last executing test programs: 24.127432581s ago: executing program 1 (id=81): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x4040, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r0}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0), 0x111, 0xa}}, 0x20) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000140)=""/4096) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = open(&(0x7f0000001140)='./file0\x00', 0x301800, 0x184) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0xa0010000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x5c, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xdd}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xbfb}]}, 0x5c}}, 0x40) r6 = syz_io_uring_setup(0x24ce, &(0x7f0000001300)={0x0, 0x9015, 0x2000, 0x3, 0x158, 0x0, r4}, &(0x7f0000001380), &(0x7f00000013c0)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f00000014c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, &(0x7f0000001400)=0x80, &(0x7f0000001440)=@l2tp={0x2, 0x0, @private}, 0x0, 0x80800}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001500)={{0x1, 0x1, 0x18, r4, {0x3c, 0xb7c2}}, './file0\x00'}) ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, &(0x7f0000001540)={{0x1, 0x7}, {0x3, 0x6}, 0xffff, 0x1}) mknodat$loop(r1, &(0x7f0000001580)='./file0\x00', 0x20, 0x1) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r4, 0x19, &(0x7f00000015c0)={0xb9, 0x9, 0x6}, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000001600)) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000001680), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x20, r9, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r8, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x4100209}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x40, 0x1412, 0x200, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008084}, 0x408c4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000001880)={{0x1, 0x1, 0x18, r8, {0x2}}, './file0\x00'}) lseek(r6, 0x6, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001940)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001980)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r11, &(0x7f0000001a40)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10090000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x38, r12, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x1010}, 0x20000040) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) utime(&(0x7f0000001a80)='./file0\x00', &(0x7f0000001ac0)={0x88d}) bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=@base={0x5, 0xfffffffd, 0x54, 0xffffffff, 0x8000, r10, 0x3fe00, '\x00', 0x0, r8, 0x4, 0x3, 0x5, 0x0, @value=r8}, 0x50) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r10, 0x13, &(0x7f0000001b80)=[0x80, 0x6], 0x2) 24.024485929s ago: executing program 1 (id=84): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r6, {0xfff2, 0x4}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 24.022137679s ago: executing program 1 (id=86): syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 23.964590384s ago: executing program 1 (id=89): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000240)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}, {@oldalloc}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0], 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x1c497, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200000, 0x4, @perf_bp={0x0, 0x8}, 0x7602, 0x7, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r2, 0x2) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000dc0)='/proc/tty/drivers\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90224fc602f1a04000a740100073582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000280), &(0x7f00000002c0)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000"], 0x48) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r2, @ANYRESDEC=r3, @ANYRES64=r7, @ANYRES16=r0, @ANYRES16=r8, @ANYRES16=r5, @ANYRES8=r5, @ANYBLOB="ced4fdc7136bd2be4f5f9558c49302eb049d79803ad53248e302ec6bd4d29ea6d60fb4547915d17beb61d65d85e03a3739c359dd4c179ba6304e903777ab31e418c69f8600ca74e11a5992fbcf7baa2ff1f02e9d2a18ff532749603ca116bb64415b69b3e0b51f5fad62d72c51bf7901a40a263eb71a8f2e19e4dce6d084cbfb24a4d1d73ffd7f142e865dfbfeca616f316b69d1117bca9c9c8d84bd1a7957ba992c0bbf759c3fc073e6e1f3891ac2ff37e58747a313913f15e091f37be052b49640cabd12d946bec1a8147ee5d71043be6f88f023fecce45d0bc2977e1d71baf73685729bb797d4e66ab498954c8c4697af5b2cade88fbc0d", @ANYRES32=r0], 0x48) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB="000000000000e9ff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file1\x00', 0x1e) 23.713700584s ago: executing program 1 (id=91): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00'}, 0x18) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x2040400) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0x7040, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001080)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu~00\t&&') r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r8, 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r7, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)="46771690078383cb4957baad667c185124f593743317b0218062669c561840c784dc244c142d5bfd45562751aa27f86fbeead7dfbf264e1b9899055a81192ec2bb0b74db67de28caa2214c5e7aa381d93e7a7078cdecff1cca33b6fa46494dca94cf608e72b4b4b28c43a79cd3dc6a3b4b48f11e0f13a6", 0x77}, {&(0x7f0000000540)="1bb58ff73e372644f13f7621535b3565ca937d", 0x13}, {&(0x7f0000000580)="d397ca546e004358491088256f16300f3576f3544c8dbfadebda53bb3f6b4b35c6f0e9f9e8da89", 0x27}], 0x3, &(0x7f0000000ac0)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}], 0x20, 0x80}}], 0x1, 0x4000000) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000380)=0x0) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r6, &(0x7f00000004c0)='./file0\x00', 0x4000, 0x200, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file2\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) chown(&(0x7f0000000040)='./file1\x00', r15, r16) getresgid(&(0x7f00000006c0), &(0x7f0000000700)=0x0, &(0x7f0000000740)) setxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000010002000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r9, @ANYBLOB="09001ae8", @ANYRES32=r11, @ANYBLOB="02000400", @ANYRES32=r12, @ANYRESOCT=r17, @ANYRES32=r13, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRESHEX=r4, @ANYRES32=r14, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r16, @ANYBLOB="08000400", @ANYRES32=r17, @ANYBLOB="10000400"/16], 0x6c, 0x3) preadv(r6, &(0x7f0000000400)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {0x0, 0x41}], 0x2, 0x0, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r0) r18 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r18, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000280)={r19}, &(0x7f0000000080)=0x8) 23.204614045s ago: executing program 1 (id=101): r0 = socket$l2tp6(0xa, 0x2, 0x73) unshare(0x2040400) chdir(&(0x7f0000000540)='./cgroup\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000200)=""/179, 0xb3) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r2}, 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000640)={'gre0\x00', &(0x7f0000000840)={'sit0\x00', 0x0, 0x78a6, 0x7, 0x5, 0xa9, {{0x20, 0x4, 0x3, 0x1c, 0x80, 0x65, 0x0, 0x62, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x7, 0xd, "7edb7a77d99e7553dd0ea0"}, @noop, @ssrr={0x89, 0x1f, 0x39, [@local, @remote, @rand_addr=0x64010101, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3d}, @remote, @multicast2]}, @timestamp={0x44, 0x8, 0x57, 0x0, 0x4, [0xfe]}, @timestamp_prespec={0x44, 0x2c, 0xdb, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6c}, {@local}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x6}, {@multicast1, 0x5}, {@private=0xa010100, 0x5e}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0x33, 0x1, 0x2}]}}}}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000640)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r4}, 0x10) io_setup(0x3, &(0x7f0000000340)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f00000002c0)={0xa}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="5bbb1d5eac35599feb070d06f4fa10aeb537b4a6aabc4663fe15b76e2af28d65c44f4a223aa7cd5f92eb00871c270882bdf85e5f7bb309846add96eefbca144663266cacb362a8bba1e25c0a1381187b10e6e735862481c9f4ff8536efa8c2ebde8456650e7f08f6e2ea9b316ec3a6b6647d494a85b079a7eb59e93613a17e2c", @ANYRES16=r6, @ANYBLOB="5953fdfffffffddbdf256b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007200000010001d800c00008008000d8004000380"], 0x38}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, &(0x7f0000000280)) 23.168817898s ago: executing program 32 (id=101): r0 = socket$l2tp6(0xa, 0x2, 0x73) unshare(0x2040400) chdir(&(0x7f0000000540)='./cgroup\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000200)=""/179, 0xb3) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r2}, 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000640)={'gre0\x00', &(0x7f0000000840)={'sit0\x00', 0x0, 0x78a6, 0x7, 0x5, 0xa9, {{0x20, 0x4, 0x3, 0x1c, 0x80, 0x65, 0x0, 0x62, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x7, 0xd, "7edb7a77d99e7553dd0ea0"}, @noop, @ssrr={0x89, 0x1f, 0x39, [@local, @remote, @rand_addr=0x64010101, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3d}, @remote, @multicast2]}, @timestamp={0x44, 0x8, 0x57, 0x0, 0x4, [0xfe]}, @timestamp_prespec={0x44, 0x2c, 0xdb, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6c}, {@local}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x6}, {@multicast1, 0x5}, {@private=0xa010100, 0x5e}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0x33, 0x1, 0x2}]}}}}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000640)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r4}, 0x10) io_setup(0x3, &(0x7f0000000340)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f00000002c0)={0xa}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="5bbb1d5eac35599feb070d06f4fa10aeb537b4a6aabc4663fe15b76e2af28d65c44f4a223aa7cd5f92eb00871c270882bdf85e5f7bb309846add96eefbca144663266cacb362a8bba1e25c0a1381187b10e6e735862481c9f4ff8536efa8c2ebde8456650e7f08f6e2ea9b316ec3a6b6647d494a85b079a7eb59e93613a17e2c", @ANYRES16=r6, @ANYBLOB="5953fdfffffffddbdf256b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007200000010001d800c00008008000d8004000380"], 0x38}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, &(0x7f0000000280)) 17.596755646s ago: executing program 4 (id=182): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0xa1, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1, "f4"}}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000300), 0x4) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r1, 0x0, 0x0) 17.318068628s ago: executing program 4 (id=187): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc68, 0x0, 0x0, 0x0}, 0x94) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2bf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffe) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r5}, 0x9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r2}) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r6}, 0x10) r7 = socket(0x10, 0x3, 0x0) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc010}, 0x4044040) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) mq_open(&(0x7f0000000600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdF\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1b\xf4\xce\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|9\x90\x8d\xf4r\xd9*\xd1\x83\n\x1a\xa8fa2\xd4:^\xd7a\x0f\x12}\a\x9d\xc9h\x02\xbe\xeb\x01\xd39LS\xefJ\xcc<\xc4\xc0\xb4A\xab{\x1b\x15<\x95\x02\xae\xfdT\x98\xf4\x85\a\x01@\x12\xe0<3\xb4\x97\xb6W\x84K\xd7\xc5\xf47\xed\xda4\xe2W\xb6r\xca\x1e\x90\xef\x13\xf1&~\x97n\x9f\x8eS\xa8R\xf6\x9d{9\x1bN\x81\x18~\xd7{', 0x42, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) 17.240998704s ago: executing program 4 (id=190): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = open(&(0x7f0000000240)='./file2\x00', 0x165142, 0x148) sendfile(r3, r3, 0x0, 0x800000009) rmdir(&(0x7f0000000000)='./file0\x00') r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r4, &(0x7f0000000100)='highspeed\x00', 0xa) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) 17.181705009s ago: executing program 4 (id=193): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000240)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}, {@oldalloc}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0], 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xff}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90224fc602f1a04000a740100073582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000280), &(0x7f00000002c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000"], 0x48) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r1, @ANYRESDEC, @ANYRES64=r4, @ANYRES16=r0, @ANYRES16=r5, @ANYRES16=r2, @ANYRES8=r2, @ANYBLOB="ced4fdc7136bd2be4f5f9558c49302eb049d79803ad53248e302ec6bd4d29ea6d60fb4547915d17beb61d65d85e03a3739c359dd4c179ba6304e903777ab31e418c69f8600ca74e11a5992fbcf7baa2ff1f02e9d2a18ff532749603ca116bb64415b69b3e0b51f5fad62d72c51bf7901a40a263eb71a8f2e19e4dce6d084cbfb24a4d1d73ffd7f142e865dfbfeca616f316b69d1117bca9c9c8d84bd1a7957ba992c0bbf759c3fc073e6e1f3891ac2ff37e58747a313913f15e091f37be052b49640cabd12d946bec1a8147ee5d71043be6f88f023fecce45d0bc2977e1d71baf73685729bb797d4e66ab498954c8c4697af5b2cade88fbc0d", @ANYRES32=r0], 0x48) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB="000000000000e9ff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file1\x00', 0x1e) 16.848765696s ago: executing program 4 (id=198): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x60, 0xfffffff8, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x1, 0x40, 0x7, 0x4}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) (async) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0xe00, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5, {0x9, 0x200}}, './file1\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r4}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r4}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r4, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x33, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r4, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x33, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000c80)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) (async) r11 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xe, 0x46, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702000014000000", @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000950000000000000018120000", @ANYRES32=r7, @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYBLOB, @ANYBLOB], 0x0, 0x800, 0xe, &(0x7f0000000580)=""/14, 0x41100, 0x40, '\x00', r8, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0x4, 0x9fc9, 0x5b1d}, 0x10, r10, 0xffffffffffffffff, 0x1, &(0x7f0000000a80)=[0xffffffffffffffff, r3, r3, r3, r11, r3], &(0x7f0000000ac0)=[{0x3ff, 0x1, 0xa, 0x7127e86d99be2c64}], 0x10, 0x7fff}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'ip6_vti0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x9, 0x6, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x19}, 0x700, 0x20, 0x6, 0x10001}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x9, 0x6, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x19}, 0x700, 0x20, 0x6, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000b40)={'gretap0\x00', &(0x7f0000000ac0)={'erspan0\x00', 0x0, 0x8, 0x8, 0x2, 0x66d3, {{0x12, 0x4, 0x0, 0x9, 0x48, 0x64, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0xb, 0x9, [@remote, @multicast2]}, @timestamp_addr={0x44, 0x14, 0x5d, 0x1, 0x1, [{@multicast2, 0x7ff}, {@private=0xa010102, 0x1fcf}]}, @end, @cipso={0x86, 0x10, 0x0, [{0x1, 0xa, "3568d73886a43f29"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000b40)={'gretap0\x00', &(0x7f0000000ac0)={'erspan0\x00', 0x0, 0x8, 0x8, 0x2, 0x66d3, {{0x12, 0x4, 0x0, 0x9, 0x48, 0x64, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0xb, 0x9, [@remote, @multicast2]}, @timestamp_addr={0x44, 0x14, 0x5d, 0x1, 0x1, [{@multicast2, 0x7ff}, {@private=0xa010102, 0x1fcf}]}, @end, @cipso={0x86, 0x10, 0x0, [{0x1, 0xa, "3568d73886a43f29"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) r18 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r19 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r20, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000c00)={@ipv4={""/10, ""/2, @multicast2}, 0x0}, &(0x7f0000000c40)=0x14) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001400)={&(0x7f0000000c80)=ANY=[@ANYBLOB='t\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082bbd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="f400028040000100240001006e625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000400000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000008000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="ec0002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000500000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000180000008000100", @ANYRES32=r8, @ANYBLOB="7800028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400090000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="dc01028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400980000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400090000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100010040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000040000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r15, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ffffffff08000100", @ANYRES32=r16, @ANYBLOB="080202805c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c0004000300100102000000ff7f060080ffffff060003070100000007009202fafffffff9fffe800400000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r17, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r20, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r21, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000700000008000100", @ANYRES32=r22, @ANYBLOB="f400028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400dd1f1d1640000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r23, @ANYBLOB="080007000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040008000000"], 0x774}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@nolazytime}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nodioread_nolock}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x0, 0x473, &(0x7f0000000640)="$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") 16.326414257s ago: executing program 4 (id=205): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80002, 0x0) flock(r4, 0x1) flock(r4, 0x2) dup3(r4, r1, 0x80000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r6}, 0x10) syz_clone3(&(0x7f0000000680)={0x24201100, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b3c, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000100000}, 0x18) write$selinux_load(r7, &(0x7f0000000000)=ANY=[], 0xfd44) 16.326101548s ago: executing program 33 (id=205): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80002, 0x0) flock(r4, 0x1) flock(r4, 0x2) dup3(r4, r1, 0x80000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r6}, 0x10) syz_clone3(&(0x7f0000000680)={0x24201100, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b3c, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000100000}, 0x18) write$selinux_load(r7, &(0x7f0000000000)=ANY=[], 0xfd44) 11.154550113s ago: executing program 5 (id=275): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89fd, &(0x7f0000000080)) 11.026321724s ago: executing program 5 (id=278): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a70000000060a010400000000000000010a0000010900010073797a310000000044000480400001800d00010073796e70726f7879000000002c000280080003400000000605000200020000000800034000000019060001400006000005000200d30000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x4008091}, 0x24004000) r2 = dup(r0) signalfd4(r0, &(0x7f0000000180)={[0x7]}, 0x8, 0x1800) setresgid(0x0, 0xee00, 