290 [ 37.813396][ T3674] GPT: Use GNU Parted to correct GPT errors. [ 37.819546][ T3674] loop0: p1 p2 p3 [ 37.858793][ T3678] loop1: detected capacity change from 0 to 8192 [ 37.865487][ T3678] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777ÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿ0xffffffffffffffff' [ 37.994416][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 37.996139][ T3688] udevd[3688]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 38.006906][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 38.055260][ T3691] loop0: detected capacity change from 0 to 8192 [ 38.091848][ T3691] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 38.128882][ T3694] usb usb8: usbfs: process 3694 (syz.3.64) did not claim interface 0 before use [ 38.159397][ T3696] loop0: detected capacity change from 0 to 128 [ 38.174227][ T3696] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 550) [ 38.182477][ T3696] FAT-fs (loop0): Filesystem has been set read-only [ 38.203241][ T3318] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 550) [ 38.254985][ T3594] kernel write not supported for file task/51/attr/exec (pid: 3594 comm: kworker/0:8) [ 38.269568][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.289615][ T3703] FAULT_INJECTION: forcing a failure. [ 38.289615][ T3703] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 38.302976][ T3703] CPU: 0 UID: 0 PID: 3703 Comm: syz.2.67 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(voluntary) [ 38.303109][ T3703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 38.303122][ T3703] Call Trace: [ 38.303129][ T3703] [ 38.303136][ T3703] __dump_stack+0x1d/0x30 [ 38.303156][ T3703] dump_stack_lvl+0xe8/0x140 [ 38.303183][ T3703] dump_stack+0x15/0x1b [ 38.303202][ T3703] should_fail_ex+0x265/0x280 [ 38.303258][ T3703] should_fail+0xb/0x20 [ 38.303278][ T3703] should_fail_usercopy+0x1a/0x20 [ 38.303297][ T3703] _copy_from_iter+0xcf/0xe40 [ 38.303316][ T3703] ? __build_skb_around+0x1a0/0x200 [ 38.303390][ T3703] ? __alloc_skb+0x223/0x320 [ 38.303427][ T3703] netlink_sendmsg+0x471/0x6b0 [ 38.303458][ T3703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 38.303549][ T3703] __sock_sendmsg+0x145/0x180 [ 38.303640][ T3703] ____sys_sendmsg+0x31e/0x4e0 [ 38.303673][ T3703] ___sys_sendmsg+0x17b/0x1d0 [ 38.303766][ T3703] __x64_sys_sendmsg+0xd4/0x160 [ 38.303795][ T3703] x64_sys_call+0x2999/0x2fb0 [ 38.303814][ T3703] do_syscall_64+0xd2/0x200 [ 38.303914][ T3703] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 38.303945][ T3703] ? clear_bhb_loop+0x40/0x90 [ 38.303968][ T3703] ? clear_bhb_loop+0x40/0x90 [ 38.303991][ T3703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.304023][ T3703] RIP: 0033:0x7f924e40e929 [ 38.304089][ T3703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.304109][ T3703] RSP: 002b:00007f924ca77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.304130][ T3703] RAX: ffffffffffffffda RBX: 00007f924e635fa0 RCX: 00007f924e40e929 [ 38.304144][ T3703] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000004 [ 38.304172][ T3703] RBP: 00007f924ca77090 R08: 0000000000000000 R09: 0000000000000000 [ 38.304185][ T3703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.304198][ T3703] R13: 0000000000000000 R14: 00007f924e635fa0 R15: 00007ffc4dca4828 [ 38.304215][ T3703] [ 38.528601][ T3703] lo speed is unknown, defaulting to 1000 [ 38.629021][ T3719] FAULT_INJECTION: forcing a failure. [ 38.629021][ T3719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.641442][ T3716] netlink: 'syz.1.70': attribute type 13 has an invalid length. [ 38.642181][ T3719] CPU: 1 UID: 0 PID: 3719 Comm: syz.2.71 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(voluntary) [ 38.642210][ T3719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 38.642222][ T3719] Call Trace: [ 38.642228][ T3719] [ 38.642235][ T3719] __dump_stack+0x1d/0x30 [ 38.642258][ T3719] dump_stack_lvl+0xe8/0x140 [ 38.642338][ T3719] dump_stack+0x15/0x1b [ 38.642355][ T3719] should_fail_ex+0x265/0x280 [ 38.642391][ T3719] should_fail+0xb/0x20 [ 38.642408][ T3719] should_fail_usercopy+0x1a/0x20 [ 38.642429][ T3719] _copy_from_user+0x1c/0xb0 [ 38.642506][ T3719] __ia32_sys_rt_sigreturn+0x128/0x350 [ 38.642535][ T3719] x64_sys_call+0x2e8a/0x2fb0 [ 38.642556][ T3719] do_syscall_64+0xd2/0x200 [ 38.642584][ T3719] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 38.642653][ T3719] ? clear_bhb_loop+0x40/0x90 [ 38.642674][ T3719] ? clear_bhb_loop+0x40/0x90 [ 38.642695][ T3719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.642732][ T3719] RIP: 0033:0x7f924e3aab19 [ 38.642748][ T3719] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 38.642765][ T3719] RSP: 002b:00007f924ca76a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 38.642786][ T3719] RAX: ffffffffffffffda RBX: 00007f924e635fa0 RCX: 00007f924e3aab19 [ 38.642813][ T3719] RDX: 00007f924ca76a80 RSI: 00007f924ca76bb0 RDI: 0000000000000021 [ 38.642825][ T3719] RBP: 00007f924ca77090 R08: 0000000000000000 R09: 0000000000000000 [ 38.642889][ T3719] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 38.642901][ T3719] R13: 0000000000000000 R14: 00007f924e635fa0 R15: 00007ffc4dca4828 [ 38.642919][ T3719] [ 38.857092][ T3723] loop4: detected capacity change from 0 to 512 [ 38.866319][ T3723] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 38.879932][ T3723] EXT4-fs (loop4): 1 truncate cleaned up [ 38.886294][ T3723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.949290][ T3716] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.957207][ T3716] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.113413][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.181255][ T3741] loop3: detected capacity change from 0 to 512 [ 39.195366][ T3716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.238073][ T3310] udevd[3310]: incorrect ext4 checksum on /dev/loop3 [ 39.252301][ T3716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.275832][ T3310] udevd[3310]: incorrect ext4 checksum on /dev/loop3 [ 39.284315][ T3746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'. [ 39.300330][ T3741] random: crng reseeded on