0x0) setfsgid(0xee00) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendto$inet6(r0, &(0x7f00000003c0)="bb918b", 0x3, 0x4040040, &(0x7f0000000000)={0xa, 0x4e20, 0x7ff, @local, 0x3}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 10.622834256s ago: executing program 5 (id=283): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000340)={0x23, 0x0, 0x0, 0x2}, 0x10) epoll_create(0x7) syz_open_dev$usbmon(&(0x7f00000004c0), 0x7f, 0x8401) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/54, 0x328000, 0x1000, 0x10, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) connect$inet6(r4, &(0x7f0000000680)={0xa, 0x4e22, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) 10.542818042s ago: executing program 5 (id=288): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000240)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}, {@oldalloc}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x1c497, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200000, 0x4, @perf_bp={0x0, 0x8}, 0x7602, 0x7, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xff}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90224fc602f1a04000a740100073582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000280), &(0x7f00000002c0)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000"], 0x48) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r1, @ANYRESDEC=r2, @ANYRES64=r5, @ANYRES16=r0, @ANYRES16=r6, @ANYRES16=r3, @ANYRES8=r3, @ANYBLOB="ced4fdc7136bd2be4f5f9558c49302eb049d79803ad53248e302ec6bd4d29ea6d60fb4547915d17beb61d65d85e03a3739c359dd4c179ba6304e903777ab31e418c69f8600ca74e11a5992fbcf7baa2ff1f02e9d2a18ff532749603ca116bb64415b69b3e0b51f5fad62d72c51bf7901a40a263eb71a8f2e19e4dce6d084cbfb24a4d1d73ffd7f142e865dfbfeca616f316b69d1117bca9c9c8d84bd1a7957ba992c0bbf759c3fc073e6e1f3891ac2ff37e58747a313913f15e091f37be052b49640cabd12d946bec1a8147ee5d71043be6f88f023fecce45d0bc2977e1d71baf73685729bb797d4e66ab498954c8c4697af5b2cade88fbc0d", @ANYRES32=r0], 0x48) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB="000000000000e9ff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file1\x00', 0x1e) 10.07917823s ago: executing program 5 (id=293): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 9.191268751s ago: executing program 5 (id=309): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x80) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500000000000000000000000200"], 0x1c}, 0x1, 0x0, 0x0, 0x20040091}, 0x800) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 9.174697883s ago: executing program 34 (id=309): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x80) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500000000000000000000000200"], 0x1c}, 0x1, 0x0, 0x0, 0x20040091}, 0x800) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 5.485362449s ago: executing program 3 (id=373): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='signal_deliver\x00', r0}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 5.433272933s ago: executing program 3 (id=376): socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x0, 0x3, 0x4a}, 0x10) close(r2) 5.185309503s ago: executing program 3 (id=379): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000a0000000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 5.133255247s ago: executing program 3 (id=380): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000240)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}, {@oldalloc}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") r1 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x1c497, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200000, 0x4, @perf_bp={0x0, 0x8}, 0x7602, 0x7, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xff}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90224fc602f1a04000a740100073582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000280), &(0x7f00000002c0)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000"], 0x48) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r1, @ANYRESDEC=r2, @ANYRES64=r5, @ANYRES16=r0, @ANYRES16=r6, @ANYRES16=r3, @ANYRES8=r3, @ANYBLOB="ced4fdc7136bd2be4f5f9558c49302eb049d79803ad53248e302ec6bd4d29ea6d60fb4547915d17beb61d65d85e03a3739c359dd4c179ba6304e903777ab31e418c69f8600ca74e11a5992fbcf7baa2ff1f02e9d2a18ff532749603ca116bb64415b69b3e0b51f5fad62d72c51bf7901a40a263eb71a8f2e19e4dce6d084cbfb24a4d1d73ffd7f142e865dfbfeca616f316b69d1117bca9c9c8d84bd1a7957ba992c0bbf759c3fc073e6e1f3891ac2ff37e58747a313913f15e091f37be052b49640cabd12d946bec1a8147ee5d71043be6f88f023fecce45d0bc2977e1d71baf73685729bb797d4e66ab498954c8c4697af5b2cade88fbc0d", @ANYRES32=r0], 0x48) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB="000000000000e9ff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file1\x00', 0x1e) 4.97662115s ago: executing program 3 (id=382): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)={0x1, 0x7ab0715dca68fed7, 0x0, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x20000600}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000540)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r4, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000004c0)={r8, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r8, 0x3, 0x6, @random="cea0300a1672"}, 0x10) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) dup2(r5, r6) r9 = creat(&(0x7f0000000380)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7f}, [@call={0x85, 0x0, 0x0, 0xc5}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe334}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0xa8, &(0x7f00000002c0)=""/168, 0x40f00, 0x21, '\x00', r4, @fallback=0x7, r5, 0x8, &(0x7f0000000200)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x0, 0x6, 0x9}, 0x10, 0xffffffffffffffff, r0, 0x4, &(0x7f00000003c0)=[r1, r0, r9, r1], &(0x7f0000000400)=[{0x5, 0x1, 0x9, 0x8}, {0x4, 0x2, 0x4, 0x4}, {0x5, 0x1, 0x4, 0x6}, {0x4, 0x1, 0x8, 0x5}], 0x10, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') cachestat(r10, &(0x7f0000000000)={0x264, 0x1}, &(0x7f0000000040), 0x0) 4.215466151s ago: executing program 2 (id=393): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xff, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) io_submit(0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x11f8, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r3}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x80010, 0xffffffffffffffff, 0x10000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "4cb4fc4ba7906e8f58c2052fade1bc2c62cdeb7521cf85ee"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r10 = fcntl$dupfd(r8, 0x0, r8) sendmsg$IPVS_CMD_GET_CONFIG(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000340)=ANY=[], 0x2b08}}, 0x4004006) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) recvmmsg(r8, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2002}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/94, 0x5e}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) 4.146973787s ago: executing program 3 (id=394): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r0, 0x4, 0x7c00) dup3(r1, r0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) 4.121408479s ago: executing program 35 (id=394): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r0, 0x4, 0x7c00) dup3(r1, r0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) 2.918458695s ago: executing program 6 (id=411): socket(0x23, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000002540)=ANY=[@ANYBLOB="18000000000000000000000000200000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='irq_handler_exit\x00', r0, 0x0, 0xdd2}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r2, 0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000740)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@noquota}, {@noauto_da_alloc}, {@nomblk_io_submit}], [{@fowner_eq}, {@subj_user}, {@seclabel}, {@audit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000050a03000000000000000000020000000900010073797a30000000001400000002020300000000000000000002000003140000001100010000000000000000000000000a"], 0x5c}}, 0x0) preadv2(r6, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000700)='kfree\x00', r9, 0x0, 0x7}, 0x18) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r10, 0x5608) openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) 2.054523805s ago: executing program 6 (id=421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 2.000469889s ago: executing program 6 (id=424): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) syz_clone3(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x4d00fd1ba9ec72bd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r3}, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r5 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r6, 0x6, 0x5, 0x0, &(0x7f0000000040)=0x56) write$cgroup_type(r5, &(0x7f00000009c0), 0xd4ba0ff) removexattr(&(0x7f0000000000)='./file0/file1\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00') io_setup(0x9, &(0x7f0000000240)=0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r9}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001540)=""/155}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r10}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r11}, 0x38) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) connect$can_bcm(r4, &(0x7f0000000000), 0x10) io_submit(r7, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.500362599s ago: executing program 0 (id=438): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r3, {0xb, 0xfff0}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000844}, 0x200c4094) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) pwrite64(r5, &(0x7f0000000740)='3', 0x1, 0x0) 1.411253307s ago: executing program 0 (id=440): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a11751b9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec8de950cfed21fcad7ff0bbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) 1.410223366s ago: executing program 0 (id=441): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000240)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}, {@oldalloc}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") r1 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x1c497, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200000, 0x4, @perf_bp={0x0, 0x8}, 0x7602, 0x7, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xff}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90224fc602f1a04000a740100073582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000280), &(0x7f00000002c0)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000"], 0x48) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r1, @ANYRESDEC=r2, @ANYRES64=r5, @ANYRES16=r0, @ANYRES16=r6, @ANYRES16=r3, @ANYRES8=r3, @ANYBLOB="ced4fdc7136bd2be4f5f9558c49302eb049d79803ad53248e302ec6bd4d29ea6d60fb4547915d17beb61d65d85e03a3739c359dd4c179ba6304e903777ab31e418c69f8600ca74e11a5992fbcf7baa2ff1f02e9d2a18ff532749603ca116bb64415b69b3e0b51f5fad62d72c51bf7901a40a263eb71a8f2e19e4dce6d084cbfb24a4d1d73ffd7f142e865dfbfeca616f316b69d1117bca9c9c8d84bd1a7957ba992c0bbf759c3fc073e6e1f3891ac2ff37e58747a313913f15e091f37be052b49640cabd12d946bec1a8147ee5d71043be6f88f023fecce45d0bc2977e1d71baf73685729bb797d4e66ab498954c8c4697af5b2cade88fbc0d", @ANYRES32=r0], 0x48) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB="000000000000e9ff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file1\x00', 0x1e) 1.222108331s ago: executing program 0 (id=442): r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getpeername$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8000000, '\x00', r2, r1, 0x5, 0x4, 0x4}, 0x50) fchdir(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000340)=""/95, 0x21000, 0x1000, 0x5, 0x3}, 0x20) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000480)='cgroup\x00', 0x800000, 0x0) r3 = syz_open_procfs(r0, &(0x7f0000000100)='stack\x00') ioprio_set$pid(0x1, r0, 0x4004) pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x2, 0x0, 0x1, 0x2, 0x400, 0x3}, &(0x7f0000000180)=0x20) r4 = io_uring_setup(0x37ae, &(0x7f00000003c0)={0x0, 0x800000, 0x0, 0x2, 0x22a}) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000440)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000280)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x2}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000300)={0x0}, 0x1) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22, 0x1000, @mcast2, 0xffffffff}, 0x1c) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x8000000000000}, 0x18) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00!', 0x2}], 0x1, 0x7, 0x7) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fremovexattr(r8, &(0x7f0000000140)=@known='com.apple.system.Security\x00') ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x2, 0x1ff, 0x400}}) 1.212353033s ago: executing program 6 (id=443): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000240)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}, {@oldalloc}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") r1 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90224fc602f1a04000a740100073582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000280), &(0x7f00000002c0)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000"], 0x48) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r1, @ANYRESDEC=r2, @ANYRES64=r5, @ANYRES16=r0, @ANYRES16=r6, @ANYRES16=r3, @ANYRES8=r3, @ANYBLOB="ced4fdc7136bd2be4f5f9558c49302eb049d79803ad53248e302ec6bd4d29ea6d60fb4547915d17beb61d65d85e03a3739c359dd4c179ba6304e903777ab31e418c69f8600ca74e11a5992fbcf7baa2ff1f02e9d2a18ff532749603ca116bb64415b69b3e0b51f5fad62d72c51bf7901a40a263eb71a8f2e19e4dce6d084cbfb24a4d1d73ffd7f142e865dfbfeca616f316b69d1117bca9c9c8d84bd1a7957ba992c0bbf759c3fc073e6e1f3891ac2ff37e58747a313913f15e091f37be052b49640cabd12d946bec1a8147ee5d71043be6f88f023fecce45d0bc2977e1d71baf73685729bb797d4e66ab498954c8c4697af5b2cade88fbc0d", @ANYRES32=r0], 0x48) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB="000000000000e9ff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file1\x00', 0x1e) 1.110403021s ago: executing program 2 (id=444): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_elf64(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffe}, 0x94) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r6 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, 0x0, &(0x7f00000001c0)) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x1ffd, 0x2}, 0x14) listen(r0, 0x9) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r7 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r7, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) 1.072653854s ago: executing program 2 (id=446): r0 = syz_open_dev$loop(&(0x7f0000000880), 0x7, 0x8101) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x80004, 0x10510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x5, 0x6, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000000), 0x1, 0x512, &(0x7f0000000380)="$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") r2 = syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) write$selinux_validatetrans(r3, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0xf, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x3c, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x50) socket$vsock_stream(0x28, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_adjtime(0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@map=r7, r6, 0x12, 0x0, r2, @void, @value=r1}, 0x20) shutdown(r8, 0x1) splice(r8, 0x0, r7, 0x0, 0x2, 0x0) 944.816364ms ago: executing program 6 (id=448): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0xffa9}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRESOCT=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r0], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x200}, 0x94) fadvise64(0xffffffffffffffff, 0x7f, 0x7d962850, 0x4) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x94200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu&\t\t') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) mknod(&(0x7f0000000280)='./file0\x00', 0x1, 0x2) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, 0xfffffffffffffffc) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYBLOB="3b3843b6c0e9b83939324e0000000000000000e3ffffff00000000000000", @ANYBLOB="2da5488382bb8164ea1d05e0b3ca5f31cd52b5dc74a303141cb85a34c8857e49038c1a7b203fc1161a922d5f74796f6f00fecf62424d0ef5476476202c6cf45d9dcc5fff574d3f96c45cc617b221445750cdbcab0f1bcdd5e70f77832c9210348ada366ec867e919d8964a", @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)=r0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1e000000000000000800000008000000c0080000", @ANYRES32=r9, @ANYBLOB="0700000000000000800000000000000000000100", @ANYRES32=0x0, @ANYRESDEC=r6, @ANYBLOB="0200000000000000020000000900"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r10, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r12}, 0x10) msgsnd(0x0, 0x0, 0x1008, 0x800) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000621000600"/18, @ANYRES32=r5, @ANYRES32=r8], &(0x7f0000000400)='GPL\x00', 0x480000, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x20, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r13}, 0x10) r14 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r14, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000480), 0x84080) 939.487404ms ago: executing program 0 (id=449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYRES8=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000052400048020000180080001006e61740014000280080001401000000108000340000000140900010073797a30000000000900020073797a3200"], 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x804, @broadcast, 'pimreg1\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) 781.702007ms ago: executing program 8 (id=451): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x208ca44, &(0x7f0000001040)=ANY=[@ANYRESDEC, @ANYBLOB="530e626dc5e67ac8497f92b73c1ae83a55859b40c2ffebbe1df70121ef86ee88431bc8bad3a9a2400a9df942b969a08f36ebe1787ac75aef8bd64694c22148aa935209c386ff7d2a8768f1a34b0735bc8be51505ab8ff7a316bb3e0d2abd80a0dd17073b9d65ae82b9cc11e48b3e708e42d4a76dfe38e3fe6cfdcc9fc1a38538d5242004e1ace0db55375a7e9b70886e223e653c449003a1a44ed360ec410a4e135fcc2294c37195872763bf4dca735d3d842e74d71421bc3d200142ec07686a2a360070331ab469ca70efa8535d54bfd20702b4828cad31a99a6308bfe030d36b8294583c212898b7b9e292b03b253439790ed207e0", @ANYRESHEX, @ANYRESOCT], 0x6, 0x360, &(0x7f0000000b00)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB='\n\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x2000000000a, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) chroot(&(0x7f0000000040)='./bus\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 692.718154ms ago: executing program 0 (id=452): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xffffffb3, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4008010}, 0x44006956) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011"], 0x64}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000019200)=ANY=[@ANYRESOCT=r0], 0x34}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x80) syz_open_dev$MSR(&(0x7f0000000080), 0x5, 0x0) r2 = gettid() r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r3, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r5, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) pipe2$9p(&(0x7f0000000240), 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000019240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="a1ab0000000000000000320000000800170156000000785e1df084e61c6bd485afaeeedf95dce303a6a73b9455ece4f651b38a7ba6b50fd980b64789da8add9effffffffffffff7fb8f211c4e7121a0b682fe746862f82be09ae3173da8bc81ad561aff000f3b9d3c7046ff49970a0f97d1a41760677579c84acb83d44ce18e2380b"], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 586.633313ms ago: executing program 8 (id=453): r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000740)={0x1b8, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffff8f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4cb4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x685}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xde}]}, @TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x82}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57f}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfdc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}]}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/wakeup_count', 0xa00, 0xa0) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) getsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000140)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x1c, "fee8a2bb78fcaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a010000000000000000030000000000000000200000001600", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "aebe8b1c000000ba0951f2857be47dc3f900", [0x200000004, 0x3fffffffffffff]}}) statx(r4, &(0x7f0000000a00)='./file0\x00', 0x400, 0x200, &(0x7f0000000a40)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000005c0)='xprtrdma_reply\x00', r7}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) io_pgetevents(0x0, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={[0x7]}, 0x8}) ftruncate(r6, 0xc17a) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 449.947503ms ago: executing program 2 (id=455): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000a0000000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 401.897108ms ago: executing program 7 (id=456): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) getrlimit(0x1a4510571051470f, &(0x7f0000000280)) 400.910028ms ago: executing program 8 (id=457): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r6}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x4, @loopback, 0x7fff}], 0x1c) sendto$inet6(r8, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x2, 0x2, 0x8104, 0x1, 0x4, 0x8001, 0x8, 0x401}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11, 0x0, 0x2}, 0x18) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) 400.758898ms ago: executing program 6 (id=458): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a11751b9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec8de950cfed21fcad7ff0bbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) 336.860553ms ago: executing program 36 (id=458): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a11751b9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec8de950cfed21fcad7ff0bbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) 334.033513ms ago: executing program 7 (id=460): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000007}, 0x20004004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0xa012, 0x10000, 0x4, 0x9, 0xb, 0x1020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r4) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000ffdbdf25010000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="2f00000000878a0004000000", @ANYRESOCT=r1, @ANYBLOB="cbc91c2028da75524295ae843d70190451af72ccabeacfc307a7d2fcb279fb75bcbcd2454fd3630ad77cb34a16de00d77d86780cdfdbf1aea3c71a5d40bfe79afcdb62f05caff708f9d2425bd3dece5d79e0ac23fe687b2937dcbe06b2e3bc1f7003359eb4619baf970709c0aeac56e20b3405d95aa5e1ec3f24ad24", @ANYRES64=0x0], 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) open(&(0x7f0000000180)='./file0\x00', 0x4000, 0x1) r7 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) fcntl$notify(r7, 0x402, 0x5) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 325.302214ms ago: executing program 8 (id=461): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000e, 0x204031, 0xffffffffffffffff, 0xd0c6f000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xbfb}, 0x18) mount_setattr(0xffffffffffffffff, &(0x7f00000020c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x8900, &(0x7f00000005c0)={0x0, 0x1, 0x80000}, 0x4d) mq_unlink(&(0x7f0000000000)='eth0\x00') write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r1) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) write$bt_hci(r4, &(0x7f0000000380)=ANY=[], 0x20000) 314.065844ms ago: executing program 2 (id=462): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000004840)=[{{&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1400000000000000000000000100000000000000000000004400000000000000000000000700"], 0x60}}], 0x1, 0x4008804) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) syz_open_procfs(r4, &(0x7f0000000080)='net/netfilter\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x5}}, 0x20) write$cgroup_int(r5, &(0x7f0000000380)=0x3c, 0xfcb5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000000c0)={0x0, r5, 0x18, 0x18, 0x0, 0xffffffffffff8001}) 226.452182ms ago: executing program 8 (id=463): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0xf0}, 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 179.181955ms ago: executing program 2 (id=464): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x14, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x672}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001000000", @ANYRES32, @ANYBLOB="00000020000000efffadd714bcc2000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10) timerfd_create(0x1, 0x80000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r4 = socket(0x2c, 0x3, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x40) mkdirat(0xffffffffffffff9c, 0x0, 0x10) 149.490258ms ago: executing program 7 (id=465): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0xff7f}}, 0x20}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x401}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}]}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}]}, 0x68}}, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0xa4, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3ff}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x23}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000050}, 0x4008080) 46.358906ms ago: executing program 8 (id=466): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x3, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000500)='./file0\x00', &(0x7f0000000240), &(0x7f00000001c0)=@v3, 0x18, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x1d, 0x3, 0xfffffffd) write(r4, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r4, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/248, 0xf8}], 0x1}, 0x2}], 0x1, 0x10122, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) r6 = eventfd2(0x8000, 0x1) r7 = eventfd2(0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001580)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) pipe2$watch_queue(&(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r10 = eventfd(0x101) io_submit(0x0, 0x4, &(0x7f0000001780)=[&(0x7f0000001440)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000001380)="8f33e02ef86232893f5809a39546f76eb64e24dad71229a05e811f4a61f8fa2cf08452e16f7015c38209dd3457c856ce35dce562a592d8c519e9299bbb95d8ce6aee19a098cf24e7f9878754824d7054e8b160b80a6096b644407c9cfc1a3a3289dd22f85ba9b18805b009d61fbd784d0e546cdb48c90c17d2dc19b987514891f7bb831ed3ec3861", 0x88, 0x3, 0x0, 0x3, r6}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x3, 0x6, r4, &(0x7f0000001480)="75628e5899c850", 0x7, 0x4, 0x0, 0x3, r7}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x1, 0x42a, r2, &(0x7f0000001500)="b4a2d8d1b2368d7fd6d267db6b49be695c28fffc377e117e567e33406b600bb8748eb0ef46c9fd2c992fe7e91e2facf4a8df3257f2310d352815f9502d53320f7663988bb28c8877b80a6fe381ba0aafda22930f706dd12be8989f3b4f68e0d78e", 0x61, 0x0, 0x0, 0x1, r8}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x5, 0x1, r9, &(0x7f0000001640)="256806435e1d22a6b458f4653c45dd115bffe0e55f10036e32da271d8a84f0d40cce08c8ebe8c0730a60b234fdde7e364d526a9564683dc5c69d58bb126bfbf6619be92dbde954666c304da22fdcf9a42f443c6be9cfe271dcdeaef2fd72ee681c525de63a2d7ae69ade31f3f109d42714770164b92ba1a40d6c240b3fee2b8aff4de217316e653721296f68b1545159d0e97907e419e6b08d649aa15869f102cb1b02aa0613176151dd4140ac1aa91983bfa92d5d74c6d12c86228232f0eda0b7c5d5", 0xc3, 0xffffffffffff41c9, 0x0, 0x0, r10}]) r11 = dup(r5) bind$unix(r11, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='check=strict,overriderockperm,cruft\x00iocharset=cp932,check=relaxed,nojoliet,check=relaxed,nojoliet,\x00'], 0x3d, 0x549, &(0x7f0000000c40)="$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") setsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000040)="f5", 0x1) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e04, @local}, 0x10) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, 0x0, 0x0) r12 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read(r12, &(0x7f0000000340)=""/4090, 0xffa) 39.206687ms ago: executing program 7 (id=467): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='signal_deliver\x00', r0}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 24.778378ms ago: executing program 7 (id=468): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001140)=ANY=[@ANYBLOB="14a1ff00", @ANYRES16=r1, @ANYBLOB="3183000000000000000019"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) 0s ago: executing program 7 (id=469): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x0, 0x3, 0x4a}, 0x10) close(r2) kernel console output (not intermixed with test programs): tmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.103122][ T29] audit: type=1400 audit(1755410448.219:66): avc: denied { create } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.108102][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.123562][ T29] audit: type=1400 audit(1755410448.219:67): avc: denied { write } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.152495][ T29] audit: type=1400 audit(1755410448.219:68): avc: denied { read } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.172752][ T29] audit: type=1400 audit(1755410448.229:69): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.197505][ T29] audit: type=1400 audit(1755410448.229:70): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.220673][ T29] audit: type=1400 audit(1755410448.279:71): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.288457][ T3292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.446397][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 29.481547][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 29.511222][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 29.520007][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 29.532814][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 29.587292][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.594438][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.602038][ T3310] bridge_slave_0: entered allmulticast mode [ 29.608314][ T3310] bridge_slave_0: entered promiscuous mode [ 29.624979][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.632152][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.639305][ T3310] bridge_slave_1: entered allmulticast mode [ 29.645758][ T3310] bridge_slave_1: entered promiscuous mode [ 29.671927][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.678971][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.686651][ T3302] bridge_slave_0: entered allmulticast mode [ 29.693124][ T3302] bridge_slave_0: entered promiscuous mode [ 29.699517][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.706563][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.713658][ T3302] bridge_slave_1: entered allmulticast mode [ 29.719850][ T3302] bridge_slave_1: entered promiscuous mode [ 29.753551][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.767573][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.774639][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.782602][ T3301] bridge_slave_0: entered allmulticast mode [ 29.788927][ T3301] bridge_slave_0: entered promiscuous mode [ 29.795491][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.802566][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.809604][ T3305] bridge_slave_0: entered allmulticast mode [ 29.815914][ T3305] bridge_slave_0: entered promiscuous mode [ 29.826609][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.835734][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.842866][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.850136][ T3308] bridge_slave_0: entered allmulticast mode [ 29.856515][ T3308] bridge_slave_0: entered promiscuous mode [ 29.864018][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.873144][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.880202][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.887392][ T3308] bridge_slave_1: entered allmulticast mode [ 29.893866][ T3308] bridge_slave_1: entered promiscuous mode [ 29.900223][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.907330][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.914604][ T3301] bridge_slave_1: entered allmulticast mode [ 29.920946][ T3301] bridge_slave_1: entered promiscuous mode [ 29.927159][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.934336][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.941526][ T3305] bridge_slave_1: entered allmulticast mode [ 29.947868][ T3305] bridge_slave_1: entered promiscuous mode [ 29.955033][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.992778][ T3310] team0: Port device team_slave_0 added [ 30.007903][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.022616][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.032449][ T3302] team0: Port device team_slave_0 added [ 30.038666][ T3310] team0: Port device team_slave_1 added [ 30.049803][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.059835][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.069901][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.079704][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.089309][ T3302] team0: Port device team_slave_1 added [ 30.124048][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.131176][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.157070][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.168401][ T3305] team0: Port device team_slave_0 added [ 30.174813][ T3305] team0: Port device team_slave_1 added [ 30.188889][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.195923][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.221929][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.233243][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.240235][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.266170][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.283550][ T3301] team0: Port device team_slave_0 added [ 30.294510][ T3308] team0: Port device team_slave_0 added [ 30.300539][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.307466][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.333387][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.344208][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.351192][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.377087][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.397404][ T3301] team0: Port device team_slave_1 added [ 30.408730][ T3308] team0: Port device team_slave_1 added [ 30.419206][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.426153][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.452127][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.494478][ T3310] hsr_slave_0: entered promiscuous mode [ 30.500286][ T3310] hsr_slave_1: entered promiscuous mode [ 30.506346][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.513298][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.539239][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.550361][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.557292][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.583282][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.594889][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.601899][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.627833][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.640359][ T3302] hsr_slave_0: entered promiscuous mode [ 30.646222][ T3302] hsr_slave_1: entered promiscuous mode [ 30.652103][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 30.657804][ T3302] Cannot create hsr debugfs directory [ 30.664061][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.671066][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.697088][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.728794][ T3305] hsr_slave_0: entered promiscuous mode [ 30.734799][ T3305] hsr_slave_1: entered promiscuous mode [ 30.740708][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 30.746432][ T3305] Cannot create hsr debugfs directory [ 30.793040][ T3308] hsr_slave_0: entered promiscuous mode [ 30.798942][ T3308] hsr_slave_1: entered promiscuous mode [ 30.804855][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 30.810623][ T3308] Cannot create hsr debugfs directory [ 30.821543][ T3301] hsr_slave_0: entered promiscuous mode [ 30.827496][ T3301] hsr_slave_1: entered promiscuous mode [ 30.833272][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 30.838971][ T3301] Cannot create hsr debugfs directory [ 31.001549][ T3310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.012131][ T3310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.024785][ T3310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.035665][ T3310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.047883][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.059512][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.072818][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.084619][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.097445][ T3302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.107899][ T3302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.122102][ T3302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.130775][ T3302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.163696][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.181110][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.201505][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.217447][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.229452][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.240697][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.252397][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.270218][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.279015][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.287501][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.296948][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.307286][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.316290][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.323364][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.336889][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.343965][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.363902][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.374318][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.387231][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.394357][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.403061][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.410140][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.469541][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.498640][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.523505][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.535572][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.543767][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.561551][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.571021][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.578106][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.586725][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.593772][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.602600][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.609616][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.618047][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.625217][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.647921][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.667279][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.685482][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.702539][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.709583][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.731011][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.738076][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.802240][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.849626][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.877768][ T3310] veth0_vlan: entered promiscuous mode [ 31.895921][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.912245][ T3310] veth1_vlan: entered promiscuous mode [ 31.949585][ T3310] veth0_macvtap: entered promiscuous mode [ 31.979082][ T3310] veth1_macvtap: entered promiscuous mode [ 31.992081][ T3301] veth0_vlan: entered promiscuous mode [ 32.004463][ T3301] veth1_vlan: entered promiscuous mode [ 32.018259][ T3302] veth0_vlan: entered promiscuous mode [ 32.026595][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.037923][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.053766][ T3305] veth0_vlan: entered promiscuous mode [ 32.063804][ T3302] veth1_vlan: entered promiscuous mode [ 32.072666][ T3438] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.081675][ T3438] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.091303][ T3308] veth0_vlan: entered promiscuous mode [ 32.098153][ T3305] veth1_vlan: entered promiscuous mode [ 32.104154][ T3438] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.113595][ T3438] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.124735][ T3308] veth1_vlan: entered promiscuous mode [ 32.147198][ T3302] veth0_macvtap: entered promiscuous mode [ 32.155112][ T3302] veth1_macvtap: entered promiscuous mode [ 32.167592][ T3301] veth0_macvtap: entered promiscuous mode [ 32.176310][ T3305] veth0_macvtap: entered promiscuous mode [ 32.188905][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 32.188918][ T29] audit: type=1400 audit(1755410453.329:81): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.ZOZSXL/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.194213][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.200354][ T29] audit: type=1400 audit(1755410453.329:82): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.221310][ T3301] veth1_macvtap: entered promiscuous mode [ 32.226415][ T29] audit: type=1400 audit(1755410453.329:83): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.ZOZSXL/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.252163][ T3305] veth1_macvtap: entered promiscuous mode [ 32.253965][ T29] audit: type=1400 audit(1755410453.339:84): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.294651][ T3308] veth0_macvtap: entered promiscuous mode [ 32.306454][ T29] audit: type=1400 audit(1755410453.339:85): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.ZOZSXL/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.321617][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.338710][ T29] audit: type=1400 audit(1755410453.339:86): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.ZOZSXL/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.351905][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.373202][ T29] audit: type=1400 audit(1755410453.339:87): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.389395][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.408444][ T29] audit: type=1400 audit(1755410453.429:88): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.414496][ T3308] veth1_macvtap: entered promiscuous mode [ 32.431301][ T29] audit: type=1400 audit(1755410453.429:89): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="gadgetfs" ino=4658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 32.442967][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.466394][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.480777][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.487983][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.499574][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.512387][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.520252][ T3310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.544517][ T29] audit: type=1400 audit(1755410453.679:90): avc: denied { read write } for pid=3310 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.572118][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.601604][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.648509][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.669748][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.720104][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.731533][ T3485] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'. [ 32.740359][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.740516][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.765787][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.782660][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.784440][ T3492] loop4: detected capacity change from 0 to 1024 [ 32.814238][ T3495] SELinux: failed to load policy [ 32.819915][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.829163][ T3492] ======================================================= [ 32.829163][ T3492] WARNING: The mand mount option has been deprecated and [ 32.829163][ T3492] and is ignored by this kernel. Remove the mand [ 32.829163][ T3492] option from the mount to silence this warning. [ 32.829163][ T3492] ======================================================= [ 32.869670][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.878839][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.889379][ T3498] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3498 comm=syz.2.3 [ 32.905458][ T3492] EXT4-fs: inline encryption not supported [ 32.911350][ T3492] EXT4-fs: Ignoring removed i_version option [ 32.926924][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.960496][ T3492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.962202][ T3505] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10'. [ 32.973244][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.002918][ T3507] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 33.020401][ T3505] loop2: detected capacity change from 0 to 8192 [ 33.033169][ T3507] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 33.054529][ T3492] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 33.073812][ T3513] loop2: detected capacity change from 0 to 512 [ 33.101567][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.108788][ T3513] journal_path: Non-blockdev passed as './file2' [ 33.116945][ T3513] EXT4-fs: error: could not find journal device path [ 33.238481][ T3535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12'. [ 33.352748][ T3541] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.715849][ T3545] loop3: detected capacity change from 0 to 164 [ 33.945987][ T3551] netlink: 7 bytes leftover after parsing attributes in process `syz.1.20'. [ 33.956007][ T3551] netlink: 7 bytes leftover after parsing attributes in process `syz.1.20'. [ 33.968957][ T3551] loop1: detected capacity change from 0 to 1024 [ 33.981920][ T3551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 33.994312][ T3551] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.070905][ T3551] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.20: lblock 3 mapped to illegal pblock 3 (length 3) [ 34.085833][ T3551] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 34.098201][ T3551] EXT4-fs (loop1): This should not happen!! Data will be lost [ 34.098201][ T3551] [ 34.116095][ T12] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 34.133876][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 34.146211][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 34.146211][ T12] [ 34.157226][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 34.303520][ T3576] loop0: detected capacity change from 0 to 512 [ 34.311614][ T3576] journal_path: Non-blockdev passed as './file2' [ 34.317970][ T3576] EXT4-fs: error: could not find journal device path [ 34.388649][ T3581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29'. [ 34.513756][ T3585] capability: warning: `syz.2.31' uses deprecated v2 capabilities in a way that may be insecure [ 34.551821][ T3590] loop2: detected capacity change from 0 to 512 [ 34.558704][ T3590] EXT4-fs: Ignoring removed oldalloc option [ 34.581260][ T3590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.594117][ T3590] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.614621][ C1] hrtimer: interrupt took 30579 ns [ 34.627323][ T3595] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 35.133850][ T3590] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.32'. [ 35.229039][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.255673][ T3608] netlink: 'syz.0.35': attribute type 1 has an invalid length. [ 35.322558][ T3612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.35'. [ 35.367728][ T3612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65533 sclass=netlink_route_socket pid=3612 comm=syz.0.35 [ 35.560270][ T3616] loop2: detected capacity change from 0 to 8192 [ 35.706272][ T3639] netlink: 256 bytes leftover after parsing attributes in process `syz.2.44'. [ 35.715232][ T3639] netlink: 80 bytes leftover after parsing attributes in process `syz.2.44'. [ 35.799271][ T3651] FAULT_INJECTION: forcing a failure. [ 35.799271][ T3651] name failslab, interval 1, probability 0, space 0, times 0 [ 35.812016][ T3651] CPU: 1 UID: 0 PID: 3651 Comm: syz.2.47 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 35.812115][ T3651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 35.812127][ T3651] Call Trace: [ 35.812133][ T3651] [ 35.812140][ T3651] __dump_stack+0x1d/0x30 [ 35.812167][ T3651] dump_stack_lvl+0xe8/0x140 [ 35.812182][ T3651] dump_stack+0x15/0x1b [ 35.812196][ T3651] should_fail_ex+0x265/0x280 [ 35.812250][ T3651] ? call_usermodehelper_setup+0x72/0x190 [ 35.812279][ T3651] should_failslab+0x8c/0xb0 [ 35.812301][ T3651] ? __pfx_free_modprobe_argv+0x10/0x10 [ 35.812324][ T3651] __kmalloc_cache_noprof+0x4c/0x320 [ 35.812447][ T3651] ? __kmalloc_node_track_caller_noprof+0x1e5/0x410 [ 35.812477][ T3651] ? __pfx_free_modprobe_argv+0x10/0x10 [ 35.812499][ T3651] call_usermodehelper_setup+0x72/0x190 [ 35.812606][ T3651] __request_module+0x264/0x3e0 [ 35.812628][ T3651] inet_create+0x137/0x780 [ 35.812652][ T3651] __sock_create+0x2e9/0x5b0 [ 35.812677][ T3651] __sys_socket+0xb0/0x180 [ 35.812709][ T3651] __x64_sys_socket+0x3f/0x50 [ 35.812731][ T3651] x64_sys_call+0x1147/0x2ff0 [ 35.812752][ T3651] do_syscall_64+0xd2/0x200 [ 35.812778][ T3651] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 35.812855][ T3651] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 35.812877][ T3651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.812899][ T3651] RIP: 0033:0x7ff58d51ebe9 [ 35.812919][ T3651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.812941][ T3651] RSP: 002b:00007ff58bf7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 35.812964][ T3651] RAX: ffffffffffffffda RBX: 00007ff58d745fa0 RCX: 00007ff58d51ebe9 [ 35.812978][ T3651] RDX: 0000000000000106 RSI: 0000000000000005 RDI: 0000000000000002 [ 35.812991][ T3651] RBP: 00007ff58bf7f090 R08: 0000000000000000 R09: 0000000000000000 [ 35.813003][ T3651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.813016][ T3651] R13: 00007ff58d746038 R14: 00007ff58d745fa0 R15: 00007ffc461ded18 [ 35.813102][ T3651] [ 36.091268][ T3659] netlink: 'syz.2.49': attribute type 4 has an invalid length. [ 36.132831][ T3657] loop3: detected capacity change from 0 to 1024 [ 36.185372][ T3657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.217773][ T3671] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 36.264489][ T3657] netlink: 'syz.3.48': attribute type 10 has an invalid length. [ 36.265257][ T3675] 9pnet: p9_errstr2errno: server reported unknown error [ 36.282931][ T3657] team0: Port device dummy0 added [ 36.289563][ T3657] netlink: 'syz.3.48': attribute type 10 has an invalid length. [ 36.309342][ T3657] team0: Port device dummy0 removed [ 36.316716][ T3657] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 36.319662][ T3675] nfs: Unknown parameter '' [ 36.355102][ T3675] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.365117][ T3657] syz.3.48 (3657) used greatest stack depth: 10568 bytes left [ 36.381469][ T3675] bridge_slave_0 (unregistering): left allmulticast mode [ 36.388530][ T3675] bridge_slave_0 (unregistering): left promiscuous mode [ 36.395561][ T3675] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.453633][ T3690] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 36.463559][ T3692] netlink: 'syz.4.61': attribute type 4 has an invalid length. [ 36.484957][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.488671][ T3695] loop2: detected capacity change from 0 to 512 [ 36.514029][ T3700] FAULT_INJECTION: forcing a failure. [ 36.514029][ T3700] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 36.527127][ T3700] CPU: 0 UID: 0 PID: 3700 Comm: syz.3.64 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 36.527155][ T3700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 36.527167][ T3700] Call Trace: [ 36.527241][ T3700] [ 36.527248][ T3700] __dump_stack+0x1d/0x30 [ 36.527270][ T3700] dump_stack_lvl+0xe8/0x140 [ 36.527289][ T3700] dump_stack+0x15/0x1b [ 36.527386][ T3700] should_fail_ex+0x265/0x280 [ 36.527408][ T3700] should_fail+0xb/0x20 [ 36.527425][ T3700] should_fail_usercopy+0x1a/0x20 [ 36.527446][ T3700] _copy_from_user+0x1c/0xb0 [ 36.527470][ T3700] io_submit_one+0x52/0x11d0 [ 36.527559][ T3700] __se_sys_io_submit+0xfb/0x280 [ 36.527580][ T3700] __x64_sys_io_submit+0x43/0x50 [ 36.527601][ T3700] x64_sys_call+0x2d5d/0x2ff0 [ 36.527621][ T3700] do_syscall_64+0xd2/0x200 [ 36.527692][ T3700] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 36.527715][ T3700] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 36.527739][ T3700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.527768][ T3700] RIP: 0033:0x7f3345dfebe9 [ 36.527855][ T3700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.527911][ T3700] RSP: 002b:00007f3344867038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 36.527931][ T3700] RAX: ffffffffffffffda RBX: 00007f3346025fa0 RCX: 00007f3345dfebe9 [ 36.527942][ T3700] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007f3344823000 [ 36.527952][ T3700] RBP: 00007f3344867090 R08: 0000000000000000 R09: 0000000000000000 [ 36.527962][ T3700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.528045][ T3700] R13: 00007f3346026038 R14: 00007f3346025fa0 R15: 00007ffea01e5ed8 [ 36.528060][ T3700] [ 36.711615][ T3695] EXT4-fs: Ignoring removed oldalloc option [ 36.730389][ T3695] EXT4-fs (loop2): 1 truncate cleaned up [ 36.736587][ T3695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.779846][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.801100][ T3710] netlink: 'syz.2.66': attribute type 31 has an invalid length. [ 36.814665][ T3710] loop2: detected capacity change from 0 to 1024 [ 36.825205][ T3710] EXT4-fs: Ignoring removed bh option [ 36.830845][ T3710] EXT4-fs: Ignoring removed nobh option [ 36.946082][ T3718] loop4: detected capacity change from 0 to 512 [ 37.002111][ T3710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.032371][ T3718] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 37.052011][ T3712] veth0_to_bond: entered allmulticast mode [ 37.074309][ T3716] loop3: detected capacity change from 0 to 256 [ 37.122304][ T3716] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.145324][ T3718] EXT4-fs (loop4): mount failed [ 37.208329][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.229907][ T3718] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 37.243276][ T29] kauditd_printk_skb: 741 callbacks suppressed [ 37.243288][ T29] audit: type=1400 audit(1755410458.389:829): avc: denied { mount } for pid=3714 comm="syz.3.68" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 37.324865][ T3716] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 37.333749][ T3716] FAT-fs (loop3): Filesystem has been set read-only [ 37.418958][ T3731] loop2: detected capacity change from 0 to 2048 [ 37.425976][ T29] audit: type=1400 audit(1755410458.459:830): avc: denied { create } for pid=3714 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 37.445154][ T29] audit: type=1326 audit(1755410458.529:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58d51ebe9 code=0x7ffc0000 [ 37.468399][ T29] audit: type=1326 audit(1755410458.529:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff58d51ebe9 code=0x7ffc0000 [ 37.491532][ T29] audit: type=1326 audit(1755410458.529:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff58d51ec23 code=0x7ffc0000 [ 37.514698][ T29] audit: type=1326 audit(1755410458.549:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff58d51d69f code=0x7ffc0000 [ 37.538047][ T29] audit: type=1326 audit(1755410458.559:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff58d51ec77 code=0x7ffc0000 [ 37.561141][ T29] audit: type=1326 audit(1755410458.559:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff58d51d550 code=0x7ffc0000 [ 37.584469][ T29] audit: type=1326 audit(1755410458.559:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff58d51e7eb code=0x7ffc0000 [ 37.614564][ T29] audit: type=1326 audit(1755410458.749:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff58d51d84a code=0x7ffc0000 [ 37.641194][ T3729] vlan2: entered allmulticast mode [ 37.646335][ T3729] bond_slave_1: entered allmulticast mode [ 37.661225][ T3731] Alternate GPT is invalid, using primary GPT. [ 37.667654][ T3731] loop2: p1 p2 p3 [ 37.714078][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 37.724135][ T3736] udevd[3736]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 37.725601][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 37.793474][ T3716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.800950][ T3716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.808463][ T3753] __nla_validate_parse: 6 callbacks suppressed [ 37.808476][ T3753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.73'. [ 37.824796][ T3716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.832217][ T3716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.852332][ T3756] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 38.013751][ T3771] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3771 comm=syz.1.84 [ 38.097873][ T3782] loop3: detected capacity change from 0 to 512 [ 38.114688][ T3785] loop1: detected capacity change from 0 to 512 [ 38.123907][ T3782] journal_path: Non-blockdev passed as './file2' [ 38.130362][ T3782] EXT4-fs: error: could not find journal device path [ 38.143679][ T3785] EXT4-fs: Ignoring removed oldalloc option [ 38.156401][ T3790] loop2: detected capacity change from 0 to 164 [ 38.197032][ T3785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.211183][ T3785] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.237785][ T3785] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.89'. [ 38.339001][ T3803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.88'. [ 38.359776][ T3310] EXT4-fs error (device loop1): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 38.370826][ T3310] EXT4-fs error (device loop1): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 38.381926][ T3310] EXT4-fs error (device loop1): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 38.392908][ T3310] EXT4-fs error (device loop1): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 38.403713][ T3310] EXT4-fs error (device loop1): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 38.415575][ T3310] EXT4-fs error (device loop1): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 38.426585][ T3310] EXT4-fs error (device loop1): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 38.438269][ T3310] EXT4-fs error (device loop1): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 38.449418][ T3310] EXT4-fs error (device