system resumption [ 39.339474][ T3741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.76'. [ 39.365915][ T3716] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.374994][ T3716] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.384128][ T3716] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.393111][ T3716] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.413956][ T3753] loop4: detected capacity change from 0 to 512 [ 39.429895][ T3753] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 39.447670][ T3753] EXT4-fs (loop4): 1 truncate cleaned up [ 39.454420][ T3753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.575742][ T3736] infiniband syz!: set active [ 39.580555][ T3736] infiniband syz!: added team_slave_0 [ 39.618678][ T3746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.626120][ T3746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.654678][ T3736] RDS/IB: syz!: added [ 39.661168][ T3736] smc: adding ib device syz! with port count 1 [ 39.667791][ T3736] smc: ib device syz! port 1 has pnetid [ 39.674306][ T3746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.681857][ T3746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.696500][ T3726] lo speed is unknown, defaulting to 1000 [ 39.717677][ T3743] syz.3.76 (3743) used greatest stack depth: 10640 bytes left [ 39.791718][ T3757] lo speed is unknown, defaulting to 1000 [ 39.913061][ T3758] loop3: detected capacity change from 0 to 8192 [ 39.995581][ T3758] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777ÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿ0xffffffffffffffff' [ 40.344499][ T3766] FAULT_INJECTION: forcing a failure. [ 40.344499][ T3766] name failslab, interval 1, probability 0, space 0, times 0 [ 40.357241][ T3766] CPU: 1 UID: 0 PID: 3766 Comm: syz.2.80 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(voluntary) [ 40.357380][ T3766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 40.357394][ T3766] Call Trace: [ 40.357403][ T3766] [ 40.357412][ T3766] __dump_stack+0x1d/0x30 [ 40.357434][ T3766] dump_stack_lvl+0xe8/0x140 [ 40.357454][ T3766] dump_stack+0x15/0x1b [ 40.357473][ T3766] should_fail_ex+0x265/0x280 [ 40.357493][ T3766] ? audit_log_d_path+0x8d/0x150 [ 40.357611][ T3766] should_failslab+0x8c/0xb0 [ 40.357645][ T3766] __kmalloc_cache_noprof+0x4c/0x320 [ 40.357678][ T3766] audit_log_d_path+0x8d/0x150 [ 40.357821][ T3766] audit_log_d_path_exe+0x42/0x70 [ 40.357890][ T3766] audit_log_task+0x1e9/0x250 [ 40.357916][ T3766] audit_seccomp+0x61/0x100 [ 40.357974][ T3766] ? __seccomp_filter+0x68c/0x10d0 [ 40.357997][ T3766] __seccomp_filter+0x69d/0x10d0 [ 40.358023][ T3766] ? notify_change+0x85c/0x890 [ 40.358064][ T3766] __secure_computing+0x82/0x150 [ 40.358167][ T3766] syscall_trace_enter+0xcf/0x1e0 [ 40.358189][ T3766] do_syscall_64+0xac/0x200 [ 40.358218][ T3766] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 40.358316][ T3766] ? clear_bhb_loop+0x40/0x90 [ 40.358416][ T3766] ? clear_bhb_loop+0x40/0x90 [ 40.358435][ T3766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.358456][ T3766] RIP: 0033:0x7f924e40d33c [ 40.358474][ T3766] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 40.358490][ T3766] RSP: 002b:00007f924ca77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 40.358508][ T3766] RAX: ffffffffffffffda RBX: 00007f924e635fa0 RCX: 00007f924e40d33c [ 40.358588][ T3766] RDX: 000000000000000f RSI: 00007f924ca770a0 RDI: 0000000000000007 [ 40.358602][ T3766] RBP: 00007f924ca77090 R08: 0000000000000000 R09: 0000000000000000 [ 40.358616][ T3766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 40.358637][ T3766] R13: 0000000000000000 R14: 00007f924e635fa0 R15: 00007ffc4dca4828 [ 40.358653][ T3766] [ 40.575715][ T3736] syz.0.75 (3736) used greatest stack depth: 10616 bytes left [ 40.617147][ T3774] loop3: detected capacity change from 0 to 256 [ 40.630679][ T3778] loop1: detected capacity change from 0 to 512 [ 40.645358][ T3778] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 40.668818][ T3774] : renamed from bond0 (while UP) [ 40.683990][ T3778] EXT4-fs (loop1): 1 truncate cleaned up [ 40.691537][ T3778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.875773][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.936083][ T3792] lo speed is unknown, defaulting to 1000 [ 41.009588][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.036417][ T3795] loop1: detected capacity change from 0 to 8192 [ 41.075852][ T3795] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 41.208309][ T3810] loop4: detected capacity change from 0 to 8192 [ 41.216836][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 41.216869][ T29] audit: type=1326 audit(1749160560.661:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.3.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90170e929 code=0x7ffc0000 [ 41.248316][ T3810] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777ÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿ0xffffffffffffffff' [ 41.248584][ T3805] lo speed is unknown, defaulting to 1000 [ 41.298381][ T3815] netlink: 52 bytes leftover after parsing attributes in process `syz.3.97'. [ 41.478872][ T29] audit: type=1326 audit(1749160560.661:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.3.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90170e929 code=0x7ffc0000 [ 41.502166][ T29] audit: type=1326 audit(1749160560.661:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.3.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff90170e929 code=0x7ffc0000 [ 41.526181][ T29] audit: type=1326 audit(1749160560.661:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.3.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90170e929 code=0x7ffc0000 [ 41.549418][ T29] audit: type=1326 audit(1749160560.661:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.3.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90170e929 code=0x7ffc0000 [ 41.572924][ T29] audit: type=1326 audit(1749160560.661:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.3.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff90170e929 code=0x7ffc0000 [ 41.596127][ T29] audit: type=1326 audit(1749160560.661:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.3.