loop1): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 38.461976][ T3310] EXT4-fs error (device loop1): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 38.472220][ T3816] syzkaller0: entered promiscuous mode [ 38.477866][ T3816] syzkaller0: entered allmulticast mode [ 38.578370][ T3820] netfs: Couldn't get user pages (rc=-14) [ 38.638414][ T3826] FAULT_INJECTION: forcing a failure. [ 38.638414][ T3826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.651623][ T3826] CPU: 1 UID: 0 PID: 3826 Comm: syz.4.99 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 38.651715][ T3826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 38.651766][ T3826] Call Trace: [ 38.651769][ T3826] [ 38.651773][ T3826] __dump_stack+0x1d/0x30 [ 38.651786][ T3826] dump_stack_lvl+0xe8/0x140 [ 38.651797][ T3826] dump_stack+0x15/0x1b [ 38.651823][ T3826] should_fail_ex+0x265/0x280 [ 38.651841][ T3826] should_fail+0xb/0x20 [ 38.651880][ T3826] should_fail_usercopy+0x1a/0x20 [ 38.651911][ T3826] _copy_from_user+0x1c/0xb0 [ 38.651926][ T3826] __sys_bpf+0x178/0x7b0 [ 38.651953][ T3826] __x64_sys_bpf+0x41/0x50 [ 38.651965][ T3826] x64_sys_call+0x2aea/0x2ff0 [ 38.651977][ T3826] do_syscall_64+0xd2/0x200 [ 38.651991][ T3826] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 38.652052][ T3826] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 38.652086][ T3826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.652097][ T3826] RIP: 0033:0x7f42871bebe9 [ 38.652106][ T3826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.652115][ T3826] RSP: 002b:00007f4285c1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 38.652126][ T3826] RAX: ffffffffffffffda RBX: 00007f42873e5fa0 RCX: 00007f42871bebe9 [ 38.652133][ T3826] RDX: 0000000000000050 RSI: 00002000000006c0 RDI: 0000000000000000 [ 38.652199][ T3826] RBP: 00007f4285c1f090 R08: 0000000000000000 R09: 0000000000000000 [ 38.652206][ T3826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.652212][ T3826] R13: 00007f42873e6038 R14: 00007f42873e5fa0 R15: 00007ffed602e608 [ 38.652222][ T3826] [ 38.671802][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.708399][ T3830] loop4: detected capacity change from 0 to 2048 [ 38.713376][ T3828] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3828 comm=syz.0.96 [ 38.871926][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.890402][ T3830] loop4: p1 < > p4 [ 38.895310][ T3830] loop4: p4 size 8388608 extends beyond EOD, truncated [ 38.927277][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.976703][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 38.990990][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 39.002480][ T3841] loop4: detected capacity change from 0 to 164 [ 39.018306][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.049764][ T3841] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 39.063385][ T3850] netlink: 'syz.3.108': attribute type 4 has an invalid length. [ 39.098751][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.136447][ T3856] syz.3.110 uses obsolete (PF_INET,SOCK_PACKET) [ 39.151045][ T3841] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 39.160573][ T3861] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3861 comm=syz.0.113 [ 39.177503][ T3841] Symlink component flag not implemented [ 39.183244][ T3841] Symlink component flag not implemented [ 39.203004][ T3841] Symlink component flag not implemented (7) [ 39.209005][ T3841] Symlink component flag not implemented (116) [ 39.218209][ T144] bridge_slave_1: left allmulticast mode [ 39.223972][ T144] bridge_slave_1: left promiscuous mode [ 39.229670][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.267271][ T144] bridge_slave_0: left allmulticast mode [ 39.273053][ T144] bridge_slave_0: left promiscuous mode [ 39.278683][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.337324][ T3870] loop4: detected capacity change from 0 to 512 [ 39.365573][ T3872] netlink: 'syz.3.116': attribute type 10 has an invalid length. [ 39.392747][ T3875] FAULT_INJECTION: forcing a failure. [ 39.392747][ T3875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.405849][ T3875] CPU: 1 UID: 0 PID: 3875 Comm: syz.0.117 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 39.405873][ T3875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 39.405883][ T3875] Call Trace: [ 39.405889][ T3875] [ 39.405896][ T3875] __dump_stack+0x1d/0x30 [ 39.405918][ T3875] dump_stack_lvl+0xe8/0x140 [ 39.405974][ T3875] dump_stack+0x15/0x1b [ 39.405987][ T3875] should_fail_ex+0x265/0x280 [ 39.406007][ T3875] should_fail+0xb/0x20 [ 39.406024][ T3875] should_fail_usercopy+0x1a/0x20 [ 39.406114][ T3875] _copy_from_user+0x1c/0xb0 [ 39.406141][ T3875] __sys_bind+0x106/0x2a0 [ 39.406175][ T3875] __x64_sys_bind+0x3f/0x50 [ 39.406251][ T3875] x64_sys_call+0x2b6e/0x2ff0 [ 39.406280][ T3875] do_syscall_64+0xd2/0x200 [ 39.406304][ T3875] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 39.406374][ T3875] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 39.406393][ T3875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.406410][ T3875] RIP: 0033:0x7efc6628ebe9 [ 39.406438][ T3875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.406455][ T3875] RSP: 002b:00007efc64cef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 39.406474][ T3875] RAX: ffffffffffffffda RBX: 00007efc664b5fa0 RCX: 00007efc6628ebe9 [ 39.406486][ T3875] RDX: 0000000000000010 RSI: 00002000000002c0 RDI: 0000000000000006 [ 39.406498][ T3875] RBP: 00007efc64cef090 R08: 0000000000000000 R09: 0000000000000000 [ 39.406510][ T3875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.406522][ T3875] R13: 00007efc664b6038 R14: 00007efc664b5fa0 R15: 00007ffc86f99678 [ 39.406541][ T3875] [ 39.582117][ T3870] journal_path: Non-blockdev passed as './file2' [ 39.588451][ T3870] EXT4-fs: error: could not find journal device path [ 39.590552][ T3858] loop2: detected capacity change from 0 to 8192 [ 39.614986][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.625105][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.635536][ T144] bond0 (unregistering): Released all slaves [ 39.644789][ T3872] ipvlan0: entered allmulticast mode [ 39.650122][ T3872] veth0_vlan: entered allmulticast mode [ 39.658031][ T3872] team0: Device ipvlan0 failed to register rx_handler [ 39.667034][ T3858] vfat: Unknown parameter 'keyring' [ 39.699470][ T3884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.115'. [ 39.712438][ T144] hsr_slave_0: left promiscuous mode [ 39.721734][ T144] hsr_slave_1: left promiscuous mode [ 39.729692][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.737168][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.745872][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.753370][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.765677][ T144] veth1_macvtap: left promiscuous mode [ 39.777822][ T144] veth0_macvtap: left promiscuous mode [ 39.785720][ T144] veth1_vlan: left promiscuous mode [ 39.790998][ T144] veth0_vlan: left promiscuous mode [ 39.834341][ T3901] netlink: 'syz.3.119': attribute type 4 has an invalid length. [ 39.874938][ T144] team0 (unregistering): Port device team_slave_1 removed [ 39.884199][ T144] team0 (unregistering): Port device team_slave_0 removed [ 40.012777][ T3846] chnl_net:caif_netlink_parms(): no params data found [ 40.033558][ T3916] loop2: detected capacity change from 0 to 512 [ 40.040805][ T3916] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.053902][ T3916] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 40.065972][ T3916] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.079056][ T3916] EXT4-fs (loop2): 1 truncate cleaned up [ 40.085781][ T3916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.099079][ T3846] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.106163][ T3846] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.108585][ T3916] FAULT_INJECTION: forcing a failure. [ 40.108585][ T3916] name failslab, interval 1, probability 0, space 0, times 0 [ 40.113430][ T3846] bridge_slave_0: entered allmulticast mode [ 40.125856][ T3916] CPU: 0 UID: 0 PID: 3916 Comm: syz.2.123 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 40.125961][ T3916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 40.125972][ T3916] Call Trace: [ 40.125978][ T3916] [ 40.125985][ T3916] __dump_stack+0x1d/0x30 [ 40.126006][ T3916] dump_stack_lvl+0xe8/0x140 [ 40.126024][ T3916] dump_stack+0x15/0x1b [ 40.126040][ T3916] should_fail_ex+0x265/0x280 [ 40.126097][ T3916] should_failslab+0x8c/0xb0 [ 40.126120][ T3916] kmem_cache_alloc_noprof+0x50/0x310 [ 40.126145][ T3916] ? fcntl_setlease+0x82/0x300 [ 40.126168][ T3916] fcntl_setlease+0x82/0x300 [ 40.126186][ T3916] ? __rcu_read_unlock+0x4f/0x70 [ 40.126267][ T3916] do_fcntl+0x524/0xdf0 [ 40.126293][ T3916] ? selinux_file_fcntl+0x1b4/0x1e0 [ 40.126316][ T3916] __se_sys_fcntl+0xb1/0x120 [ 40.126383][ T3916] __x64_sys_fcntl+0x43/0x50 [ 40.126410][ T3916] x64_sys_call+0x29a0/0x2ff0 [ 40.126491][ T3916] do_syscall_64+0xd2/0x200 [ 40.126515][ T3916] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 40.126556][ T3916] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 40.126579][ T3916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.126599][ T3916] RIP: 0033:0x7ff58d51ebe9 [ 40.126614][ T3916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.126687][ T3916] RSP: 002b:00007ff58bf5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 40.126705][ T3916] RAX: ffffffffffffffda RBX: 00007ff58d746090 RCX: 00007ff58d51ebe9 [ 40.126718][ T3916] RDX: 0000000000000000 RSI: 0000000000000400 RDI: 000000000000000c [ 40.126730][ T3916] RBP: 00007ff58bf5e090 R08: 0000000000000000 R09: 0000000000000000 [ 40.126821][ T3916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.126832][ T3916] R13: 00007ff58d746128 R14: 00007ff58d746090 R15: 00007ffc461ded18 [ 40.126850][ T3916] [ 40.162644][ T3907] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.122'. [ 40.165293][ T3846] bridge_slave_0: entered promiscuous mode [ 40.236181][ T3925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.124'. [ 40.237110][ T3846] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.353900][ T3846] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.361292][ T3846] bridge_slave_1: entered allmulticast mode [ 40.367670][ T3846] bridge_slave_1: entered promiscuous mode [ 40.436103][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.440140][ T3846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.493530][ T3946] loop2: detected capacity change from 0 to 1024 [ 40.501244][ T3946] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 40.503154][ T3846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.540898][ T3946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.554696][ T3946] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.128: missing EA_INODE flag [ 40.566446][ T3946] EXT4-fs (loop2): Remounting filesystem read-only [ 40.574624][ T3846] team0: Port device team_slave_0 added [ 40.670210][ T3846] team0: Port device team_slave_1 added [ 40.689047][ T3846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.696034][ T3846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.722081][ T3846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.738004][ T3846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.744971][ T3846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.770932][ T3846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.909826][ T3969] tmpfs: Bad value for 'mpol' [ 40.954689][ T3846] hsr_slave_0: entered promiscuous mode [ 40.961150][ T3846] hsr_slave_1: entered promiscuous mode [ 41.207811][ T3846] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 41.217659][ T3846] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 41.232694][ T3846] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 41.242978][ T3846] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 41.307636][ T3846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.378252][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.399641][ T3846] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.466290][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.473374][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.496110][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.503187][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.629842][ T4027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.142'. [ 41.639013][ T4027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.142'. [ 41.669974][ T3846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.810978][ T4027] syz.2.142 (4027) used greatest stack depth: 9816 bytes left [ 41.838752][ T3846] veth0_vlan: entered promiscuous mode [ 41.859853][ T3846] veth1_vlan: entered promiscuous mode [ 41.879762][ T4051] loop2: detected capacity change from 0 to 512 [ 41.910861][ T3846] veth0_macvtap: entered promiscuous mode [ 41.918324][ T3846] veth1_macvtap: entered promiscuous mode [ 41.926445][ T4051] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.144: corrupted inode contents [ 41.929582][ T3846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.948795][ T3846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.959338][ T3438] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.968853][ T4051] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.144: mark_inode_dirty error [ 41.986248][ T3438] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.002971][ T4051] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.144: corrupted inode contents [ 42.017819][ T41] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.017855][ T4051] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.144: mark_inode_dirty error [ 42.035509][ T4042] SELinux: failed to load policy [ 42.046076][ T4051] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.144: corrupted inode contents [ 42.050053][ T41] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.079346][ T4051] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 42.112178][ T4051] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.144: corrupted inode contents [ 42.141303][ T4051] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.144: mark_inode_dirty error [ 42.159433][ T4051] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 42.178982][ T4051] EXT4-fs (loop2): 1 truncate cleaned up [ 42.187728][ T4051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.204377][ T41] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 42.225015][ T4051] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.259735][ T29] kauditd_printk_skb: 698 callbacks suppressed [ 42.259750][ T29] audit: type=1400 audit(1755410463.399:1536): avc: denied { validate_trans } for pid=4050 comm="syz.2.144" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 42.289548][ T29] audit: type=1326 audit(1755410463.409:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4050 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58d51ebe9 code=0x7ffc0000 [ 42.312974][ T29] audit: type=1326 audit(1755410463.409:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4050 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7ff58d51ebe9 code=0x7ffc0000 [ 42.336315][ T29] audit: type=1326 audit(1755410463.409:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4050 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58d51ebe9 code=0x7ffc0000 [ 42.346351][ T4076] syz.4.151 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 42.359665][ T29] audit: type=1326 audit(1755410463.409:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4050 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff58d51ebe9 code=0x7ffc0000 [ 42.393322][ T29] audit: type=1326 audit(1755410463.409:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4050 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58d51ebe9 code=0x7ffc0000 [ 42.416684][ T29] audit: type=1326 audit(1755410463.409:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4050 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff58d51ebe9 code=0x7ffc0000 [ 42.439898][ T29] audit: type=1326 audit(1755410463.409:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4050 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58d51ebe9 code=0x7ffc0000 [ 42.463248][ T29] audit: type=1326 audit(1755410463.409:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4050 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff58d51ebe9 code=0x7ffc0000 [ 42.486469][ T29] audit: type=1326 audit(1755410463.409:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4050 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58d51ebe9 code=0x7ffc0000 [ 42.555924][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.641810][ T4093] loop5: detected capacity change from 0 to 164 [ 43.564347][ T4168] vlan2: entered allmulticast mode [ 43.874685][ T4172] netlink: 'syz.4.166': attribute type 13 has an invalid length. [ 43.892491][ T4191] Zero length message leads to an empty skb [ 43.938575][ T4182] netlink: 'syz.2.170': attribute type 1 has an invalid length. [ 43.972299][ T4195] loop3: detected capacity change from 0 to 164 [ 44.029590][ T4190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.171'. [ 44.042627][ T4182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 44.064559][ T4182] dummy0: entered promiscuous mode [ 44.384521][ T4206] loop2: detected capacity change from 0 to 256 [ 44.565339][ T4216] bridge0: port 3(batadv1) entered blocking state [ 44.571967][ T4216] bridge0: port 3(batadv1) entered disabled state [ 44.588685][ T4216] batadv1: entered allmulticast mode [ 44.594891][ T4216] batadv1: entered promiscuous mode [ 44.759215][ T4225] loop2: detected capacity change from 0 to 128 [ 44.796207][ T4221] SELinux: policydb magic number 0x5f737372 does not match expected magic number 0xf97cff8c [ 44.841902][ T4221] SELinux: failed to load policy [ 44.853302][ T4225] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.881913][ T4245] loop4: detected capacity change from 0 to 512 [ 44.896520][ T4225] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 44.904090][ T4245] EXT4-fs: Ignoring removed oldalloc option [ 44.919425][ T4249] loop5: detected capacity change from 0 to 512 [ 44.933433][ T4249] journal_path: Non-blockdev passed as './file2' [ 44.939799][ T4249] EXT4-fs: error: could not find journal device path [ 44.955722][ T4245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.970194][ T4245] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.988860][ T4245] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.193'. [ 45.063703][ T4260] netlink: 12 bytes leftover after parsing attributes in process `syz.5.195'. [ 45.073920][ T4112] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 45.083140][ T4112] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 45.133209][ T4258] loop3: detected capacity change from 0 to 2048 [ 45.146067][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811821a000: rx timeout, send abort [ 45.178530][ T4258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.208081][ T4258] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.224388][ T3305] EXT4-fs error (device loop4): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 45.304299][ T3305] EXT4-fs error (device loop4): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 45.315176][ T3305] EXT4-fs error (device loop4): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 45.340280][ T3305] EXT4-fs error (device loop4): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 45.355284][ T3305] EXT4-fs error (device loop4): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 45.372799][ T3305] EXT4-fs error (device loop4): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 45.394923][ T3305] EXT4-fs error (device loop4): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 45.406357][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.415701][ T3305] EXT4-fs error (device loop4): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 45.426662][ T3305] EXT4-fs error (device loop4): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 45.437697][ T3305] EXT4-fs error (device loop4): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 45.604626][ T4274] loop3: detected capacity change from 0 to 164 [ 45.646072][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811821b200: rx timeout, send abort [ 45.654344][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811821a000: abort rx timeout. Force session deactivation [ 45.666778][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.680974][ T4112] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.724733][ T4112] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.792710][ T4112] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.862762][ T4112] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.982449][ T4112] batadv1: left allmulticast mode [ 45.987540][ T4112] batadv1: left promiscuous mode [ 45.992601][ T4112] bridge0: port 3(batadv1) entered disabled state [ 46.018322][ T4112] bridge_slave_1: left allmulticast mode [ 46.024113][ T4112] bridge_slave_1: left promiscuous mode [ 46.029718][ T4112] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.041814][ T4112] bridge_slave_0: left allmulticast mode [ 46.047473][ T4112] bridge_slave_0: left promiscuous mode [ 46.053185][ T4112] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.107304][ T4313] FAULT_INJECTION: forcing a failure. [ 46.107304][ T4313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.120512][ T4313] CPU: 0 UID: 0 PID: 4313 Comm: syz.5.216 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 46.120592][ T4313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 46.120601][ T4313] Call Trace: [ 46.120606][ T4313] [ 46.120612][ T4313] __dump_stack+0x1d/0x30 [ 46.120635][ T4313] dump_stack_lvl+0xe8/0x140 [ 46.120670][ T4313] dump_stack+0x15/0x1b [ 46.120740][ T4313] should_fail_ex+0x265/0x280 [ 46.120762][ T4313] should_fail+0xb/0x20 [ 46.120838][ T4313] should_fail_usercopy+0x1a/0x20 [ 46.120856][ T4313] _copy_to_user+0x20/0xa0 [ 46.120880][ T4313] simple_read_from_buffer+0xb5/0x130 [ 46.120906][ T4313] proc_fail_nth_read+0x10e/0x150 [ 46.120929][ T4313] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 46.120949][ T4313] vfs_read+0x1a5/0x770 [ 46.121006][ T4313] ? __rcu_read_unlock+0x4f/0x70 [ 46.121028][ T4313] ? __fget_files+0x184/0x1c0 [ 46.121050][ T4313] ksys_read+0xda/0x1a0 [ 46.121071][ T4313] __x64_sys_read+0x40/0x50 [ 46.121093][ T4313] x64_sys_call+0x27bc/0x2ff0 [ 46.121128][ T4313] do_syscall_64+0xd2/0x200 [ 46.121216][ T4313] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 46.121240][ T4313] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 46.121266][ T4313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.121326][ T4313] RIP: 0033:0x7fd0a20dd5fc [ 46.121372][ T4313] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 46.121385][ T4313] RSP: 002b:00007fd0a0b3f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 46.121401][ T4313] RAX: ffffffffffffffda RBX: 00007fd0a2305fa0 RCX: 00007fd0a20dd5fc [ 46.121412][ T4313] RDX: 000000000000000f RSI: 00007fd0a0b3f0a0 RDI: 0000000000000005 [ 46.121424][ T4313] RBP: 00007fd0a0b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 46.121436][ T4313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 46.121449][ T4313] R13: 00007fd0a2306038 R14: 00007fd0a2305fa0 R15: 00007ffc803f9de8 [ 46.121468][ T4313] [ 46.154268][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811821b200: abort rx timeout. Force session deactivation [ 46.362061][ T4112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.373808][ T4112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.384358][ T4112] bond0 (unregistering): Released all slaves [ 46.432653][ T4320] loop5: detected capacity change from 0 to 512 [ 46.439173][ T4320] journal_path: Non-blockdev passed as './file2' [ 46.445528][ T4320] EXT4-fs: error: could not find journal device path [ 46.516749][ T4112] hsr_slave_0: left promiscuous mode [ 46.527716][ T4333] netlink: 12 bytes leftover after parsing attributes in process `syz.5.218'. [ 46.542060][ T4112] hsr_slave_1: left promiscuous mode [ 46.547782][ T4112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.555180][ T4112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.562784][ T4112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.570242][ T4112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.581492][ T4112] veth1_macvtap: left promiscuous mode [ 46.586981][ T4112] veth0_macvtap: left promiscuous mode [ 46.621718][ T4112] veth1_vlan: left promiscuous mode [ 46.626998][ T4112] veth0_vlan: left promiscuous mode [ 46.698810][ T4112] team0 (unregistering): Port device team_slave_1 removed [ 46.709557][ T4112] team0 (unregistering): Port device team_slave_0 removed [ 46.767081][ T4286] chnl_net:caif_netlink_parms(): no params data found [ 46.817022][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.824144][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.832287][ T4286] bridge_slave_0: entered allmulticast mode [ 46.838826][ T4286] bridge_slave_0: entered promiscuous mode [ 46.846188][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.853451][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.861544][ T4286] bridge_slave_1: entered allmulticast mode [ 46.868117][ T4286] bridge_slave_1: entered promiscuous mode [ 46.886026][ T4286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.896743][ T4286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.916402][ T4286] team0: Port device team_slave_0 added [ 46.923100][ T4286] team0: Port device team_slave_1 added [ 46.939788][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.946765][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.972760][ T4286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.984138][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.991127][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.017726][ T4286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.045021][ T4286] hsr_slave_0: entered promiscuous mode [ 47.052093][ T4286] hsr_slave_1: entered promiscuous mode [ 47.058166][ T4286] debugfs: 'hsr0' already exists in 'hsr' [ 47.063920][ T4286] Cannot create hsr debugfs directory [ 47.132422][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.148905][ T4349] usb usb1: usbfs: process 4349 (syz.2.224) did not claim interface 0 before use [ 47.266330][ T4286] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 47.279980][ T4286] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 47.288199][ T29] kauditd_printk_skb: 1074 callbacks suppressed [ 47.288212][ T29] audit: type=1326 audit(1755410468.429:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.5.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a20debe9 code=0x7ffc0000 [ 47.301578][ T4286] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 47.324636][ T29] audit: type=1326 audit(1755410468.439:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.5.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a20debe9 code=0x7ffc0000 [ 47.350798][ T29] audit: type=1326 audit(1755410468.499:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.5.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0a20debe9 code=0x7ffc0000 [ 47.374190][ T29] audit: type=1326 audit(1755410468.499:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.5.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a20debe9 code=0x7ffc0000 [ 47.397514][ T29] audit: type=1326 audit(1755410468.499:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.5.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a20debe9 code=0x7ffc0000 [ 47.403482][ T4286] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 47.420894][ T29] audit: type=1326 audit(1755410468.499:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.5.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd0a20debe9 code=0x7ffc0000 [ 47.420976][ T29] audit: type=1326 audit(1755410468.499:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.5.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a20debe9 code=0x7ffc0000 [ 47.474488][ T29] audit: type=1326 audit(1755410468.499:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.5.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0a20debe9 code=0x7ffc0000 [ 47.497832][ T29] audit: type=1326 audit(1755410468.499:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.5.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a20debe9 code=0x7ffc0000 [ 47.521140][ T29] audit: type=1326 audit(1755410468.499:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.5.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0a20debe9 code=0x7ffc0000 [ 47.590618][ T4286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.602123][ T4286] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.620523][ T4286] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.630881][ T4286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.663361][ T4100] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.670442][ T4100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.683888][ T4100] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.690994][ T4100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.735964][ T4376] loop5: detected capacity change from 0 to 164 [ 48.087946][ T4286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.212491][ T4286] veth0_vlan: entered promiscuous mode [ 48.221905][ T4286] veth1_vlan: entered promiscuous mode [ 48.237872][ T4286] veth0_macvtap: entered promiscuous mode [ 48.246165][ T4286] veth1_macvtap: entered promiscuous mode [ 48.256918][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.268648][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.279718][ T4107] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.295242][ T4107] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.314623][ T4107] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.335799][ T4107] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.523862][ T4411] netlink: 24 bytes leftover after parsing attributes in process `syz.6.206'. [ 48.603739][ T4413] FAULT_INJECTION: forcing a failure. [ 48.603739][ T4413] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 48.617800][ T4413] CPU: 1 UID: 0 PID: 4413 Comm: syz.6.235 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 48.617900][ T4413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 48.617911][ T4413] Call Trace: [ 48.617918][ T4413] [ 48.617925][ T4413] __dump_stack+0x1d/0x30 [ 48.617945][ T4413] dump_stack_lvl+0xe8/0x140 [ 48.617964][ T4413] dump_stack+0x15/0x1b [ 48.618020][ T4413] should_fail_ex+0x265/0x280 [ 48.618041][ T4413] should_fail_alloc_page+0xf2/0x100 [ 48.618063][ T4413] __alloc_frozen_pages_noprof+0xff/0x360 [ 48.618127][ T4413] alloc_pages_mpol+0xb3/0x250 [ 48.618157][ T4413] alloc_migration_target_by_mpol+0x11b/0x280 [ 48.618260][ T4413] migrate_pages_batch+0x300/0x1a30 [ 48.618289][ T4413] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 48.618351][ T4413] migrate_pages+0xf5f/0x1770 [ 48.618375][ T4413] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 48.618398][ T4413] __se_sys_mbind+0x975/0xac0 [ 48.618490][ T4413] __x64_sys_mbind+0x78/0x90 [ 48.618517][ T4413] x64_sys_call+0x2932/0x2ff0 [ 48.618538][ T4413] do_syscall_64+0xd2/0x200 [ 48.618561][ T4413] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 48.618586][ T4413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.618677][ T4413] RIP: 0033:0x7f3fee44ebe9 [ 48.618689][ T4413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.618704][ T4413] RSP: 002b:00007f3feceb7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 48.618746][ T4413] RAX: ffffffffffffffda RBX: 00007f3fee675fa0 RCX: 00007f3fee44ebe9 [ 48.618764][ T4413] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000 [ 48.618777][ T4413] RBP: 00007f3feceb7090 R08: 0000000000000000 R09: 0000000000000002 [ 48.618789][ T4413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.618800][ T4413] R13: 00007f3fee676038 R14: 00007f3fee675fa0 R15: 00007fff1ff460a8 [ 48.618881][ T4413] [ 49.050020][ T4442] netlink: 'syz.0.245': attribute type 4 has an invalid length. [ 49.072021][ T4438] SELinux: policydb magic number 0x5f737372 does not match expected magic number 0xf97cff8c [ 49.082434][ T4438] SELinux: failed to load policy [ 49.110001][ T4448] loop2: detected capacity change from 0 to 512 [ 49.116637][ T4448] journal_path: Non-blockdev passed as './file2' [ 49.123019][ T4448] EXT4-fs: error: could not find journal device path [ 49.195699][ T4456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.247'. [ 49.522762][ T4478] loop5: detected capacity change from 0 to 512 [ 49.529368][ T4478] EXT4-fs: Ignoring removed oldalloc option [ 49.543848][ T4478] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.556679][ T4478] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.040932][ T4478] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.257'. [ 50.179793][ T3846] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.285626][ T4497] loop2: detected capacity change from 0 to 164 [ 50.299594][ T4497] process 'syz.2.262' launched './file0' with NULL argv: empty string added [ 50.312108][ T4497] syz.2.262: attempt to access beyond end of device [ 50.312108][ T4497] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 50.340410][ T4497] syz.2.262: attempt to access beyond end of device [ 50.340410][ T4497] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 50.422613][ T4518] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 50.507978][ T4526] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.272'. [ 50.535039][ T4524] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 50.810763][ T4534] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4534 comm=syz.0.273 [ 51.044745][ T4544] debugfs: Bad value for 'gid' [ 51.049549][ T4544] debugfs: Bad value for 'gid' [ 51.360645][ T4553] 9pnet_fd: Insufficient options for proto=fd [ 51.367118][ T4553] netlink: 10 bytes leftover after parsing attributes in process `syz.6.280'. [ 51.440310][ T4560] netlink: 'syz.6.284': attribute type 4 has an invalid length. [ 51.459243][ T4558] tmpfs: Bad value for 'mpol' [ 51.506812][ T4564] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4564 comm=syz.0.286 [ 51.548610][ T4568] loop5: detected capacity change from 0 to 512 [ 51.571488][ T4568] EXT4-fs: Ignoring removed oldalloc option [ 51.629986][ T4568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.643983][ T4568] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.660136][ T4568] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.288'. [ 51.876528][ T4581] loop3: detected capacity change from 0 to 128 [ 51.891736][ T4581] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.904493][ T4581] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.964594][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.993932][ T3846] EXT4-fs error (device loop5): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 52.015164][ T3846] EXT4-fs error (device loop5): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 52.056671][ T3846] EXT4-fs error (device loop5): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 52.108481][ T3846] EXT4-fs error (device loop5): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 52.139804][ T3846] EXT4-fs error (device loop5): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 52.169293][ T3846] EXT4-fs error (device loop5): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 52.207330][ T3846] EXT4-fs error (device loop5): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 52.229693][ T3846] EXT4-fs error (device loop5): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 52.250602][ T3846] EXT4-fs error (device loop5): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 52.261132][ T4597] netlink: 'syz.6.296': attribute type 4 has an invalid length. [ 52.270628][ T3846] EXT4-fs error (device loop5): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 52.405001][ T29] kauditd_printk_skb: 636 callbacks suppressed [ 52.405014][ T29] audit: type=1326 audit(1755410473.549:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6628ebe9 code=0x7ffc0000 [ 52.448188][ T4614] pim6reg1: entered promiscuous mode [ 52.453691][ T4614] pim6reg1: entered allmulticast mode [ 52.467325][ T29] audit: type=1326 audit(1755410473.589:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc6628ebe9 code=0x7ffc0000 [ 52.475794][ T4619] netlink: 24 bytes leftover after parsing attributes in process `syz.6.298'. [ 52.490752][ T29] audit: type=1326 audit(1755410473.589:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6628ebe9 code=0x7ffc0000 [ 52.522833][ T29] audit: type=1326 audit(1755410473.589:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6628ebe9 code=0x7ffc0000 [ 52.546186][ T29] audit: type=1326 audit(1755410473.589:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc6628ebe9 code=0x7ffc0000 [ 52.569597][ T29] audit: type=1326 audit(1755410473.589:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6628ebe9 code=0x7ffc0000 [ 52.592906][ T29] audit: type=1326 audit(1755410473.589:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6628ebe9 code=0x7ffc0000 [ 52.616205][ T29] audit: type=1326 audit(1755410473.589:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc6628ebe9 code=0x7ffc0000 [ 52.639575][ T29] audit: type=1326 audit(1755410473.589:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6628ebe9 code=0x7ffc0000 [ 52.662906][ T29] audit: type=1326 audit(1755410473.589:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6628ebe9 code=0x7ffc0000 [ 52.722561][ T4626] netlink: 24 bytes leftover after parsing attributes in process `syz.2.302'. [ 52.732563][ T4627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=4627 comm=syz.3.305 [ 52.761116][ T3846] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.761914][ T4153] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.817032][ T4622] infiniband syz!: set active [ 52.821861][ T4622] infiniband syz!: added team_slave_0 [ 52.871982][ T4629] loop2: detected capacity change from 0 to 128 [ 52.891256][ T4622] RDS/IB: syz!: added [ 52.895093][ T4629] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.895448][ T4630] netlink: 'syz.6.306': attribute type 1 has an invalid length. [ 52.907675][ T4629] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.920334][ T4622] smc: adding ib device syz! with port count 1 [ 52.951360][ T4621] can0: slcan on ttyS3. [ 52.974503][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.989774][ T4153] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.996339][ T4622] smc: ib device syz! port 1 has pnetid [ 53.070557][ T4650] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.314'. [ 53.157081][ T4153] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.219602][ T4663] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.317'. [ 53.237410][ T4153] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.433879][ T4153] bridge_slave_1: left allmulticast mode [ 53.439592][ T4153] bridge_slave_1: left promiscuous mode [ 53.445311][ T4153] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.470474][ T4153] bridge_slave_0: left promiscuous mode [ 53.476098][ T4153] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.562414][ T4675] netlink: 48 bytes leftover after parsing attributes in process `syz.2.319'. [ 53.582013][ T4153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.592270][ T4153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.601698][ T4153] bond0 (unregistering): Released all slaves [ 53.660287][ T4624] can0 (unregistered): slcan off ttyS3. [ 53.686391][ T4153] hsr_slave_0: left promiscuous mode [ 53.693766][ T4153] hsr_slave_1: left promiscuous mode [ 53.699358][ T4153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.706765][ T4153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.718537][ T4153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.726013][ T4153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.726130][ T4683] loop6: detected capacity change from 0 to 512 [ 53.743095][ T4153] veth1_macvtap: left