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90170e929 code=0x7ffc0000 [ 41.619375][ T29] audit: type=1326 audit(1749160560.661:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.3.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff90170e929 code=0x7ffc0000 [ 41.642674][ T29] audit: type=1326 audit(1749160560.721:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.3.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90170e929 code=0x7ffc0000 [ 41.665911][ T29] audit: type=1326 audit(1749160560.721:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.3.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90170e929 code=0x7ffc0000 [ 41.753658][ T3822] loop2: detected capacity change from 0 to 512 [ 41.764905][ T3822] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 41.780033][ T3822] EXT4-fs (loop2): 1 truncate cleaned up [ 41.801106][ T3822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.805497][ T3820] loop0: detected capacity change from 0 to 2048 [ 41.896263][ T3820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'. [ 41.905447][ T3820] bridge_slave_1: left allmulticast mode [ 41.911166][ T3820] bridge_slave_1: left promiscuous mode [ 41.916929][ T3820] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.925051][ T3820] bridge_slave_0: left allmulticast mode [ 41.930769][ T3820] bridge_slave_0: left promiscuous mode [ 41.930993][ T3820] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.988218][ T3829] FAULT_INJECTION: forcing a failure. [ 41.988218][ T3829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.001358][ T3829] CPU: 0 UID: 0 PID: 3829 Comm: syz.4.101 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(voluntary) [ 42.001454][ T3829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 42.001467][ T3829] Call Trace: [ 42.001553][ T3829] [ 42.001561][ T3829] __dump_stack+0x1d/0x30 [ 42.001587][ T3829] dump_stack_lvl+0xe8/0x140 [ 42.001622][ T3829] dump_stack+0x15/0x1b [ 42.001652][ T3829] should_fail_ex+0x265/0x280 [ 42.001676][ T3829] should_fail+0xb/0x20 [ 42.001695][ T3829] should_fail_usercopy+0x1a/0x20 [ 42.001746][ T3829] _copy_from_user+0x1c/0xb0 [ 42.001772][ T3829] ___sys_sendmsg+0xc1/0x1d0 [ 42.001840][ T3829] __x64_sys_sendmsg+0xd4/0x160 [ 42.001878][ T3829] x64_sys_call+0x2999/0x2fb0 [ 42.001974][ T3829] do_syscall_64+0xd2/0x200 [ 42.002043][ T3829] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 42.002070][ T3829] ? clear_bhb_loop+0x40/0x90 [ 42.002087][ T3829] ? clear_bhb_loop+0x40/0x90 [ 42.002109][ T3829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.002166][ T3829] RIP: 0033:0x7f18c0d6e929 [ 42.002184][ T3829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.002204][ T3829] RSP: 002b:00007f18bf3d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.002227][ T3829] RAX: ffffffffffffffda RBX: 00007f18c0f95fa0 RCX: 00007f18c0d6e929 [ 42.002242][ T3829] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 42.002256][ T3829] RBP: 00007f18bf3d7090 R08: 0000000000000000 R09: 0000000000000000 [ 42.002319][ T3829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.002332][ T3829] R13: 0000000000000000 R14: 00007f18c0f95fa0 R15: 00007ffcad60ad98 [ 42.002349][ T3829] [ 42.209330][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.268508][ T3838] 9pnet_fd: Insufficient options for proto=fd [ 42.384281][ T3850] bridge_slave_0: left allmulticast mode [ 42.390152][ T3850] bridge_slave_0: left promiscuous mode [ 42.395876][ T3850] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.404008][ T3850] bridge_slave_1: left allmulticast mode [ 42.409916][ T3850] bridge_slave_1: left promiscuous mode [ 42.415749][ T3850] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.424281][ T3850] : (slave bond_slave_0): Releasing backup interface [ 42.432269][ T3850] : (slave bond_slave_1): Releasing backup interface [ 42.440601][ T3850] team0: Port device team_slave_0 removed [ 42.450237][ T3590] kernel write not supported for file /58/attr/exec (pid: 3590 comm: kworker/1:9) [ 42.459800][ T3850] team0: Port device team_slave_1 removed [ 42.465834][ T3850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.474452][ T3850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.484980][ T3849] netlink: 'syz.3.109': attribute type 46 has an invalid length. [ 42.552647][ T3861] wireguard0: entered promiscuous mode [ 42.601809][ T3868] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 42.715453][ T3873] 9pnet_fd: Insufficient options for proto=fd [ 42.755540][ T3877] loop3: detected capacity change from 0 to 128 [ 42.769438][ T3877] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 550) [ 42.777720][ T3877] FAT-fs (loop3): Filesystem has been set read-only [ 42.792528][ T3316] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 550) [ 42.873289][ T3881] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 42.879905][ T3881] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 42.887464][ T3881] vhci_hcd vhci_hcd.0: Device attached [ 42.989021][ T3882] vhci_hcd: connection closed [ 42.989350][ T12] vhci_hcd: stop threads [ 42.998602][ T12] vhci_hcd: release socket [ 43.003053][ T12] vhci_hcd: disconnect device [ 43.111310][ T3890] bond1: entered promiscuous mode [ 43.116363][ T3890] bond1: entered allmulticast mode [ 43.122208][ T3890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.130709][ T3890] bond1 (unregistering): Released all slaves [ 43.160135][ T3893] siw: device registration error -23 [ 43.231205][ T3898] bond1: entered promiscuous mode [ 43.236270][ T3898] bond1: entered allmulticast mode [ 43.241749][ T3898] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.250140][ T3898] bond1 (unregistering): Released all slaves [ 43.280000][ T3900] siw: device registration error -23 [ 43.358890][ T3902] loop2: detected capacity change from 0 to 1024 [ 43.365910][ T3902] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.372946][ T3902] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.389023][ T3902] EXT4-fs (loop2): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.457111][ T3322] EXT4-fs (loop2): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 43.479037][ T3909] FAULT_INJECTION: forcing a failure. [ 43.479037][ T3909] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 43.492576][ T3909] CPU: 0 UID: 0 PID: 3909 Comm: syz.2.128 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(voluntary) [ 43.492604][ T3909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 43.492615][ T3909] Call Trace: [ 43.492622][ T3909] [ 43.492651][ T3909] __dump_stack+0x1d/0x30 [ 43.492675][ T3909] dump_stack_lvl+0xe8/0x140 [ 43.492696][ T3909] dump_stack+0x15/0x1b [ 43.492711][ T3909] should_fail_ex+0x265/0x280 [ 43.492729][ T3909] should_fail_alloc_page+0xf2/0x100 [ 43.492752][ T3909] __alloc_frozen_pages_noprof+0xff/0x360 [ 43.492842][ T3909] alloc_pages_mpol+0xb3/0x250 [ 43.492875][ T3909] folio_alloc_mpol_noprof+0x39/0x80 [ 43.492904][ T3909] shmem_get_folio_gfp+0x3cf/0xd60 [ 43.493016][ T3909] shmem_fault+0xf6/0x250 [ 43.493038][ T3909] __do_fault+0xbc/0x200 [ 43.493064][ T3909] handle_mm_fault+0xd69/0x2be0 [ 43.493120][ T3909] ? __rcu_read_lock+0x37/0x50 [ 43.493152][ T3909] __get_user_pages+0x1036/0x1fb0 [ 43.493186][ T3909] __gup_longterm_locked+0x638/0x1010 [ 43.493217][ T3909] ? ___pte_offset_map+0xea/0x150 [ 43.493246][ T3909] gup_fast_fallback+0x1f9/0x1730 [ 43.493324][ T3909] pin_user_pages_fast+0x5f/0x90 [ 43.493351][ T3909] io_pin_pages+0xb5/0x170 [ 43.493448][ T3909] io_sqe_buffer_register+0x184/0x12f0 [ 43.493480][ T3909] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 43.493518][ T3909] ? __kvmalloc_node_noprof+0x398/0x4e0 [ 43.493549][ T3909] ? io_sqe_buffers_register+0xc2/0x530 [ 43.493627][ T3909] io_sqe_buffers_register+0x2ac/0x530 [ 43.493667][ T3909] __se_sys_io_uring_register+0xa9f/0xeb0 [ 43.493834][ T3909] ? fput+0x8f/0xc0 [ 43.493911][ T3909] ? ksys_write+0x192/0x1a0 [ 43.493932][ T3909] __x64_sys_io_uring_register+0x55/0x70 [ 43.493955][ T3909] x64_sys_call+0xc91/0x2fb0 [ 43.493976][ T3909] do_syscall_64+0xd2/0x200 [ 43.494037][ T3909] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 43.494094][ T3909] ? clear_bhb_loop+0x40/0x90 [ 43.494113][ T3909] ? clear_bhb_loop+0x40/0x90 [ 43.494133][ T3909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.494155][ T3909] RIP: 0033:0x7f924e40e929 [ 43.494244][ T3909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.494259][ T3909] RSP: 002b:00007f924ca77038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 43.494273][ T3909] RAX: ffffffffffffffda RBX: 00007f924e635fa0 RCX: 00007f924e40e929 [ 43.494281][ T3909] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 43.494289][ T3909] RBP: 00007f924ca77090 R08: 0000000000000000 R09: 0000000000000000 [ 43.494359][ T3909] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 43.494367][ T3909] R13: 0000000000000000 R14: 00007f924e635fa0 R15: 00007ffc4dca4828 [ 43.494378][ T3909] [ 43.885490][ T3923] loop2: detected capacity change from 0 to 2048 [ 43.929081][ T3923] GPT:first_usable_lbas don't match. [ 43.934421][ T3923] GPT:34 != 290 [ 43.937952][ T3923] GPT: Use GNU Parted to correct GPT errors. [ 43.944157][ T3923] loop2: p1 p2 p3 [ 44.056160][ T3931] 9pnet_fd: Insufficient options for proto=fd [ 44.124963][ T3942] loop2: detected capacity change from 0 to 1024 [ 44.133750][ T3942] EXT4-fs: Ignoring removed bh option [ 44.141362][ T3947] FAULT_INJECTION: forcing a failure. [ 44.141362][ T3947] name failslab, interval 1, probability 0, space 0, times 0 [ 44.154227][ T3947] CPU: 0 UID: 0 PID: 3947 Comm: syz.3.142 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(voluntary) [ 44.154253][ T3947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 44.154264][ T3947] Call Trace: [ 44.154270][ T3947] [ 44.154279][ T3947] __dump_stack+0x1d/0x30 [ 44.154374][ T3947] dump_stack_lvl+0xe8/0x140 [ 44.154394][ T3947] dump_stack+0x15/0x1b [ 44.154413][ T3947] should_fail_ex+0x265/0x280 [ 44.154444][ T3947] should_failslab+0x8c/0xb0 [ 44.154471][ T3947] kmem_cache_alloc_node_noprof+0x57/0x320 [ 44.154549][ T3947] ? __alloc_skb+0x101/0x320 [ 44.154579][ T3947] __alloc_skb+0x101/0x320 [ 44.154651][ T3947] netlink_alloc_large_skb+0xba/0xf0 [ 44.154708][ T3947] netlink_sendmsg+0x3cf/0x6b0 [ 44.154743][ T3947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 44.154769][ T3947] __sock_sendmsg+0x145/0x180 [ 44.154787][ T3947] ____sys_sendmsg+0x31e/0x4e0 [ 44.154843][ T3947] ___sys_sendmsg+0x17b/0x1d0 [ 44.154886][ T3947] __x64_sys_sendmsg+0xd4/0x160 [ 44.154958][ T3947] x64_sys_call+0x2999/0x2fb0 [ 44.154982][ T3947] do_syscall_64+0xd2/0x200 [ 44.155073][ T3947] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 44.155099][ T3947] ? clear_bhb_loop+0x40/0x90 [ 44.155122][ T3947] ? clear_bhb_loop+0x40/0x90 [ 44.155144][ T3947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.155167][ T3947] RIP: 0033:0x7ff90170e929 [ 44.155182][ T3947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.155201][ T3947] RSP: 002b:00007ff8ffd77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.155245][ T3947] RAX: ffffffffffffffda RBX: 00007ff901935fa0 RCX: 00007ff90170e929 [ 44.155257][ T3947] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 44.155317][ T3947] RBP: 00007ff8ffd77090 R08: 0000000000000000 R09: 0000000000000000 [ 44.155331][ T3947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.155345][ T3947] R13: 0000000000000000 R14: 00007ff901935fa0 R15: 00007fff9804fe98 [ 44.155364][ T3947] [ 44.363550][ T3942] EXT4-fs: inline encryption not supported [ 44.369514][ T3942] EXT4-fs: Ignoring removed i_version option [ 44.390565][ T3942] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 44.404035][ T3951] netlink: 16 bytes leftover after parsing attributes in process `syz.3.144'. [ 44.445155][ T3942] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #3: block 1: comm syz.2.140: lblock 1 mapped to illegal pblock 1 (length 1) [ 44.478592][ T3942] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.140: Failed to acquire dquot type 0 [ 44.498599][ T3946] netlink: 'syz.0.141': attribute type 13 has an invalid length. [ 44.517582][ T3942] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.140: Freeing blocks not in datazone - block = 0, count = 4096 [ 44.531355][ T3942] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.140: Invalid inode bitmap blk 0 in block_group 0 [ 44.544339][ T3942] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 44.544628][ T12] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 44.569667][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 44.572307][ T3942] EXT4-fs (loop2): 1 orphan inode deleted [ 44.587497][ T3942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.628873][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.674935][ T3946] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.684160][ T3946] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.693343][ T3946] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.702344][ T3946] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.715743][ T3748] lo speed is unknown, defaulting to 1000 [ 44.721556][ T3748] syz2: Port: 1 Link DOWN [ 44.754859][ T3974] loop2: detected capacity change from 0 to 2048 [ 44.788049][ T3310] GPT:first_usable_lbas don't match. [ 44.793458][ T3310] GPT:34 != 290 [ 44.797023][ T3310] GPT: Use GNU Parted to correct GPT errors. [ 44.803103][ T3310] loop2: p1 p2 p3 [ 44.812153][ T3974] GPT:first_usable_lbas don't match. [ 44.817681][ T3974] GPT:34 != 290 [ 44.821204][ T3974] GPT: Use GNU Parted to correct GPT errors. [ 44.827286][ T3974] loop2: p1 p2 p3 [ 44.828710][ T3980] 9pnet_fd: Insufficient options for proto=fd [ 44.934471][ T3993] FAULT_INJECTION: forcing a failure. [ 44.934471][ T3993] name failslab, interval 1, probability 0, space 0, times 0 [ 44.947199][ T3993] CPU: 1 UID: 0 PID: 3993 Comm: +}[@ Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(voluntary) [ 44.947337][ T3993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 44.947387][ T3993] Call Trace: [ 44.947393][ T3993] [ 44.947401][ T3993] __dump_stack+0x1d/0x30 [ 44.947425][ T3993] dump_stack_lvl+0xe8/0x140 [ 44.947446][ T3993] dump_stack+0x15/0x1b [ 44.947465][ T3993] should_fail_ex+0x265/0x280 [ 44.947486][ T3993] ? audit_log_d_path+0x8d/0x150 [ 44.947521][ T3993] should_failslab+0x8c/0xb0 [ 44.947627][ T3993] __kmalloc_cache_noprof+0x4c/0x320 [ 44.947657][ T3993] audit_log_d_path+0x8d/0x150 [ 44.947707][ T3993] audit_log_d_path_exe+0x42/0x70 [ 44.947742][ T3993] audit_log_task+0x1e9/0x250 [ 44.947838][ T3993] audit_seccomp+0x61/0x100 [ 44.947866][ T3993] ? __seccomp_filter+0x68c/0x10d0 [ 44.947891][ T3993] __seccomp_filter+0x69d/0x10d0 [ 44.947917][ T3993] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 44.947965][ T3993] ? vfs_write+0x75e/0x8e0 [ 44.948031][ T3993] __secure_computing+0x82/0x150 [ 44.948056][ T3993] syscall_trace_enter+0xcf/0x1e0 [ 44.948137][ T3993] do_syscall_64+0xac/0x200 [ 44.948203][ T3993] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 44.948266][ T3993] ? clear_bhb_loop+0x40/0x90 [ 44.948291][ T3993] ? clear_bhb_loop+0x40/0x90 [ 44.948315][ T3993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.948339][ T3993] RIP: 0033:0x7ff90170e929 [ 44.948404][ T3993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.948423][ T3993] RSP: 002b:00007ff8ffd77038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 44.948443][ T3993] RAX: ffffffffffffffda RBX: 00007ff901935fa0 RCX: 00007ff90170e929 [ 44.948456][ T3993] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 44.948500][ T3993] RBP: 00007ff8ffd77090 R08: 0000000000000000 R09: 0000000000000000 [ 44.948511][ T3993] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 44.948537][ T3993] R13: 0000000000000000 R14: 00007ff901935fa0 R15: 00007fff9804fe98 [ 44.948555][ T3993] [ 44.951495][ T3995] netlink: 52 bytes leftover after parsing attributes in process `syz.2.155'. [ 45.001110][ T3999] SELinux: Context ŸGúòm1Lhð”ý®H±äSiÉâK\‡: is not valid (left unmapped). [ 45.208902][ T3998] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 45.211177][ T4006] loop3: detected capacity change from 0 to 512 [ 45.238037][ T4006] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.248368][ T4006] EXT4-fs (loop3): orphan cleanup on readonly fs [ 45.255473][ T4006] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.159: bg 0: block 248: padding at end of block bitmap is not set [ 45.270933][ T4006] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.159: Failed to acquire dquot type 1 [ 45.282771][ T4006] EXT4-fs (loop3): 1 truncate cleaned up [ 45.293144][ T4006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.320590][ T4006] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 45.350667][ T4006] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.159: Abort forced by user [ 45.362325][ T4006] EXT4-fs (loop3): Remounting filesystem read-only [ 45.368900][ T4006] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 45.393242][ T4006] ext4 filesystem being remounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.418112][ T4006] syz.3.159 (4006) used greatest stack depth: 9304 bytes left [ 45.428286][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.523473][ T4040] loop4: detected capacity change from 0 to 512 [ 45.530190][ T4040] ext4: Unknown parameter 'dont_hash' [ 45.566674][ T4042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.168'. [ 45.567225][ T4034] loop3: detected capacity change from 0 to 8192 [ 45.604963][ T4027] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 45.618243][ T4034] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 45.660558][ T4048] bond0: entered promiscuous mode [ 45.665667][ T4048] bond0: entered allmulticast mode [ 45.671473][ T4048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.706064][ T4048] bond0 (unregistering): Released all slaves [ 45.724718][ T4054] siw: device registration error -23 [ 45.775640][ T4061] loop4: detected capacity change from 0 to 256 [ 45.826915][ T4068] loop3: detected capacity change from 0 to 2048 [ 45.890361][ T4068] GPT:first_usable_lbas don't match. [ 45.895732][ T4068] GPT:34 != 290 [ 45.899384][ T4068] GPT: Use GNU Parted to correct GPT errors. [ 45.905466][ T4068] loop3: p1 p2 p3 [ 46.271140][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 46.271186][ T29] audit: type=1400 