promiscuous mode [ 53.748906][ T4153] veth0_macvtap: left promiscuous mode [ 53.754597][ T4153] veth1_vlan: left promiscuous mode [ 53.760395][ T4153] veth0_vlan: left promiscuous mode [ 53.794968][ T4683] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.322: corrupted inode contents [ 53.807442][ T4683] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.322: mark_inode_dirty error [ 53.822002][ T4683] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.322: corrupted inode contents [ 53.838001][ T4683] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.322: mark_inode_dirty error [ 53.839361][ T4692] loop3: detected capacity change from 0 to 512 [ 53.849785][ T4683] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.322: corrupted inode contents [ 53.867833][ T4683] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 53.876618][ T4683] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.322: corrupted inode contents [ 53.890158][ T4683] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.322: mark_inode_dirty error [ 53.902458][ T4683] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 53.912052][ T4683] EXT4-fs (loop6): 1 truncate cleaned up [ 53.912577][ T4692] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 53.918228][ T4683] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.933444][ T4139] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:52: Failed to release dquot type 1 [ 53.944952][ T4683] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.961058][ T4692] EXT4-fs (loop3): mount failed [ 53.972456][ T4153] team0 (unregistering): Port device team_slave_1 removed [ 53.990840][ T4153] team0 (unregistering): Port device team_slave_0 removed [ 54.029285][ T4639] chnl_net:caif_netlink_parms(): no params data found [ 54.063156][ T4286] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.084313][ T4639] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.091379][ T4639] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.098666][ T4639] bridge_slave_0: entered allmulticast mode [ 54.105985][ T4639] bridge_slave_0: entered promiscuous mode [ 54.113361][ T4639] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.120445][ T4639] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.128180][ T4639] bridge_slave_1: entered allmulticast mode [ 54.134975][ T4639] bridge_slave_1: entered promiscuous mode [ 54.150960][ T4639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.161098][ T4639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.179543][ T4639] team0: Port device team_slave_0 added [ 54.190478][ T4639] team0: Port device team_slave_1 added [ 54.212926][ T4712] __nla_validate_parse: 2 callbacks suppressed [ 54.212976][ T4712] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.328'. [ 54.241798][ T4639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.248821][ T4639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.274832][ T4639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.289119][ T4639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.296164][ T4639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.322178][ T4639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.359589][ T4639] hsr_slave_0: entered promiscuous mode [ 54.376020][ T4639] hsr_slave_1: entered promiscuous mode [ 54.503432][ T4639] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 54.516922][ T4639] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 54.527813][ T4639] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 54.537407][ T4639] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 54.566205][ T4737] loop9: detected capacity change from 0 to 7 [ 54.571801][ T4639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.576308][ T3288] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.583459][ T4639] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.595812][ T3288] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.603755][ T3288] loop9: unable to read partition table [ 54.606131][ T4639] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.619781][ T4639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.624257][ T4740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.335'. [ 54.634192][ T3288] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.647212][ T3288] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.650670][ T4153] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.662100][ T3288] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.662176][ T3288] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.669949][ T4153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.678095][ T3288] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.693575][ T4737] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.702261][ T4153] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.709377][ T4153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.716731][ T4737] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.724591][ T4737] loop9: unable to read partition table [ 54.730934][ T4737] loop_reread_partitions: partition scan of loop9 (袻xdGݡ [ 54.730934][ T4737] ) failed (rc=-5) [ 54.770297][ T4639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.954934][ T4639] veth0_vlan: entered promiscuous mode [ 54.974797][ T4639] veth1_vlan: entered promiscuous mode [ 54.988926][ T4779] netlink: 'syz.6.344': attribute type 2 has an invalid length. [ 54.992448][ T4639] veth0_macvtap: entered promiscuous mode [ 55.005989][ T4639] veth1_macvtap: entered promiscuous mode [ 55.020859][ T4639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.032352][ T4639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.043911][ T4107] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.053420][ T4107] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.062327][ T4123] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.075133][ T4123] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.097756][ T4788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.346'. [ 55.106744][ T4788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.346'. [ 55.115823][ T4786] loop6: detected capacity change from 0 to 164 [ 55.134073][ T4783] loop3: detected capacity change from 0 to 256 [ 55.253042][ T4803] loop3: detected capacity change from 0 to 164 [ 55.314290][ T4806] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4806 comm=syz.7.354 [ 55.354268][ T4812] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.356'. [ 55.390589][ T4816] tmpfs: Bad value for 'mpol' [ 55.590793][ T4830] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.111992][ T4836] loop6: detected capacity change from 0 to 512 [ 56.125209][ T4836] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.366: corrupted in-inode xattr: e_value size too large [ 56.154380][ T4836] EXT4-fs (loop6): Remounting filesystem read-only [ 56.175060][ T4836] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.194248][ T4836] FAULT_INJECTION: forcing a failure. [ 56.194248][ T4836] name failslab, interval 1, probability 0, space 0, times 0 [ 56.206912][ T4836] CPU: 0 UID: 0 PID: 4836 Comm: syz.6.366 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 56.206945][ T4836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 56.206954][ T4836] Call Trace: [ 56.206959][ T4836] [ 56.206966][ T4836] __dump_stack+0x1d/0x30 [ 56.207049][ T4836] dump_stack_lvl+0xe8/0x140 [ 56.207068][ T4836] dump_stack+0x15/0x1b [ 56.207086][ T4836] should_fail_ex+0x265/0x280 [ 56.207107][ T4836] should_failslab+0x8c/0xb0 [ 56.207135][ T4836] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 56.207159][ T4836] ? ext4_alloc_inode+0x38/0x310 [ 56.207257][ T4836] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 56.207281][ T4836] ext4_alloc_inode+0x38/0x310 [ 56.207299][ T4836] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 56.207315][ T4836] alloc_inode+0x3d/0x170 [ 56.207347][ T4836] iget_locked+0xf4/0x5c0 [ 56.207373][ T4836] __ext4_iget+0x152/0x2240 [ 56.207404][ T4836] ext4_lookup+0x161/0x390 [ 56.207429][ T4836] __lookup_slow+0x190/0x250 [ 56.207505][ T4836] lookup_slow+0x3c/0x60 [ 56.207597][ T4836] walk_component+0x1ec/0x220 [ 56.207631][ T4836] path_lookupat+0xfe/0x2a0 [ 56.207655][ T4836] do_tmpfile+0x4d/0x190 [ 56.207715][ T4836] path_openat+0x1dd7/0x2170 [ 56.207733][ T4836] ? _parse_integer_limit+0x170/0x190 [ 56.207895][ T4836] ? kstrtouint+0x76/0xc0 [ 56.207916][ T4836] do_filp_open+0x109/0x230 [ 56.207940][ T4836] do_sys_openat2+0xa6/0x110 [ 56.208022][ T4836] __x64_sys_openat+0xf2/0x120 [ 56.208048][ T4836] x64_sys_call+0x2e9c/0x2ff0 [ 56.208065][ T4836] do_syscall_64+0xd2/0x200 [ 56.208167][ T4836] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 56.208188][ T4836] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 56.208208][ T4836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.208225][ T4836] RIP: 0033:0x7f3fee44ebe9 [ 56.208291][ T4836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.208308][ T4836] RSP: 002b:00007f3feceb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 56.208327][ T4836] RAX: ffffffffffffffda RBX: 00007f3fee675fa0 RCX: 00007f3fee44ebe9 [ 56.208340][ T4836] RDX: 000000000053d281 RSI: 0000200000000100 RDI: 0000000000000004 [ 56.208351][ T4836] RBP: 00007f3feceb7090 R08: 0000000000000000 R09: 0000000000000000 [ 56.208362][ T4836] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 56.208399][ T4836] R13: 00007f3fee676038 R14: 00007f3fee675fa0 R15: 00007fff1ff460a8 [ 56.208415][ T4836] [ 56.522397][ T4844] syz_tun: entered allmulticast mode [ 56.528216][ T4286] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.528939][ T4848] tmpfs: Bad value for 'mpol' [ 56.540360][ T4844] syz_tun: left allmulticast mode [ 56.620856][ T4858] FAULT_INJECTION: forcing a failure. [ 56.620856][ T4858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.634005][ T4858] CPU: 0 UID: 0 PID: 4858 Comm: syz.0.375 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 56.634064][ T4858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 56.634074][ T4858] Call Trace: [ 56.634079][ T4858] [ 56.634085][ T4858] __dump_stack+0x1d/0x30 [ 56.634167][ T4858] dump_stack_lvl+0xe8/0x140 [ 56.634186][ T4858] dump_stack+0x15/0x1b [ 56.634203][ T4858] should_fail_ex+0x265/0x280 [ 56.634281][ T4858] should_fail+0xb/0x20 [ 56.634354][ T4858] should_fail_usercopy+0x1a/0x20 [ 56.634372][ T4858] _copy_from_user+0x1c/0xb0 [ 56.634397][ T4858] __se_sys_cachestat+0x71/0x630 [ 56.634420][ T4858] ? bpf_trace_run2+0x124/0x1c0 [ 56.634454][ T4858] ? __bpf_trace_sys_enter+0x10/0x30 [ 56.634477][ T4858] ? trace_sys_enter+0xd0/0xf0 [ 56.634497][ T4858] __x64_sys_cachestat+0x55/0x70 [ 56.634519][ T4858] x64_sys_call+0x2ca2/0x2ff0 [ 56.634541][ T4858] do_syscall_64+0xd2/0x200 [ 56.634582][ T4858] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 56.634605][ T4858] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 56.634629][ T4858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.634718][ T4858] RIP: 0033:0x7efc6628ebe9 [ 56.634733][ T4858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.634748][ T4858] RSP: 002b:00007efc64cef038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c3 [ 56.634764][ T4858] RAX: ffffffffffffffda RBX: 00007efc664b5fa0 RCX: 00007efc6628ebe9 [ 56.634774][ T4858] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000005 [ 56.634785][ T4858] RBP: 00007efc64cef090 R08: 0000000000000000 R09: 0000000000000000 [ 56.634795][ T4858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.634824][ T4858] R13: 00007efc664b6038 R14: 00007efc664b5fa0 R15: 00007ffc86f99678 [ 56.634843][ T4858] [ 56.874195][ T4864] loop9: detected capacity change from 0 to 7 [ 56.885219][ T4864] Buffer I/O error on dev loop9, logical block 0, async page read [ 56.901277][ T4864] loop9: unable to read partition table [ 56.915659][ T4864] loop_reread_partitions: partition scan of loop9 (袻xdGݡ [ 56.915659][ T4864] ) failed (rc=-5) [ 56.948675][ T4871] loop3: detected capacity change from 0 to 512 [ 56.962754][ T4871] EXT4-fs: Ignoring removed oldalloc option [ 57.024259][ T4871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.037923][ T4871] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.054422][ T4871] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.380'. [ 57.095927][ T3308] EXT4-fs error (device loop3): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 57.107076][ T3308] EXT4-fs error (device loop3): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 57.118732][ T3308] EXT4-fs error (device loop3): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 57.129837][ T3308] EXT4-fs error (device loop3): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 57.142630][ T4883] netlink: 24 bytes leftover after parsing attributes in process `syz.0.381'. [ 57.152370][ T3308] EXT4-fs error (device loop3): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 57.180604][ T3308] EXT4-fs error (device loop3): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 57.199601][ T3308] EXT4-fs error (device loop3): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 57.211423][ T3308] EXT4-fs error (device loop3): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 57.222233][ T3308] EXT4-fs error (device loop3): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 57.249167][ T3308] EXT4-fs error (device loop3): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 57.453009][ T29] kauditd_printk_skb: 777 callbacks suppressed [ 57.453021][ T29] audit: type=1326 audit(1755410478.599:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4886 comm="syz.0.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6628ebe9 code=0x7ffc0000 [ 57.541421][ T29] audit: type=1326 audit(1755410478.599:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4886 comm="syz.0.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6628ebe9 code=0x7ffc0000 [ 57.576536][ T4369] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.719269][ T4899] mmap: syz.2.389 (4899) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 57.748902][ T29] audit: type=1326 audit(1755410478.889:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4894 comm="syz.0.387" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc6628ebe9 code=0x0 [ 57.771906][ T4904] loop2: detected capacity change from 0 to 128 [ 57.778771][ T4904] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.793155][ T4904] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 57.809557][ T29] audit: type=1400 audit(1755410478.949:4052): avc: denied { mounton } for pid=4903 comm="syz.2.391" path="/78/file1/file2" dev="loop2" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 57.824719][ T4901] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 57.847286][ T4901] SELinux: failed to load policy [ 57.857893][ T29] audit: type=1400 audit(1755410478.999:4053): avc: denied { mount } for pid=4905 comm="syz.6.392" name="/" dev="ramfs" ino=9838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 57.880468][ T4906] loop6: detected capacity change from 0 to 512 [ 57.911040][ T4107] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.913357][ T4907] SELinux: failed to load policy [ 57.935325][ T29] audit: type=1326 audit(1755410479.049:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.2.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58d51ebe9 code=0x7ffc0000 [ 57.958718][ T29] audit: type=1326 audit(1755410479.049:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.2.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58d51ebe9 code=0x7ffc0000 [ 57.982030][ T29] audit: type=1326 audit(1755410479.049:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.2.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff58d51ebe9 code=0x7ffc0000 [ 58.005352][ T29] audit: type=1326 audit(1755410479.049:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.2.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58d51ebe9 code=0x7ffc0000 [ 58.028903][ T29] audit: type=1326 audit(1755410479.049:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.2.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58d51ebe9 code=0x7ffc0000 [ 58.038345][ T4906] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.081404][ T4906] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.095713][ T4906] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.108963][ T4107] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.120716][ T4906] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.172627][ T4107] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.228463][ T4107] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.251983][ T4916] chnl_net:caif_netlink_parms(): no params data found [ 58.284427][ T4916] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.291559][ T4916] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.298860][ T4916] bridge_slave_0: entered allmulticast mode [ 58.306302][ T4916] bridge_slave_0: entered promiscuous mode [ 58.313139][ T4916] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.320338][ T4916] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.327485][ T4916] bridge_slave_1: entered allmulticast mode [ 58.334657][ T4916] bridge_slave_1: entered promiscuous mode [ 58.366031][ T4916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.380067][ T4944] loop7: detected capacity change from 0 to 1024 [ 58.397543][ T4916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.407921][ T4944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.410053][ T4107] bridge_slave_1: left allmulticast mode [ 58.416709][ T4944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.421906][ T4107] bridge_slave_1: left promiscuous mode [ 58.435235][ T4107] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.446330][ T4107] bridge_slave_0: left allmulticast mode [ 58.452065][ T4107] bridge_slave_0: left promiscuous mode [ 58.457772][ T4107] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.543844][ T4107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.554830][ T4107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.564513][ T4107] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 58.573722][ T4107] bond0 (unregistering): Released all slaves [ 58.597131][ T4916] team0: Port device team_slave_0 added [ 58.603797][ T4916] team0: Port device team_slave_1 added [ 58.627248][ T4916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.634238][ T4916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.660241][ T4916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.671556][ T4916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.678487][ T4916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.704432][ T4916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.719491][ T4107] hsr_slave_0: left promiscuous mode [ 58.726859][ T4107] hsr_slave_1: left promiscuous mode [ 58.733636][ T4107] veth1_macvtap: left promiscuous mode [ 58.739135][ T4107] veth0_macvtap: left promiscuous mode [ 58.744696][ T4107] veth1_vlan: left promiscuous mode [ 58.749909][ T4107] veth0_vlan: left promiscuous mode [ 58.801598][ T4107] team0 (unregistering): Port device team_slave_1 removed [ 58.815188][ T4107] team0 (unregistering): Port device team_slave_0 removed [ 58.823456][ T4139] smc: removing ib device syz! [ 58.947818][ T4916] hsr_slave_0: entered promiscuous mode [ 58.969835][ T4916] hsr_slave_1: entered promiscuous mode [ 58.985701][ T4916] debugfs: 'hsr0' already exists in 'hsr' [ 58.991474][ T4916] Cannot create hsr debugfs directory [ 59.168031][ T4916] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 59.169041][ T4970] loop6: detected capacity change from 0 to 1024 [ 59.181904][ T4972] netlink: 'syz.0.412': attribute type 2 has an invalid length. [ 59.190172][ T4972] netlink: 4868 bytes leftover after parsing attributes in process `syz.0.412'. [ 59.195952][ T4916] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 59.203084][ T4970] EXT4-fs: Ignoring removed orlov option [ 59.211540][ T4970] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.219118][ T4970] ext4: Unknown parameter 'fowner' [ 59.231587][ T4916] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 59.244288][ T4916] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 59.288751][ T4916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.300667][ T4916] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.314014][ T4100] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.321173][ T4100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.326303][ T4100] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.339175][ T4100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.339311][ T4985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.413'. [ 59.403819][ T4916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.492363][ T4916] veth0_vlan: entered promiscuous mode [ 59.499696][ T4916] veth1_vlan: entered promiscuous mode [ 59.513218][ T4916] veth0_macvtap: entered promiscuous mode [ 59.520604][ T4916] veth1_macvtap: entered promiscuous mode [ 59.531110][ T4916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.541728][ T4916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.557371][ T4100] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.568362][ T4100] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.584223][ T4100] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.597533][ T4100] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.641491][ T5008] tmpfs: Bad value for 'mpol' [ 59.663171][ T5010] tmpfs: Bad value for 'mpol' [ 59.698074][ T5014] loop8: detected capacity change from 0 to 512 [ 59.705919][ T5014] journal_path: Non-blockdev passed as './bus' [ 59.712151][ T5014] EXT4-fs: error: could not find journal device path [ 60.048735][ T5028] netlink: 48 bytes leftover after parsing attributes in process `syz.8.423'. [ 60.061889][ T5028] loop8: detected capacity change from 0 to 512 [ 60.072832][ T5028] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.088401][ T5003] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.414'. [ 60.116237][ T5028] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.164351][ T5028] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.219181][ T4916] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.272031][ T5047] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.430'. [ 60.364211][ T5062] 9pnet_fd: Insufficient options for proto=fd [ 60.386833][ T5062] loop7: detected capacity change from 0 to 2048 [ 60.449269][ T3288] loop7: p2 p3 p7 [ 60.449287][ T5069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.436'. [ 60.488449][ T5062] loop7: p2 p3 p7 [ 60.538026][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 60.548967][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 60.559784][ T3743] udevd[3743]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 60.591151][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 60.601196][ T3743] udevd[3743]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 60.612304][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 60.646035][ T5077] lo speed is unknown, defaulting to 1000 [ 60.652972][ T5077] lo speed is unknown, defaulting to 1000 [ 60.660441][ T5077] lo speed is unknown, defaulting to 1000 [ 60.666778][ T5077] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 60.682024][ T5077] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 60.695040][ T5081] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.441'. [ 60.699580][ T5077] lo speed is unknown, defaulting to 1000 [ 60.714454][ T5077] lo speed is unknown, defaulting to 1000 [ 60.720650][ T5077] lo speed is unknown, defaulting to 1000 [ 60.726816][ T5077] lo speed is unknown, defaulting to 1000 [ 60.734253][ T5077] lo speed is unknown, defaulting to 1000 [ 60.831105][ T5084] netlink: 'syz.7.439': attribute type 10 has an invalid length. [ 60.857552][ T5084] team0: Port device dummy0 added [ 60.936762][ T5091] loop6: detected capacity change from 0 to 512 [ 60.945220][ T5091] EXT4-fs: Ignoring removed oldalloc option [ 61.021521][ T5091] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.037107][ T5103] loop2: detected capacity change from 0 to 512 [ 61.040259][ T5091] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.058551][ T5091] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.443'. [ 61.096740][ T5103] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.446: corrupted inode contents [ 61.125543][ T5103] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.446: mark_inode_dirty error [ 61.138454][ T4286] EXT4-fs error (device loop6): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 61.140874][ T5103] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.446: corrupted inode contents [ 61.149376][ T4286] EXT4-fs error (device loop6): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 61.172196][ T4286] EXT4-fs error (device loop6): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 61.176849][ T5103] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.446: mark_inode_dirty error [ 61.183208][ T4286] EXT4-fs error (device loop6): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 61.204642][ T4286] EXT4-fs error (device loop6): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 61.215567][ T4286] EXT4-fs error (device loop6): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 61.226279][ T4286] EXT4-fs error (device loop6): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 61.237149][ T4286] EXT4-fs error (device loop6): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 61.240283][ T5103] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.446: corrupted inode contents [ 61.261942][ T4286] EXT4-fs error (device loop6): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 61.274250][ T4286] EXT4-fs error (device loop6): ext4_empty_dir:3081: inode #12: comm syz-executor: invalid size [ 61.292983][ T5114] loop8: detected capacity change from 0 to 128 [ 61.307234][ T5115] netlink: 4 bytes leftover after parsing attributes in process `syz.7.450'. [ 61.311460][ T5103] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 61.334344][ T5115] netlink: 28 bytes leftover after parsing attributes in process `syz.7.450'. [ 61.338993][ T5103] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.446: corrupted inode contents [ 61.343286][ T5115] netlink: 108 bytes leftover after parsing attributes in process `syz.7.450'. [ 61.366000][ T5103] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.446: mark_inode_dirty error [ 61.377587][ T5103] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 61.387459][ T5103] EXT4-fs (loop2): 1 truncate cleaned up [ 61.394106][ T5103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.407508][ T4112] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:25: Failed to release dquot type 1 [ 61.420917][ T5103] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.438877][ T5114] 0{X: renamed from gretap0 (while UP) [ 61.448775][ T5114] 0{X: entered allmulticast mode [ 61.455862][ T5114] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 61.493086][ T5121] loop9: detected capacity change from 0 to 7 [ 61.499684][ T3288] buffer_io_error: 1 callbacks suppressed [ 61.499730][ T3288] Buffer I/O error on dev loop9, logical block 0, async page read [ 61.515373][ T3288] Buffer I/O error on dev loop9, logical block 0, async page read [ 61.523241][ T3288] loop9: unable to read partition table [ 61.531218][ T5121] Buffer I/O error on dev loop9, logical block 0, async page read [ 61.532074][ T4286] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.540504][ T5121] Buffer I/O error on dev loop9, logical block 0, async page read [ 61.555914][ T5121] loop9: unable to read partition table [ 61.567376][ T5121] loop_reread_partitions: partition scan of loop9 (袻xdGݡ [ 61.567376][ T5121] ) failed (rc=-5) [ 61.580748][ T3288] Buffer I/O error on dev loop9, logical block 0, async page read [ 61.588632][ T3288] Buffer I/O error on dev loop9, logical block 0, async page read [ 61.597496][ T3288] Buffer I/O error on dev loop9, logical block 0, async page read [ 61.608902][ T4112] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.621792][ T3288] Buffer I/O error on dev loop9, logical block 0, async page read [ 61.632470][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.646365][ T3288] Buffer I/O error on dev loop9, logical block 0, async page read [ 61.702531][ T4112] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.767082][ T5139] loop2: detected capacity change from 0 to 512 [ 61.780979][ T5136] netfs: Couldn't get user pages (rc=-14) [ 61.797770][ T5139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.815184][ T4112] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.821794][ T5139] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.891711][ T3302] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 61.913137][ T5148] vcan0: tx drop: invalid da for name 0x00000000000000f0 [ 61.919203][ T3302] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 61.934776][ T5154] netlink: 'syz.7.465': attribute type 1 has an invalid length. [ 61.944512][ T4112] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.962739][ T5154] bond1: entered promiscuous mode [ 61.967802][ T5154] bond1: entered allmulticast mode [ 61.973434][ T5154] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.987050][ T5154] ip6gretap1: entered promiscuous mode [ 61.992724][ T5154] ip6gretap1: entered allmulticast mode [ 61.999167][ T5154] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 62.009510][ T5154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5154 comm=syz.7.465 [ 62.071367][ T5159] loop8: detected capacity change from 0 to 164 [ 62.071382][ T4100] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 62.088724][ T2992] ================================================================== [ 62.096804][ T2992] BUG: KCSAN: data-race in set_nlink / set_nlink [ 62.103121][ T2992] [ 62.105423][ T2992] read to 0xffff888107154c50 of 4 bytes by task 3295 on cpu 0: [ 62.112946][ T2992] set_nlink+0x29/0xb0 [ 62.117000][ T2992] kernfs_iop_permission+0x1e2/0x220 [ 62.122272][ T2992] inode_permission+0x1c7/0x310 [ 62.127117][ T2992] link_path_walk+0x162/0x900 [ 62.131780][ T2992] path_openat+0x1de/0x2170 [ 62.136263][ T2992] do_filp_open+0x109/0x230 [ 62.140750][ T2992] do_sys_openat2+0xa6/0x110 [ 62.145331][ T2992] __x64_sys_openat+0xf2/0x120 [ 62.150085][ T2992] x64_sys_call+0x2e9c/0x2ff0 [ 62.154745][ T2992] do_syscall_64+0xd2/0x200 [ 62.159235][ T2992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.165116][ T2992] [ 62.167421][ T2992] write to 0xffff888107154c50 of 4 bytes by task 2992 on cpu 1: [ 62.175029][ T2992] set_nlink+0x99/0xb0 [ 62.179081][ T2992] kernfs_iop_permission+0x1e2/0x220 [ 62.184351][ T2992] inode_permission+0x1c7/0x310 [ 62.189190][ T2992] link_path_walk+0x162/0x900 [ 62.193946][ T2992] path_lookupat+0x63/0x2a0 [ 62.198437][ T2992] filename_lookup+0x147/0x340 [ 62.203194][ T2992] vfs_statx+0x9d/0x390 [ 62.207337][ T2992] vfs_fstatat+0x115/0x170 [ 62.211738][ T2992] __se_sys_newfstatat+0x55/0x260 [ 62.216752][ T2992] __x64_sys_newfstatat+0x55/0x70 [ 62.221763][ T2992] x64_sys_call+0x135a/0x2ff0 [ 62.226423][ T2992] do_syscall_64+0xd2/0x200 [ 62.230916][ T2992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.236792][ T2992] [ 62.239095][ T2992] value changed: 0x00000008 -> 0x00000009 [ 62.244831][ T2992] [ 62.247140][ T2992] Reported by Kernel Concurrency Sanitizer on: [ 62.253274][ T2992] CPU: 1 UID: 0 PID: 2992 Comm: udevd Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 62.265233][ T2992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 62.275279][ T2992] ================================================================== [ 62.292695][ T4139] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 62.342314][ T5145] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.390484][ T5143] lo speed is unknown, defaulting to 1000 [ 62.421228][ T4112] bridge_slave_1: left allmulticast mode [ 62.426889][ T4112] bridge_slave_1: left promiscuous mode [ 62.432640][ T4112] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.441186][ T4112] bridge_slave_0: left allmulticast mode [ 62.446829][ T4112] bridge_slave_0: left promiscuous mode [ 62.452610][ T4112] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.571573][ T4112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.581294][ T4112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.590691][ T4112] bond0 (unregistering): Released all slaves [ 62.643080][ T4112] hsr_slave_0: left promiscuous mode [ 62.648746][ T4112] hsr_slave_1: left promiscuous mode [ 62.654282][ T4112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.661811][ T4112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.669405][ T4112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.676793][ T4112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.686061][ T4112] veth1_macvtap: left promiscuous mode [ 62.691561][ T4112] veth0_macvtap: left promiscuous mode [ 62.697098][ T4112] veth1_vlan: left promiscuous mode [ 62.702631][ T4112] veth0_vlan: left promiscuous mode [ 62.755348][ T4112] team0 (unregistering): Port device team_slave_1 removed [ 62.765140][ T4112] team0 (unregistering): Port device team_slave_0 removed [ 63.243035][ T4112] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.312722][ T4112] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.363190][ T4112] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.412858][ T4112] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.466414][ T4112] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.502521][ T4112] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.562387][ T4112] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.613084][ T4112] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.677160][ T4112] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.732943][ T4112] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.782123][ T4112] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.852624][ T4112] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.905862][ T4112] bridge_slave_1: left allmulticast mode [ 63.911564][ T4112] bridge_slave_1: left promiscuous mode [ 63.917162][ T4112] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.925034][ T4112] bridge_slave_1: left allmulticast mode [ 63.930710][ T4112] bridge_slave_1: left promiscuous mode [ 63.936337][ T4112] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.944110][ T4112] bridge_slave_0: left allmulticast mode [ 63.949735][ T4112] bridge_slave_0: left promiscuous mode [ 63.955400][ T4112] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.963706][ T4112] bridge_slave_1: left allmulticast mode [ 63.969363][ T4112] bridge_slave_1: left promiscuous mode [ 63.975074][ T4112] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.982760][ T4112] bridge_slave_0: left allmulticast mode [ 63.988381][ T4112] bridge_slave_0: left promiscuous mode [ 63.994126][ T4112] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.092120][ T4112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.101732][ T4112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.111071][ T4112] bond0 (unregistering): Released all slaves [ 64.120085][ T4112] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 64.128870][ T4112] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 64.137675][ T4112] ip6gretap1 (unregistering): left promiscuous mode [ 64.144330][ T4112] ip6gretap1 (unregistering): left allmulticast mode [ 64.222091][ T4112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.231689][ T4112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.241074][ T4112] bond0 (unregistering): Released all slaves [ 64.249073][ T4112] bond1 (unregistering): Released all slaves [ 64.312365][ T4112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.321821][ T4112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.331255][ T4112] bond0 (unregistering): Released all slaves [ 64.375802][ T4112] IPVS: stopping master sync thread 3671 ... [ 64.384382][ T4112] hsr_slave_0: left promiscuous mode [ 64.390441][ T4112] hsr_slave_1: left promiscuous mode [ 64.395903][ T4112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.403383][ T4112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.411094][ T4112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.418470][ T4112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.427510][ T4112] hsr_slave_0: left promiscuous mode [ 64.433198][ T4112] hsr_slave_1: left promiscuous mode [ 64.438695][ T4112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.446116][ T4112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.453833][ T4112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.461230][ T4112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.469888][ T4112] hsr_slave_0: left promiscuous mode [ 64.475493][ T4112] hsr_slave_1: left promiscuous mode [ 64.481052][ T4112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.488399][ T4112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.496043][ T4112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.503480][ T4112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.515581][ T4112] veth1_macvtap: left promiscuous mode [ 64.521176][ T4112] veth0_macvtap: left promiscuous mode [ 64.526637][ T4112] veth1_vlan: left promiscuous mode [ 64.532032][ T4112] veth0_vlan: left promiscuous mode [ 64.537587][ T4112] veth1_macvtap: left promiscuous mode [ 64.543103][ T4112] veth0_macvtap: left promiscuous mode [ 64.548627][ T4112] veth1_vlan: left promiscuous mode [ 64.554102][ T4112] veth0_vlan: left promiscuous mode [ 64.559857][ T4112] veth1_macvtap: left promiscuous mode [ 64.565358][ T4112] veth0_macvtap: left promiscuous mode [ 64.570832][ T4112] veth1_vlan: left promiscuous mode [ 64.576187][ T4112] veth0_vlan: left promiscuous mode [ 64.676101][ T4112] team0 (unregistering): Port device team_slave_1 removed [ 64.685749][ T4112] team0 (unregistering): Port device team_slave_0 removed [ 64.726596][ T4112] team0 (unregistering): Port device team_slave_1 removed [ 64.736464][ T4112] team0 (unregistering): Port device team_slave_0 removed [ 64.757790][ T4112] team0 (unregistering): Port device dummy0 removed [ 64.788972][ T4112] team0 (unregistering): Port device team_slave_1 removed [ 64.797977][ T4112] team0 (unregistering): Port device team_slave_0 removed [ 64.823676][ T3474] lo speed is unknown, defaulting to 1000 [ 64.829466][ T3474] infiniband syz0: ib_query_port failed (-19) [ 65.542821][ T4112] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.602322][ T4112] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.672366][ T4112] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.741995][ T4112] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.795123][ T4112] bridge_slave_1: left allmulticast mode [ 65.800808][ T4112] bridge_slave_1: left promiscuous mode [ 65.806516][ T4112] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.814047][ T4112] bridge_slave_0: left allmulticast mode [ 65.819664][ T4112] bridge_slave_0: left promiscuous mode [ 65.825330][ T4112] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.891886][ T4112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.901401][ T4112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.910727][ T4112] bond0 (unregistering): Released all slaves [ 65.973268][ T4112] hsr_slave_0: left promiscuous mode [ 65.978802][ T4112] hsr_slave_1: left promiscuous mode [ 65.984443][ T4112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.991817][ T4112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.999103][ T4112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.006579][ T4112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.015863][ T4112] veth1_macvtap: left promiscuous mode [ 66.021416][ T4112] veth0_macvtap: left promiscuous mode [ 66.026876][ T4112] veth1_vlan: left promiscuous mode [ 66.032084][ T4112] veth0_vlan: left promiscuous mode [ 66.080327][ T4112] team0 (unregistering): Port device team_slave_1 removed [ 66.088919][ T4112] team0 (unregistering): Port device team_slave_0 removed