audit(1749160565.721:880): avc: denied { create } for pid=4122 comm="syz.3.188" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=9F47FAF26D314C68F094FDAE48B1E45369C9E24B5C873A [ 46.302703][ T29] audit: type=1400 audit(1749160565.721:881): avc: denied { associate } for pid=4122 comm="syz.3.188" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=9F47FAF26D314C68F094FDAE48B1E45369C9E24B5C873A [ 46.357533][ T29] audit: type=1400 audit(1749160565.811:882): avc: denied { mounton } for pid=4122 comm="syz.3.188" path="/54/file0" dev="tmpfs" ino=317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=9F47FAF26D314C68F094FDAE48B1E45369C9E24B5C873A [ 46.406257][ T4136] netlink: 52 bytes leftover after parsing attributes in process `syz.4.189'. [ 46.462864][ T29] audit: type=1326 audit(1749160565.841:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92562ee929 code=0x7ffc0000 [ 46.486200][ T29] audit: type=1326 audit(1749160565.841:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92562ee929 code=0x7ffc0000 [ 46.509537][ T29] audit: type=1326 audit(1749160565.841:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92562ee929 code=0x7ffc0000 [ 46.532798][ T29] audit: type=1326 audit(1749160565.841:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92562ee929 code=0x7ffc0000 [ 46.556178][ T29] audit: type=1326 audit(1749160565.841:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92562ee929 code=0x7ffc0000 [ 46.579451][ T29] audit: type=1326 audit(1749160565.841:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92562ee929 code=0x7ffc0000 [ 46.602691][ T29] audit: type=1326 audit(1749160565.841:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92562ee929 code=0x7ffc0000 [ 46.723170][ T4147] loop3: detected capacity change from 0 to 2048 [ 46.760126][ T3310] GPT:first_usable_lbas don't match. [ 46.765518][ T3310] GPT:34 != 290 [ 46.769079][ T3310] GPT: Use GNU Parted to correct GPT errors. [ 46.775167][ T3310] loop3: p1 p2 p3 [ 46.793086][ T4147] GPT:first_usable_lbas don't match. [ 46.798457][ T4147] GPT:34 != 290 [ 46.801962][ T4147] GPT: Use GNU Parted to correct GPT errors. [ 46.808106][ T4151] loop2: detected capacity change from 0 to 2048 [ 46.808141][ T4147] loop3: p1 p2 p3 [ 46.861591][ T4151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.194'. [ 46.873682][ T4151] bridge_slave_1: left allmulticast mode [ 46.879361][ T4151] bridge_slave_1: left promiscuous mode [ 46.885016][ T4151] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.898179][ T4151] bridge_slave_0: left allmulticast mode [ 46.903859][ T4151] bridge_slave_0: left promiscuous mode [ 46.909626][ T4151] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.948238][ T4163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.197'. [ 46.951085][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 46.963068][ T3688] udevd[3688]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 46.967847][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 47.025190][ T4171] loop3: detected capacity change from 0 to 512 [ 47.033717][ T4171] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.053773][ T4171] EXT4-fs (loop3): 1 truncate cleaned up [ 47.060733][ T4171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.194272][ T4183] loop4: detected capacity change from 0 to 512 [ 47.201912][ T4183] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.253038][ T4183] EXT4-fs (loop4): 1 truncate cleaned up [ 47.259407][ T4183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.289494][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.518482][ T4196] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 47.528181][ T4196] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 47.639956][ T4207] xt_CT: You must specify a L4 protocol and not use inversions on it [ 47.700050][ T4214] netlink: 52 bytes leftover after parsing attributes in process `syz.0.212'. [ 47.952135][ T4183] syz.4.203 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 47.966271][ T4183] CPU: 0 UID: 0 PID: 4183 Comm: syz.4.203 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(voluntary) [ 47.966335][ T4183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 47.966349][ T4183] Call Trace: [ 47.966358][ T4183] [ 47.966368][ T4183] __dump_stack+0x1d/0x30 [ 47.966388][ T4183] dump_stack_lvl+0xe8/0x140 [ 47.966451][ T4183] dump_stack+0x15/0x1b [ 47.966471][ T4183] dump_header+0x81/0x220 [ 47.966564][ T4183] oom_kill_process+0x334/0x3f0 [ 47.966599][ T4183] out_of_memory+0x979/0xb80 [ 47.966705][ T4183] try_charge_memcg+0x5e6/0x9e0 [ 47.966738][ T4183] obj_cgroup_charge_pages+0xa6/0x150 [ 47.966775][ T4183] __memcg_kmem_charge_page+0x9f/0x170 [ 47.966863][ T4183] __alloc_frozen_pages_noprof+0x188/0x360 [ 47.966906][ T4183] alloc_pages_mpol+0xb3/0x250 [ 47.967023][ T4183] alloc_pages_noprof+0x90/0x130 [ 47.967060][ T4183] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 47.967140][ T4183] __kvmalloc_node_noprof+0x30f/0x4e0 [ 47.967166][ T4183] ? ip_set_alloc+0x1f/0x30 [ 47.967188][ T4183] ? ip_set_alloc+0x1f/0x30 [ 47.967241][ T4183] ? __kmalloc_cache_noprof+0x189/0x320 [ 47.967272][ T4183] ip_set_alloc+0x1f/0x30 [ 47.967294][ T4183] hash_netiface_create+0x282/0x740 [ 47.967336][ T4183] ? __pfx_hash_netiface_create+0x10/0x10 [ 47.967433][ T4183] ip_set_create+0x3c9/0x960 [ 47.967469][ T4183] ? __nla_parse+0x40/0x60 [ 47.967548][ T4183] nfnetlink_rcv_msg+0x4c6/0x590 [ 47.967598][ T4183] ? should_fail_ex+0x30/0x280 [ 47.967631][ T4183] ? selinux_capable+0x1f9/0x270 [ 47.967654][ T4183] netlink_rcv_skb+0x123/0x220 [ 47.967678][ T4183] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 47.967703][ T4183] nfnetlink_rcv+0x16b/0x1690 [ 47.967802][ T4183] ? __folio_put+0x11e/0x150 [ 47.967831][ T4183] ? bpf_check+0xbe55/0xced0 [ 47.967862][ T4183] ? __rcu_read_unlock+0x4f/0x70 [ 47.967886][ T4183] ? obj_cgroup_charge_pages+0xf7/0x150 [ 47.967962][ T4183] ? __rcu_read_unlock+0x4f/0x70 [ 47.967989][ T4183] ? _find_next_zero_bit+0x64/0xa0 [ 47.968015][ T4183] ? should_fail_ex+0x30/0x280 [ 47.968089][ T4183] ? selinux_nlmsg_lookup+0x99/0x890 [ 47.968115][ T4183] ? selinux_netlink_send+0x59f/0x5f0 [ 47.968135][ T4183] ? __rcu_read_unlock+0x34/0x70 [ 47.968155][ T4183] ? __netlink_lookup+0x266/0x2a0 [ 47.968256][ T4183] netlink_unicast+0x59e/0x670 [ 47.968280][ T4183] netlink_sendmsg+0x58b/0x6b0 [ 47.968316][ T4183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.968413][ T4183] __sock_sendmsg+0x145/0x180 [ 47.968432][ T4183] ____sys_sendmsg+0x31e/0x4e0 [ 47.968464][ T4183] ___sys_sendmsg+0x17b/0x1d0 [ 47.968528][ T4183] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 47.968568][ T4183] __x64_sys_sendmsg+0xd4/0x160 [ 47.968642][ T4183] x64_sys_call+0x2999/0x2fb0 [ 47.968661][ T4183] do_syscall_64+0xd2/0x200 [ 47.968691][ T4183] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.968718][ T4183] ? clear_bhb_loop+0x40/0x90 [ 47.968768][ T4183] ? clear_bhb_loop+0x40/0x90 [ 47.968787][ T4183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.968807][ T4183] RIP: 0033:0x7f18c0d6e929 [ 47.968825][ T4183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.968846][ T4183] RSP: 002b:00007f18bf3d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.968939][ T4183] RAX: ffffffffffffffda RBX: 00007f18c0f95fa0 RCX: 00007f18c0d6e929 [ 47.968952][ T4183] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000004 [ 47.969008][ T4183] RBP: 00007f18c0df0b39 R08: 0000000000000000 R09: 0000000000000000 [ 47.969020][ T4183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.969031][ T4183] R13: 0000000000000000 R14: 00007f18c0f95fa0 R15: 00007ffcad60ad98 [ 47.969051][ T4183] [ 48.335096][ T4183] memory: usage 307196kB, limit 307200kB, failcnt 310 [ 48.341892][ T4183] memory+swap: usage 307660kB, limit 9007199254740988kB, failcnt 0 [ 48.349808][ T4183] kmem: usage 307068kB, limit 9007199254740988kB, failcnt 0 [ 48.357101][ T4183] Memory cgroup stats for /syz4: [ 48.365265][ T4183] cache 131072 [ 48.373656][ T4183] rss 0 [ 48.376434][ T4183] shmem 0 [ 48.379471][ T4183] mapped_file 0 [ 48.382956][ T4183] dirty 0 [ 48.385973][ T4183] writeback 118784 [ 48.389737][ T4183] workingset_refault_anon 167 [ 48.394436][ T4183] workingset_refault_file 11 [ 48.399120][ T4183] swap 471040 [ 48.402422][ T4183] swapcached 4096 [ 48.406035][ T4183] nr_memmap_boot_pages 9483 [ 48.410609][ T4183] pgpgin 9450 [ 48.413985][ T4183] pglazyfree 15105 [ 48.417741][ T4183] pgfault 66 [ 48.420985][ T4183] a_other 0 [ 48.424076][ T4183] inactive_anon 0 [ 48.427787][ T4183] active_anon 131072 [ 48.431737][ T4183] inactive_file 0 [ 48.435377][ T4183] active_file 0 [ 48.438921][ T4183] hierarchical_memory_limit 314572800 [ 48.444297][ T4183] hierarchical_memsw_limit 9223372036854771712 [ 48.450479][ T4183] total_cache 131072 [ 48.454389][ T4183] total_rss 0 [ 48.457702][ T4183] total_shmem 0 [ 48.461165][ T4183] total_mapped_file 0 [ 48.465143][ T4183] total_dirty 0 [ 48.468700][ T4183] total_writeback 118784 [ 48.472951][ T4183] total_workingset_refault_anon 167 [ 48.478166][ T4183] total_workingset_refault_file 11 [ 48.483300][ T4183] total_swap 471040 [ 48.487094][ T4183] total_swapcached 4096 [ 48.491280][ T4183] total_nr_memmap_boot_pages 9483 [ 48.496304][ T4183] total_pgpgin 9450 [ 48.500131][ T4183] total_pglazyfree 15105 [ 48.504389][ T4183] total_pgfault 66 [ 48.508135][ T4183] total_a_other 0 [ 48.511805][ T4183] total_inactive_anon 0 [ 48.515994][ T4183] total_active_anon 131072 [ 48.520433][ T4183] total_inactive_file 0 [ 48.524629][ T4183] total_active_file 0 [ 48.528684][ T4183] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.203,pid=4182,uid=0 [ 48.543399][ T4183] Memory cgroup out of memory: Killed process 4182 (syz.4.203) total-vm:93884kB, anon-rss:936kB, file-rss:22696kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 48.577971][ T4192] syz.4.203 (4192) used greatest stack depth: 8616 bytes left [ 48.687126][ T4183] syz.4.203 (4183) used greatest stack depth: 6992 bytes left [ 48.695632][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.729059][ T4229] loop4: detected capacity change from 0 to 512 [ 48.739033][ T4229] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.752993][ T4232] netlink: 172 bytes leftover after parsing attributes in process `syz.1.218'. [ 48.762228][ T4229] EXT4-fs (loop4): 1 truncate cleaned up [ 48.768907][ T4229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.854430][ T4236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.220'. [ 48.871205][ T4236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.220'. [ 48.916403][ T4246] FAULT_INJECTION: forcing a failure. [ 48.916403][ T4246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.929775][ T4246] CPU: 0 UID: 0 PID: 4246 Comm: syz.1.223 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(voluntary) [ 48.929848][ T4246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 48.929861][ T4246] Call Trace: [ 48.929869][ T4246] [ 48.929877][ T4246] __dump_stack+0x1d/0x30 [ 48.929898][ T4246] dump_stack_lvl+0xe8/0x140 [ 48.929916][ T4246] dump_stack+0x15/0x1b [ 48.929934][ T4246] should_fail_ex+0x265/0x280 [ 48.930033][ T4246] should_fail+0xb/0x20 [ 48.930049][ T4246] should_fail_usercopy+0x1a/0x20 [ 48.930068][ T4246] _copy_from_user+0x1c/0xb0 [ 48.930094][ T4246] ___sys_sendmsg+0xc1/0x1d0 [ 48.930149][ T4246] __x64_sys_sendmsg+0xd4/0x160 [ 48.930183][ T4246] x64_sys_call+0x2999/0x2fb0 [ 48.930202][ T4246] do_syscall_64+0xd2/0x200 [ 48.930236][ T4246] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.930263][ T4246] ? clear_bhb_loop+0x40/0x90 [ 48.930314][ T4246] ? clear_bhb_loop+0x40/0x90 [ 48.930382][ T4246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.930401][ T4246] RIP: 0033:0x7f92562ee929 [ 48.930415][ T4246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.930431][ T4246] RSP: 002b:00007f9254957038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.930451][ T4246] RAX: ffffffffffffffda RBX: 00007f9256515fa0 RCX: 00007f92562ee929 [ 48.930466][ T4246] RDX: 0000000000004004 RSI: 0000200000000040 RDI: 0000000000000003 [ 48.930480][ T4246] RBP: 00007f9254957090 R08: 0000000000000000 R09: 0000000000000000 [ 48.930522][ T4246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.930536][ T4246] R13: 0000000000000000 R14: 00007f9256515fa0 R15: 00007ffe1e5aaee8 [ 48.930572][ T4246] [ 49.272751][ T4257] netlink: 'syz.1.226': attribute type 13 has an invalid length. [ 49.742725][ T4261] netlink: 'syz.0.227': attribute type 13 has an invalid length. [ 50.089393][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.118619][ T4300] loop4: detected capacity change from 0 to 2048 [ 50.150951][ T3310] GPT:first_usable_lbas don't match. [ 50.156335][ T3310] GPT:34 != 290 [ 50.159873][ T3310] GPT: Use GNU Parted to correct GPT errors. [ 50.165994][ T3310] loop4: p1 p2 p3 [ 50.174695][ T4300] GPT:first_usable_lbas don't match. [ 50.180083][ T4300] GPT:34 != 290 [ 50.183769][ T4300] GPT: Use GNU Parted to correct GPT errors. [ 50.189833][ T4300] loop4: p1 p2 p3 [ 50.272791][ T4307] __nla_validate_parse: 1 callbacks suppressed [ 50.272839][ T4307] netlink: 156 bytes leftover after parsing attributes in process `syz.0.233'. [ 50.288154][ T4307] netlink: 32 bytes leftover after parsing attributes in process `syz.0.233'. [ 50.301398][ T4307] vlan2: entered allmulticast mode [ 50.306633][ T4307] bridge_slave_0: entered allmulticast mode [ 50.408049][ T3324] ================================================================== [ 50.416140][ T3324] BUG: KCSAN: data-race in pollwake / pollwake [ 50.422277][ T3324] [ 50.424580][ T3324] write to 0xffffc900014279e0 of 4 bytes by task 3316 on cpu 0: [ 50.432181][ T3324] pollwake+0xb6/0x100 [ 50.436228][ T3324] __wake_up_sync_key+0x52/0x80 [ 50.441061][ T3324] anon_pipe_write+0x8ba/0xaa0 [ 50.445859][ T3324] vfs_write+0x49d/0x8e0 [ 50.450084][ T3324] ksys_write+0xda/0x1a0 [ 50.454307][ T3324] __x64_sys_write+0x40/0x50 [ 50.458877][ T3324] x64_sys_call+0x2cdd/0x2fb0 [ 50.463538][ T3324] do_syscall_64+0xd2/0x200 [ 50.468025][ T3324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.473899][ T3324] [ 50.476207][ T3324] write to 0xffffc900014279e0 of 4 bytes by task 3324 on cpu 1: [ 50.483811][ T3324] pollwake+0xb6/0x100 [ 50.487866][ T3324] __wake_up_sync_key+0x52/0x80 [ 50.492695][ T3324] anon_pipe_write+0x8ba/0xaa0 [ 50.497438][ T3324] vfs_write+0x49d/0x8e0 [ 50.501656][ T3324] ksys_write+0xda/0x1a0 [ 50.505887][ T3324] __x64_sys_write+0x40/0x50 [ 50.510459][ T3324] x64_sys_call+0x2cdd/0x2fb0 [ 50.515118][ T3324] do_syscall_64+0xd2/0x200 [ 50.519608][ T3324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.525481][ T3324] [ 50.527785][ T3324] value changed: 0x00000000 -> 0x00000001 [ 50.533486][ T3324] [ 50.535790][ T3324] Reported by Kernel Concurrency Sanitizer on: [ 50.541915][ T3324] CPU: 1 UID: 0 PID: 3324 Comm: syz-executor Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(voluntary) SYZFAIL: failed to send rpc fd=3 want=1240 sent=0 n=-1 (errno 32: Broken pipe) [ 50.554140][ T3324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.564264][ T3324] ================================================================== [ 50.886535][ T580] bridge_slave_1: left allmulticast mode [ 50.892249][ T580] bridge_slave_1: left promiscuous mode [ 50.897974][ T580] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.905561][ T580] bridge_slave_0: left allmulticast mode [ 50.911341][ T580] bridge_slave_0: left promiscuous mode [ 50.916953][ T580] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.979514][ T580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.988510][ T580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.997526][ T580] bond0 (unregistering): Released all slaves [ 51.069627][ T580] hsr_slave_0: left promiscuous mode [ 51.075479][ T580] hsr_slave_1: left promiscuous mode [ 51.081557][ T580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.089663][ T580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.116361][ T580] team0 (unregistering): Port device team_slave_1 removed [ 51.125189][ T580] team0 (unregistering): Port device team_slave_0 removed [ 51.760038][ T580] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.811520][ T580] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.863752][ T580] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.899964][ T580] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.978247][ T580] bridge_slave_1: left allmulticast mode [ 51.983929][ T580] bridge_slave_1: left promiscuous mode [ 51.989713][ T580] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.997835][ T580] bridge_slave_0: left allmulticast mode [ 52.003456][ T580] bridge_slave_0: left promiscuous mode [ 52.009309][ T580] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.100304][ T580]  (unregistering): Released all slaves [ 52.117486][ T580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.126554][ T580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.135543][ T580] bond0 (unregistering): Released all slaves [ 52.229422][ T580]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.239204][ T580]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.248163][ T580]  (unregistering): Released all slaves [ 52.399934][ T580] hsr_slave_0: left promiscuous mode [ 52.405588][ T580] hsr_slave_1: left promiscuous mode [ 52.412432][ T580] hsr_slave_0: left promiscuous mode [ 52.418166][ T580] hsr_slave_1: left promiscuous mode [ 52.425053][ T580] hsr_slave_0: left promiscuous mode [ 52.430579][ T580] hsr_slave_1: left promiscuous mode [ 52.436035][ T580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.443451][ T580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.450874][ T580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.458347][ T580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.468045][ T580] veth1_macvtap: left promiscuous mode [ 52.473643][ T580] veth0_macvtap: left promiscuous mode [ 52.479147][ T580] veth1_vlan: left promiscuous mode [ 52.484346][ T580] veth0_vlan: left promiscuous mode [ 52.571771][ T580] team0 (unregistering): Port device team_slave_1 removed [ 52.580474][ T580] team0 (unregistering): Port device team_slave_0 removed [ 52.589760][ T12] smc: removing ib device syz! [ 52.626815][ T580] team0 (unregistering): Port device team_slave_1 removed [ 52.635466][ T580] team0 (unregistering): Port device team_slave_0 removed [ 52.665024][ T3588] infiniband syz1: ib_query_port failed (-19)